Analysis

Category Package Started Completed Duration Options Log(s)
FILE exe 2025-06-13 09:46:43 2025-06-13 10:17:58 1875 seconds Show Options Show Analysis Log 
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:15,850 [root] INFO: Date set to: 20250613T09:46:42, timeout set to: 1800
2025-06-13 10:46:42,011 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8
2025-06-13 10:46:42,011 [root] DEBUG: Storing results at: C:\pvZafqQC
2025-06-13 10:46:42,011 [root] DEBUG: Pipe server name: \\.\PIPE\xVrVnxQMgC
2025-06-13 10:46:42,011 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32
2025-06-13 10:46:42,011 [root] INFO: analysis running as an admin
2025-06-13 10:46:42,011 [root] INFO: analysis package specified: "exe"
2025-06-13 10:46:42,011 [root] DEBUG: importing analysis package module: "modules.packages.exe"...
2025-06-13 10:46:43,011 [root] DEBUG: imported analysis package "exe"
2025-06-13 10:46:43,011 [root] DEBUG: initializing analysis package "exe"...
2025-06-13 10:46:43,011 [lib.common.common] INFO: wrapping
2025-06-13 10:46:43,011 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation
2025-06-13 10:46:43,011 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\HostedNetworkStarter.exe
2025-06-13 10:46:43,011 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option
2025-06-13 10:46:43,011 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option
2025-06-13 10:46:43,011 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option
2025-06-13 10:46:43,011 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option
2025-06-13 10:46:43,370 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser"
2025-06-13 10:46:43,386 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig"
2025-06-13 10:46:43,433 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise"
2025-06-13 10:46:43,433 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human"
2025-06-13 10:46:43,449 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'
2025-06-13 10:46:43,449 [lib.api.screenshot] ERROR: No module named 'PIL'
2025-06-13 10:46:43,449 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots"
2025-06-13 10:46:43,464 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump"
2025-06-13 10:46:43,464 [root] DEBUG: Initialized auxiliary module "Browser"
2025-06-13 10:46:43,464 [root] DEBUG: attempting to configure 'Browser' from data
2025-06-13 10:46:43,464 [root] DEBUG: module Browser does not support data configuration, ignoring
2025-06-13 10:46:43,464 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"...
2025-06-13 10:46:43,464 [root] DEBUG: Started auxiliary module modules.auxiliary.browser
2025-06-13 10:46:43,464 [root] DEBUG: Initialized auxiliary module "DigiSig"
2025-06-13 10:46:43,464 [root] DEBUG: attempting to configure 'DigiSig' from data
2025-06-13 10:46:43,464 [root] DEBUG: module DigiSig does not support data configuration, ignoring
2025-06-13 10:46:43,464 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"...
2025-06-13 10:46:43,464 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature
2025-06-13 10:47:05,933 [modules.auxiliary.digisig] DEBUG: File has a valid signature
2025-06-13 10:47:05,933 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json
2025-06-13 10:47:05,933 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig
2025-06-13 10:47:05,933 [root] DEBUG: Initialized auxiliary module "Disguise"
2025-06-13 10:47:05,933 [root] DEBUG: attempting to configure 'Disguise' from data
2025-06-13 10:47:05,933 [root] DEBUG: module Disguise does not support data configuration, ignoring
2025-06-13 10:47:05,933 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"...
2025-06-13 10:47:05,933 [modules.auxiliary.disguise] INFO: Disguising GUID to e814d3e1-5b30-4eac-90d1-5340f2022e3d
2025-06-13 10:47:05,933 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise
2025-06-13 10:47:05,933 [root] DEBUG: Initialized auxiliary module "Human"
2025-06-13 10:47:05,933 [root] DEBUG: attempting to configure 'Human' from data
2025-06-13 10:47:05,933 [root] DEBUG: module Human does not support data configuration, ignoring
2025-06-13 10:47:05,933 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"...
2025-06-13 10:47:05,933 [root] DEBUG: Started auxiliary module modules.auxiliary.human
2025-06-13 10:47:05,933 [root] DEBUG: Initialized auxiliary module "Screenshots"
2025-06-13 10:47:05,933 [root] DEBUG: attempting to configure 'Screenshots' from data
2025-06-13 10:47:05,933 [root] DEBUG: module Screenshots does not support data configuration, ignoring
2025-06-13 10:47:05,933 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"...
2025-06-13 10:47:05,949 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled
2025-06-13 10:47:05,949 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots
2025-06-13 10:47:05,949 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets"
2025-06-13 10:47:05,949 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data
2025-06-13 10:47:05,949 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring
2025-06-13 10:47:05,949 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"...
2025-06-13 10:47:05,949 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696
2025-06-13 10:47:05,964 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini
2025-06-13 10:47:05,964 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor
2025-06-13 10:47:05,964 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor
2025-06-13 10:47:05,964 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor
2025-06-13 10:47:05,980 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor
2025-06-13 10:47:05,980 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor
2025-06-13 10:47:05,980 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor
2025-06-13 10:47:05,980 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\lTUiRm.dll, loader C:\tmp_gell1p8\bin\uQchymxO.exe
2025-06-13 10:47:06,042 [root] DEBUG: Loader: IAT patching disabled.
2025-06-13 10:47:06,042 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\lTUiRm.dll.
2025-06-13 10:47:06,042 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'.
2025-06-13 10:47:06,042 [root] INFO: Disabling sleep skipping.
2025-06-13 10:47:06,042 [root] DEBUG: 696: Full process memory dumps enabled.
2025-06-13 10:47:06,042 [root] DEBUG: 696: Import reconstruction of process dumps enabled.
2025-06-13 10:47:06,042 [root] DEBUG: 696: Active unpacking of payloads enabled
2025-06-13 10:47:06,042 [root] DEBUG: 696: CAPE debug - unrecognised key norefer.
2025-06-13 10:47:06,058 [root] DEBUG: 696: TLS secret dump mode enabled.
2025-06-13 10:47:06,058 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542
2025-06-13 10:47:06,058 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable
2025-06-13 10:47:06,073 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0
2025-06-13 10:47:06,073 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF822E30000, thread 6620, image base 0x00007FF60D500000, stack from 0x0000008EFABF4000-0x0000008EFAC00000
2025-06-13 10:47:06,073 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe
2025-06-13 10:47:06,073 [root] DEBUG: 696: Hooked 5 out of 5 functions
2025-06-13 10:47:06,089 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2025-06-13 10:47:06,089 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\lTUiRm.dll.
2025-06-13 10:47:06,089 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe>
2025-06-13  <truncated>

    

    

        

    

    

        

    





    

        

            

                
Machine

            

            

                
                    

                        Name
                        Label
                        Manager
                        Started On
                        Shutdown On
                        
                            Route
                        
                    

                
                
                    

                        win10-2
                        win10-2
                        KVM
                        2025-06-13 09:46:43
                        2025-06-13 10:17:39
                        
                            none
                        
                    

                
            

        

    








    
File Details   

    
    



    


        

        
        

            File Name
            
                
                
HostedNetworkStarter.exe

                
            		
        

        
            

                File Type
                PE32 executable (GUI) Intel 80386, for MS Windows
            

        
        
        

            File Size
            271568 bytes
        

        
        
            
            
                
                
                
            
        
        

            MD5
            2a56b915e662087e71af30ea8d404f33
        

        

            SHA1
            50553974425631b2d6fd73621a36517a62f7b6c4
        

        

            SHA256
            145944e86a8b4dd8fbb7b00cff52e12cba2e0a38938eb0dda58106d0d527d53b
                [VT]
                [MWDB]
                [Bazaar]
            
        

        
        

            SHA3-384
            5a50817a8593d9f7f358217ada8f37b719c879d05225e92db6d562a09f3f6ae50b687bd6fe14328725a4f4b3c4d15f10
        

        
        
        

            CRC32
            09A65176
        

        
        

            TLSH
            T1C64413834A32CE04EE58A9BF09E7DCB799B2A24A17ACC467D44CF13D7DC27519D2022D
        

        
        

            Ssdeep
            6144:pOPCzLKAtmIKhvZJ/Xm1jLLn2me7gMOBGJuFwFoS2bokQ:oazmA5KPxmtnFJz/FwFoS2bokQ
        

        
        
        
        

        

        
        

            
                
                
                
                
                
                
                
                
                
            
            
                
                 
                 File
                
                
                    
                        
                    
                
                
                
                
                    
                     BinGraph
                    
                
                
                
                    
                         Vba2Graph
                    
                
                
                     VirusTotal
                
                
                
                
                
                
            
        

        
    


        
        
        

        
        
            
                
                

                    

                    
                        
^ZF,/2

                    
                        
*y,X`/

                    
                        
nC_6~

                    
                        
Gush Dan1

                    
                        
6WDKA

                    
                        
OZMzh

                    
                        
uHG5|e

                    
                        
+|(4ka 

                    
                        
dR&';

                    
                        
@Hiw*

                    
                        
XM(xy

                    
                        
161010041803Z0+

                    
                        
w:v>Fg

                    
                        
Umqri

                    
                        
]v|zp

                    
                        
DD1,8sMS

                    
                        
]+5z}w

                    
                        
\?H;2

                    
                        
)}Q`q

                    
                        
Wr--N

                    
                        
|@`7+

                    
                        
#Tc6-

                    
                        
=/By0

                    
                        
<2?L@K?

                    
                        
ExitProcess

                    
                        
uvVb7k

                    
                        
AT+bTc

                    
                        
$}a#w

                    
                        
H5&]U

                    
                        
UTN-USERFirst-Object0

                    
                        
8)J(Qv/

                    
                        
BNXH)<l

                    
                        
dkLJ_F

                    
                        
=L0dK

                    
                        
Tw(j%!

                    
                        
=j!#\

                    
                        
5>cs^

                    
                        
4W nT

                    
                        
<requestedExecutionLevel level="requireAdministrator"></requestedExecutionLevel>

                    
                        
:0806

                    
                        
P[x^r_o`

                    
                        
ZU?Ay6

                    
                        
C^.qr

                    
                        
[jX*?

                    
                        
%XP@c)

                    
                        
.lJb*J

                    
                        
SZtz@

                    
                        
9f*<Z,m

                    
                        
no"L<

                    
                        
KNh9a

                    
                        
F8Eb<1W|=

                    
                        
E0C0A

                    
                        
VERSION.dll

                    
                        
YS5nm

                    
                        
#{8j;

                    
                        
@#'6c

                    
                        
OML4JHG\=;:

                    
                        
ZFfK0

                    
                        
;E0&g/

                    
                        
ZU4Jz

                    
                        
!:jF`

                    
                        
FGw0.

                    
                        
TN{'X

                    
                        
okn 1

                    
                        
@xuHW

                    
                        
s`)L$4

                    
                        
kr~>P

                    
                        
GyCO8

                    
                        
COMCTL32.dll

                    
                        
{HPIJMj

                    
                        
~jz?\

                    
                        
l$8f)

                    
                        
Mz'Z_

                    
                        
@a[Ua

                    
                        
Wm:J/)

                    
                        
t`ST&

                    
                        
FileVersion

                    
                        
doeQX

                    
                        
*(O`-

                    
                        
*z1g-E<R

                    
                        
200530104838Z0

                    
                        
U}.L6

                    
                        
T(lomH

                    
                        
(74Lq[*

                    
                        
 c8dG

                    
                        
NirSoft

                    
                        
'(V->

                    
                        
-'v&H

                    
                        
7,C0b5

                    
                        
R3R+O

                    
                        
5.NIO

                    
                        
GD?`l

                    
                        
0!JMD

                    
                        
COMODO CA Limited1#0!

                    
                        
2y6Dp

                    
                        
SBqHq

                    
                        
d(<TvS

                    
                        
MOveWP

                    
                        
]6smxw

                    
                        
$%#>r

                    
                        
Vc`!nL

                    
                        
<*~?v

                    
                        
6;&Cq

                    
                        
M&9C1

                    
                        
2P>|4w

                    
                        
tz~0N

                    
                        
magFS

                    
                        
cbvs~

                    
                        
~r>>3

                    
                        
%zOO*JJ

                    
                        
zX\B:

                    
                        
280508235959Z0}1

                    
                        
oCku(e

                    
                        
4-GrlK

                    
                        
}yqdq

                    
                        
n8&0)

                    
                        
s.{FI

                    
                        
Ck>UY(0

                    
                        
\jOu/2

                    
                        
:/$Q[T 

                    
                        
lgha[%

                    
                        
    <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">

                    
                        
)\z<DX

                    
                        
[*RXe

                    
                        
etYr_I

                    
                        
kaR,8

                    
                        
S9dSI

                    
                        
4e*Mk

                    
                        
?J2]\

                    
                        
Iq5,%

                    
                        
3E2"H

                    
                        
<7UV ,

                    
                        
buI*g

                    
                        
FB5N'

                    
                        
fimo~

                    
                        
Yb&: te1

                    
                        
#n>@u

                    
                        
HQ$Er

                    
                        
"tMWL^

                    
                        
:Oc'9`

                    
                        
comdlg32.dll

                    
                        
O#.NG2

                    
                        
o>ovm}!+

                    
                        
J8mL$

                    
                        
9IBNc

                    
                        
jZT)e

                    
                        
NEVgU-

                    
                        
jK3{&!

                    
                        
S80Mg

                    
                        
 wvGf

                    
                        
jbScc

                    
                        
0FB]h6K-

                    
                        
w,hh"

                    
                        
{772X&

                    
                        
SjWJU

                    
                        
R_&~Y

                    
                        
OML.OMLLJHG

                    
                        
040904b0

                    
                        
btL7I

                    
                        
zVHVPa,

                    
                        
p.m~~

                    
                        
GHQgE

                    
                        
zR?y%5B

                    
                        
Ac<V9

                    
                        
dl#\,_

                    
                        
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>

                    
                        
87:JP

                    
                        
6.!9X

                    
                        
s0s6N`=

                    
                        
&k#cg!K{

                    
                        
T,R8-

                    
                        
HI2-l

                    
                        
=} D,

                    
                        
Ok5CZ

                    
                        
[GZ|kK

                    
                        
<-|$3

                    
                        
!{Xjo1f

                    
                        
      <dpiAware>true</dpiAware>

                    
                        
rJfgJ^\

                    
                        
NTjsk/n

                    
                        
M2&\;

                    
                        
-y7p6

                    
                        
a},v?d

                    
                        
CV`yUWQ

                    
                        
OGuN/

                    
                        
FA:22

                    
                        
J^r6o

                    
                        
28X'_

                    
                        
dfC B

                    
                        
hBvjR

                    
                        
Q&qZe)

                    
                        
(KA&:x

                    
                        
1i*bot

                    
                        
AX\.S

                    
                        
iXl?.y

                    
                        
KERNEL32.DLL

                    
                        
x;X#g

                    
                        
zKQeQZ

                    
                        
./=1j

                    
                        
43H7M)ip<3,E

                    
                        
5 Hashoshanim st.1

                    
                        
https://secure.comodo.net/CPS0C

                    
                        
VerQueryValueW

                    
                        
OML4JHGZ@>=

                    
                        
RHsYp

                    
                        
xg$4K

                    
                        
/f6P~

                    
                        
y!MEW

                    
                        
WvNct

                    
                        
?5%i-

                    
                        
36yLa

                    
                        
CoInitialize

                    
                        
SdKM<m*

                    
                        
OT4g*

                    
                        
u{Q&":

                    
                        
mXRvL

                    
                        
!)09@

                    
                        
q2pRF

                    
                        
kk:)XS|

                    
                        
VirtualAlloc

                    
                        
5"}5`

                    
                        
T^:{:yv

                    
                        
Wg:O@S

                    
                        
IKc<Q

                    
                        
mjDv/

                    
                        
bj(4 0

                    
                        
41hoY

                    
                        
Xn^L/N`

                    
                        
+eppr6

                    
                        
O@Dq;f}V!d

                    
                        
cfuE-

                    
                        
t#FY%

                    
                        
n<j"$-~_

                    
                        
<gjAtL

                    
                        
^-c}{

                    
                        
vUZ!o

                    
                        
KJuGI5

                    
                        
hOWlMh

                    
                        
KMy=i

                    
                        
`[bAN

                    
                        
D,yB`

                    
                        
8vQo"

                    
                        
4.9r1

                    
                        
PJait

                    
                        
*y~KB

                    
                        
GDI32.dll

                    
                        
Ramat Gan1

                    
                        
u-!52

                    
                        
y<X?}

                    
                        
zh{z"

                    
                        
!rJ%B

                    
                        
8db-lHA~w

                    
                        
~$?Kl~=

                    
                        
5hP[M

                    
                        
jej'jjj

                    
                        
RSBm"

                    
                        
v7(F#

                    
                        
SvK>D

                    
                        
7&@=>[1 

                    
                        
SE_pl

                    
                        
LU9o+

                    
                        
PatBlt

                    
                        
%` |9%%

                    
                        
'w(gOt

                    
                        
P.Oce

                    
                        
Ss46>

                    
                        
IVWd>

                    
                        
[^Nya

                    
                        
qv!!*

                    
                        
`z>Ws

                    
                        
(]s4oW5S

                    
                        
~}+hy

                    
                        
h0f0>

                    
                        
A-(Ap

                    
                        
9l$\w_

                    
                        
6.$WsRRr.

                    
                        
\o8o=

                    
                        
/Aw*/-

                    
                        
D$t+D$\

                    
                        
#COMODO SHA-256 Time Stamping Signer

                    
                        
:3FPs

                    
                        
qdSgT

                    
                        
m$tDB

                    
                        
aOlAM

                    
                        
0H;)<

                    
                        
VarFileInfo

                    
                        
89L'G

                    
                        
]q?Gp

                    
                        
J {:<

                    
                        
@.zso

                    
                        
'%1ZY

                    
                        
"*{A{

                    
                        
speI,c

                    
                        
C%sfV

                    
                        
Bm-$]-P

                    
                        
COMODO Code Signing CA 2

                    
                        
m:3PnFh

                    
                        
:TpEay

                    
                        
=GMTT

                    
                        
1http://crl.usertrust.com/UTN-USERFirst-Object.crl0t

                    
                        
[w|f41UO+

                    
                        
kQlRv

                    
                        
e0c0;

                    
                        
BM.W,%

                    
                        
7"j+5l

                    
                        
#f'pJ

                    
                        
Nir Sofer1

                    
                        
2http://crl.comodoca.com/COMODORSACodeSigningCA.crl0t

                    
                        
InternalName

                    
                        
OML-OMLO==;

                    
                        
fO\r6{

                    
                        
0g*0z

                    
                        
EU<~}

                    
                        
[5`Ec

                    
                        
x=r2u

                    
                        
L+:w"

                    
                        
*,za|

                    
                        
j BISd

                    
                        
)Iw:_

                    
                        
]E9WOK[

                    
                        
G`Z6B

                    
                        
.+v/^

                    
                        
"COMODO RSA Certification Authority0

                    
                        
#COMODO SHA-256 Time Stamping Signer0

                    
                        
&N1Ut

                    
                        
DD?F!

                    
                        
1http://crl.usertrust.com/UTN-USERFirst-Object.crl05

                    
                        
  </asmv3:application><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> 

                    
                        
AddTrust External CA Root0

                    
                        
m-h^!u

                    
                        
7(BdeN

                    
                        
*IDpL

                    
                        
:q;q8

                    
                        
:'}G.

                    
                        
COMODO CA Limited1!0

                    
                        
COMODO CA Limited1+0)

                    
                        
LegalCopyright

                    
                        
mZ1EN-u

                    
                        
)FCl?

                    
                        
RBcFpxaB}

                    
                        
0:~o^$

                    
                        
 wJc'

                    
                        
d9"4i

                    
                        
Kr64=

                    
                        
2http://crt.comodoca.com/COMODORSACodeSigningCA.crt0$

                    
                        
4!+Ts

                    
                        
jHg#=m

                    
                        
l=g,&\

                    
                        
TT??Ku

                    
                        
a&`O%;

                    
                        
LoadLibraryA

                    
                        
OSojg

                    
                        
"[6Zd

                    
                        
njGz:/y2qD;p

                    
                        
c/L~D

                    
                        
f\7}`

                    
                        
]iF7| 

                    
                        
wsR,C

                    
                        
NCKp^

                    
                        
GetDC

                    
                        
sK Wt

                    
                        
lw]ra

                    
                        
#:N!@

                    
                        
D3J2W

                    
                        
S:9Og

                    
                        
WH5`<

                    
                        
"-v^k

                    
                        
qk%vu

                    
                        
!n!4q

                    
                        
z0KO.

                    
                        
e3,D\

                    
                        
9iX1g

                    
                        
rKDgC

                    
                        
qDw)K

                    
                        
^VZK-

                    
                        
}|fK@

                    
                        
PNb@2t

                    
                        
=.K'a

                    
                        
gHF_D

                    
                        
P`X2}

                    
                        
%'Cvm;

                    
                        
;bLQc

                    
                        
=~iOX

                    
                        
eSH[E

                    
                        
"hBcrT

                    
                        
`oSvNF

                    
                        
~sU2u

                    
                        
y9\7I

                    
                        
U?mt7

                    
                        
Pj:arm

                    
                        
7J~x`9%

                    
                        
L$8f)

                    
                        
;4b4pD

                    
                        
KgRR2

                    
                        
TGTRY

                    
                        
0uXwB?

                    
                        
fqDnnU

                    
                        
U%SG@

                    
                        
y|4Pryb

                    
                        
?6Vp$i

                    
                        
*HS/"

                    
                        
aa"\?~(

                    
                        
Tv}#"

                    
                        
5?ySV4

                    
                        
OML(HFE

                    
                        
LpPXR

                    
                        
!COMODO SHA-1 Time Stamping Signer0

                    
                        
130509000000Z

                    
                        
.E-R>

                    
                        
tG/I#

                    
                        
Cc!Go+Wh

                    
                        
XLgS7

                    
                        
bF0H-MCO

                    
                        
z|mSv

                    
                        
<$X2Y

                    
                        
nBIP^

                    
                        
Anl%|

                    
                        
Me8TB

                    
                        
rw$;6

                    
                        
iqPn-2

                    
                        
U}qEj

                    
                        
S,@Y3

                    
                        
:,IzA

                    
                        
&eB<N

                    
                        
X0Ysl

                    
                        
5dptr

                    
                        
(GbMR

                    
                        
(*t&[

                    
                        
6-'Xq

                    
                        
ef,@|

                    
                        
8s mn

                    
                        
h1 :n

                    
                        
Wr(O1#

                    
                        
|bp7E

                    
                        
j$U$*

                    
                        
C8v`U

                    
                        
r_?|0j

                    
                        
nKtb6.

                    
                        
~c4n*

                    
                        
-Mcn\'/

                    
                        
0? e`

                    
                        
R|[o#

                    
                        
%LKGl

                    
                        
2L(u=

                    
                        
XoPCu

                    
                        
COMODO CA Limited1*0(

                    
                        
m*zS0

                    
                        
Z0,~=E)7^-{j

                    
                        
&w6)u

                    
                        
ePu`&

                    
                        
 G,;}D

                    
                        
MZ<L:

                    
                        
RnQ4y9

                    
                        
>q$\}

                    
                        
OML(OML8OML;OML0OML

                    
                        
dcc@dee0fff

                    
                        
{BKW,

                    
                        
Y^eAE=

                    
                        
Khfuj

                    
                        
:;*'n

                    
                        
r<13E

                    
                        
OLcOS

                    
                        
1=WAM

                    
                        
/Bkgp

                    
                        
t$\tY

                    
                        
i9qpy

                    
                        
SxGO2

                    
                        
kP>7d

                    
                        
CEwhg

                    
                        
vy!4,

                    
                        
pYi*'<"R'4sp

                    
                        
OMLEOML

                    
                        
$ruoxtc

                    
                        
%2!$w1H

                    
                        
`.@;.

                    
                        
2CbV9

                    
                        
{eqt]

                    
                        
0Pj"u

                    
                        
r7B1.

                    
                        
Jx+4g

                    
                        
B!WKO

                    
                        
B"'<$

                    
                        
z;w-9

                    
                        
+=U5Cr

                    
                        
Ee5yvl

                    
                        
qA7+g

                    
                        
=%Mdk

                    
                        
E:%tg

                    
                        
oY.V"

                    
                        
\gi0@X

                    
                        
odt5r

                    
                        
"0T!s\

                    
                        
WG/:n

                    
                        
hzdKg"

                    
                        
D&#0L

                    
                        
M08vr

                    
                        
D$tIt

                    
                        
20161010041803Z

                    
                        
gy6K3

                    
                        
SpV*'

                    
                        
3/hk-

                    
                        
8`<^j

                    
                        
kPm&o

                    
                        
|7y-{

                    
                        
Q><F%6

                    
                        
Z~@s*

                    
                        
<"0,J

                    
                        
4!+bsp

                    
                        
tkx42

                    
                        
L01l2

                    
                        
P1v]G

                    
                        
<0:08

                    
                        
cnr=B

                    
                        
?J2Mb

                    
                        
M|v)bc

                    
                        
x'bw!

                    
                        
<L,FN

                    
                        
5R5@%

                    
                        
(-$XX

                    
                        
Jg4#6:Y

                    
                        
}vW%V+

                    
                        
kV:#~

                    
                        
OML(VTS

                    
                        
n*`cA

                    
                        
huI,|o

                    
                        
TG4pVy

                    
                        
<g"UN

                    
                        
U#e%{h

                    
                        
HoOb.

                    
                        
151231000000Z

                    
                        
@8kw=Y

                    
                        
-6.EU

                    
                        
dC;7V

                    
                        
K/]th9

                    
                        
l?,5{3c

                    
                        
kYWpD^

                    
                        
B[b2e}}

                    
                        
0http://crl.comodoca.com/COMODOCodeSigningCA2.crl0r

                    
                        
v#K&[wJ

                    
                        
X2[ U'

                    
                        
[z2c?'

                    
                        
M+'IZW

                    
                        
pQ#Fh

                    
                        
0"h1Z

                    
                        
U~r)q

                    
                        
http://ocsp.usertrust.com0

                    
                        
($1GM

                    
                        
`[m]_X

                    
                        
^QM0Y

                    
                        
cO.Npn

                    
                        
0~mk5

                    
                        
Z9id][

                    
                        
~a+<{6

                    
                        
]+WB}

                    
                        
>)b$cOf

                    
                        
!Ei:H

                    
                        
Ne/6i

                    
                        
?puNazT`

                    
                        
RV?o%Sr

                    
                        
phlaB

                    
                        
'FjvN*6H

                    
                        
^D|G"

                    
                        
OMLKOML

                    
                        
110824000000Z

                    
                        
*Dj(K

                    
                        
b94o3^6

                    
                        
nHxDqIN

                    
                        
_VdOf

                    
                        
-Ye+Z49

                    
                        
-H^uh

                    
                        
|nCdH

                    
                        
vpRY?+TF6R69

                    
                        
N.&~]K

                    
                        
#Ep^fQ^

                    
                        
au.k,

                    
                        
O#5Rej

                    
                        
F4F>B%

                    
                        
>C69R(i

                    
                        
'%<id-(t)

                    
                        
FsCJ 

                    
                        
3JTi"^

                    
                        
(urtZ2pJ

                    
                        
wNVjy-

                    
                        
KJd, \

                    
                        
bp)=m

                    
                        
>!r:W

                    
                        
LB~T@w

                    
                        
\$Rz 

                    
                        
: F"c:

                    
                        
lC@k)b

                    
                        
FileDescription

                    
                        
VirtualFree

                    
                        
!This program cannot be run in DOS mode.

                    
                        
*%*:%

                    
                        
}936j

                    
                        
>5}%-v

                    
                        
?H~8G

                    
                        
=*L| U

                    
                        
<EH;A

                    
                        
<a~^I

                    
                        
K\Oo*`

                    
                        
3.<P@D+

                    
                        
OR!FO

                    
                        
;|$Hr

                    
                        
qs^R?

                    
                        
Do.W<

                    
                        
VJ@v4

                    
                        
=uB{H

                    
                        
sWUE6km

                    
                        
a|&N@*

                    
                        
R<CUv

                    
                        
8 @84K

                    
                        
9u*4t

                    
                        
2h)CN

                    
                        
9}hP,b

                    
                        
CryptProtectData

                    
                        
Zjfxy

                    
                        
\iOG\

                    
                        
Ds`~i

                    
                        
3Z}xv

                    
                        
[eyfr

                    
                        
140912000000Z

                    
                        
sbJIA

                    
                        
e>e8Wg

                    
                        
8-YIx{U

                    
                        
$5!W6

                    
                        
#sDG!

                    
                        
e/a;5

                    
                        
ub^Z6

                    
                        
JMAM:D

                    
                        
80jlW

                    
                        
yTF8a

                    
                        
@&@T(

                    
                        
s!'rCO

                    
                        
xP6Uo

                    
                        
USER32.dll

                    
                        
Z36=^

                    
                        
Giln&/

                    
                        
&\%Ow

                    
                        
.NB*]

                    
                        
O1[P!

                    
                        
VV6#@

                    
                        
2P>YV,

                    
                        
MfX\N$WR

                    
                        
"gQA_x

                    
                        
%+cO-Y5

                    
                        
DnaqDM

                    
                        
]SMM9

                    
                        
ReV)p

                    
                        
63"+R

                    
                        
.z*X"_j

                    
                        
3http://crl.usertrust.com/AddTrustExternalCARoot.crl05

                    
                        
IfIl?^

                    
                        
COMODO CA Limited1,0*

                    
                        
CXd{'

                    
                        
KI>&4p

                    
                        
:?GeWH

                    
                        
l"2%Q

                    
                        
Ys=P],

                    
                        
F71Ocu

                    
                        
O+ 8F

                    
                        
bcV0$E]

                    
                        
kw1yed

                    
                        
OeB~8<'@

                    
                        
#&$P7e<

                    
                        
G:K,L

                    
                        
z8oI51

                    
                        
wULFio

                    
                        
e#)>+

                    
                        
HGKJ~

                    
                        
Y1NKE

                    
                        
NL_ v

                    
                        
I2`Ar

                    
                        
37^Q.

                    
                        
Z1?s^W

                    
                        
6`'F6

                    
                        
#s'2r

                    
                        
:,b^V

                    
                        
p`X0'Yn

                    
                        
mBOJX

                    
                        
/+k@v

                    
                        
+)?M;

                    
                        
0J|dcc

                    
                        
$\@,.

                    
                        
C,sZ.JT

                    
                        
5A02Fh

                    
                        
xw%[G

                    
                        
SN20s

                    
                        
COMODO RSA Code Signing CA

                    
                        
spOTe

                    
                        
w++^A

                    
                        
ND477

                    
                        
Kl(mb

                    
                        
3?#9%

                    
                        
r=wlU[

                    
                        
;d,LC

                    
                        
B 1K3

                    
                        
> $lu

                    
                        
 2016 Nir Sofer

                    
                        
"|BwB

                    
                        
'I1)nt

                    
                        
3!D'[

                    
                        
(z)hu

                    
                        
m?t6fXx}

                    
                        
/{wvD

                    
                        
;0907

                    
                        
lZGfD{

                    
                        
UNi<qK}w

                    
                        
B]Ax*

                    
                        
9L$ts

                    
                        
AR)#J&e

                    
                        
9l$tr

                    
                        
)ifLJ

                    
                        
h!X?*

                    
                        
Jz%vTM

                    
                        
1l*B(n

                    
                        
RvIOn]

                    
                        
rAWaX

                    
                        
dwNJB

                    
                        
;L_MA

                    
                        
2MFA<z

                    
                        
 $d>l*

                    
                        
vJOW7

                    
                        
)\V5;

                    
                        
8rp3W*Ftd

                    
                        
msvcrt.dll

                    
                        
StringFileInfo

                    
                        
|q='G

                    
                        
"DJ&~B

                    
                        
}@vk?{T

                    
                        
AddTrust External TTP Network1"0 

                    
                        
/-L .

                    
                        
Q4Hseco@

                    
                        
mp_FV

                    
                        
<\OW?Dq

                    
                        
 6`#>;

                    
                        
ole32.dll

                    
                        
qtz(q0H

                    
                        
FY(Bx

                    
                        
?~l9G~R

                    
                        
.t5w?

                    
                        
@qk>=

                    
                        
e>Lo~B

                    
                        
PNM QON

                    
                        
AddTrust AB1&0$

                    
                        
q^(Xz'

                    
                        
TRQBRON

                    
                        
7Wh3C

                    
                        
|~"&=

                    
                        
r.!Tv

                    
                        
DSy*7

                    
                        
yD}|Po?

                    
                        
^N?frpq

                    
                        
\>.k2

                    
                        
!3]S<{'9d

                    
                        
Greater Manchester1

                    
                        
`#^.q

                    
                        
-^TsC

                    
                        
q:g>@

                    
                        
mY[gS

                    
                        
[uKY}

                    
                        
.)D$H)

                    
                        
*`4QoTGX

                    
                        
mn*MSDo

                    
                        
]PL/j

                    
                        
d'p2HePwrDM

                    
                        
g;!Pf

                    
                        
9)1|>~h9

                    
                        
_o}o"r

                    
                        
0SY"UO

                    
                        
[rL)qZ=Q

                    
                        
C}V)GI

                    
                        
y2<:^e

                    
                        
2t!0S:

                    
                        
'"fj:G

                    
                        
jhV]%xG

                    
                        
A<R!~

                    
                        
b86|y

                    
                        
6s2<I

                    
                        
QnlS(

                    
                        
)D$H)

                    
                        
&%3C:x

                    
                        
k\80u

                    
                        
q:`Cw

                    
                        
F4Dzm

                    
                        
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$

                    
                        
OMLCH47

                    
                        
x'L.{W

                    
                        
i/_1E.

                    
                        
dnn'9

                    
                        
rhxa@

                    
                        
~a|1(

                    
                        
JyPIe

                    
                        
lohEN

                    
                        
'1Oqtn

                    
                        
&JwEb

                    
                        
'J5U4T

                    
                        
GKsj$}

                    
                        
x&p>y

                    
                        
Translation

                    
                        
pdX+0

                    
                        
RJbk+g

                    
                        
~PR{N

                    
                        
!F4+T

                    
                        
http://ocsp.comodoca.com0

                    
                        
[C LAwe

                    
                        
m)iOW

                    
                        
\%e *

                    
                        
qMImO

                    
                        
200530104838Z0{1

                    
                        
)SjN6$

                    
                        
\k(*3

                    
                        
9InZE

                    
                        
D-g_0

                    
                        
f/!<7

                    
                        
t$t#t$l

                    
                        
BjhB#

                    
                        
b[Ga2

                    
                        
6>VMZ

                    
                        
 S,}B

                    
                        
ZLB)2}

                    
                        
u8rLd

                    
                        
2?@[|

                    
                        
DT*ug

                    
                        
R.1L/

                    
                        
sz,9x

                    
                        
Iw_*s\J

                    
                        
sNWY+

                    
                        
b$R4k

                    
                        
,k"xNv

                    
                        
f|P\ 

                    
                        
s}=Qr}

                    
                        
Salt Lake City1

                    
                        
[U|<Q$Q_b

                    
                        
M$"B4

                    
                        
n5}pV<

                    
                        
161010041800Z0#

                    
                        
hxgO.b

                    
                        
xBz$D

                    
                        
BB_}h

                    
                        
N/V'"C#

                    
                        
-(JfGv

                    
                        
|r_#3[`

                    
                        
,@;O-

                    
                        
 ?;8s

                    
                        
v*u"(kvTY

                    
                        
#.)rQR

                    
                        
/Rg.dll

                    
                        
9UE<q

                    
                        
G$KQQ

                    
                        
<km')g

                    
                        
</compatibility></assembly>PAD

                    
                        
}a<#u

                    
                        
sV;4e

                    
                        
h\cR>

                    
                        
E*|cs

                    
                        
H:Wp^|

                    
                        
5t Xr3

                    
                        
>z<|m

                    
                        
.7/0F

                    
                        
ProductVersion

                    
                        
?p_qf

                    
                        
    </asmv3:windowsSettings>

                    
                        
\:3<c

                    
                        
Vv_tr

                    
                        
y&Vtb

                    
                        
VI--!

                    
                        
(d]-h#y

                    
                        
0\8hY

                    
                        
A0s){

                    
                        
.{4KH-

                    
                        
050607080910Z

                    
                        
3)v58

                    
                        
<KR8t

                    
                        
tA!vg4w,

                    
                        
.T9gu

                    
                        
)N s+

                    
                        
;<DO$

                    
                        
W*)C=

                    
                        
l}m2Q

                    
                        
ng\Qj

                    
                        
qi!b!

                    
                        
VI,P8l

                    
                        
z2Lu'

                    
                        
G#=<H6

                    
                        
tBQc/s

                    
                        
\XoIQ["

                    
                        
SHELL32.dll

                    
                        
B%0X5

                    
                        
F`84>

                    
                        
U_<1==

                    
                        
_7uk~h

                    
                        
Salford1

                    
                        
?}Y8{O

                    
                        
? 6nG

                    
                        
c0pw`

                    
                        
`(ka0

                    
                        
> i'Y

                    
                        
JfRva 

                    
                        
t9Cb_

                    
                        
/i'DaA}

                    
                        
JhGY}

                    
                        
HostedNetworkStarter

                    
                        
j>+{=

                    
                        
5*X0x

                    
                        
ty-#I

                    
                        
Z$S<l0#

                    
                        
i?u%4

                    
                        
_dRS|

                    
                        
https://secure.comodo.net/CPS0A

                    
                        
UTN-USERFirst-Object

                    
                        
j`4 A

                    
                        
0http://crt.comodoca.com/COMODOCodeSigningCA2.crt0$

                    
                        
|[^_]

                    
                        
9",*rM

                    
                        
P9#e]

                    
                        
nI3}@v

                    
                        
.rsrc

                    
                        
c}sys

                    
                        
`dmr^

                    
                        
c'1n.

                    
                        
gIqe,m

                    
                        
-wEWi

                    
                        
My(Yav

                    
                        
Q@cTE

                    
                        
9db~5tZ

                    
                        
M1\=H

                    
                        
!5-8p-

                    
                        
@vzwDr

                    
                        
GN\r=

                    
                        
/.#XZb

                    
                        
k?%r$XOJ

                    
                        
Ijsbl

                    
                        
PVV@8/

                    
                        
#Ll+i

                    
                        
eAi;v

                    
                        
9CVwh

                    
                        
`/CpVy

                    
                        
d7=#.

                    
                        
LCAv4

                    
                        
7&OLkE

                    
                        
&FI6;

                    
                        
}!ki<

                    
                        
160330000000Z

                    
                        
+#jE.

                    
                        
yh2%{

                    
                        
OriginalFilename

                    
                        
fjnN^

                    
                        
S]<4"2

                    
                        
gCUH:

                    
                        
=M]~ 

                    
                        
X#0@n

                    
                        
Q@8mY

                    
                        
s .C&

                    
                        
Ntp"KdE/

                    
                        
P8P~!p

                    
                        
wui?Q

                    
                        
ShellExecuteW

                    
                        
2{dBt

                    
                        
7"@Tb

                    
                        
XV-_!

                    
                        
C*>g*

                    
                        
D$t#D$h

                    
                        
b5e.A

                    
                        
QFV[yP

                    
                        
S4b*_

                    
                        
C%H"j

                    
                        
yr:6"

                    
                        
I~-vjx

                    
                        
Cu|Cl

                    
                        
TRQFTTR

                    
                        
08dO[

                    
                        
iSXLiy

                    
                        
v{o|r%

                    
                        
CK;P=

                    
                        
ARdm%

                    
                        
||PbX

                    
                        
%Uy",

                    
                        
LF~tPL

                    
                        
HHu(3

                    
                        
"VnVg

                    
                        
&Klv=

                    
                        
4%J%e

                    
                        
HWR,,

                    
                        
Nf[,_

                    
                        
8nM`Q

                    
                        
CompanyName

                    
                        
KtqC2oit

                    
                        
}.pm4A

                    
                        
]XM.E

                    
                        
</requestedPrivileges></security></trustInfo><asmv3:application>

                    
                        
88#3_

                    
                        
HytMv

                    
                        
Z,KdF

                    
                        
rY'z#

                    
                        
WFTee

                    
                        
n\]hZ

                    
                        
&P\>!

                    
                        
y6{;B

                    
                        
 y$"`

                    
                        
C{xd_

                    
                        
g4QjN

                    
                        
{'\N(

                    
                        
KIG.FDC

                    
                        
ADVAPI32.dll

                    
                        
;K,7h[d

                    
                        
PW}Oh`

                    
                        
os(uQ#

                    
                        
KB3}M0

                    
                        
<EhqD{

                    
                        
6K|T3

                    
                        
l?E0km

                    
                        
`*[9~y

                    
                        
Rj(|]

                    
                        
;<kv}

                    
                        
AV\ar

                    
                        
YR,fd

                    
                        
Copyright 

                    
                        
V%@[78

                    
                        
525831

                    
                        
wkqBx

                    
                        
(Ke1&

                    
                        
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges>

                    
                        
w-&@#

                    
                        
nP8D#16

                    
                        
<NYY!

                    
                        
J&Z&L

                    
                        
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS>

                    
                        
G;k^V

                    
                        
A_D8<

                    
                        
h0f0=

                    
                        
O11r+

                    
                        
.UOc2I

                    
                        
M'_PW

                    
                        
support@nirsoft.net0

                    
                        
/cQ<*3

                    
                        
rYi9o

                    
                        
3g"e81

                    
                        
}#cV-s

                    
                        
4*Z]J>3|

                    
                        
MBOik

                    
                        
w,xqR

                    
                        
I5&FNw

                    
                        
#3{2J`

                    
                        
FindTextW

                    
                        
[R`"t

                    
                        
?0=0;

                    
                        
DdO4I|bt

                    
                        
 ]eH(

                    
                        
:2)E1

                    
                        
Ub-r=

                    
                        
,*:CO

                    
                        
S4i;g)0

                    
                        
~CuoX&

                    
                        
w#*OY

                    
                        
lO[$,f

                    
                        
xoOBV

                    
                        
k%p,(

                    
                        
.1'>^

                    
                        
-.bM_x

                    
                        
5L`)7k

                    
                        
/f!?v

                    
                        
|6{q1IMK

                    
                        
C=_0Y

                    
                        
+wunI

                    
                        
*E5z[Sl

                    
                        
IRu0C

                    
                        
"$DH\t

                    
                        
k!nOUI

                    
                        
<application> 

                    
                        
OML3GEEW643

                    
                        
jjg)=

                    
                        
VirtualProtect

                    
                        
$*V2w

                    
                        
VS_VERSION_INFO

                    
                        
COMODO RSA Code Signing CA0

                    
                        
Wy+^c

                    
                        
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS>

                    
                        
190709184036Z0

                    
                        
=B8x#,

                    
                        
$IUC_

                    
                        
'@A:#J

                    
                        
!sBK9

                    
                        
:AkcE

                    
                        
)}"<Np

                    
                        
-t!%oP

                    
                        
c.!f`

                    
                        
(MJSd

                    
                        
Up!H"

                    
                        
>^@fC

                    
                        
M&/0e*

                    
                        
czjo14nn

                    
                        
PWsTD/

                    
                        
COMODO Code Signing CA 20

                    
                        
`Q*Ge-

                    
                        
<Xo;N

                    
                        
l|myb

                    
                        
ZGR%n

                    
                        
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q

                    
                        
ZKZK{

                    
                        
=J0U)

                    
                        
[+MvN

                    
                        
>H(MA

                    
                        
%\Q|8Y

                    
                        
!DK}F

                    
                        
VRP)I`<|

                    
                        
1?640h?e

                    
                        
+aD3|

                    
                        
|2$m+

                    
                        
</application> 

                    
                        
a7S,Z

                    
                        
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>

                    
                        
'efe!gff

                    
                        
nqypWY

                    
                        
Nir Sofer0

                    
                        
.wx8;

                    
                        
TEMt?6j+

                    
                        
u +em

                    
                        
XykbC

                    
                        
]7c6op

                    
                        
eGW8T

                    
                        
7)J?q

                    
                        
QhJYH

                    
                        
L4}To|

                    
                        
o?lB&

                    
                        
l<X'>

                    
                        
{Hxck

                    
                        
4fe5nR

                    
                        
<LgLy

                    
                        
k5lU'

                    
                        
+,---Z?,

                    
                        
Y-q\(

                    
                        
za/@4

                    
                        
 A-ee

                    
                        
XPTPSW

                    
                        
3IJ]2

                    
                        
OML,RONLTRQ

                    
                        
RONvTRQ

                    
                        
Y /-1

                    
                        
f0d0<

                    
                        
190630235959Z0

                    
                        
The USERTRUST Network1!0

                    
                        
CRYPT32.dll

                    
                        
hSSHY

                    
                        
2$ja#.m;P"N?

                    
                        
6S0`y

                    
                        
 MJ&(w

                    
                        
afIW@

                    
                        
8XVS:

                    
                        
zK-p&

                    
                        
1wa@r

                    
                        
kZ#`A6<

                    
                        
yvZ"2

                    
                        
w?C<Lr"

                    
                        
d`sX(

                    
                        
(zq}q_

                    
                        
D{"O\+

                    
                        
|7Gg/

                    
                        
QYtUG/e

                    
                        
18/$%

                    
                        
h':T8

                    
                        
H]zc*

                    
                        
Ty 6;

                    
                        
!5d<.K4U

                    
                        
54MKu;

                    
                        
)0'0%

                    
                        
j;w`-

                    
                        
=ezra

                    
                        
eiIDg

                    
                        
http://www.usertrust.com1

                    
                        
m{M9j

                    
                        
=~*N_

                    
                        
98G<J

                    
                        
OML'KIHvTQQ

                    
                        
HcI&G

                    
                        
kxR*'

                    
                        
H9^f}

                    
                        
=F84e

                    
                        
r:pQ5

                    
                        
>6X }

                    
                        
e-'Kz

                    
                        
6v95"

                    
                        
mPJpy?

                    
                        
RegCloseKey

                    
                        
"0o9&

                    
                        
}r}M&q

                    
                        
:d]3$

                    
                        
%1C.~&

                    
                        
z<%()S

                    
                        
B4 o3~

                    
                        
a{lhF~

                    
                        
w El/

                    
                        
GetProcAddress

                    
                        
VT]C>

                    
                        
eoRL]

                    
                        
wE^>*o

                    
                        
H[QyL

                    
                        
Pe%R`%

                    
                        
HostedNetworkStarter.exe

                    
                        
=0;09

                    
                        
'Hg\f

                    
                        
JM}%';

                    
                        
ProductName

                    
                        
190912235959Z0

                    
                        
=?QiH

                    
                        
:*u-u!

                    
                        
@*PvlK

                    
                        
$g19.

                    
                        
r~gN0

                    
                        
1http://crt.usertrust.com/UTNAddTrustObject_CA.crt0%

                    
                    

                

            
            
        
        
        
        
        
    
    
     
 
 

    
    
            

                
PE Information

                

                    

                         
Image Base 
                         Entry Point 
                         Reported Checksum 
                         Actual Checksum 
                         Minimum OS Version 
                        
                         Compile Time 
                         Import Hash 
                         Icon
                         Icon Exact Hash 
                         Icon Similarity Hash 
                         Icon DHash 
                        

                        

                            
                            0x00400000
                            
                            
                            0x000c2be0
                            
                            
                            0x0004ac4b
                            
                            
                            0x0004ac4b
                            
                            
                            4.0
                            
                            
                            
                            2016-10-10 04:14:06
                            
                            
                            a4174a7c50d8185c53026735130046dd
                            
                            
                            
                            
                            
                            c3187ccb17984af816d526cb14de161b
                            
                            
                            42cabd89ec48151efe1687c7f19a81ed
                            
                            
                            5350d4dcf838f8b0
                            
                            
                        

                     

                

            

            

        
            

                
Version Infos

                

                    

                        
                            
                            
                        
                        
                        
                            

                                CompanyName
                                NirSoft
                            

                        
                        
                        
                            

                                FileDescription
                                HostedNetworkStarter
                            

                        
                        
                        
                            

                                FileVersion
                                1.15
                            

                        
                        
                        
                            

                                InternalName
                                HostedNetworkStarter
                            

                        
                        
                        
                            

                                LegalCopyright
                                Copyright © 2016 Nir Sofer
                            

                        
                        
                        
                            

                                OriginalFilename
                                HostedNetworkStarter.exe
                            

                        
                        
                        
                            

                                ProductName
                                HostedNetworkStarter
                            

                        
                        
                        
                            

                                ProductVersion
                                1.15
                            

                        
                        
                        
                            

                                Translation
                                0x0409 0x04b0
                            

                        
                        
                    

                

            

            

        
        
        
            

                
Sections

                

                    

                        

                            Name
                            RAW Address
                            Virtual Address
                            Virtual Size
                            Size of Raw Data
                            Characteristics
                            Entropy
                        

                        
                            

                                UPX0
                                0x00000400
                                0x00001000
                                0x00086000
                                0x00000000
                                IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
                                0.00
                            

                        
                            

                                UPX1
                                0x00000400
                                0x00087000
                                0x0003d000
                                0x0003c800
                                IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
                                8.00
                            

                        
                            

                                .rsrc
                                0x0003cc00
                                0x000c4000
                                0x00003000
                                0x00002a00
                                IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
                                4.95
                            

                        
                

            

        

        

        

        
        

            
Overlay

            

                

                    
                        
                        
                    
                    

                        Offset
                        0x0003f600
                    

                    

                        Size
                        0x00002ed0
                    

                    

                

            

            

        

        
        

                

                    

                    
                    

                


                

                    

                        

                            

                                Name
                                Offset
                                Size
                                Language
                                Sub-language
                                Entropy
                                File type
                            

                            
                                

                                    BIN
                                    0x000157c8
                                    0x000a5f2a
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    0.00
                                    None
                                

                            
                                

                                    RT_CURSOR
                                    0x000bb6f4
                                    0x00000134
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.34
                                    None
                                

                            
                                

                                    RT_CURSOR
                                    0x000bb828
                                    0x00000134
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    7.29
                                    None
                                

                            
                                

                                    RT_BITMAP
                                    0x000bb95c
                                    0x00001828
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    7.97
                                    None
                                

                            
                                

                                    RT_BITMAP
                                    0x000bd184
                                    0x000000d8
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.10
                                    None
                                

                            
                                

                                    RT_BITMAP
                                    0x000bd25c
                                    0x000000d8
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    6.98
                                    None
                                

                            
                                

                                    RT_ICON
                                    0x000c47cc
                                    0x000010a8
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    5.00
                                    None
                                

                            
                                

                                    RT_ICON
                                    0x000c5878
                                    0x00000468
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    5.56
                                    None
                                

                            
                                

                                    RT_ICON
                                    0x000c5ce4
                                    0x00000128
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    2.30
                                    None
                                

                            
                                

                                    RT_MENU
                                    0x000be96c
                                    0x000004fc
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.86
                                    None
                                

                            
                                

                                    RT_MENU
                                    0x000bee68
                                    0x000001c4
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.54
                                    None
                                

                            
                                

                                    RT_MENU
                                    0x000bf02c
                                    0x00000116
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    7.22
                                    None
                                

                            
                                

                                    RT_DIALOG
                                    0x000bf144
                                    0x000000a2
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    6.77
                                    None
                                

                            
                                

                                    RT_DIALOG
                                    0x000bf1e8
                                    0x00000296
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    7.71
                                    None
                                

                            
                                

                                    RT_DIALOG
                                    0x000bf480
                                    0x000004ca
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    7.86
                                    None
                                

                            
                                

                                    RT_DIALOG
                                    0x000bf94c
                                    0x000000fa
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    7.11
                                    None
                                

                            
                                

                                    RT_DIALOG
                                    0x000bfa48
                                    0x00000336
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.73
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000bfd80
                                    0x000001de
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.55
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000bff60
                                    0x00000118
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.22
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c0078
                                    0x00000060
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    6.17
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c00d8
                                    0x00000040
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    5.88
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c0118
                                    0x0000006a
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    6.29
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c0184
                                    0x0000017e
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.47
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c0304
                                    0x0000004a
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    5.99
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c0350
                                    0x000001a8
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    7.54
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c04f8
                                    0x00000054
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    6.16
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c054c
                                    0x00000052
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    5.98
                                    None
                                

                            
                                

                                    RT_STRING
                                    0x000c05a0
                                    0x000000be
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    6.91
                                    None
                                

                            
                                

                                    RT_ACCELERATOR
                                    0x000c0660
                                    0x00000058
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    6.13
                                    None
                                

                            
                                

                                    RT_GROUP_CURSOR
                                    0x000c06b8
                                    0x00000014
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    4.32
                                    None
                                

                            
                                

                                    RT_GROUP_CURSOR
                                    0x000c06cc
                                    0x00000014
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    4.32
                                    None
                                

                            
                                

                                    RT_GROUP_ICON
                                    0x000c5e10
                                    0x00000022
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    2.31
                                    None
                                

                            
                                

                                    RT_GROUP_ICON
                                    0x000c5e38
                                    0x00000014
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    2.02
                                    None
                                

                            
                                

                                    RT_VERSION
                                    0x000c5e50
                                    0x0000030c
                                    LANG_HEBREW
                                    SUBLANG_DEFAULT
                                    3.32
                                    None
                                

                            
                                

                                    RT_MANIFEST
                                    0x000c6160
                                    0x000004c9
                                    LANG_ENGLISH
                                    SUBLANG_ENGLISH_US
                                    5.37
                                    None
                                

                            
                        

                    

                

        

        

        

        
        

            
Imports

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    LoadLibraryA
                                    0x4c671c
                                

                            
                                

                                    GetProcAddress
                                    0x4c6720
                                

                            
                                

                                    VirtualProtect
                                    0x4c6724
                                

                            
                                

                                    VirtualAlloc
                                    0x4c6728
                                

                            
                                

                                    VirtualFree
                                    0x4c672c
                                

                            
                                

                                    ExitProcess
                                    0x4c6730
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    RegCloseKey
                                    0x4c6738
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    FindTextW
                                    0x4c6748
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    CryptProtectData
                                    0x4c6750
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    PatBlt
                                    0x4c6758
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    exit
                                    0x4c6760
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    CoInitialize
                                    0x4c6768
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    ShellExecuteW
                                    0x4c6770
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    GetDC
                                    0x4c6778
                                

                            
                        

                    

                

            

            
            

                

                    

                    
                    

                

                

                    

                        
 

                            

                                Name
                                Address
                            

                        
                            
                                

                                    VerQueryValueW
                                    0x4c6780
                                

                            
                        

                    

                

            

            
        

        
        


        

        
    





    
    
    
    
    
    
    
    
    







    

        
        

            

     Reports:
            
                JSON 
            
            
            
            
            
            
            
            
            
            
         




        

        
    










    

    
    
    

        

    

    

        
            
                

                

    
Usage

    

        
    




                

                

            
        
        

            

                

                    
Processing ( 131.38 seconds )

                    
    
                        
                            
                            
  • 
                                120.279
                                ProcessMemory
                            
    • 
                            
                        
                            
                            
  • 
                                9.182
                                CAPE
                            
    • 
                            
                        
                            
                            
  • 
                                1.916
                                BehaviorAnalysis
                            
    • 
                            
                        
                            
                            
  • 
                                0.007
                                AnalysisInfo
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                Debug
                            
    • 
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                    

                

                

                
Signatures ( 0.21 seconds )

                    
    
                        
                            
                            
  • 
                                0.044
                                antiav_detectreg
                            
    • 
                            
                        
                            
                            
  • 
                                0.019
                                territorial_disputes_sigs
                            
    • 
                            
                        
                            
                            
  • 
                                0.016
                                infostealer_ftp
                            
    • 
                            
                        
                            
                            
  • 
                                0.01
                                infostealer_im
                            
    • 
                            
                        
                            
                            
  • 
                                0.009
                                antianalysis_detectreg
                            
    • 
                            
                        
                            
                            
  • 
                                0.009
                                ransomware_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.007
                                antianalysis_detectfile
                            
    • 
                            
                        
                            
                            
  • 
                                0.007
                                infostealer_mail
                            
    • 
                            
                        
                            
                            
  • 
                                0.006
                                antiav_detectfile
                            
    • 
                            
                        
                            
                            
  • 
                                0.006
                                ransomware_extensions
                            
    • 
                            
                        
                            
                            
  • 
                                0.005
                                masquerade_process_name
                            
    • 
                            
                        
                            
                            
  • 
                                0.004
                                antivm_vbox_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.004
                                infostealer_bitcoin
                            
    • 
                            
                        
                            
                            
  • 
                                0.003
                                antivm_vbox_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.003
                                antivm_vmware_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.003
                                geodo_banking_trojan
                            
    • 
                            
                        
                            
                            
  • 
                                0.003
                                poullight_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.003
                                ursnif_behavior
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                antidebug_devices
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                antivm_generic_diskreg
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                antivm_parallels_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                antivm_vpc_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                antivm_xen_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                ketrican_regkeys
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                browser_security
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                darkcomet_regkeys
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                recon_fingerprint
                            
    • 
                            
                        
                            
                            
  • 
                                0.002
                                remcos_regkeys
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                accesses_netlogon_regkey
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                antivm_bochs_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                antivm_hyperv_keys
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                antivm_vbox_devices
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                antivm_vmware_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                bypass_firewall
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                registry_credential_store_access
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                registry_lsa_secrets_access
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                disables_backups
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                disables_browser_warn
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                disables_power_options
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                azorult_mutexes
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                cryptbot_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                echelon_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                qulab_files
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                packer_armadillo_regkey
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                medusalocker_regkeys
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                revil_mutexes
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                limerat_regkeys
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                modirat_behavior
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                rat_pcclient
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                warzonerat_regkeys
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                lokibot_mutexes
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                suspicious_command_tools
                            
    • 
                            
                        
                            
                            
  • 
                                0.001
                                uses_windows_utilities
                            
    • 
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                            
                        
                    

                

                

                    
Reporting ( 1.02 seconds )

                
    
                    
                        
                        
  • 
                            0.926
                            CAPASummary
                        
    • 
                        
                    
                        
                        
  • 
                            0.095
                            JsonDump
                        
    • 
                        
                    
                        
                    
                        
                    
                

                

            

        


    









    
Signatures

    
        
            
            
                

            
            Queries the keyboard layout

            

            
                

                    
                        
                    
                

            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            SetUnhandledExceptionFilter detected (possible anti-debug)

            

            
                

                    
                        
                    
                

            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            At least one process apparently crashed during execution

            

            
                

                    
                        
                    
                

            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            Possible date expiration check, exits too soon after checking local time

            

            
                
                    
                        
process: FileCoAuth.exe, PID 1876

                    
                
            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            Anomalous file deletion behavior detected (10+)

            

            
                
                    
                        
file: C:\Windows\System32\wbem\Performance\WmiApRpl.h

                    
                
                    
                        
file: C:\Windows\System32\wbem\Performance\WmiApRpl.ini

                    
                
                    
                        
file: C:\Windows\INF\WmiApRpl\0009\WmiApRpl.ini

                    
                
                    
                        
file: C:\Windows\INF\WmiApRpl\WmiApRpl.h

                    
                
                    
                        
file: C:\Windows\INF\WmiApRpl\WmiApRpl.ini

                    
                
                    
                        
file: C:\Windows\INF\WmiApRpl\WmiApRpl.ini

                    
                
                    
                        
file: C:\Windows\INF\WmiApRpl.ini

                    
                
                    
                        
file: C:\Windows\INF\WmiApRpl\WmiApRpl.h\WmiApRpl.ini

                    
                
                    
                        
file: C:\Windows\System32\PerfStringBackup.TMP

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2133.5764.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2125.4072.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2052.6960.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2028.1120.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1913.1964.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1854.2316.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1845.6048.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1816.5756.1.odl

                    
                
                    
                        
file: C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1741.6072.1.odl

                    
                
            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            A process created a hidden window

            

            
                
                    
                        
process: svchost.exe -> \\?\C:\Windows\system32\wbem\WMIADAP.EXE

                    
                
            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            The binary contains an unknown PE section name indicative of packing

            

            
                
                    
                        
unknown section: {'name': 'UPX0', 'raw_address': '0x00000400', 'virtual_address': '0x00001000', 'virtual_size': '0x00086000', 'size_of_data': '0x00000000', 'characteristics': 'IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE', 'characteristics_raw': '0xe0000080', 'entropy': '0.00'}

                    
                
                    
                        
unknown section: {'name': 'UPX1', 'raw_address': '0x00000400', 'virtual_address': '0x00087000', 'virtual_size': '0x0003d000', 'size_of_data': '0x0003c800', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE', 'characteristics_raw': '0xe0000040', 'entropy': '8.00'}

                    
                
            
            
            

        
            
            
                

            
            The binary likely contains encrypted or compressed data

            

            
                
                    
                        
section: {'name': 'UPX1', 'raw_address': '0x00000400', 'virtual_address': '0x00087000', 'virtual_size': '0x0003d000', 'size_of_data': '0x0003c800', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE', 'characteristics_raw': '0xe0000040', 'entropy': '8.00'}

                    
                
            
            
            

        
            
            
                

            
            Tries to unhook or modify Windows functions monitored by CAPE

            

            
                
                    
                        
unhook: function_name: ShellExecuteExW, type: removal

                    
                
            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            Checks the system manufacturer, likely for anti-virtualization

            

            
                

                    
                        
                            
                                
Process: FileCoAuth.exe (1876)

                            
                            
                                

                                    
                                        registry
                                        
                                            
                                                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer
                                            
                                        
                                    
                                

                            
                        
                    
                

            
            
            

        
            
            
                

            
            Yara detections observed in process dumps, payloads or dropped files

            

            
                
                    
                        
Hit: PID 5592 triggered the Yara rule 'vmdetect' with data '['VMware', '00-05-69', '00-50-56', '00-0C-29', '00-1C-14', '08-00-27']'

                    
                
                    
                        
Hit: PID 6936 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'

                    
                
                    
                        
Hit: PID 6348 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'

                    
                
                    
                        
Hit: PID 6576 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'

                    
                
                    
                        
Hit: PID 5592 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'

                    
                
                    
                        
Hit: PID 6204 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'

                    
                
                    
                        
Hit: PID 1876 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 58 }']'

                    
                
                    
                        
Hit: PID 5592 triggered the Yara rule 'vmdetect' with data '['VMware', '00-05-69', '00-50-56', '00-0C-29', '00-1C-14', '08-00-27']'

                    
                
            
            
            

        
            
            
                

            
            Enumerates services, possibly for anti-virtualization

            

            
                

                    
                        
                    
                

            
            
                

                
                    
                    
                
            
            

        
            
            
                

            
            Enumerates physical drives

            

            
                
                    
                        
physical drive access: \??\PHYSICALDRIVE0

                    
                
                    
                        
physical drive access: \??\PhysicalDrive0

                    
                
            
            
            

        
            
            
                

            
            Attempts to interact with an Alternate Data Stream (ADS)

            

            
                
                    
                        
file: C:\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                
                    
                        
file: \??\Volume{01989354-0000-0000-0000-100000000000}\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                
                    
                        
file: \??\Volume{01989354-0000-0000-0000-300300000000}\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                
                    
                        
file: \??\Volume{01989354-0000-0000-0000-10e03f000000}\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                
            
            
            

        
    






    
Screenshots

    
        No screenshots available.
    








    

    
Hosts

    
        
No hosts contacted.

    




    

    
DNS

    
        
No domains contacted.

    







    

    
Summary

    
    

        

            

                
                    
                        C:\Windows\System32\kernel.appcore.dll

                    
                        \Device\CNG

                    
                        C:\Users\Packager\AppData\Local\Temp\oui.txt

                    
                        C:\Users\Packager\AppData\Local\SystemResources\HostedNetworkStarter.exe.mun

                    
                        C:\Users\Packager\AppData\Local\Temp\HostedNetworkStarter_lng.ini

                    
                        C:\Windows\Fonts\staticcache.dat

                    
                        C:\Users\Packager\AppData\Local\Temp\TextShaping.dll

                    
                        C:\Windows\System32\TextShaping.dll

                    
                        C:\Windows\Globalization\Sorting\sortdefault.nls

                    
                        C:\Windows\System32\uxtheme.dll.Config

                    
                        C:\Windows\System32\uxtheme.dll

                    
                        C:\Users\Packager\AppData\Local\Temp\HostedNetworkStarter.exe.Local\

                    
                        C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984

                    
                        C:\Users\Packager\AppData\Local\Temp\HostedNetworkStarter.cfg

                    
                        C:\Windows\System32\textinputframework.dll

                    
                        C:\Windows\System32\CoreUIComponents.dll

                    
                        C:\Windows\System32\CoreMessaging.dll

                    
                        C:\Windows\System32\ntmarta.dll

                    
                        C:\Windows\System32\WinTypes.dll

                    
                        C:\Windows\SystemResources\USER32.dll.mun

                    
                        C:\Users\Packager\AppData\Local\Temp

                    
                        \??\PhysicalDrive0

                    
                        C:\Windows\System32\wbem\WmiPrvSE.exe

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\19.043.0304.0013\FileCoAuth.exe

                    
                        C:\Windows\System32\SecurityHealthHost.exe

                    
                        C:\Windows\System32\smartscreen.exe

                    
                        C:\Windows\SysWOW64\smartscreen.exe

                    
                        C:\Windows\System32\kernelbase.dll

                    
                        C:\Windows\System32\drivers\acpi.sys

                    
                        C:\Windows\System32\drivers\ndis.sys

                    
                        C:\Windows\System32\drivers\mssmbios.sys

                    
                        C:\Windows\System32\drivers\hdaudbus.sys

                    
                        C:\Windows\System32\drivers\processr.sys

                    
                        C:\Windows\System32\drivers\portcls.sys

                    
                        C:\Windows\System32\drivers\monitor.sys

                    
                        C:\Windows\System32\SystemResources\monitor.sys.mun

                    
                        C:\Windows\System32\en-US\KERNELBASE.dll.mui

                    
                        C:\Windows\System32\userenv.dll

                    
                        C:\Windows\System32\profapi.dll

                    
                        C:\Windows\Temp

                    
                        C:\Program Files\Windows Defender\MpOAV.dll

                    
                        C:\Windows\System32\wbem\WMIADAP.exe

                    
                        C:\Windows\System32\wbem\Performance\

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl_new.h

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl.h

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl_new.ini

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl.ini

                    
                        C:\Windows\System32\perfc009.dat

                    
                        C:\Windows\System32\perfh009.dat

                    
                        C:\Windows\INF\WmiApRpl\0*

                    
                        C:\Windows\INF\WmiApRpl\0009\*

                    
                        C:\Windows\INF\WmiApRpl\0009\WmiApRpl.ini

                    
                        C:\Windows\INF\WmiApRpl\0009

                    
                        C:\Windows\INF\WmiApRpl\*

                    
                        C:\Windows\INF\WmiApRpl\WmiApRpl.h

                    
                        C:\Windows\INF\WmiApRpl\WmiApRpl.ini

                    
                        C:\Windows\INF\WmiApRpl

                    
                        C:\Windows\INF\WmiApRpl\

                    
                        C:\Windows\INF\WmiApRpl.ini

                    
                        C:\Windows\INF\WmiApRpl\WmiApRpl.h\WmiApRpl.ini

                    
                        C:\Windows\INF\WmiApRpl\0009\

                    
                        C:\Windows\System32\PerfStringBackup.TMP

                    
                        C:\Windows\System32\PerfStringBackup.INI

                    
                        \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM

                    
                        C:\Windows\System32\wbem\WMICLNT.dll

                    
                        C:\Windows\System32\wmiclnt.dll

                    
                        \??\WMIDataDevice

                    
                        C:\Windows\System32\en-US\kernelbase.dll.mui

                    
                        C:\Windows\System32\drivers\en-US\ACPI.sys.mui

                    
                        C:\Windows\System32\drivers\en-US\ndis.sys.mui

                    
                        C:\Windows\System32\drivers\en-US\mssmbios.sys.mui

                    
                        C:\Windows\System32\drivers\en-US\HDAudBus.sys.mui

                    
                        C:\Windows\System32\drivers\en\HDAudBus.sys.mui

                    
                        C:\Windows\System32\drivers\en-US\processr.sys.mui

                    
                        C:\Windows\System32\drivers\en-US\portcls.SYS.mui

                    
                        C:\Windows\System32\drivers\en\portcls.SYS.mui

                    
                        C:\Windows\System32\drivers\en-US\monitor.sys

                    
                        C:\Windows\System32\drivers\en\monitor.sys

                    
                        C:\Windows\System32\wbem\en-US\mofd.dll.mui

                    
                        C:\Windows\System32\en-US\combase.dll.mui

                    
                        C:\Windows\System32\en-US\USER32.dll.mui

                    
                        C:\Windows\System32\rpcss.dll

                    
                        C:\Windows\System32\wtsapi32.dll

                    
                        C:\Windows\System32\winsta.dll

                    
                        C:\Windows\System32\tzres.dll

                    
                        C:\Windows\System32\en-US\tzres.dll.mui

                    
                        C:\Windows\System32\samcli.dll

                    
                        C:\Windows\System32\srvcli.dll

                    
                        C:\Windows\System32\netutils.dll

                    
                        C:\Windows\System32\logoncli.dll

                    
                        C:\Windows\System32\schedcli.dll

                    
                        C:\Windows\System32\wkscli.dll

                    
                        C:\Windows\System32\dsrole.dll

                    
                        \??\PIPE\lsarpc

                    
                        \??\PIPE\srvsvc

                    
                        C:\Windows\System32\OemInfo.Ini

                    
                        C:\Windows\System32\OemLogo.Bmp

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\19.043.0304.0013\CRYPTSP.dll

                    
                        C:\Windows\System32\cryptsp.dll

                    
                        C:\Windows\System32\windows.storage.dll

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\19.043.0304.0013\Wldp.dll

                    
                        C:\Windows\System32\wldp.dll

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2025-06-14.0233.1876.1.aodl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth*.aodl

                    
                        C:\Windows\sysnative\en-US\tzres.dll.mui

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2025-06-14.0233.1876.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth*.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1741.6072.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1816.5756.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1845.6048.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1854.2316.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1913.1964.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2028.1120.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2052.6960.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2125.4072.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2133.5764.1.odl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth*.odlsent

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth*.odlgz

                    
                        C:\Program Files (x86)

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json

                    
                        C:\Windows\System32\wbem\en-US\cimwin32.dll.mui

                    
                        C:\

                    
                        C:\Windows\System32

                    
                        C:\Windows\System32\

                    
                        C:\Windows

                    
                        C:\Windows\

                    
                        C:

                    
                        \??\MountPointManager

                    
                        C:\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                        \??\Volume{01989354-0000-0000-0000-100000000000}

                    
                        \??\GLOBALROOT\Device\HarddiskVolume1

                    
                        \??\Volume{01989354-0000-0000-0000-100000000000}\

                    
                        \??\Volume{01989354-0000-0000-0000-100000000000}\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                        \??\Volume{01989354-0000-0000-0000-300300000000}

                    
                        \??\GLOBALROOT\Device\HarddiskVolume2

                    
                        \??\Volume{01989354-0000-0000-0000-300300000000}\

                    
                        \??\Volume{01989354-0000-0000-0000-300300000000}\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                        \??\Volume{01989354-0000-0000-0000-10e03f000000}

                    
                        \??\GLOBALROOT\Device\HarddiskVolume3

                    
                        \??\Volume{01989354-0000-0000-0000-10e03f000000}\

                    
                        \??\Volume{01989354-0000-0000-0000-10e03f000000}\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                        \??\scsi#disk&ven_qemu&prod_harddisk#4&35424867&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

                    
                        \??\PHYSICALDRIVE0

                    
                        C:\Windows\System32\clusapi.dll

                    
                        C:\Windows\System32\dnsapi.dll

                    
                        C:\Windows\System32\IPHLPAPI.DLL

                    
                        \??\Nsi

                    
                        \??\PIPE\wkssvc

                    
                        C:\Windows\System32\iologmsg.dll

                    
                        C:\Windows\System32\en-US\iologmsg.dll.mui

                    
                        C:\Windows\System32\slc.dll

                    
                        C:\Windows\System32\en-US\slc.dll.mui

                    
                        C:\Windows\System32\sppc.dll

                    
                        C:\Windows\System32\en-US\sppc.dll.mui

                    
                        C:\Windows\System32\en-US\storagewmi.dll.mui

                    
                        C:\Windows\System32\Syncreg.dll

                    
                        C:\Windows\System32\en-US\Syncreg.dll.mui

                    
                        C:\Windows\System32\tapi3.dll

                    
                        C:\Windows\System32\en-US\tapi3.dll.mui

                    
                        C:\Windows\System32\vdsutil.dll

                    
                        C:\Windows\System32\en-US\vdsutil.dll.mui

                    
                        C:\Windows\System32\vsstrace.dll

                    
                        C:\Windows\System32\en-US\vsstrace.dll.mui

                    
                        C:\Windows\System32\wbem\en-US\wmiutils.dll.mui

                    
                        C:\Windows\System32\msasn1.dll

                    
                        C:\Windows\System32\dhcpcsvc6.DLL

                    
                        C:\Windows\System32\dhcpcsvc.dll

                    
                        \DEVICE\NETBT_TCPIP_{CC6EEB36-5AE2-46BE-81A9-5F0B62ECF81F}

                    
                        \DEVICE\NETBT_TCPIP_{27E3D6D8-A922-11EF-90C1-806E6F6E6963}

                    
                        \Device\Afd\Endpoint

                    
                        \Device\RasAcd

                    
                        C:\Windows\System32\drivers\Synth3dVsc.sys

                    
                        C:\Windows\System32\SystemResources\Synth3dVsc.sys.mun

                    
                        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WorkflowServiceHostPerformanceCounters.dll

                    
                        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\WorkflowServiceHostPerformanceCounters.dll.mui

                    
                        C:\Windows\System32\lsm.dll

                    
                        C:\Windows\System32\en-US\lsm.dll.mui

                    
                        C:\Windows\System32\HvHostSvc.dll

                    
                        C:\Windows\System32\en-US\HvHostSvc.dll.mui

                    
                        C:\Windows\System32\drivers\pacer.sys

                    
                        C:\Windows\System32\drivers\en-US\pacer.sys.mui

                    
                        C:\Windows\System32\FWPUCLNT.DLL

                    
                        C:\Windows\System32\en-US\fwpuclnt.dll.mui

                    
                        C:\Windows\System32\pnrpsvc.dll

                    
                        C:\Windows\System32\en-US\pnrpsvc.dll.mui

                    
                        C:\Windows\System32\azroles.dll

                    
                        C:\Windows\System32\en-US\AzRoles.dll.mui

                    
                        C:\Windows\System32\FXSRESM.dll

                    
                        C:\Windows\System32\en-US\fxsresm.dll.mui

                    
                        C:\Windows\System32\drivers\afd.sys

                    
                        C:\Windows\System32\drivers\en-US\afd.sys.mui

                    
                        C:\Windows\System32\drivers\fvevol.sys

                    
                        C:\Windows\System32\drivers\en-US\fvevol.sys.mui

                    
                        C:\Windows\System32\drivers\spaceport.sys

                    
                        C:\Windows\System32\drivers\en-US\spaceport.sys.mui

                    
                        C:\Windows\System32\drivers\refs.sys

                    
                        C:\Windows\System32\drivers\en-US\refs.sys.mui

                    
                        C:\Windows\System32\mispace.dll

                    
                        C:\Windows\System32\en-US\mispace.dll.mui

                    
                        C:\Windows\System32\drivers\vmbkmcl.sys

                    
                        C:\Windows\System32\drivers\en-US\vmbkmcl.sys.mui

                    
                        C:\Windows\System32\drivers\en\vmbkmcl.sys.mui

                    
                        C:\Windows\System32\drivers\smbdirect.sys

                    
                        C:\Windows\System32\drivers\en-US\smbdirect.sys.mui

                    
                        C:\Windows\System32\cscsvc.dll

                    
                        C:\Windows\System32\en-US\cscsvc.dll.mui

                    
                        C:\Windows\System32\iphlpsvc.dll

                    
                        C:\Windows\System32\en-US\iphlpsvc.dll.mui

                    
                        C:\Windows\System32\drivers\dmvsc.sys

                    
                        C:\Windows\System32\drivers\en-US\dmvsc.sys.mui

                    
                        C:\Windows\System32\bthserv.dll

                    
                        C:\Windows\System32\en-US\bthserv.dll.mui

                    
                        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelPerformanceCounters.dll

                    
                        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\ServiceModelPerformanceCounters.dll.mui

                    
                        C:\Windows\System32\umpoext.dll

                    
                        C:\Windows\System32\en-US\umpoext.dll.mui

                    
                        C:\Windows\System32\drivers\tcpip.sys

                    
                        C:\Windows\System32\drivers\en-US\tcpip.sys.mui

                    
                        C:\Windows\System32\drivers\winnat.sys

                    
                        C:\Windows\System32\drivers\en-US\winnat.sys.mui

                    
                        C:\Windows\System32\drivers\http.sys

                    
                        C:\Windows\System32\drivers\en-US\http.sys.mui

                    
                        C:\Windows\System32\WindowsPowerShell\v1.0\PSEvents.dll

                    
                        C:\Windows\System32\WindowsPowerShell\v1.0\en-US\PSEvents.dll.mui

                    
                        C:\Windows\System32\drivers\dxgmms2.sys

                    
                        C:\Windows\System32\drivers\en-US\dxgmms2.sys.mui

                    
                        C:\Windows\System32\drivers\en\dxgmms2.sys.mui

                    
                        C:\Windows\System32\wmp.dll

                    
                        C:\Windows\System32\rdpcorets.dll

                    
                        C:\Windows\System32\en-US\rdpcorets.dll.mui

                    
                        C:\Windows\System32\drivers\srv2.sys

                    
                        C:\Windows\System32\drivers\en-US\srv2.sys.mui

                    
                        C:\Windows\System32\netlogon.dll

                    
                        C:\Windows\System32\en-US\NetLogon.dll.mui

                    
                        C:\Windows\System32\drivers\USBXHCI.SYS

                    
                        C:\Windows\System32\drivers\en-US\usbxhci.sys.mui

                    
                        C:\Windows\System32\drt.dll

                    
                        C:\Windows\System32\en-US\drt.dll.mui

                    
                        C:\Windows\System32\advapi32res.dll

                    
                        C:\Windows\System32\en-US\advapi32res.dll.mui

                    
                        C:\Windows\System32\w32time.dll

                    
                        C:\Windows\System32\en-US\w32time.dll.mui

                    
                        C:\Windows\System32\drivers\mrxsmb.sys

                    
                        C:\Windows\System32\drivers\en-US\mrxsmb.sys.mui

                    
                        C:\Windows\System32\appvetwclientres.dll

                    
                        C:\Windows\System32\wevtsvc.dll

                    
                        C:\Windows\System32\en-US\wevtsvc.dll.mui

                    
                        C:\Windows\System32\PeerDistSvc.dll

                    
                        C:\Windows\System32\en-US\PeerDistSvc.dll.mui

                    
                        C:\Windows\System32\WsmRes.dll

                    
                        C:\Windows\System32\en-US\WsmRes.dll.mui

                    
                        C:\Windows\System32\vid.dll

                    
                        C:\Windows\System32\en-US\vid.dll.mui

                    
                        C:\Windows\System32\mprddm.dll

                    
                        C:\Windows\System32\en-US\mprddm.dll.mui

                    
                        \??\UNC\WORKGROUP*\MAILSLOT\NET\NETLOGON

                    
                        C:\Windows\System32\en-US\ACTIVEDS.dll.mui

                    
                        C:\Windows\System32\powrprof.dll

                    
                        C:\Windows\System32\en-US\powrprof.dll.mui

                    
                        C:\Windows\System32\policymanager.dll

                    
                        C:\Windows\System32\msvcp110_win.dll

                    
                
            

        

        

            

                
                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl.h

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl.ini

                    
                        C:\Windows\System32\PerfStringBackup.TMP

                    
                
            

        

        

            

                
                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl_new.h

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl.h

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl_new.ini

                    
                        C:\Windows\System32\wbem\Performance\WmiApRpl.ini

                    
                        C:\Windows\System32\perfc009.dat

                    
                        C:\Windows\System32\perfh009.dat

                    
                        C:\Windows\INF\WmiApRpl\WmiApRpl.h

                    
                        C:\Windows\INF\WmiApRpl\WmiApRpl.ini

                    
                        C:\Windows\System32\PerfStringBackup.TMP

                    
                        C:\Windows\System32\PerfStringBackup.INI

                    
                        \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM

                    
                        \??\WMIDataDevice

                    
                        \??\PIPE\lsarpc

                    
                        \??\PIPE\srvsvc

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2025-06-14.0233.1876.1.aodl

                    
                        C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2025-06-14.0233.1876.1.odl

                    
                        C:\$Extend\$Quota:$Q:$INDEX_ALLOCATION

                    
                        \??\PIPE\wkssvc

                    
                        \Device\Afd\Endpoint

                    
                        \Device\RasAcd

                    
                        \??\UNC\WORKGROUP*\MAILSLOT\NET\NETLOGON

                    
                
            

        

        

            

                
                
                C:\Windows\System32\wbem\Performance\WmiApRpl.h

                
                C:\Windows\System32\wbem\Performance\WmiApRpl_new.h

                
                C:\Windows\System32\wbem\Performance\WmiApRpl.ini

                
                C:\Windows\System32\wbem\Performance\WmiApRpl_new.ini

                
                C:\Windows\INF\WmiApRpl\0009\WmiApRpl.ini

                
                C:\Windows\INF\WmiApRpl\0009

                
                C:\Windows\INF\WmiApRpl\WmiApRpl.h

                
                C:\Windows\INF\WmiApRpl\WmiApRpl.ini

                
                C:\Windows\INF\WmiApRpl

                
                C:\Windows\INF\WmiApRpl.ini

                
                C:\Windows\INF\WmiApRpl\WmiApRpl.h\WmiApRpl.ini

                
                C:\Windows\System32\PerfStringBackup.TMP

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2025-06-14.0233.1876.1.aodl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2133.5764.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2125.4072.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2052.6960.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.2028.1120.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1913.1964.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1854.2316.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1845.6048.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1816.5756.1.odl

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-25.1741.6072.1.odl

                
                
            

        

        

            

                
                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration

                
                HKEY_CURRENT_USER

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI

                
                HKEY_CURRENT_USER\Control Panel\Desktop

                
                HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll

                
                HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations

                
                HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\HostedNetworkStarter.exe

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\AppCompatClassName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Input

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts

                
                HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Arial

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WZCSVC\Parameters\Interfaces\{CC6EEB36-5AE2-46BE-81A9-5F0B62ECF81F}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C08956A0-1CD3-11D1-B1C5-00805FC1270E}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C08956A0-1CD3-11D1-B1C5-00805FC1270E}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C08956A0-1CD3-11D1-B1C5-00805FC1270E}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C08956A1-1CD3-11D1-B1C5-00805FC1270E}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C08956A1-1CD3-11D1-B1C5-00805FC1270E}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C08956A1-1CD3-11D1-B1C5-00805FC1270E}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\ActivateOnHostFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\AppID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\LocalServer

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Elevation

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\Installer32

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StateSeparation\RedirectionMap\Keys

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\AllowDevelopmentWithoutDevLicense

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseActivationAuthenticationLevel

                
                HKEY_CURRENT_USER\Software\Classes

                
                HKEY_LOCAL_MACHINE\Software\Classes

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\WMIADAP.EXE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\ProcessID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9F6C78EF-FCE5-42FA-ABEA-3E7DF91921DC}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9F6C78EF-FCE5-42FA-ABEA-3E7DF91921DC}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9F6C78EF-FCE5-42FA-ABEA-3E7DF91921DC}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\ActivateOnHostFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\AppID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\LocalServer

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Elevation

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\AMSI\Providers

                
                HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{00000000-0000-0000-0000-000000000000}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-0000-0000-0000-000000000000}\InProcServer32\(Default)

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\AMSI

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AMSI\FeatureBits

                
                HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\EnableObjectValidation

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\ActivateOnHostFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\AppID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\LocalServer

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Elevation

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Working Directory

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\ThrottleDrege

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiApRpl

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiApRpl\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\DisplayName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Updating

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Last Help

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{16fa106f-26c3-42a5-982b-400779ea8970}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{16fa106f-26c3-42a5-982b-400779ea8970}\{a4b0515f-2c2f-4fc4-87f5-b3a3a8747225}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{16fa106f-26c3-42a5-982b-400779ea8970}\{a4b0515f-2c2f-4fc4-87f5-b3a3a8747225}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{16fa106f-26c3-42a5-982b-400779ea8970}\{a4b0515f-2c2f-4fc4-87f5-b3a3a8747225}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{1ffc4a37-aabd-49e0-8b3d-fce8b099febb}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{1ffc4a37-aabd-49e0-8b3d-fce8b099febb}\{d049a97f-9f42-4c11-ad73-5d8c68b30258}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{1ffc4a37-aabd-49e0-8b3d-fce8b099febb}\{d049a97f-9f42-4c11-ad73-5d8c68b30258}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{1ffc4a37-aabd-49e0-8b3d-fce8b099febb}\{d049a97f-9f42-4c11-ad73-5d8c68b30258}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{20fe1a3a-af21-413c-8a7b-b7fbf6c9a059}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{20fe1a3a-af21-413c-8a7b-b7fbf6c9a059}\{8a922684-7993-4b38-9929-b7366f01ec4a}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{20fe1a3a-af21-413c-8a7b-b7fbf6c9a059}\{8a922684-7993-4b38-9929-b7366f01ec4a}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{20fe1a3a-af21-413c-8a7b-b7fbf6c9a059}\{8a922684-7993-4b38-9929-b7366f01ec4a}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2538387c-08b7-44b8-86d3-47f59cf6d056}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2538387c-08b7-44b8-86d3-47f59cf6d056}\{2538387c-08b7-44b8-86d3-47f59cf6d057}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2538387c-08b7-44b8-86d3-47f59cf6d056}\{2538387c-08b7-44b8-86d3-47f59cf6d057}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2538387c-08b7-44b8-86d3-47f59cf6d056}\{2538387c-08b7-44b8-86d3-47f59cf6d057}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2a32a3f9-ee0c-40ff-8a75-e1e747d15b1f}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2a32a3f9-ee0c-40ff-8a75-e1e747d15b1f}\{d11168c5-9f29-43bc-9269-0548637a62b0}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2a32a3f9-ee0c-40ff-8a75-e1e747d15b1f}\{d11168c5-9f29-43bc-9269-0548637a62b0}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2a32a3f9-ee0c-40ff-8a75-e1e747d15b1f}\{d11168c5-9f29-43bc-9269-0548637a62b0}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ccb0d8d-ea94-4235-986b-c97f61f63969}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ccb0d8d-ea94-4235-986b-c97f61f63969}\{ef82017e-50e2-4ca2-b9ec-b9895ab70e08}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ccb0d8d-ea94-4235-986b-c97f61f63969}\{ef82017e-50e2-4ca2-b9ec-b9895ab70e08}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ccb0d8d-ea94-4235-986b-c97f61f63969}\{ef82017e-50e2-4ca2-b9ec-b9895ab70e08}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ea0b998-e7e8-41c6-8abc-093083ea21d7}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ea0b998-e7e8-41c6-8abc-093083ea21d7}\{687d8f80-ffea-4de5-a41f-3e1c83378839}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ea0b998-e7e8-41c6-8abc-093083ea21d7}\{687d8f80-ffea-4de5-a41f-3e1c83378839}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ea0b998-e7e8-41c6-8abc-093083ea21d7}\{687d8f80-ffea-4de5-a41f-3e1c83378839}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{31a5ebe2-c765-490a-937c-b0ab2787fe15}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{31a5ebe2-c765-490a-937c-b0ab2787fe15}\{c73dfef0-11b8-4a3f-a1ad-0dcbbc5186ef}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{31a5ebe2-c765-490a-937c-b0ab2787fe15}\{c73dfef0-11b8-4a3f-a1ad-0dcbbc5186ef}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{31a5ebe2-c765-490a-937c-b0ab2787fe15}\{c73dfef0-11b8-4a3f-a1ad-0dcbbc5186ef}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3817cb9c-49a8-436b-bc29-5518877d3c3a}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3817cb9c-49a8-436b-bc29-5518877d3c3a}\{82fa211f-e7f8-4ab5-a04c-cc523073b971}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3817cb9c-49a8-436b-bc29-5518877d3c3a}\{82fa211f-e7f8-4ab5-a04c-cc523073b971}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3817cb9c-49a8-436b-bc29-5518877d3c3a}\{82fa211f-e7f8-4ab5-a04c-cc523073b971}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{2f66fd0a-9f6c-4d91-9f2f-2a1b5e41b7dc}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{2f66fd0a-9f6c-4d91-9f2f-2a1b5e41b7dc}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{2f66fd0a-9f6c-4d91-9f2f-2a1b5e41b7dc}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{370e979a-377a-4f30-b2c4-9a0fd072890b}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{370e979a-377a-4f30-b2c4-9a0fd072890b}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{370e979a-377a-4f30-b2c4-9a0fd072890b}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{42cd0051-9dd9-4fe2-8db9-d37885d2d749}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{42cd0051-9dd9-4fe2-8db9-d37885d2d749}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{42cd0051-9dd9-4fe2-8db9-d37885d2d749}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{52bc5412-dac2-449c-8bc2-96443888fe6b}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{52bc5412-dac2-449c-8bc2-96443888fe6b}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{52bc5412-dac2-449c-8bc2-96443888fe6b}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{b4fc721a-0378-476f-89ba-a5a79f810b36}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{b4fc721a-0378-476f-89ba-a5a79f810b36}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{b4fc721a-0378-476f-89ba-a5a79f810b36}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{ed83b00b-6afd-4063-9420-16fe0fa3b36f}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{ed83b00b-6afd-4063-9420-16fe0fa3b36f}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{ed83b00b-6afd-4063-9420-16fe0fa3b36f}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{f596750d-b109-4247-a62f-dea47a46e505}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{f596750d-b109-4247-a62f-dea47a46e505}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{f596750d-b109-4247-a62f-dea47a46e505}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{2617bf8d-bedc-4231-b92b-1dd2d34ee225}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{2617bf8d-bedc-4231-b92b-1dd2d34ee225}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{2617bf8d-bedc-4231-b92b-1dd2d34ee225}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{4ad2297e-ee20-42b4-9cb7-13f6f1598dbd}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{4ad2297e-ee20-42b4-9cb7-13f6f1598dbd}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{4ad2297e-ee20-42b4-9cb7-13f6f1598dbd}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{59ceb84f-55ff-48c0-80cc-df0068501814}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{59ceb84f-55ff-48c0-80cc-df0068501814}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{59ceb84f-55ff-48c0-80cc-df0068501814}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{882d9f58-d338-4a83-bc3d-23f5b0a98fa9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{882d9f58-d338-4a83-bc3d-23f5b0a98fa9}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{882d9f58-d338-4a83-bc3d-23f5b0a98fa9}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{987a3601-c362-48e4-a856-e28f070efb07}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{987a3601-c362-48e4-a856-e28f070efb07}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{987a3601-c362-48e4-a856-e28f070efb07}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa205-c3ed-4acd-a911-6554d156b095}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa205-c3ed-4acd-a911-6554d156b095}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa205-c3ed-4acd-a911-6554d156b095}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa206-c3ed-4acd-a911-6554d156b095}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa206-c3ed-4acd-a911-6554d156b095}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa206-c3ed-4acd-a911-6554d156b095}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c0fe4189-5cfa-4659-9eba-10541cc395a0}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c0fe4189-5cfa-4659-9eba-10541cc395a0}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c0fe4189-5cfa-4659-9eba-10541cc395a0}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c5a19aba-349b-49cc-94c8-f36404082727}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c5a19aba-349b-49cc-94c8-f36404082727}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c5a19aba-349b-49cc-94c8-f36404082727}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3e785595-30c2-437d-96ed-677d14724610}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3e785595-30c2-437d-96ed-677d14724610}\{6ca1716d-53cd-468a-a1b3-59032c19c166}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3e785595-30c2-437d-96ed-677d14724610}\{6ca1716d-53cd-468a-a1b3-59032c19c166}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3e785595-30c2-437d-96ed-677d14724610}\{6ca1716d-53cd-468a-a1b3-59032c19c166}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{c3cf1c57-275d-4b71-a5a6-e4e90401b821}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{c3cf1c57-275d-4b71-a5a6-e4e90401b821}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{c3cf1c57-275d-4b71-a5a6-e4e90401b821}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{e363bd27-bfbd-4581-a142-ecc006a7b82b}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{e363bd27-bfbd-4581-a142-ecc006a7b82b}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{e363bd27-bfbd-4581-a142-ecc006a7b82b}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{f961fa1c-6b9b-4d16-b414-499ed1f6d6f2}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{f961fa1c-6b9b-4d16-b414-499ed1f6d6f2}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{f961fa1c-6b9b-4d16-b414-499ed1f6d6f2}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{420a6c98-914e-40fc-9a0f-80c7db801780}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{420a6c98-914e-40fc-9a0f-80c7db801780}\{a44a45c2-664d-476c-b68c-6b123eccc31f}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{420a6c98-914e-40fc-9a0f-80c7db801780}\{a44a45c2-664d-476c-b68c-6b123eccc31f}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{420a6c98-914e-40fc-9a0f-80c7db801780}\{a44a45c2-664d-476c-b68c-6b123eccc31f}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{d30c5234-f79d-44a9-9803-2f9d5feef791}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{d30c5234-f79d-44a9-9803-2f9d5feef791}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{d30c5234-f79d-44a9-9803-2f9d5feef791}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{e6e560b2-062f-41ca-89ab-f6987f2b7a25}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{e6e560b2-062f-41ca-89ab-f6987f2b7a25}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{e6e560b2-062f-41ca-89ab-f6987f2b7a25}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{f4681672-32dc-41db-8669-fdf490345ba5}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{f4681672-32dc-41db-8669-fdf490345ba5}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{f4681672-32dc-41db-8669-fdf490345ba5}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{d9ff82a4-a6a2-4fa5-899e-086ead3bab21}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{d9ff82a4-a6a2-4fa5-899e-086ead3bab21}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{d9ff82a4-a6a2-4fa5-899e-086ead3bab21}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{e0e99beb-f7d6-4402-ab36-e510d7048f22}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{e0e99beb-f7d6-4402-ab36-e510d7048f22}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{e0e99beb-f7d6-4402-ab36-e510d7048f22}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57ec1e30-406c-48ee-8e96-5da71298991f}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57ec1e30-406c-48ee-8e96-5da71298991f}\{6f1a94cb-68ed-4a84-9668-64e671e1ffef}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57ec1e30-406c-48ee-8e96-5da71298991f}\{6f1a94cb-68ed-4a84-9668-64e671e1ffef}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57ec1e30-406c-48ee-8e96-5da71298991f}\{6f1a94cb-68ed-4a84-9668-64e671e1ffef}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{227419d5-f6d8-4fb7-85d6-2cac1725e4a9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{227419d5-f6d8-4fb7-85d6-2cac1725e4a9}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{227419d5-f6d8-4fb7-85d6-2cac1725e4a9}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{978c167d-4764-4d9c-9824-14747351dc81}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{978c167d-4764-4d9c-9824-14747351dc81}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{978c167d-4764-4d9c-9824-14747351dc81}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{be2139c7-ab81-424d-b107-d87f7c9322ac}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{be2139c7-ab81-424d-b107-d87f7c9322ac}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{be2139c7-ab81-424d-b107-d87f7c9322ac}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f802502b-77b4-4713-81b3-3be05759da5d}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f802502b-77b4-4713-81b3-3be05759da5d}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f802502b-77b4-4713-81b3-3be05759da5d}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f9ed01f5-8f3e-4956-973f-9f05bc96f489}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f9ed01f5-8f3e-4956-973f-9f05bc96f489}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f9ed01f5-8f3e-4956-973f-9f05bc96f489}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5db760bc-64b2-4da7-b4ef-7dab105fbb8c}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5db760bc-64b2-4da7-b4ef-7dab105fbb8c}\{faa17411-9025-4b86-8b5e-ce2f32b06e13}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5db760bc-64b2-4da7-b4ef-7dab105fbb8c}\{faa17411-9025-4b86-8b5e-ce2f32b06e13}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5db760bc-64b2-4da7-b4ef-7dab105fbb8c}\{faa17411-9025-4b86-8b5e-ce2f32b06e13}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{ac5e8416-9f39-4166-951f-88ee9635b1d8}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{ac5e8416-9f39-4166-951f-88ee9635b1d8}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{ac5e8416-9f39-4166-951f-88ee9635b1d8}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{b790d108-d503-47ec-9d7b-b39737b39dba}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{b790d108-d503-47ec-9d7b-b39737b39dba}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{b790d108-d503-47ec-9d7b-b39737b39dba}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{e4a2b264-7187-41ca-aa73-7dc698d49ed1}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{e4a2b264-7187-41ca-aa73-7dc698d49ed1}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{e4a2b264-7187-41ca-aa73-7dc698d49ed1}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{08fb768b-1e55-4040-b153-e0ddbedd8042}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{08fb768b-1e55-4040-b153-e0ddbedd8042}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{08fb768b-1e55-4040-b153-e0ddbedd8042}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{21a64f86-6cbe-47e1-a497-261226ca12f7}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{21a64f86-6cbe-47e1-a497-261226ca12f7}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{21a64f86-6cbe-47e1-a497-261226ca12f7}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{60aa43c9-c1b7-41bf-9b4c-b7f6cc1d93b9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{60aa43c9-c1b7-41bf-9b4c-b7f6cc1d93b9}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{60aa43c9-c1b7-41bf-9b4c-b7f6cc1d93b9}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{65faa5f0-141d-4f38-acf0-c79bb0c7be2d}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{65faa5f0-141d-4f38-acf0-c79bb0c7be2d}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{65faa5f0-141d-4f38-acf0-c79bb0c7be2d}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{c0df9671-a0ea-4576-9f81-853127cf8d28}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{c0df9671-a0ea-4576-9f81-853127cf8d28}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{c0df9671-a0ea-4576-9f81-853127cf8d28}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{3c8cb362-147c-4105-b98b-11fd7e671dd7}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{3c8cb362-147c-4105-b98b-11fd7e671dd7}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{3c8cb362-147c-4105-b98b-11fd7e671dd7}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{7b08ee8b-88d7-4cad-a06f-70d1c4b65ee7}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{7b08ee8b-88d7-4cad-a06f-70d1c4b65ee7}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{7b08ee8b-88d7-4cad-a06f-70d1c4b65ee7}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{06ebf20d-17fb-4338-a08d-7a99f17ca678}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{06ebf20d-17fb-4338-a08d-7a99f17ca678}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{06ebf20d-17fb-4338-a08d-7a99f17ca678}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{ad8644c4-ae02-4b22-990d-52b491f91c26}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{ad8644c4-ae02-4b22-990d-52b491f91c26}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{ad8644c4-ae02-4b22-990d-52b491f91c26}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{16dcff2c-91a3-4e6a-8135-0a9e6681c1b5}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{16dcff2c-91a3-4e6a-8135-0a9e6681c1b5}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{16dcff2c-91a3-4e6a-8135-0a9e6681c1b5}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{8ebb0470-da6d-485b-8441-8e06b049157a}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{8ebb0470-da6d-485b-8441-8e06b049157a}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{8ebb0470-da6d-485b-8441-8e06b049157a}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{e829b6db-21ab-453b-83c9-d980ec708edd}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{e829b6db-21ab-453b-83c9-d980ec708edd}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{e829b6db-21ab-453b-83c9-d980ec708edd}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{898a4828-e6e6-4ddd-abb2-5751e3949aa4}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{898a4828-e6e6-4ddd-abb2-5751e3949aa4}\{115b92b4-7191-491a-a9b5-93c8e9fb641b}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{898a4828-e6e6-4ddd-abb2-5751e3949aa4}\{115b92b4-7191-491a-a9b5-93c8e9fb641b}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{898a4828-e6e6-4ddd-abb2-5751e3949aa4}\{115b92b4-7191-491a-a9b5-93c8e9fb641b}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{2b048375-f829-4b1d-b117-681e9ead1d50}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{2b048375-f829-4b1d-b117-681e9ead1d50}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{2b048375-f829-4b1d-b117-681e9ead1d50}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{c71cfb00-0ecc-43a3-bf5a-a90ca7718033}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{c71cfb00-0ecc-43a3-bf5a-a90ca7718033}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{c71cfb00-0ecc-43a3-bf5a-a90ca7718033}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a18453e4-433b-4d33-ac66-2551e3bba9be}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a18453e4-433b-4d33-ac66-2551e3bba9be}\{66f19dff-a4dd-4802-8fbb-29e6a54af9da}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a18453e4-433b-4d33-ac66-2551e3bba9be}\{66f19dff-a4dd-4802-8fbb-29e6a54af9da}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a18453e4-433b-4d33-ac66-2551e3bba9be}\{66f19dff-a4dd-4802-8fbb-29e6a54af9da}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{042478fc-1449-4b04-a0d8-ba5660ab739a}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{042478fc-1449-4b04-a0d8-ba5660ab739a}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{042478fc-1449-4b04-a0d8-ba5660ab739a}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3ab34489-ec07-4d11-a4bb-677b87cd58d9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3ab34489-ec07-4d11-a4bb-677b87cd58d9}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3ab34489-ec07-4d11-a4bb-677b87cd58d9}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3f0903d7-5b0b-493e-abf2-a36fd7ce2601}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3f0903d7-5b0b-493e-abf2-a36fd7ce2601}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3f0903d7-5b0b-493e-abf2-a36fd7ce2601}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{6800b902-8b06-11df-9561-f043dfd72085}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{6800b902-8b06-11df-9561-f043dfd72085}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{6800b902-8b06-11df-9561-f043dfd72085}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{7495d5d9-ea6a-444d-afab-e3cae27c047b}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{7495d5d9-ea6a-444d-afab-e3cae27c047b}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{7495d5d9-ea6a-444d-afab-e3cae27c047b}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{cd376bd3-9f6b-48c0-840e-1816b7a50fdc}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{cd376bd3-9f6b-48c0-840e-1816b7a50fdc}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{cd376bd3-9f6b-48c0-840e-1816b7a50fdc}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{1045bf74-023b-445a-9e2b-2038ff4789a6}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{1045bf74-023b-445a-9e2b-2038ff4789a6}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{1045bf74-023b-445a-9e2b-2038ff4789a6}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{86b34670-d4bb-40c9-8301-33fb16675d61}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{86b34670-d4bb-40c9-8301-33fb16675d61}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{86b34670-d4bb-40c9-8301-33fb16675d61}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b9fcf33d-ba8f-4654-a5f2-bf58a5866ca8}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b9fcf33d-ba8f-4654-a5f2-bf58a5866ca8}\{bd4b1f37-d1f0-4fc5-996d-d4a21290f212}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b9fcf33d-ba8f-4654-a5f2-bf58a5866ca8}\{bd4b1f37-d1f0-4fc5-996d-d4a21290f212}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b9fcf33d-ba8f-4654-a5f2-bf58a5866ca8}\{bd4b1f37-d1f0-4fc5-996d-d4a21290f212}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ba888490-8281-4ac7-b0de-8cc46b314d43}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ba888490-8281-4ac7-b0de-8cc46b314d43}\{06f6022a-82f9-48a5-bc16-074c1bed416c}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ba888490-8281-4ac7-b0de-8cc46b314d43}\{06f6022a-82f9-48a5-bc16-074c1bed416c}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ba888490-8281-4ac7-b0de-8cc46b314d43}\{06f6022a-82f9-48a5-bc16-074c1bed416c}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb44ecb6-d88a-4b33-a39c-d6a9c03142a9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb44ecb6-d88a-4b33-a39c-d6a9c03142a9}\{4e590c2e-2ad3-4138-8f61-4b08771dbbc8}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb44ecb6-d88a-4b33-a39c-d6a9c03142a9}\{4e590c2e-2ad3-4138-8f61-4b08771dbbc8}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb44ecb6-d88a-4b33-a39c-d6a9c03142a9}\{4e590c2e-2ad3-4138-8f61-4b08771dbbc8}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7308}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7308}\{19b5bae2-18c5-4ab8-99de-255f0e96760a}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7308}\{19b5bae2-18c5-4ab8-99de-255f0e96760a}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7308}\{19b5bae2-18c5-4ab8-99de-255f0e96760a}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{135f3513-bc27-4360-b281-0a36caceb1f2}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{135f3513-bc27-4360-b281-0a36caceb1f2}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{135f3513-bc27-4360-b281-0a36caceb1f2}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{19b5bae2-18c5-4ab8-99de-255f0e9676a0}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{19b5bae2-18c5-4ab8-99de-255f0e9676a0}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{19b5bae2-18c5-4ab8-99de-255f0e9676a0}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{8bc1703a-939f-4ee1-8785-b0fc5837feb2}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{8bc1703a-939f-4ee1-8785-b0fc5837feb2}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{8bc1703a-939f-4ee1-8785-b0fc5837feb2}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{cc16fe4c-d638-492e-a924-519185396ebf}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{cc16fe4c-d638-492e-a924-519185396ebf}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{cc16fe4c-d638-492e-a924-519185396ebf}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc549940-0edf-41b1-8298-74c2627b6af9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc549940-0edf-41b1-8298-74c2627b6af9}\{35a002b8-38a7-41eb-bedd-6610bb93f046}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc549940-0edf-41b1-8298-74c2627b6af9}\{35a002b8-38a7-41eb-bedd-6610bb93f046}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc549940-0edf-41b1-8298-74c2627b6af9}\{35a002b8-38a7-41eb-bedd-6610bb93f046}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc629d13-f318-4c40-b1ed-d70bce524515}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc629d13-f318-4c40-b1ed-d70bce524515}\{22ca1519-4394-4a5f-be88-84a5c853a4aa}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc629d13-f318-4c40-b1ed-d70bce524515}\{22ca1519-4394-4a5f-be88-84a5c853a4aa}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc629d13-f318-4c40-b1ed-d70bce524515}\{22ca1519-4394-4a5f-be88-84a5c853a4aa}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{db314ee3-3157-4e56-8fd9-2184874d195d}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{db314ee3-3157-4e56-8fd9-2184874d195d}\{fb01b3ef-bb4a-4c48-9ab8-dc1871675e6d}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{db314ee3-3157-4e56-8fd9-2184874d195d}\{fb01b3ef-bb4a-4c48-9ab8-dc1871675e6d}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{db314ee3-3157-4e56-8fd9-2184874d195d}\{fb01b3ef-bb4a-4c48-9ab8-dc1871675e6d}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ddf417dc-4cc3-4529-9ffc-1d04eb678da3}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ddf417dc-4cc3-4529-9ffc-1d04eb678da3}\{d53266b4-c9f5-4808-8a0f-d17bbf493416}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ddf417dc-4cc3-4529-9ffc-1d04eb678da3}\{d53266b4-c9f5-4808-8a0f-d17bbf493416}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ddf417dc-4cc3-4529-9ffc-1d04eb678da3}\{d53266b4-c9f5-4808-8a0f-d17bbf493416}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{e08d5971-88fb-4799-b066-6978845f73c1}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{e08d5971-88fb-4799-b066-6978845f73c1}\{b851890b-3e61-427a-ab94-461e088d4827}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{e08d5971-88fb-4799-b066-6978845f73c1}\{b851890b-3e61-427a-ab94-461e088d4827}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{e08d5971-88fb-4799-b066-6978845f73c1}\{b851890b-3e61-427a-ab94-461e088d4827}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{11ace151-4bac-44b0-8a82-0a859a5355d9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{11ace151-4bac-44b0-8a82-0a859a5355d9}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{11ace151-4bac-44b0-8a82-0a859a5355d9}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{1cc9da8b-58a5-4c92-9a4e-f05f2a2ae7a3}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{1cc9da8b-58a5-4c92-9a4e-f05f2a2ae7a3}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{1cc9da8b-58a5-4c92-9a4e-f05f2a2ae7a3}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{28d00a68-8309-4a3e-bf1d-0ebd27c75787}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{28d00a68-8309-4a3e-bf1d-0ebd27c75787}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{28d00a68-8309-4a3e-bf1d-0ebd27c75787}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40990512-fb18-4bbd-95e2-f72e8cdae178}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40990512-fb18-4bbd-95e2-f72e8cdae178}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40990512-fb18-4bbd-95e2-f72e8cdae178}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40e6824e-1b9b-4329-9a6e-e94c8fb03a3f}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40e6824e-1b9b-4329-9a6e-e94c8fb03a3f}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40e6824e-1b9b-4329-9a6e-e94c8fb03a3f}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{58276884-7f29-450d-bcfa-5be4b7266334}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{58276884-7f29-450d-bcfa-5be4b7266334}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{58276884-7f29-450d-bcfa-5be4b7266334}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{63c158d0-2a4c-4509-8d27-29e935b69e5f}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{63c158d0-2a4c-4509-8d27-29e935b69e5f}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{63c158d0-2a4c-4509-8d27-29e935b69e5f}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{6b81611f-8998-47c2-9550-f7dc0324e620}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{6b81611f-8998-47c2-9550-f7dc0324e620}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{6b81611f-8998-47c2-9550-f7dc0324e620}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{7a030929-9547-485c-ba6c-3e891612c2ce}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{7a030929-9547-485c-ba6c-3e891612c2ce}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{7a030929-9547-485c-ba6c-3e891612c2ce}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{83a3746d-a9ec-47c0-830f-6dd440b07666}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{83a3746d-a9ec-47c0-830f-6dd440b07666}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{83a3746d-a9ec-47c0-830f-6dd440b07666}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{9815b8f4-d337-4eb4-a468-fc9a83bcce65}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{9815b8f4-d337-4eb4-a468-fc9a83bcce65}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{9815b8f4-d337-4eb4-a468-fc9a83bcce65}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{a30f983f-321a-48b0-85c3-cab02781dd02}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{a30f983f-321a-48b0-85c3-cab02781dd02}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{a30f983f-321a-48b0-85c3-cab02781dd02}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{aaca5b25-a859-438d-93b6-924f63a2cb3c}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{aaca5b25-a859-438d-93b6-924f63a2cb3c}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{aaca5b25-a859-438d-93b6-924f63a2cb3c}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{e6e73867-856a-4574-a0ba-01c066d376f5}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{e6e73867-856a-4574-a0ba-01c066d376f5}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{e6e73867-856a-4574-a0ba-01c066d376f5}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{51bda498-67cb-479f-b898-57d2d73788f0}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{51bda498-67cb-479f-b898-57d2d73788f0}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{51bda498-67cb-479f-b898-57d2d73788f0}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{811bbce5-7327-4ad9-ab62-a8b955f61eef}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{811bbce5-7327-4ad9-ab62-a8b955f61eef}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{811bbce5-7327-4ad9-ab62-a8b955f61eef}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{9ff69334-839c-41fe-96e0-c5189ac431f2}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{9ff69334-839c-41fe-96e0-c5189ac431f2}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{9ff69334-839c-41fe-96e0-c5189ac431f2}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{a8180dab-81d0-4e05-b76b-eb4c5fb37357}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{a8180dab-81d0-4e05-b76b-eb4c5fb37357}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{a8180dab-81d0-4e05-b76b-eb4c5fb37357}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{c0c9c676-ac38-40d4-a23c-69f05d12a306}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{c0c9c676-ac38-40d4-a23c-69f05d12a306}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{c0c9c676-ac38-40d4-a23c-69f05d12a306}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{d7e69761-f919-4bfa-bbb6-bece1050a2ce}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{d7e69761-f919-4bfa-bbb6-bece1050a2ce}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{d7e69761-f919-4bfa-bbb6-bece1050a2ce}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3b975e7-e068-4f66-81ef-b23e0a0e64c9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3b975e7-e068-4f66-81ef-b23e0a0e64c9}\{fc9e399c-c70a-4458-8430-ca249c371eb3}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3b975e7-e068-4f66-81ef-b23e0a0e64c9}\{fc9e399c-c70a-4458-8430-ca249c371eb3}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3b975e7-e068-4f66-81ef-b23e0a0e64c9}\{fc9e399c-c70a-4458-8430-ca249c371eb3}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}\{1f7207c2-0b8c-48de-9dcd-64ff98cc24e1}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}\{1f7207c2-0b8c-48de-9dcd-64ff98cc24e1}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}\{1f7207c2-0b8c-48de-9dcd-64ff98cc24e1}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{7d937e49-cfd5-438f-af4f-b3047d90a5c3}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{7d937e49-cfd5-438f-af4f-b3047d90a5c3}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{7d937e49-cfd5-438f-af4f-b3047d90a5c3}\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{f3e82f6e-9df4-425d-a5d5-3a9832005b16}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{f3e82f6e-9df4-425d-a5d5-3a9832005b16}\First Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{f3e82f6e-9df4-425d-a5d5-3a9832005b16}\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Object List

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Library Validation Code

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\PerfIniFile

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Base Index

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\1394ohci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\3ware\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AcpiDev\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acpiex\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acpipagr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AcpiPmi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acpitime\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Acx01000\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ADOVMPPackage\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ADP80XX\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\adsi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\afunix\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ahcache\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AJRouter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ALG\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amdgpio2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amdi2c\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdK8\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdPPM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amdsata\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amdsbs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amdxata\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppID\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppIDSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Appinfo\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\applockerfltr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppMgmt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppReadiness\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppVClient\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppvStrm\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppvVemgr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppvVfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppXSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\arcsas\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AssignedAccessManagerSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AsyncMac\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\atapi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AudioEndpointBuilder\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Audiosrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\autotimesvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AxInstSV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\b06bdrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bam\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BasicDisplay\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BasicRender\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BattC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BcastDVRUserService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BcastDVRUserService_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bcmfn2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BDESVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Beep\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BFE\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bindflt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BluetoothUserService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BluetoothUserService_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bowser\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BrokerInfrastructure\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BTAGService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BthA2dp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BthAvctpSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BthEnum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BthHFEnum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BthLEEnum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BthMini\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BTHMODEM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BTHPORT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bthserv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BTHUSB\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bttflt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\buttonconverter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CAD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\camsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CaptureService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CaptureService_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cbdhsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cbdhsvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cdfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CDPSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CDPUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CDPUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cdrom\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CertPropSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cht4iscsi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cht4vbd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CimFS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\circlass\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CldFlt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CLFS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ClipSVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\clr_optimization_v4.0.30319_32\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\clr_optimization_v4.0.30319_64\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CmBatt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CNG\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cnghwassist\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CompositeBus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\COMSysApp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\condrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ConsentUxUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ConsentUxUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CoreMessagingRegistrar\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CoreUI\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CredentialEnrollmentManagerUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CredentialEnrollmentManagerUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\crypt32\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CryptSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CSC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CscService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dam\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DCLocator\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DcomLaunch\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\defragsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DeviceAssociationBrokerSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DeviceAssociationBrokerSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DeviceAssociationService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DeviceInstall\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DevicePickerUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DevicePickerUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DevicesFlowUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DevicesFlowUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DevQueryBroker\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dfsc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\diagnosticshub.standardcollector.service\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\diagsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DiagTrack\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DialogBlockingService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\disk\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DispBrokerDesktopSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DisplayEnhancementService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DmEnrollmentSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dmvsc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dmwappushservice\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dnscache\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DoSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dot3svc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DPS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\drmkaud\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DsmSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DsSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DusmSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DXGKrnl\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\e1i65x64\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eaphost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ebdrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\edgeupdate\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\edgeupdatem\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EFS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EhStorClass\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EhStorTcgDrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\embeddedmode\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EntAppSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ErrDev\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventSystem\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\exfat\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fastfat\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fax\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fdc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fdPHost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FDResPub\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fhsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FileCrypt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FileInfo\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Filetrace\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\flpydisk\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FltMgr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FontCache\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FrameServer\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FsDepends\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fs_Rec\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fvevol\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gencounter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\genericusbfn\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\GPIOClx0101\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gpsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\GpuEnergyDrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\GraphicsPerfSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HdAudAddService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HDAudBus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidBatt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidBth\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hidi2c\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hidinterrupt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidIr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hidserv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hidspi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidUsb\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HomeGroupListener\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HomeGroupProvider\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HpSAMD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HTTP\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hvcrash\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HvHost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hvservice\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HwNClx0101\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hwpolicy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hyperkbd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HyperVideo\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\i8042prt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iagpio\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iai2c\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_GPIO2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_GPIO2_BXT_P\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_GPIO2_CNL\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_GPIO2_GLK\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_I2C\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_I2C_BXT_P\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_I2C_CNL\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSS2i_I2C_GLK\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSSi_GPIO\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaLPSSi_I2C\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaStorAV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaStorAVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaStorV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ibbus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\icssvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IKEEXT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IndirectKmd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\inetaccs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\InstallService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\intelide\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\intelpep\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\intelpmax\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\intelppm\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iorate\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IpFilterDriver\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iphlpsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IPMIDRV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IPNAT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IPT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IpxlatCfgSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\isapnp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iScsiPrt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ItSas35i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kbdclass\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kbdhid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kbldfltr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kdnic\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KeyIso\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KSecDD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KSecPkg\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ksthunk\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KtmRm\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LanmanWorkstation\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lfsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LicenseManager\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lltdio\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lltdsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lmhosts\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Lsa\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Lsa\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_SAS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_SAS2i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_SAS3i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_SSS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\luafv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LxpSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MapsBroker\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mausbhost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mausbip\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MbbCx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\megasas\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\megasas2i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\megasas35i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\megasr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MessagingService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MessagingService_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MicrosoftEdgeElevationService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Microsoft_Bluetooth_AvrcpTransport\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MixedRealityOpenXRSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mlx4_bus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MMCSS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Modem\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\monitor\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mouclass\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mouhid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mountmgr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mpsdrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mpssvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MRxDAV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mrxsmb\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mrxsmb20\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsBridge\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Msfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msgpiowin32\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mshidkmdf\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mshidumdf\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msisadrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSiSCSI\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msiserver\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsKeyboardFilter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSKSSRV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsLldp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSPCLOCK\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSPQM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsQuic\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsRPC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSSCNTRS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSSCNTRS\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsSecFlt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mssmbios\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSTEE\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MTConfig\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Mup\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mvumis\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\napagent\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NativeWifiP\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NaturalAuthentication\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NcaSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NcbService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NcdAutoSetup\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ndfltr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisCap\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisImPlatform\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisTapi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndisuio\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisVirtualBus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisWan\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ndiswanlegacy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDKPing\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ndproxy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndu\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetAdapterCx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetBIOS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetbiosSmb\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetBT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netman\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netprofm\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetSetupSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetTcpPortSharing\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netvsc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netvscvfpp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NgcCtnrSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NgcSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NlaSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Npfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\npsvctrig\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nsi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nsiproxy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NTDS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ntfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Null\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvdimm\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvraid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvstor\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\OneSyncSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\OneSyncSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\p2pimsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\p2psvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Parport\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\partmgr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PcaSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pciide\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pcmcia\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pcw\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pdc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PEAUTH\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PeerDistSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\perceptionsimulation\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\percsas2i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\percsas3i\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfDisk\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfDisk\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfHost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfNet\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfNet\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfOS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfOS\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfProc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfProc\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PhoneSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PimIndexMaintenanceSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PimIndexMaintenanceSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PktMon\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pla\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PlugPlay\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pmem\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PNPMEM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PNRPAutoReg\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PNRPsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PolicyAgent\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\portcfg\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PortProxy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Power\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PptpMiniport\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PrintNotify\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PrintWorkflowUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PrintWorkflowUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Processor\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ProfSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Psched\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PushToInstall\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QWAVE\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QWAVEdrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ramdisk\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasAcd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasAgileVpn\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasAuto\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Rasl2tp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasMan\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasPppoe\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasSstp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdbss\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RDMANDK\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdpbus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RDPDR\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RDPNP\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RDPUDD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RdpVideoMiniport\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ReFS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ReFSv1\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteRegistry\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RetailDemo\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RFCOMM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rhproxy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RmSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RpcEptMapper\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RpcLocator\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RpcSs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rspndr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RTL8023x64\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\s3cap\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SamSs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sbp2port\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SCardSvr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ScDeviceEnum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\scfilter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Schedule\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\scmbus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SCPolicySvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sdbus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SDFRd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SDRSVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sdstor\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\seclogon\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SecurityHealthService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SEMgrSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SENS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Sense\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SensorDataService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SensorService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SensrSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SerCx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SerCx2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Serenum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Serial\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sermouse\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SessionEnv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sfloppy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SgrmAgent\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SgrmBroker\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedRealitySvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ShellHWDetection\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\shpamsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SiSRaid2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SiSRaid4\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SmartSAMD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\smbdirect\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\smphost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SmsRouter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SNMPTRAP\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\spaceparser\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\spaceport\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SpatialGraphFilter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SpbCx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\spectrum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Spooler\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Spooler\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sppsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srv2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srvnet\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSDPSRV\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ssh-agent\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SstpSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\StateRepository\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\stexstor\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\stisvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\storahci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\storflt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\stornvme\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\storqosflt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\StorSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\storufs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\storvsc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\svsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\swenum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\swprv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Synth3dVsc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SysMain\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SystemEventsBroker\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TabletInputService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip6\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TCPIP6TUNNEL\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tcpipreg\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TCPIPTUNNEL\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tdx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Telemetry\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\terminpt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Themes\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TieringEngineService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TimeBrokerSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TokenBroker\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TPM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TrkWks\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TroubleshootingSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TrustedInstaller\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TSDDD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TsUsbFlt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TsUsbGD\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tsusbhub\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tunnel\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\tzautoupdate\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UASPStor\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UcmCx0101\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UcmTcpciCx0101\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UcmUcsiAcpiClient\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UcmUcsiCx0101\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ucx01000\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UdeCx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\udfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UdkUserSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UdkUserSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UEFI\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UevAgentDriver\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UevAgentService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ufx01000\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UfxChipidea\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ufxsynopsys\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\umbus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UmPass\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UmRdpService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UnistoreSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UnistoreSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\upnphost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UrsChipidea\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UrsCx01000\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UrsSynopsys\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbaudio\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbaudio2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbccgp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbcir\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbehci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\USBHUB3\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbohci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbprint\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbser\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\USBSTOR\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbuhci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\USBXHCI\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UserDataSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UserDataSvc_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UserManager\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UsoSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VacSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VaultSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vdrvroot\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vds\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VerifierExt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vhdmp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vhf\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VirtualRender\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmbus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VMBusHID\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmgid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmicguestinterface\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmicheartbeat\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmickvpexchange\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmicrdv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmicshutdown\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmictimesync\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmicvmsession\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmicvss\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\volmgr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\volmgrx\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\volsnap\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\volume\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vpci\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vsmraid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSTXRAID\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vwifibus\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vwififlt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WaaSMedicSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WacomPen\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WalletService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wanarp\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wanarpv6\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WarpJITSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wbengine\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WbioSrvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wcifs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Wcmsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wcncsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wcnfs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdBoot\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Wdf01000\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdFilter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdiServiceHost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdiSystemHost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wdiwifi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdmCompanionFilter\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdNisDrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdNisSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WebClient\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Wecsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WEPHOSTSVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wercplsupport\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WerSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WFDSConMgrSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WFPLWFS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WiaRpc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WIMMount\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinDefend\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WindowsTrustedRT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WindowsTrustedRTProxy\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinHttpAutoProxySvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinMad\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Winmgmt\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinNat\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinRM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Winsock\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WINUSB\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinVerbs\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wisvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WlanSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wlidsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wlpasvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WManSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiAcpi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wmiApSrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WMPNetworkSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Wof\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\workerdd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\workfolderssvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WpcMonSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WPDBusEnum\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WpdUpFltr\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WpnService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WpnUserService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WpnUserService_1d7e26\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ws2ifsl\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wscsvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearch\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wuauserv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WudfPf\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WUDFRd\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WwanSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XblAuthManager\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XblGameSave\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\xboxgip\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XboxGipSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XboxNetApiSvc\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\xinputhid\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\xmlprov\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{0825E3C8-F6B1-44C5-9707-BE5A20D7A8F5}\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{0B3CC30E-0931-43E7-8F7B-5BE2FCC6F17F}\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{B6767322-347B-409E-8D77-0268B7AAA738}\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{CC6EEB36-5AE2-46BE-81A9-5F0B62ECF81F}\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Data\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET Data Provider for Oracle\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET Data Provider for SqlServer\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET Memory Cache 4.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NETFramework\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ESENT\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LSM\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC Bridge 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rdyboost\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMSvcHost 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGatherer\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGTHRSVC\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbhub\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Workflow Foundation 4.0.0.0\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearchIdxPi\Performance

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\PROVIDERS\Performance

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance Data

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\WDM

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\WDM\DREDGE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\system32\kernelbase.dll[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\system32\en-US\kernelbase.dll.mui[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\ACPI.sys[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\mssmbios.sys[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\en-US\mssmbios.sys.mui[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\HDAudBus.sys[HDAudioMofName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\processr.sys[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance Refresh

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance Refreshed

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Sink Transmit Buffer Size

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\DefaultRpcStackSize

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\ActivateOnHostFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)

                
                HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11d0-99E0-00C04FC2F8EC}\InProcServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\(Default)

                
                HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11d0-99E0-00C04FC2F8EC}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\ThreadingModel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\Synchronization

                
                HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11d0-99E0-00C04FC2F8EC}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\AppId

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Logging

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Log File Max Size

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ACPI

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\MofImagePath

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\ImagePath

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NDIS

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\MofImagePath

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\ImagePath

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mssmbios

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mssmbios\MofImagePath

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mssmbios\ImagePath

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HDAudBus

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HDAudBus\MofImagePath

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HDAudBus\ImagePath

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AmdPPM

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdPPM\MofImagePath

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\portcls

                
                HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\monitor

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\monitor\MofImagePath

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\monitor\ImagePath

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=1109958850,Name="C:\Windows\system32\kernelbase.dll[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\kernelbase.dll[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=1871506606,Name="C:\Windows\system32\en-US\kernelbase.dll.mui[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\en-US\kernelbase.dll.mui[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=558520124,Name="C:\Windows\System32\drivers\ACPI.sys[ACPIMOFResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\ACPI.sys[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2622663310,Name="C:\Windows\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=1107771162,Name="C:\Windows\system32\drivers\ndis.sys[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\drivers\ndis.sys[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2647819754,Name="C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780570,LowDateTime=3245592320,Name="C:\Windows\System32\drivers\mssmbios.sys[MofResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\mssmbios.sys[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2629702478,Name="C:\Windows\System32\drivers\en-US\mssmbios.sys.mui[MofResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\en-US\mssmbios.sys.mui[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=551801554,Name="C:\Windows\System32\drivers\HDAudBus.sys[HDAudioMofName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\HDAudBus.sys[HDAudioMofName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=558676975,Name="C:\Windows\System32\drivers\processr.sys[PROCESSORWMI]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\processr.sys[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2622663310,Name="C:\Windows\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=552738554,Name="C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\monitor.sys[MonitorWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{49353C93-516B-11D1-AEA6-00C04FB68820}

                
                HKEY_LOCAL_MACHINE\Software\Classes\PackagedCom

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\FileCoAuthTelemetryRampStatus

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\FirstEntry

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\LastEntry

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\2025

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\2007

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\2024

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemInformation

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\COM3

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\AppID\FileCoAuth.exe

                
                HKEY_LOCAL_MACHINE\Software\Classes\AppID\FileCoAuth.exe

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\DefaultAccessPermission

                
                HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}

                
                HKEY_LOCAL_MACHINE\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\OLE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\MaxSxSHashCount

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{389510B7-9E58-40D7-98BF-60B911CB0EA9}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}\ProxyStubClsid32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}\ProxyStubClsid32\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\TreatAs

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\InprocServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\ThreadingModel

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocHandler

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocHandler

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\LocalServer32

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\LocalServer32

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\AppID

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\LocalServer

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\LocalServer

                
                HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\Elevation

                
                HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\Elevation

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\MainAccount

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserFolder

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\cid

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\DisplayName

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserEmail

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\Business

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\SharePointOnPrem

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\FirstRun

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EdpManaged

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\RootAddedToFavorites

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\TenantAddedToFavorites

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\HasMadeFirstUpload

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\IsUpgradeAvailable

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\CrashDetectionKey

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EnableADALForSilentBusinessConfig

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastKnownCloudFilesEnabled

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\WamWebAccountId

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal\AuthenticationURLs

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal\Tenants

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal\ScopeIdToMountPointPathCache

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Personal

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastMigrationScanResult

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\PreSignInRampOverrides

                
                HKEY_CURRENT_USER\Software\Microsoft\OneDrive\PreSignInSettingsOverrides

                
                HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SQMClient\MSFTInternal

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SQMClient\IsTest

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905E63B6-C1BF-494E-B29C-65B732D3D21A}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Category

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Name

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\ParentFolder

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Description

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\RelativePath

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\ParsingName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\InfoTip

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\LocalizedName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Icon

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Security

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\StreamResource

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\StreamResourceType

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\LocalRedirectOnly

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Roamable

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PreCreate

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Stream

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PublishExpandedPath

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\DefinitionFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Attributes

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\FolderTypeID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\InitFolderHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PropertyBag

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Category

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Name

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\ParentFolder

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Description

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\RelativePath

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\ParsingName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\InfoTip

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\LocalizedName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Icon

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Security

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\StreamResource

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\StreamResourceType

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\LocalRedirectOnly

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Roamable

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PreCreate

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Stream

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PublishExpandedPath

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\DefinitionFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Attributes

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\FolderTypeID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\InitFolderHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PropertyBag

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\UpdateRingPostAuthConditions

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\Office\ClickToRun\Configuration

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability\EnablePreviewBuilds

                
                HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\OneDrive

                
                HKEY_CURRENT_USER\Software\Policies\Microsoft\OneDrive

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableEnterpriseUpdate

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableOrgInternalUpdate

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableTeamTier_Internal

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableFasterRingUpdate

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\MachineId

                
                HKEY_CLASSES_ROOT\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InProcServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32\(Default)

                
                HKEY_CLASSES_ROOT\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32\ThreadingModel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32\Synchronization

                
                HKEY_CLASSES_ROOT\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\AppId

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E245105B-B06E-11D0-AD61-00C04FD8FDFF}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E245105B-B06E-11D0-AD61-00C04FD8FDFF}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E245105B-B06E-11D0-AD61-00C04FD8FDFF}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD450835-CF1B-4C87-9FD2-5E0D42FDE081}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD450835-CF1B-4C87-9FD2-5E0D42FDE081}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD450835-CF1B-4C87-9FD2-5E0D42FDE081}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\ActivateOnHostFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\AppID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\LocalServer

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Elevation

                
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-15

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-14

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-13

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-12

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-11

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-10

                
                HKEY_CURRENT_USER\Software\Classes\AppID\{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AuthenticationLevel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AccessPermission

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\TreatAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ActivateOnHostFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32\InprocServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32\ThreadingModel

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InprocHandler32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InprocHandler32

                
                HKEY_CURRENT_USER\Software\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InprocHandler

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\Interface\{29A3AB33-0FD7-44F5-9BFF-C0B6C081FBFB}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{29A3AB33-0FD7-44F5-9BFF-C0B6C081FBFB}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{29A3AB33-0FD7-44F5-9BFF-C0B6C081FBFB}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32\LocalServer32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32\ServerExecutable

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AppID

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\(Default)

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalService

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\DllSurrogate

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\RunAs

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ActivateAtStorage

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ROTFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AppIDFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\MGOTFlags

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ProcessMitigationPolicy

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LaunchPermission

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\RemoteServerName

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\SRPTrustLevel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\PreferredServerBitness

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LoadUserSettings

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ProtectionLevel

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\Elevation

                
                HKEY_CURRENT_USER\Software\Classes\Interface\{AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\Interface\{00000035-0000-0000-C000-000000000046}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000035-0000-0000-C000-000000000046}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000035-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)

                
                HKEY_CURRENT_USER\Software\Classes\Interface\{3474D734-3408-4471-A344-A3439343634A}

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3474d734-3408-4471-a344-a3439343634a}\ProxyStubClsid32

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3474d734-3408-4471-a344-a3439343634a}\ProxyStubClsid32\(Default)

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\Browser\AllowSmartScreen

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Browser\AllowSmartScreen\Behavior

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\current\Device\Browser

                
                HKEY_LOCAL_MACHINE\

                
                HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter

                
                HKEY_CURRENT_USER\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter

                
                HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter

                
                HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AppHost

                
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost\EnableWebContentEvaluation

                
                
            

        

        

            

                
                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\ResourcePolicies

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16

                    
                        HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-US

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\OOBE\LaunchUserOOBE

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\CTF\EnableAnchorContext

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows\IsVailContainer

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\ResyncResetTime

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\MaxResyncAttempts

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C08956A0-1CD3-11D1-B1C5-00805FC1270E}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C08956A1-1CD3-11D1-B1C5-00805FC1270E}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\ActivateOnHostFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\AppID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\Installer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\AllowDevelopmentWithoutDevLicense

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseActivationAuthenticationLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\ProcessID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9F6C78EF-FCE5-42FA-ABEA-3E7DF91921DC}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\ActivateOnHostFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\AppID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-0000-0000-0000-000000000000}\InProcServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AMSI\FeatureBits

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\EnableObjectValidation

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\ActivateOnHostFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\AppID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Working Directory

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\ThrottleDrege

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\DisplayName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Last Help

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{16fa106f-26c3-42a5-982b-400779ea8970}\{a4b0515f-2c2f-4fc4-87f5-b3a3a8747225}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{16fa106f-26c3-42a5-982b-400779ea8970}\{a4b0515f-2c2f-4fc4-87f5-b3a3a8747225}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{1ffc4a37-aabd-49e0-8b3d-fce8b099febb}\{d049a97f-9f42-4c11-ad73-5d8c68b30258}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{1ffc4a37-aabd-49e0-8b3d-fce8b099febb}\{d049a97f-9f42-4c11-ad73-5d8c68b30258}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{20fe1a3a-af21-413c-8a7b-b7fbf6c9a059}\{8a922684-7993-4b38-9929-b7366f01ec4a}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{20fe1a3a-af21-413c-8a7b-b7fbf6c9a059}\{8a922684-7993-4b38-9929-b7366f01ec4a}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2538387c-08b7-44b8-86d3-47f59cf6d056}\{2538387c-08b7-44b8-86d3-47f59cf6d057}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2538387c-08b7-44b8-86d3-47f59cf6d056}\{2538387c-08b7-44b8-86d3-47f59cf6d057}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2a32a3f9-ee0c-40ff-8a75-e1e747d15b1f}\{d11168c5-9f29-43bc-9269-0548637a62b0}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2a32a3f9-ee0c-40ff-8a75-e1e747d15b1f}\{d11168c5-9f29-43bc-9269-0548637a62b0}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ccb0d8d-ea94-4235-986b-c97f61f63969}\{ef82017e-50e2-4ca2-b9ec-b9895ab70e08}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ccb0d8d-ea94-4235-986b-c97f61f63969}\{ef82017e-50e2-4ca2-b9ec-b9895ab70e08}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ea0b998-e7e8-41c6-8abc-093083ea21d7}\{687d8f80-ffea-4de5-a41f-3e1c83378839}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{2ea0b998-e7e8-41c6-8abc-093083ea21d7}\{687d8f80-ffea-4de5-a41f-3e1c83378839}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{31a5ebe2-c765-490a-937c-b0ab2787fe15}\{c73dfef0-11b8-4a3f-a1ad-0dcbbc5186ef}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{31a5ebe2-c765-490a-937c-b0ab2787fe15}\{c73dfef0-11b8-4a3f-a1ad-0dcbbc5186ef}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3817cb9c-49a8-436b-bc29-5518877d3c3a}\{82fa211f-e7f8-4ab5-a04c-cc523073b971}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3817cb9c-49a8-436b-bc29-5518877d3c3a}\{82fa211f-e7f8-4ab5-a04c-cc523073b971}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{2f66fd0a-9f6c-4d91-9f2f-2a1b5e41b7dc}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{2f66fd0a-9f6c-4d91-9f2f-2a1b5e41b7dc}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{370e979a-377a-4f30-b2c4-9a0fd072890b}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{370e979a-377a-4f30-b2c4-9a0fd072890b}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{42cd0051-9dd9-4fe2-8db9-d37885d2d749}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{42cd0051-9dd9-4fe2-8db9-d37885d2d749}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{52bc5412-dac2-449c-8bc2-96443888fe6b}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{52bc5412-dac2-449c-8bc2-96443888fe6b}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{b4fc721a-0378-476f-89ba-a5a79f810b36}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{b4fc721a-0378-476f-89ba-a5a79f810b36}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{ed83b00b-6afd-4063-9420-16fe0fa3b36f}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{ed83b00b-6afd-4063-9420-16fe0fa3b36f}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{f596750d-b109-4247-a62f-dea47a46e505}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{383487a6-3676-4870-a4e7-d45b30c35629}\{f596750d-b109-4247-a62f-dea47a46e505}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{2617bf8d-bedc-4231-b92b-1dd2d34ee225}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{2617bf8d-bedc-4231-b92b-1dd2d34ee225}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{4ad2297e-ee20-42b4-9cb7-13f6f1598dbd}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{4ad2297e-ee20-42b4-9cb7-13f6f1598dbd}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{59ceb84f-55ff-48c0-80cc-df0068501814}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{59ceb84f-55ff-48c0-80cc-df0068501814}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{882d9f58-d338-4a83-bc3d-23f5b0a98fa9}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{882d9f58-d338-4a83-bc3d-23f5b0a98fa9}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{987a3601-c362-48e4-a856-e28f070efb07}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{987a3601-c362-48e4-a856-e28f070efb07}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa205-c3ed-4acd-a911-6554d156b095}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa205-c3ed-4acd-a911-6554d156b095}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa206-c3ed-4acd-a911-6554d156b095}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{9acaa206-c3ed-4acd-a911-6554d156b095}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c0fe4189-5cfa-4659-9eba-10541cc395a0}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c0fe4189-5cfa-4659-9eba-10541cc395a0}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c5a19aba-349b-49cc-94c8-f36404082727}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3def464b-f31b-4117-8fb7-bb829a0e1a15}\{c5a19aba-349b-49cc-94c8-f36404082727}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3e785595-30c2-437d-96ed-677d14724610}\{6ca1716d-53cd-468a-a1b3-59032c19c166}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{3e785595-30c2-437d-96ed-677d14724610}\{6ca1716d-53cd-468a-a1b3-59032c19c166}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{c3cf1c57-275d-4b71-a5a6-e4e90401b821}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{c3cf1c57-275d-4b71-a5a6-e4e90401b821}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{e363bd27-bfbd-4581-a142-ecc006a7b82b}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{e363bd27-bfbd-4581-a142-ecc006a7b82b}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{f961fa1c-6b9b-4d16-b414-499ed1f6d6f2}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{408443b2-2164-418a-ad52-c761f93310f3}\{f961fa1c-6b9b-4d16-b414-499ed1f6d6f2}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{420a6c98-914e-40fc-9a0f-80c7db801780}\{a44a45c2-664d-476c-b68c-6b123eccc31f}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{420a6c98-914e-40fc-9a0f-80c7db801780}\{a44a45c2-664d-476c-b68c-6b123eccc31f}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{d30c5234-f79d-44a9-9803-2f9d5feef791}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{d30c5234-f79d-44a9-9803-2f9d5feef791}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{e6e560b2-062f-41ca-89ab-f6987f2b7a25}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{e6e560b2-062f-41ca-89ab-f6987f2b7a25}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{f4681672-32dc-41db-8669-fdf490345ba5}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{4d4bac91-2b54-4f84-be36-cf74389f8f49}\{f4681672-32dc-41db-8669-fdf490345ba5}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{d9ff82a4-a6a2-4fa5-899e-086ead3bab21}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{d9ff82a4-a6a2-4fa5-899e-086ead3bab21}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{e0e99beb-f7d6-4402-ab36-e510d7048f22}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57683f06-a08b-4708-8825-5c26f410744b}\{e0e99beb-f7d6-4402-ab36-e510d7048f22}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57ec1e30-406c-48ee-8e96-5da71298991f}\{6f1a94cb-68ed-4a84-9668-64e671e1ffef}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{57ec1e30-406c-48ee-8e96-5da71298991f}\{6f1a94cb-68ed-4a84-9668-64e671e1ffef}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{227419d5-f6d8-4fb7-85d6-2cac1725e4a9}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{227419d5-f6d8-4fb7-85d6-2cac1725e4a9}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{978c167d-4764-4d9c-9824-14747351dc81}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{978c167d-4764-4d9c-9824-14747351dc81}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{be2139c7-ab81-424d-b107-d87f7c9322ac}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{be2139c7-ab81-424d-b107-d87f7c9322ac}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f802502b-77b4-4713-81b3-3be05759da5d}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f802502b-77b4-4713-81b3-3be05759da5d}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f9ed01f5-8f3e-4956-973f-9f05bc96f489}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5c3b2414-fd1d-44fb-8b00-e3194209dd1a}\{f9ed01f5-8f3e-4956-973f-9f05bc96f489}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5db760bc-64b2-4da7-b4ef-7dab105fbb8c}\{faa17411-9025-4b86-8b5e-ce2f32b06e13}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5db760bc-64b2-4da7-b4ef-7dab105fbb8c}\{faa17411-9025-4b86-8b5e-ce2f32b06e13}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{ac5e8416-9f39-4166-951f-88ee9635b1d8}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{ac5e8416-9f39-4166-951f-88ee9635b1d8}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{b790d108-d503-47ec-9d7b-b39737b39dba}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{b790d108-d503-47ec-9d7b-b39737b39dba}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{e4a2b264-7187-41ca-aa73-7dc698d49ed1}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{5e6554b3-ccf8-4769-b82b-798f4cce5483}\{e4a2b264-7187-41ca-aa73-7dc698d49ed1}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{08fb768b-1e55-4040-b153-e0ddbedd8042}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{08fb768b-1e55-4040-b153-e0ddbedd8042}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{21a64f86-6cbe-47e1-a497-261226ca12f7}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{21a64f86-6cbe-47e1-a497-261226ca12f7}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{60aa43c9-c1b7-41bf-9b4c-b7f6cc1d93b9}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{60aa43c9-c1b7-41bf-9b4c-b7f6cc1d93b9}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{65faa5f0-141d-4f38-acf0-c79bb0c7be2d}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{65faa5f0-141d-4f38-acf0-c79bb0c7be2d}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{c0df9671-a0ea-4576-9f81-853127cf8d28}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{62706b23-4f66-4c53-b6cc-c6600ccc2752}\{c0df9671-a0ea-4576-9f81-853127cf8d28}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{3c8cb362-147c-4105-b98b-11fd7e671dd7}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{3c8cb362-147c-4105-b98b-11fd7e671dd7}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{7b08ee8b-88d7-4cad-a06f-70d1c4b65ee7}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{71cb4f3b-e29c-4619-a5d5-5fd6a68120ad}\{7b08ee8b-88d7-4cad-a06f-70d1c4b65ee7}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{06ebf20d-17fb-4338-a08d-7a99f17ca678}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{06ebf20d-17fb-4338-a08d-7a99f17ca678}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{ad8644c4-ae02-4b22-990d-52b491f91c26}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{74800676-866f-4bbd-8680-dac6a6fb6c8e}\{ad8644c4-ae02-4b22-990d-52b491f91c26}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{16dcff2c-91a3-4e6a-8135-0a9e6681c1b5}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{16dcff2c-91a3-4e6a-8135-0a9e6681c1b5}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{8ebb0470-da6d-485b-8441-8e06b049157a}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{8ebb0470-da6d-485b-8441-8e06b049157a}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{e829b6db-21ab-453b-83c9-d980ec708edd}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{890c10c3-8c2a-4fe3-a36a-9eca153d47cb}\{e829b6db-21ab-453b-83c9-d980ec708edd}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{898a4828-e6e6-4ddd-abb2-5751e3949aa4}\{115b92b4-7191-491a-a9b5-93c8e9fb641b}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{898a4828-e6e6-4ddd-abb2-5751e3949aa4}\{115b92b4-7191-491a-a9b5-93c8e9fb641b}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{2b048375-f829-4b1d-b117-681e9ead1d50}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{2b048375-f829-4b1d-b117-681e9ead1d50}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{c71cfb00-0ecc-43a3-bf5a-a90ca7718033}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{9eeedeb1-de39-4fba-9cd5-6521b9f19984}\{c71cfb00-0ecc-43a3-bf5a-a90ca7718033}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a18453e4-433b-4d33-ac66-2551e3bba9be}\{66f19dff-a4dd-4802-8fbb-29e6a54af9da}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a18453e4-433b-4d33-ac66-2551e3bba9be}\{66f19dff-a4dd-4802-8fbb-29e6a54af9da}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{042478fc-1449-4b04-a0d8-ba5660ab739a}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{042478fc-1449-4b04-a0d8-ba5660ab739a}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3ab34489-ec07-4d11-a4bb-677b87cd58d9}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3ab34489-ec07-4d11-a4bb-677b87cd58d9}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3f0903d7-5b0b-493e-abf2-a36fd7ce2601}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{3f0903d7-5b0b-493e-abf2-a36fd7ce2601}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{6800b902-8b06-11df-9561-f043dfd72085}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{6800b902-8b06-11df-9561-f043dfd72085}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{7495d5d9-ea6a-444d-afab-e3cae27c047b}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{7495d5d9-ea6a-444d-afab-e3cae27c047b}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{cd376bd3-9f6b-48c0-840e-1816b7a50fdc}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{a3886623-dd46-48fc-a1f9-e3da35125995}\{cd376bd3-9f6b-48c0-840e-1816b7a50fdc}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{1045bf74-023b-445a-9e2b-2038ff4789a6}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{1045bf74-023b-445a-9e2b-2038ff4789a6}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{86b34670-d4bb-40c9-8301-33fb16675d61}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b1c6de93-e020-4ad9-9ca5-4dd5553004cf}\{86b34670-d4bb-40c9-8301-33fb16675d61}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b9fcf33d-ba8f-4654-a5f2-bf58a5866ca8}\{bd4b1f37-d1f0-4fc5-996d-d4a21290f212}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{b9fcf33d-ba8f-4654-a5f2-bf58a5866ca8}\{bd4b1f37-d1f0-4fc5-996d-d4a21290f212}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ba888490-8281-4ac7-b0de-8cc46b314d43}\{06f6022a-82f9-48a5-bc16-074c1bed416c}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ba888490-8281-4ac7-b0de-8cc46b314d43}\{06f6022a-82f9-48a5-bc16-074c1bed416c}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb44ecb6-d88a-4b33-a39c-d6a9c03142a9}\{4e590c2e-2ad3-4138-8f61-4b08771dbbc8}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb44ecb6-d88a-4b33-a39c-d6a9c03142a9}\{4e590c2e-2ad3-4138-8f61-4b08771dbbc8}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7308}\{19b5bae2-18c5-4ab8-99de-255f0e96760a}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7308}\{19b5bae2-18c5-4ab8-99de-255f0e96760a}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{135f3513-bc27-4360-b281-0a36caceb1f2}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{135f3513-bc27-4360-b281-0a36caceb1f2}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{19b5bae2-18c5-4ab8-99de-255f0e9676a0}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{19b5bae2-18c5-4ab8-99de-255f0e9676a0}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{8bc1703a-939f-4ee1-8785-b0fc5837feb2}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{8bc1703a-939f-4ee1-8785-b0fc5837feb2}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{cc16fe4c-d638-492e-a924-519185396ebf}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cb6d8ddc-a302-4349-88fd-9fcf6d3a7380}\{cc16fe4c-d638-492e-a924-519185396ebf}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc549940-0edf-41b1-8298-74c2627b6af9}\{35a002b8-38a7-41eb-bedd-6610bb93f046}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc549940-0edf-41b1-8298-74c2627b6af9}\{35a002b8-38a7-41eb-bedd-6610bb93f046}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc629d13-f318-4c40-b1ed-d70bce524515}\{22ca1519-4394-4a5f-be88-84a5c853a4aa}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{cc629d13-f318-4c40-b1ed-d70bce524515}\{22ca1519-4394-4a5f-be88-84a5c853a4aa}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{db314ee3-3157-4e56-8fd9-2184874d195d}\{fb01b3ef-bb4a-4c48-9ab8-dc1871675e6d}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{db314ee3-3157-4e56-8fd9-2184874d195d}\{fb01b3ef-bb4a-4c48-9ab8-dc1871675e6d}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ddf417dc-4cc3-4529-9ffc-1d04eb678da3}\{d53266b4-c9f5-4808-8a0f-d17bbf493416}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ddf417dc-4cc3-4529-9ffc-1d04eb678da3}\{d53266b4-c9f5-4808-8a0f-d17bbf493416}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{e08d5971-88fb-4799-b066-6978845f73c1}\{b851890b-3e61-427a-ab94-461e088d4827}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{e08d5971-88fb-4799-b066-6978845f73c1}\{b851890b-3e61-427a-ab94-461e088d4827}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{11ace151-4bac-44b0-8a82-0a859a5355d9}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{11ace151-4bac-44b0-8a82-0a859a5355d9}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{1cc9da8b-58a5-4c92-9a4e-f05f2a2ae7a3}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{1cc9da8b-58a5-4c92-9a4e-f05f2a2ae7a3}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{28d00a68-8309-4a3e-bf1d-0ebd27c75787}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{28d00a68-8309-4a3e-bf1d-0ebd27c75787}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40990512-fb18-4bbd-95e2-f72e8cdae178}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40990512-fb18-4bbd-95e2-f72e8cdae178}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40e6824e-1b9b-4329-9a6e-e94c8fb03a3f}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{40e6824e-1b9b-4329-9a6e-e94c8fb03a3f}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{58276884-7f29-450d-bcfa-5be4b7266334}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{58276884-7f29-450d-bcfa-5be4b7266334}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{63c158d0-2a4c-4509-8d27-29e935b69e5f}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{63c158d0-2a4c-4509-8d27-29e935b69e5f}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{6b81611f-8998-47c2-9550-f7dc0324e620}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{6b81611f-8998-47c2-9550-f7dc0324e620}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{7a030929-9547-485c-ba6c-3e891612c2ce}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{7a030929-9547-485c-ba6c-3e891612c2ce}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{83a3746d-a9ec-47c0-830f-6dd440b07666}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{83a3746d-a9ec-47c0-830f-6dd440b07666}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{9815b8f4-d337-4eb4-a468-fc9a83bcce65}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{9815b8f4-d337-4eb4-a468-fc9a83bcce65}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{a30f983f-321a-48b0-85c3-cab02781dd02}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{a30f983f-321a-48b0-85c3-cab02781dd02}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{aaca5b25-a859-438d-93b6-924f63a2cb3c}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{aaca5b25-a859-438d-93b6-924f63a2cb3c}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{e6e73867-856a-4574-a0ba-01c066d376f5}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{ef63b92d-c5a6-4314-ac9f-cc6b1c56fb9c}\{e6e73867-856a-4574-a0ba-01c066d376f5}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{51bda498-67cb-479f-b898-57d2d73788f0}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{51bda498-67cb-479f-b898-57d2d73788f0}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{811bbce5-7327-4ad9-ab62-a8b955f61eef}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f25a20a5-fd7a-417b-afc3-76295ebac77c}\{811bbce5-7327-4ad9-ab62-a8b955f61eef}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{9ff69334-839c-41fe-96e0-c5189ac431f2}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{9ff69334-839c-41fe-96e0-c5189ac431f2}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{a8180dab-81d0-4e05-b76b-eb4c5fb37357}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{a8180dab-81d0-4e05-b76b-eb4c5fb37357}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{c0c9c676-ac38-40d4-a23c-69f05d12a306}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{c0c9c676-ac38-40d4-a23c-69f05d12a306}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{d7e69761-f919-4bfa-bbb6-bece1050a2ce}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3991d9d-fc17-4f37-b12f-8984a43e1aeb}\{d7e69761-f919-4bfa-bbb6-bece1050a2ce}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3b975e7-e068-4f66-81ef-b23e0a0e64c9}\{fc9e399c-c70a-4458-8430-ca249c371eb3}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f3b975e7-e068-4f66-81ef-b23e0a0e64c9}\{fc9e399c-c70a-4458-8430-ca249c371eb3}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}\{1f7207c2-0b8c-48de-9dcd-64ff98cc24e1}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{f6c5ad57-a5be-4259-9060-b2c4ebfccd96}\{1f7207c2-0b8c-48de-9dcd-64ff98cc24e1}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{7d937e49-cfd5-438f-af4f-b3047d90a5c3}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{7d937e49-cfd5-438f-af4f-b3047d90a5c3}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{f3e82f6e-9df4-425d-a5d5-3a9832005b16}\First Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\_V2Providers\{fd0dce36-af57-417b-9ce6-2d10633b4cf9}\{f3e82f6e-9df4-425d-a5d5-3a9832005b16}\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Updating

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\SafeProcessSearchMode

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Base Index

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Lsa\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSSCNTRS\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfDisk\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfNet\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfOS\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfProc\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Spooler\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\First Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSM\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdyboost\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SMSvcHost 4.0.0.0\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TapiSrv\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TermService\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGatherer\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UGTHRSVC\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\usbhub\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Workflow Foundation 4.0.0.0\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\First Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\Last Counter

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\Last Help

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WSearchIdxPi\Performance\Disable Performance Counters

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Sink Transmit Buffer Size

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\DefaultRpcStackSize

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\ActivateOnHostFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\Synchronization

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\AppId

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Logging

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Log File Max Size

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\MofImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\ImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\MofImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\ImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mssmbios\MofImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mssmbios\ImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HDAudBus\MofImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HDAudBus\ImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdPPM\MofImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\monitor\MofImagePath

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\monitor\ImagePath

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\FileCoAuthTelemetryRampStatus

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\FirstEntry

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\LastEntry

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\2025

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\2007

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Pacific Standard Time\Dynamic DST\2024

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\DefaultAccessPermission

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\MaxSxSHashCount

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}\ProxyStubClsid32\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\InprocServer32

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\(Default)

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32\ThreadingModel

                    
                        HKEY_CURRENT_USER\Software\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\AppID

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\MainAccount

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserFolder

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\cid

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\DisplayName

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\UserEmail

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\Business

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\SharePointOnPrem

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\FirstRun

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EdpManaged

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\RootAddedToFavorites

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\TenantAddedToFavorites

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\HasMadeFirstUpload

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\IsUpgradeAvailable

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\CrashDetectionKey

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\EnableADALForSilentBusinessConfig

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastKnownCloudFilesEnabled

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\WamWebAccountId

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\Accounts\Personal\LastMigrationScanResult

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SQMClient\MSFTInternal

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SQMClient\IsTest

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Category

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Name

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\ParentFolder

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Description

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\RelativePath

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\ParsingName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\InfoTip

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\LocalizedName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Icon

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Security

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\StreamResource

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\StreamResourceType

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\LocalRedirectOnly

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Roamable

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PreCreate

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Stream

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\PublishExpandedPath

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\DefinitionFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\Attributes

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\FolderTypeID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{905e63b6-c1bf-494e-b29c-65b732d3d21a}\InitFolderHandler

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Category

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Name

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\ParentFolder

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Description

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\RelativePath

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\ParsingName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\InfoTip

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\LocalizedName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Icon

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Security

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\StreamResource

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\StreamResourceType

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\LocalRedirectOnly

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Roamable

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PreCreate

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Stream

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\PublishExpandedPath

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\DefinitionFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Attributes

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\FolderTypeID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\InitFolderHandler

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\UpdateRingPostAuthConditions

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability\EnablePreviewBuilds

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableEnterpriseUpdate

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableOrgInternalUpdate

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableTeamTier_Internal

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive\EnableFasterRingUpdate

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\MachineId

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32\Synchronization

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\AppId

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E245105B-B06E-11D0-AD61-00C04FD8FDFF}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD450835-CF1B-4C87-9FD2-5E0D42FDE081}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\ActivateOnHostFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\AppID

                    
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration

                    
                        HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-15

                    
                        HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-14

                    
                        HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-13

                    
                        HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-12

                    
                        HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-11

                    
                        HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-10

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AuthenticationLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AccessPermission

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ActivateOnHostFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32\InprocServer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32\ThreadingModel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{29A3AB33-0FD7-44F5-9BFF-C0B6C081FBFB}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32\LocalServer32

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalServer32\ServerExecutable

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AppID

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LocalService

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\DllSurrogate

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\RunAs

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ActivateAtStorage

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ROTFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\AppIDFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\MGOTFlags

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ProcessMitigationPolicy

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LaunchPermission

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\RemoteServerName

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\SRPTrustLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\PreferredServerBitness

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\LoadUserSettings

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\ProtectionLevel

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000035-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3474d734-3408-4471-a344-a3439343634a}\ProxyStubClsid32\(Default)

                    
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Browser\AllowSmartScreen\Behavior

                    
                        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost\EnableWebContentEvaluation

                    
                
            

        

        

            

                
                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Updating

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Last Counter

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\PerfIniFile

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Object List

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance Data

                
                HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\WDM\DREDGE

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\system32\kernelbase.dll[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\system32\en-US\kernelbase.dll.mui[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\ACPI.sys[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\mssmbios.sys[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\en-US\mssmbios.sys.mui[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\HDAudBus.sys[HDAudioMofName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\processr.sys[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\DREDGE\C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance Refresh

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\PROVIDERS\Performance\Performance Refreshed

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\kernelbase.dll[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\en-US\kernelbase.dll.mui[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\ACPI.sys[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\drivers\ndis.sys[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\mssmbios.sys[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\en-US\mssmbios.sys.mui[MofResource]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\HDAudBus.sys[HDAudioMofName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\processr.sys[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\monitor.sys[MonitorWMI]

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-15

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-14

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-13

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-12

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-11

                
                HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\2\52C64B7E\@%SystemRoot%\system32\powrprof.dll,-10

                
                
            

        

        

            

                
                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Counter

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\First Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Last Help

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Object List

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Library Validation Code

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\Updating

                
                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance\Disable Performance Counters

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=1109958850,Name="C:\Windows\system32\kernelbase.dll[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=1871506606,Name="C:\Windows\system32\en-US\kernelbase.dll.mui[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=558520124,Name="C:\Windows\System32\drivers\ACPI.sys[ACPIMOFResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2622663310,Name="C:\Windows\System32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=1107771162,Name="C:\Windows\system32\drivers\ndis.sys[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2647819754,Name="C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780570,LowDateTime=3245592320,Name="C:\Windows\System32\drivers\mssmbios.sys[MofResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2629702478,Name="C:\Windows\System32\drivers\en-US\mssmbios.sys.mui[MofResource]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=551801554,Name="C:\Windows\System32\drivers\HDAudBus.sys[HDAudioMofName]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=558676975,Name="C:\Windows\System32\drivers\processr.sys[PROCESSORWMI]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30780576,LowDateTime=2622663310,Name="C:\Windows\System32\drivers\en-US\processr.sys.mui[PROCESSORWMI]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\WMIBinaryMofResource.HighDateTime=30915190,LowDateTime=552738554,Name="C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]"

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\System32\drivers\monitor.sys[MonitorWMI]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\drivers\ndis.sys[MofResourceName]

                
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\WDM\C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]

                
                
            

        

        

            

                
                
                ntdll.dll.RtlWow64GetCurrentMachine

                
                ntdll.dll.RtlWow64IsWowGuestMachineSupported

                
                
            

        

        

            

                
                
                C:\Windows\system32\wbem\wmiprvse.exe -Embedding

                
                C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding

                
                C:\Users\Packager\AppData\Local\Microsoft\OneDrive\19.043.0304.0013\FileCoAuth.exe -Embedding

                
                C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding

                
                C:\Windows\System32\smartscreen.exe -Embedding

                
                wmiadap.exe /F /T /R

                
                \\?\C:\Windows\system32\wbem\WMIADAP.EXE wmiadap.exe /F /T /R

                
                
            

        

        

            

                
                
                Local\SM0:5592:168:WilStaging_02

                
                Local\SM0:5592:64:WilError_03

                
                Local\MSCTF.Asm.MutexDefault3

                
                CicLoadWinStaWinSta0

                
                Local\MSCTF.CtfMonitorInstMutexDefault3

                
                Global\ADAP_WMI_ENTRY

                
                Local\SM0:4736:304:WilStaging_02

                
                Global\RefreshRA_Mutex

                
                Global\RefreshRA_Mutex_Lib

                
                Global\RefreshRA_Mutex_Flag

                
                Installing

                
                Local\SM0:4772:304:WilStaging_02

                
                Local\SM0:1876:168:WilStaging_02

                
                Local\SM0:4884:304:WilStaging_02

                
                Local\SM0:6236:304:WilStaging_02

                
                Local\SM0:6236:120:WilError_03

                
                
            

        

        

            

                
            

        

        

            

                
                
                wisvc

                
                smphost

                
                
            

        

        

            

                
                
No results

                
            

        

    






    

    

        
    
Sorry! No behavior.



    

    

        
    
Sorry! No strace.



    

    

        

    
    
Sorry! No tracee.

    


    

    

        
    
    

        

    
        
No hosts contacted.

    




        



    
        
No TCP connections recorded.

    





        



    
        
No UDP connections recorded.

    




        

    
        
No domains contacted.

    




        
HTTP Requests


    
No HTTP(s) requests performed.




        
SMTP traffic



No SMTP traffic performed.




        
IRC traffic



No IRC requests performed.




        


No ICMP traffic performed.




        

    
CIF Results

    
        
No CIF Results

    




        

    
Suricata Alerts

    
        
No Suricata Alerts

    




        

    
Suricata TLS

    
        
No Suricata TLS

    




        

    
Suricata HTTP

    
        
No Suricata HTTP

    




        

    
Sorry! No Suricata Extracted files.




    


    

    

        


    
Sorry! No dropped files.



    

    
        

        


    
Sorry! No CAPE files.



        

    
    

        

    
Sorry! No process dumps.



    

    
    

        
    
Sorry! No process dumps.