Created
December 29, 2023 18:46
-
-
Save Saltinbank-SyS/ed4c47eb7bc6efe9f30e10319a6ef1d8 to your computer and use it in GitHub Desktop.
TRAWLER DFIR script for FRENCH Windows machines
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| trawler helps Incident Responders discover suspicious persistence mechanisms on Windows devices. | |
| .DESCRIPTION | |
| trawler inspects a wide variety of Windows artifacts to help discover signals of persistence including the registry, scheduled tasks, services, startup items, etc. | |
| For a full list of artifacts, please see github.com/joeavanzato/trawler | |
| .PARAMETER outpath | |
| The fully-qualified file-path where detection output should be stored as a CSV | |
| .PARAMETER snapshot | |
| If specified, tells trawler to capture a persistence snapshot | |
| .PARAMETER hide | |
| If specified, tells trawler to suppress detection output to console | |
| .PARAMETER snapshotpath | |
| The fully-qualified file-path where snapshot output should be stored - defaults to $PSScriptRoot\snapshot.csv | |
| .PARAMETER loadsnapshot | |
| The fully-qualified file-path to a previous snapshot to be loaded for allow-listing | |
| .PARAMETER ScanOptions | |
| Set to pick specific scanners to run. Multiple can be used when separated by a comma. (Supports tab completion) | |
| .EXAMPLE | |
| .\trawler.ps1 -outpath "C:\detections.csv" | |
| .EXAMPLE | |
| .\trawler.ps1 -outpath "C:\detections.csv" -ScanOptions ScheduledTasks, BITS | |
| .OUTPUTS | |
| None | |
| .NOTES | |
| None | |
| .INPUTS | |
| None | |
| .LINK | |
| https://github.com/joeavanzato/Trawler | |
| #> | |
| # TODO - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon - Notify Value - Investigate for value/defaults and add to appropriate Winlogon Helper check [https://github.com/persistence-info/persistence-info.github.io/blob/main/Data/winlogonnotificationpackage.md] | |
| [CmdletBinding()] | |
| param | |
| ( | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = 'The fully-qualified file-path where detection output should be stored as a CSV, defaults to $PSScriptRoot\detections.csv')] | |
| [string] | |
| $outpath = "$PSScriptRoot\detections.csv", | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = 'Should a snapshot CSV be generated')] | |
| [switch] | |
| $snapshot, | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = 'Suppress Detection Output to Console')] | |
| [switch] | |
| $Quiet, | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = 'The fully-qualified file-path where persistence snapshot output should be stored as a CSV, defaults to $PSScriptRoot\snapshot.csv')] | |
| [string] | |
| $snapshotpath = "$PSScriptRoot\snapshot.csv", | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = 'The fully-qualified file-path where the snapshot CSV to be loaded is located')] | |
| [string] | |
| $loadsnapshot, | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = 'The drive to target for analysis - for example, if mounting an imaged system as a second drive on an analysis device, specify via -drivetarget "D:" (NOT YET IMPLEMENTED)')] | |
| [string] | |
| $drivetarget, | |
| [Parameter( | |
| Mandatory = $false, | |
| HelpMessage = "Allows for targeting certain scanners and ignoring others. Use 'All' to run all scanners.")] | |
| [ValidateSet( | |
| "ActiveSetup", | |
| "All", | |
| "AMSIProviders", | |
| "AppCertDLLs", | |
| "AppInitDLLs", | |
| "ApplicationShims", | |
| "AppPaths", | |
| "AssociationHijack", | |
| "AutoDialDLL", | |
| "BIDDll", | |
| "BITS", | |
| "BootVerificationProgram", | |
| "COMHijacks", | |
| "CommandAutoRunProcessors", | |
| "Connections", | |
| "ContextMenu", | |
| "DebuggerHijacks", | |
| "DisableLowIL", | |
| "DiskCleanupHandlers", | |
| "DNSServerLevelPluginDLL", | |
| "eRegChecks", | |
| "ErrorHandlerCMD", | |
| "ExplorerHelperUtilities", | |
| "FolderOpen", | |
| "GPOExtensions", | |
| "GPOScripts", | |
| "HTMLHelpDLL", | |
| "IFEO", | |
| "InternetSettingsLUIDll", | |
| "KnownManagedDebuggers", | |
| "LNK", | |
| "LSA", | |
| "MicrosoftTelemetryCommands", | |
| "ModifiedWindowsAccessibilityFeature", | |
| "MSDTCDll", | |
| "Narrator", | |
| "NaturalLanguageDevelopmentDLLs", | |
| "NetSHDLLs", | |
| "NotepadPPPlugins", | |
| "OfficeAI", | |
| "OfficeGlobalDotName", | |
| "Officetest", | |
| "OfficeTrustedLocations", | |
| "OutlookStartup", | |
| "PATHHijacks", | |
| "PeerDistExtensionDll", | |
| "PolicyManager", | |
| "PowerShellProfiles", | |
| "PrintMonitorDLLs", | |
| "PrintProcessorDLLs", | |
| "Processes", | |
| "ProcessModules", | |
| "RATS", | |
| "RDPShadowConsent", | |
| "RDPStartupPrograms", | |
| "RegistryChecks", | |
| "RemoteUACSetting", | |
| "ScheduledTasks", | |
| "SCMDACL", | |
| "ScreenSaverEXE", | |
| "SEMgrWallet", | |
| "ServiceHijacks", | |
| "Services", | |
| "SethcHijack", | |
| "SilentProcessExitMonitoring", | |
| "Startups", | |
| "SuspiciousCertificates", | |
| "SuspiciousFileLocation", | |
| "TerminalProfiles", | |
| "TerminalServicesDLL", | |
| "TerminalServicesInitialProgram", | |
| "TimeProviderDLLs", | |
| "TrustProviderDLL", | |
| "UninstallStrings", | |
| "UserInitMPRScripts", | |
| "Users", | |
| "UtilmanHijack", | |
| "WellKnownCOM", | |
| "WERRuntimeExceptionHandlers", | |
| "WindowsLoadKey", | |
| "WindowsUnsignedFiles", | |
| "WindowsUpdateTestDlls", | |
| "WinlogonHelperDLLs", | |
| "WMIConsumers", | |
| "Wow64LayerAbuse" | |
| )] | |
| $ScanOptions = "All" | |
| ) | |
| # TODO - Refactor below into setup function | |
| # Script Level Variable Setup | |
| if ($PSBoundParameters.ContainsKey('loadsnapshot')){ | |
| $loadsnapshotdata = $true | |
| } else { | |
| $loadsnapshotdata = $false | |
| } | |
| if ($PSBoundParameters.ContainsKey('drivetarget')){ | |
| $drivechange = $true | |
| } else { | |
| $drivechange = $false | |
| } | |
| $detection_list = New-Object -TypeName "System.Collections.ArrayList" | |
| function Get-ValidOutPath { | |
| param ( | |
| [string] | |
| $path | |
| ) | |
| if (Test-Path -Path $path -PathType Container) | |
| { | |
| Write-Host "The provided path is a folder, not a file. Please provide a file path." -Foregroundcolor "Yellow" | |
| exit | |
| } | |
| return $path | |
| } | |
| function ValidatePaths { | |
| try { | |
| $script:outpath = Get-ValidOutPath -path $outpath | |
| Write-Message "Detection Output Path: $outpath" | |
| [System.IO.File]::OpenWrite($outpath).Close() | |
| $script:output_writable = $true | |
| } | |
| catch { | |
| Write-Warning "Unable to write to provided output path: $outpath" | |
| $script:output_writable = $false | |
| } | |
| if ($snapshot) { | |
| try { | |
| $script:snapshotpath = Get-ValidOutPath -path $snapshotpath | |
| Write-Message "Snapshot Output Path: $snapshotpath" | |
| [System.IO.File]::OpenWrite($snapshotpath).Close() | |
| Clear-Content $snapshotpath | |
| $script:snapshotpath_writable = $true | |
| } | |
| catch { | |
| Write-Warning "Unable to write to provided snapshot path: $snapshotpath" | |
| $script:snapshotpath_writable = $false | |
| } | |
| } | |
| } | |
| # TODO - JSON Detection Output to easily encapsulate more details | |
| # TODO - Non-Standard Service/Task running as/created by Local Administrator | |
| # TODO - Browser Extension Analysis | |
| # TODO - Temporary RID Hijacking | |
| # TODO - ntshrui.dll - https://www.mandiant.com/resources/blog/malware-persistence-windows-registry | |
| # TODO - Add file metadata for detected files (COM/DLL Hijacks, etc) | |
| # TODO - Add more suspicious paths for running processes | |
| # TODO - Iterate through HKEY_USERS when encountering HKEY_CURRENT_USER hive reference | |
| # TODO - Refactor this using condensed regex | |
| $suspicious_process_paths = @( | |
| ".*\\users\\administrator\\.*", | |
| ".*\\users\\default\\.*", | |
| ".*\\users\\public\\.*", | |
| ".*\\windows\\debug\\.*", | |
| ".*\\windows\\fonts\\.*", | |
| ".*\\windows\\media\\.*", | |
| ".*\\windows\\repair\\.*", | |
| ".*\\windows\\servicing\\.*", | |
| ".*\\windows\\temp\\.*", | |
| ".*recycle.bin.*" | |
| ) | |
| $suspicious_terms = ".*(\[System\.Reflection\.Assembly\]|regedit|invoke-iex|frombase64|tobase64|rundll32|http:|https:|system\.net\.webclient|downloadfile|downloadstring|bitstransfer|system\.net\.sockets|tcpclient|xmlhttp|AssemblyBuilderAccess|shellcode|rc4bytestream|disablerealtimemonitoring|wmiobject|wmimethod|remotewmi|wmic|gzipstream|::decompress|io\.compression|write-zip|encodedcommand|wscript\.shell|MSXML2\.XMLHTTP).*" | |
| $ipv4_pattern = '.*((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?).*' | |
| $ipv6_pattern = '.*:(?::[a-f\d]{1,4}){0,5}(?:(?::[a-f\d]{1,4}){1,2}|:(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})))|[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}|:)|(?::(?:[a-f\d]{1,4})?|(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))))|:(?:(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|[a-f\d]{1,4}(?::[a-f\d]{1,4})?|))|(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|:[a-f\d]{1,4}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){0,2})|:))|(?:(?::[a-f\d]{1,4}){0,2}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){1,2})|:))|(?:(?::[a-f\d]{1,4}){0,3}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){1,2})|:))|(?:(?::[a-f\d]{1,4}){0,4}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){1,2})|:)).*' | |
| $office_addin_extensions = ".wll",".xll",".ppam",".ppa",".dll",".vsto",".vba", ".xlam", ".com", ".xla" | |
| $rat_terms = @( | |
| #Remote Access Tool Indicators | |
| # Any Process Name, Scheduled Task or Service containing these keywords will be flagged. | |
| "aeroadmin", | |
| "action1" | |
| "ammyadmin" | |
| "aa_v" | |
| "anydesk" | |
| "anyscreen" | |
| "anyviewer" | |
| "atera" | |
| "aweray_remote" | |
| "awrem32" | |
| "awhost32" | |
| "beyondtrust" | |
| "bomgar" | |
| "connectwise" | |
| "cservice" | |
| "dameware" | |
| "desktopnow" | |
| "distant-desktop" | |
| "dwservice" | |
| "dwagent" | |
| "dwagsvc" | |
| "dwrcs" | |
| "famitrfc" | |
| "g2comm" | |
| "g2host" | |
| "g2fileh" | |
| "g2mainh" | |
| "g2printh" | |
| "g2svc" | |
| "g2tray" | |
| "gopcsrv" | |
| "getscreen" | |
| "iperius" | |
| "kaseya" | |
| "litemanager" | |
| "logmein" | |
| "lmiignition" | |
| "lmiguardiansvc" | |
| "meshagent" | |
| "mstsc" | |
| "ninja1" | |
| "ninjaone" | |
| "PCMonitorManager" | |
| "pcmonitorsrv" | |
| "pulseway" | |
| "quickassist" | |
| "radmin" | |
| "rcclient" | |
| "realvnc" | |
| "remotepc" | |
| "remotetopc" | |
| "remote utilities" | |
| "RepairTech" | |
| "ROMServer" | |
| "ROMFUSClient" | |
| "rutserv" | |
| "screenconnect" | |
| "screenmeet" | |
| "showmypc" | |
| "smpcsetup" | |
| "strwinclt" | |
| "supremo" | |
| "sightcall" | |
| "splashtop" | |
| "surfly" | |
| "syncro" | |
| "tacticalrmm" | |
| "teamviewer" | |
| "tightvnc" | |
| "ultraviewer" | |
| "vnc" | |
| "winvnc" | |
| "vncviewer" | |
| "winvncsc" | |
| "winwvc" | |
| "xmreality" | |
| "ultravnc" | |
| "Zaservice" | |
| "Zohours" | |
| "ZohoMeeting" | |
| "zoho" | |
| ) | |
| function Check-ScheduledTasks { | |
| # Supports Dynamic Snapshotting for Executable Paths | |
| # Can possibly support drive-retargeting by parsing Task XML | |
| # Working on this with regex from Task Files | |
| # ^ Mostly working now | |
| # TODO - Add Argument Comparison Checks | |
| Write-Message "Checking Scheduled Tasks" | |
| $task_base_path = "$env_homedrive\Windows\System32\Tasks" | |
| $tasks = New-Object -TypeName "System.Collections.ArrayList" | |
| $author_pattern = '<Author>(?<Author>.*?)<\/Author>' | |
| $runas_pattern = '<Principal id="(?<RunAs>.*?)">' | |
| $execute_pattern = '<Command>(?<Execute>.*?)<\/Command>' | |
| $argument_pattern = '<Arguments>(?<Arguments>.*?)<\/Arguments>' | |
| $userid_pattern = '<UserId>(?<UserId>.*?)</UserId>' | |
| $sid_lookup = @{ | |
| 'S-1-5-17' = 'IUSR' | |
| 'S-1-5-18' = 'SYSTEM' | |
| 'S-1-5-19' = 'LOCAL_SERVICE' | |
| 'S-1-5-20' = 'NETWORK_SERVICE' | |
| } | |
| if (Test-Path -Path $task_base_path) { | |
| $items = Get-ChildItem -Path $task_base_path -Recurse -ErrorAction SilentlyContinue | |
| foreach ($item in $items) { | |
| $task_content = Get-Content $item.FullName -ErrorAction SilentlyContinue | Out-String | |
| if ($task_content -eq $null){ | |
| continue | |
| } | |
| $task_content = [string]::join("",($task_content.Split("`n"))) | |
| #Write-Host $task_content[0] | |
| #$task_match = $regex_pattern.Match($task_content) | |
| $author_match = [regex]::Matches($task_content, $author_pattern) | |
| $runas_match = [regex]::Matches($task_content, $runas_pattern) | |
| $execute_match = [regex]::Matches($task_content, $execute_pattern) | |
| $arguments_match = [regex]::Matches($task_content, $argument_pattern) | |
| $userid_match = [regex]::Matches($task_content, $userid_pattern) | |
| If ($author_match[0] -eq $null){ | |
| $author = "N/A" | |
| } else { | |
| $author = $author_match[0].Groups["Author"].Value | |
| } | |
| If ($runas_match[0] -eq $null){ | |
| $runas = "N/A" | |
| } else { | |
| $runas = $runas_match[0].Groups["RunAs"].Value | |
| if ($runas -eq "Author"){ | |
| $runas = $author | |
| } | |
| } | |
| If ($execute_match[0] -eq $null){ | |
| $execute = "N/A" | |
| } else { | |
| $execute = $execute_match[0].Groups["Execute"].Value | |
| } | |
| If ($arguments_match[0] -eq $null){ | |
| $arguments = "N/A" | |
| } else { | |
| $arguments = $arguments_match[0].Groups["Arguments"].Value | |
| } | |
| If ($userid_match[0] -eq $null){ | |
| $userid = $author | |
| } else { | |
| $userid = $userid_match[0].Groups["UserId"].Value | |
| if ($userid -eq 'System'){ | |
| $userid = 'SYSTEM' | |
| } elseif ($userid -match 'S-.*'){ | |
| if ($sid_lookup.ContainsKey($userid)){ | |
| $userid = $sid_lookup[$userid] | |
| } | |
| } | |
| if ($runas -eq 'N/A'){ | |
| $runas = $userid | |
| } | |
| if ($author -eq 'N/A'){ | |
| $author = $userid | |
| } | |
| } | |
| $task = [PSCustomObject]@{ | |
| TaskName = $item.Name | |
| Execute = $execute | |
| Arguments = $arguments | |
| Author = $author | |
| RunAs = $runas | |
| UserId = $userid | |
| } | |
| if ($task.Execute -ne "N/A"){ | |
| $tasks.Add($task) | Out-Null | |
| } | |
| } | |
| } else { | |
| Write-Message "Could not find Scheduled Task Path: $task_base_path" | |
| return | |
| } | |
| $default_task_exe_paths = @( | |
| "`"%ProgramFiles%\Windows Media Player\wmpnscfg.exe`"", | |
| "%windir%\system32\appidpolicyconverter.exe", | |
| "%SystemRoot%\System32\ClipRenew.exe", | |
| "%SystemRoot%\System32\ClipUp.exe", | |
| "%SystemRoot%\System32\drvinst.exe", | |
| "%SystemRoot%\System32\dsregcmd.exe", | |
| "%SystemRoot%\System32\dusmtask.exe", | |
| "%SystemRoot%\System32\fclip.exe", | |
| "%SystemRoot%\System32\MbaeParserTask.exe", | |
| "%systemroot%\System32\MusNotification.exe", | |
| "%systemroot%\System32\sihclient.exe", | |
| "%systemroot%\System32\usoclient.exe", | |
| "%SystemRoot%\system32\Wat\WatAdminSvc.exe", | |
| "%SystemRoot%\System32\WiFiTask.exe", | |
| "%SystemRoot%\System32\wsqmcons.exe", | |
| "%windir%\System32\AppHostRegistrationVerifier.exe", | |
| "%windir%\System32\appidcertstorecheck.exe", | |
| "%windir%\System32\appidcertstorecheck.exe". | |
| "%windir%\System32\appidpolicyconverter.exe", | |
| "%windir%\System32\bcdboot.exe", | |
| "%windir%\System32\cleanmgr.exe", | |
| "%windir%\System32\compattelrunner.exe", | |
| "%windir%\System32\defrag.exe", | |
| "%windir%\System32\devicecensus.exe", | |
| "%windir%\System32\DFDWiz.exe", | |
| "%windir%\System32\directxdatabaseupdater.exe", | |
| "%windir%\System32\disksnapshot.exe", | |
| "%windir%\System32\dmclient.exe", | |
| "%windir%\System32\dstokenclean.exe", | |
| "%windir%\System32\dxgiadaptercache.exe", | |
| "%windir%\System32\eduprintprov.exe", | |
| "%windir%\System32\gatherNetworkInfo.vbs", | |
| "%windir%\System32\LocationNotificationWindows.exe", | |
| "%windir%\System32\lpremove.exe", | |
| "%windir%\system32\MDMAgent.exe", | |
| "%windir%\System32\ProvTool.exe", | |
| "%windir%\System32\RAServer.exe", | |
| "%windir%\System32\rundll32.exe", | |
| "%windir%\System32\sc.exe", | |
| "%SystemRoot%\system32\schtasks.exe", | |
| "%windir%\System32\SDNDiagnosticsTask.exe", | |
| "%WINDIR%\System32\SecureBootEncodeUEFI.exe", | |
| "%windir%\System32\ServerManagerLauncher.exe", | |
| "%windir%\System32\SpaceAgent.exe", | |
| "%windir%\System32\spaceman.exe", | |
| "%windir%\System32\speech_onecore\common\SpeechModelDownload.exe", | |
| "%windir%\System32\speech_onecore\common\SpeechRuntime.exe", | |
| "%windir%\System32\srtasks.exe", | |
| "%windir%\System32\srvinitconfig.exe", | |
| "%windir%\System32\tzsync.exe", | |
| "%windir%\System32\UNP\UpdateNotificationMgr.exe", | |
| "%windir%\System32\wermgr.exe", | |
| "%WinDir%\System32\WinBioPlugIns\FaceFodUninstaller.exe", | |
| "%windir%\System32\WindowsActionDialog.exe", | |
| "%windir%\System32\wpcmon.exe", | |
| "%windir%\System32\XblGameSaveTask.exe", | |
| "BthUdTask.exe", | |
| "$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe", | |
| "$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe", | |
| "$env_assumedhomedrive\Program Files\Microsoft Office\root\Office16\sdxhelper.exe", | |
| "$env_assumedhomedrive\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe", | |
| "$env_assumedhomedrive\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe", | |
| "$env_assumedhomedrive\Program Files\NVIDIA Corporation\nview\nwiz.exe", | |
| "$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\MpCmdRun.exe", | |
| '"C:\Windows\System32\MicTray64.exe"', | |
| "$env_assumedhomedrive\Windows\System32\sc.exe", | |
| "`"$env_assumedhomedrive\Windows\System32\SynaMonApp.exe`"", | |
| "%localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe", | |
| "$env:homedrive\WINDOWS\system32\msfeedssync.exe" | |
| "$env:homedrive\Program Files\Microsoft Security Client\MpCmdRun.exe" | |
| ) | |
| $default_task_args = @( | |
| "config upnphost start= auto", | |
| '%systemroot%\System32\pla.dll,PlaHost "Server Manager Performance Monitor" "$(Arg0)"', | |
| '/B /nologo %systemroot%\System32\calluxxprovider.vbs $(Arg0) $(Arg1) $(Arg2)', | |
| '/NoUACCheck' | |
| ) | |
| #$tasks = Get-ScheduledTask | Select-Object -Property State,Actions,Author,Date,Description,Principal,SecurityDescriptor,Settings,TaskName,TaskPath,Triggers,URI, @{Name="RunAs";Expression={ $_.principal.userid }} -ExpandProperty Actions | Select-Object * | |
| foreach ($task in $tasks){ | |
| # Allowlist Logic | |
| Write-SnapshotMessage -Key $task.TaskName -Value $task.Execute -Source "Scheduled Tasks" | |
| # If we are loading a snapshot allowlist | |
| # TODO - Compare Task Arguments for Changes | |
| if ($loadsnapshot){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Allowlist Mismatch: Scheduled Task' | |
| Risk = 'Medium' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs | |
| } | |
| $result = Check-IfAllowed $allowtable_scheduledtask $task.TaskName $task.Execute $detection | |
| if ($result){ | |
| continue | |
| } | |
| } | |
| # Detection - Non-Standard Tasks | |
| foreach ($i in $default_task_exe_paths){ | |
| if ( $task.Execute -like $i) { | |
| $exe_match = $true | |
| break | |
| } elseif ($task.Execute.Length -gt 0) { | |
| $exe_match = $false | |
| } | |
| } | |
| ForEach ($term in $rat_terms) { | |
| if ($task.Execute -match ".*$term.*" -or $task.Arguments -match ".*$term.*") { | |
| # Service has a suspicious launch pattern matching a known RAT | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Scheduled Task has known-RAT Keyword' | |
| Risk = 'Medium' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs+", RAT Keyword: "+$term | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| # Task Running as SYSTEM | |
| if ($task.RunAs -eq "SYSTEM" -and $exe_match -eq $false -and $task.Arguments -notin $default_task_args) { | |
| # Current Task Executable Path is non-standard | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Non-Standard Scheduled Task Running as SYSTEM' | |
| Risk = 'High' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs | |
| } | |
| Write-Detection $detection | |
| continue | |
| } | |
| # Detection - Task contains an IP Address | |
| if ($task.Execute -match $ipv4_pattern -or $task.Execute -match $ipv6_pattern) { | |
| # Task Contains an IP Address | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Scheduled Task contains an IP Address' | |
| Risk = 'High' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs | |
| } | |
| Write-Detection $detection | |
| } | |
| # TODO - Task contains domain-pattern | |
| # Task has suspicious terms | |
| $suspicious_keyword_regex = ".*(regsvr32.exe | downloadstring | mshta | frombase64 | tobase64 | EncodedCommand | DownloadFile | certutil | csc.exe | ieexec.exe | wmic.exe).*" | |
| if ($task.Execute -match $suspicious_keyword_regex -or $task.Arguments -match $suspicious_keyword_regex) { | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Scheduled Task contains suspicious keywords' | |
| Risk = 'High' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs | |
| } | |
| Write-Detection $detection | |
| } | |
| # Detection - User Created Tasks | |
| if ($task.Author -ne $null) { | |
| if (($task.Author).Contains("\")) { | |
| if ((($task.Author.Split('\')).count-1) -eq 1) { | |
| if ($task.RunAs -eq "SYSTEM") { | |
| # Current Task Executable Path is non-standard | |
| $detection = [PSCustomObject]@{ | |
| Name = 'User-Created Task running as SYSTEM' | |
| Risk = 'High' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs | |
| } | |
| Write-Detection $detection | |
| continue | |
| } | |
| # Single '\' in author most likely indicates it is a user-made task | |
| $detection = [PSCustomObject]@{ | |
| Name = 'User Created Task' | |
| Risk = 'Low' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| # Non-Standard EXE Path with Non-Default Argumentes | |
| if ($exe_match -eq $false -and $task.Arguments -notin $default_task_args) { | |
| # Current Task Executable Path is non-standard | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Non-Standard Scheduled Task Executable' | |
| Risk = 'Low' | |
| Source = 'Scheduled Tasks' | |
| Technique = "T1053: Scheduled Task/Job" | |
| Meta = "Task Name: "+ $task.TaskName+", Task Executable: "+ $task.Execute+", Arguments: "+$task.Arguments+", Task Author: "+ $task.Author+", RunAs: "+$task.RunAs+", UserId: "+$task.UserId | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| function Check-Users { | |
| # Supports Dynamic Snapshotting | |
| # Can possibly support drive retargeting by reading SAM/SYSTEM Hives if intact | |
| # https://habr.com/en/articles/441410/ | |
| if ($drivechange){ | |
| Write-Message "Skipping User Analysis - No Drive Retargeting [yet]" | |
| return | |
| } | |
| Write-Message "Checking Local Administrators" | |
| # TODO - Catch error with outdated powershell versions that do not support Get-LocalGroupMember and use alternative gather mechanism | |
| # Find all local administrators and their last logon time as well as if they are enabled. | |
| $local_admins = Get-LocalGroupMember -Group "Administrateurs" | Select-Object * | |
| foreach ($admin in $local_admins){ | |
| $admin_user = Get-LocalUser -SID $admin.SID | Select-Object AccountExpires,Description,Enabled,FullName,PasswordExpires,UserMayChangePassword,PasswordLastSet,LastLogon,Name,SID,PrincipalSource | |
| Write-SnapshotMessage -Key $admin.name -Value $admin.name -Source "Users" | |
| if ($loadsnapshot -and (Check-IfAllowed $allowlist_users $admin.nam $admin.name)) { | |
| continue | |
| } | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Local Administrator Account' | |
| Risk = 'Medium' | |
| Source = 'Users' | |
| Technique = "T1136: Create Account" | |
| Meta = "Name: "+$admin.Name +", Last Logon: "+ $admin_user.LastLogon+", Enabled: "+ $admin_user.Enabled | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| function Check-Services { | |
| # Supports Dynamic Snapshotting | |
| # Support Drive Retargeting | |
| Write-Message "Checking Windows Services" | |
| $default_service_exe_paths = @( | |
| "`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /medsvc", | |
| "`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /svc", | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\Edge\Application\*\elevation_service.exe`"", | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /medsvc", | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /svc", | |
| "`"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe`" /service", | |
| "`"$env_assumedhomedrive\Program Files\Google\Chrome\Application\*\elevation_service.exe`"", | |
| "`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\FileSyncHelper.exe`"", | |
| "`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\OneDriveUpdaterService.exe`"", | |
| "`"$env_assumedhomedrive\Program Files\Microsoft Update Health Tools\uhssvc.exe`"", | |
| "`"$env_assumedhomedrive\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe`" -s NVDisplay.ContainerLocalSystem -f `"$env_assumedhomedrive\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log`" -l 3 -d `"$env_assumedhomedrive\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem`" -r -p 30000 ", | |
| "`"$env_assumedhomedrive\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`"", | |
| "`"$env_assumedhomedrive\Program Files\Windows Media Player\wmpnetwk.exe`"", | |
| "`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\MsMpEng.exe`"", | |
| "`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\NisSrv.exe`"", | |
| "`"$env_assumedhomedrive\Windows\CxSvc\CxAudioSvc.exe`"", | |
| "`"$env_assumedhomedrive\Windows\CxSvc\CxUtilSvc.exe`"", | |
| "`"$env_assumedhomedrive\Windows\System32\wbengine.exe`"", | |
| "$env_assumedhomedrive\Windows\Microsoft.Net\*\*\WPF\PresentationFontCache.exe", | |
| "$env_assumedhomedrive\Windows\Microsoft.NET\Framework64\*\SMSvcHost.exe", | |
| "$env_assumedhomedrive\Windows\servicing\TrustedInstaller.exe", | |
| "$env_assumedhomedrive\Windows\System32\AgentService.exe", | |
| "$env_assumedhomedrive\Windows\System32\alg.exe", | |
| "$env_assumedhomedrive\Windows\System32\Alps\GlidePoint\HidMonitorSvc.exe", | |
| "$env_assumedhomedrive\Windows\System32\AppVClient.exe", | |
| "$env_assumedhomedrive\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe", | |
| "$env_assumedhomedrive\Windows\System32\CredentialEnrollmentManager.exe", | |
| "$env_assumedhomedrive\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_*\igfxCUIService.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_*\HotKeyServiceUWP.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_*\LanWlanWwanSwitchingServiceUWP.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_*\RstMwService.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_*\OneApp.IGCC.WinService.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_*\IntelCpHDCPSvc.exe", | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_*\IntelCpHeciSvc.exe", | |
| "$env_assumedhomedrive\Windows\System32\fxssvc.exe", | |
| "$env_assumedhomedrive\Windows\System32\ibtsiva", | |
| "$env_assumedhomedrive\Windows\System32\locator.exe", | |
| "$env_assumedhomedrive\Windows\System32\lsass.exe", | |
| "$env_assumedhomedrive\Windows\System32\msdtc.exe", | |
| "$env_assumedhomedrive\Windows\System32\msiexec.exe /V", | |
| "$env_assumedhomedrive\Windows\System32\nvwmi64.exe", | |
| "$env_assumedhomedrive\Windows\System32\OpenSSH\ssh-agent.exe", | |
| "$env_assumedhomedrive\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe", | |
| "$env_assumedhomedrive\Windows\System32\RSoPProv.exe", | |
| "$env_assumedhomedrive\WINDOWS\RtkBtManServ.exe", | |
| "$env_assumedhomedrive\Windows\runSW.exe", | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k rpcss" | |
| "$env_assumedhomedrive\Windows\System32\SearchIndexer.exe /Embedding", | |
| "$env_assumedhomedrive\Windows\System32\SecurityHealthService.exe", | |
| "$env_assumedhomedrive\Windows\System32\SensorDataService.exe", | |
| "$env_assumedhomedrive\Windows\System32\SgrmBroker.exe", | |
| "$env_assumedhomedrive\Windows\System32\snmptrap.exe", | |
| "$env_assumedhomedrive\Windows\System32\spectrum.exe", | |
| "$env_assumedhomedrive\Windows\System32\spoolsv.exe", | |
| "$env_assumedhomedrive\Windows\System32\sppsvc.exe", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k AarSvcGroup -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k appmodel -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k appmodel", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k AppReadiness -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k AppReadiness", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k AssignedAccessManagerSvc", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k autoTimeSvc", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k AxInstSVGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k BcastDVRUserService", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k BthAppGroup -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k Camera", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k CameraMonitor", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k ClipboardSvcGroup -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k CloudIdServiceGroup -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k DcomLaunch -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k DcomLaunch", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k defragsvc", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k DevicesFlow -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k DevicesFlow", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k diagnostics", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k DialogBlockingService", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k ICService -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k imgsvc", | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k ICService", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k KpsSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k localService -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetworkFirewall -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted", | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LxssManagerUser -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k McpManagementServiceGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetSvcs -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceNetworkRestricted -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceNetworkRestricted", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k PeerDist", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k print", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k PrintWorkflow", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k rdxgroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k rpcss -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k RPCSS -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k SDRSVC", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k smbsvcs", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k smphost", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k swprv", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k termsvcs", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k UdkSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k UnistackSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k utcsvc -p", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k utcsvc", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k WbioSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k WepHostSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k WerSvcGroup", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k wsappx -p", | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k wcssvc" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k wsappx", | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k wusvcs -p", | |
| "$env_assumedhomedrive\Windows\System32\TieringEngineService.exe", | |
| "$env_assumedhomedrive\Windows\System32\UI0Detect.exe", | |
| "$env_assumedhomedrive\Windows\System32\vds.exe", | |
| "$env_assumedhomedrive\Windows\System32\vssvc.exe", | |
| "$env_assumedhomedrive\Windows\System32\wbem\WmiApSrv.exe", | |
| "$env_assumedhomedrive\Windows\SysWow64\perfhost.exe", | |
| "$env_assumedhomedrive\Windows\SysWOW64\XtuService.exe" | |
| "$env_assumedhomedrive\WINDOWS\system32\dllhost.exe /Processid:*" | |
| "$env_assumedhomedrive\Windows\System32\drivers\1394ohci.sys" | |
| "System32\drivers\3ware.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k AarSvcGroup -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k AarSvcGroup -p" | |
| "System32\drivers\ACPI.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\AcpiDev.sys" | |
| "System32\Drivers\acpiex.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\acpipagr.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\acpipmi.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\acpitime.sys" | |
| "system32\drivers\Acx01000.sys" | |
| "System32\drivers\ADP80XX.SYS" | |
| "$env_assumedhomedrive\Windows\system32\drivers\afd.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\afunix.sys" | |
| "system32\DRIVERS\ahcache.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\alg.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\amdgpio2.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\amdi2c.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\amdk8.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\amdppm.sys" | |
| "System32\drivers\amdsata.sys" | |
| "System32\drivers\amdsbs.sys" | |
| "System32\drivers\amdxata.sys" | |
| "system32\drivers\appid.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\AppleKmdfFilter.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\AppleLowerFilter.sys" | |
| "system32\drivers\applockerfltr.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k AppReadiness -p" | |
| "$env_assumedhomedrive\Windows\system32\AppVClient.exe" | |
| "$env_assumedhomedrive\Windows\system32\drivers\AppvStrm.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\AppvVemgr.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\AppvVfs.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k wsappx -p" | |
| "System32\drivers\arcsas.sys" | |
| #"`"$env_assumedhomedrive\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\AXSP\*\atkexComSvc.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k AssignedAccessManagerSvc" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\Update\AsusUpdate.exe`" /svc" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\AsusFanControlService\*\AsusFanControlService.exe`"" | |
| "\??\$env_assumedhomedrive\Windows\system32\drivers\AsIO2.sys" | |
| "\??\$env_assumedhomedrive\Windows\system32\drivers\AsIO3.sys" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\Update\AsusUpdate.exe`" /medsvc" | |
| #"$env_assumedhomedrive\Windows\System32\AsusUpdateCheck.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\asyncmac.sys" | |
| "System32\drivers\atapi.sys" | |
| #"\??\D:\SteamLibrary\steamapps\common\Call of Duty HQ\randgrid.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k autoTimeSvc" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k AxInstSVGroup" | |
| "System32\drivers\bxvbda.sys" | |
| "system32\drivers\bam.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_*\BasicDisplay.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_*\BasicRender.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k BcastDVRUserService" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k BcastDVRUserService" | |
| "$env_assumedhomedrive\Windows\System32\drivers\bcmfn2.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\Common Files\BattlEye\BEService.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p" | |
| "$env_assumedhomedrive\Windows\system32\drivers\bindflt.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k BthAppGroup -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k BthAppGroup -p" | |
| "system32\DRIVERS\bowser.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted" | |
| "$env_assumedhomedrive\Windows\System32\drivers\BthA2dp.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\BthEnum.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\bthhfenum.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\BTHMINI.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\bthmodem.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\bthpan.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\BTHport.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\BTHUSB.sys" | |
| "System32\drivers\bttflt.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\buttonconverter.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\CAD.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k appmodel -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k ClipboardSvcGroup -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k ClipboardSvcGroup -p" | |
| "system32\DRIVERS\cdfs.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\System32\drivers\cdrom.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs" | |
| "System32\drivers\cht4sx64.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\cht4vx64.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\circlass.sys" | |
| "system32\drivers\cldflt.sys" | |
| "System32\drivers\CLFS.sys" | |
| "`"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe`" /service" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k wsappx -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k CloudIdServiceGroup -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\CmBatt.sys" | |
| "System32\Drivers\cng.sys" | |
| "System32\DRIVERS\cnghwassist.sys" | |
| #"`"$env_assumedhomedrive\Program Files\Docker\Docker\com.docker.service`"" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_*\CompositeBus.sys" | |
| "$env_assumedhomedrive\Windows\system32\dllhost.exe /Processid:{*}" | |
| "System32\drivers\condrv.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p" | |
| #"$env_assumedhomedrive\Windows\System32\CorsairGamingAudioCfgService64.exe" | |
| #"\??\$env_assumedhomedrive\Windows\System32\drivers\CorsairGamingAudio64.sys" | |
| #"\??\$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys" | |
| #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\CueUniwillService.exe`"" | |
| #"$env_assumedhomedrive\Windows\System32\drivers\CorsairVBusDriver.sys" | |
| #"$env_assumedhomedrive\Windows\System32\drivers\CorsairVHidDriver.sys" | |
| #"\??\$env_assumedhomedrive\Windows\temp\cpuz152\cpuz152_x64.sys" | |
| #"\??\$env_assumedhomedrive\Windows\temp\cpuz153\cpuz153_x64.sys" | |
| #"\??\$env_assumedhomedrive\Windows\temp\cpuz154\cpuz154_x64.sys" | |
| "$env_assumedhomedrive\Windows\system32\CredentialEnrollmentManager.exe" | |
| "$env_assumedhomedrive\Windows\system32\CredentialEnrollmentManager.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkService -p" | |
| "system32\drivers\csc.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "\??\$env_assumedhomedrive\Windows\system32\drivers\CtiAIo64.sys" | |
| "system32\drivers\dam.sys" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe`" /svc" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe`" /medsvc" | |
| "$env_assumedhomedrive\Windows\system32\DbxSvc.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\dc1-controller.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k defragsvc" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "System32\Drivers\dfsc.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k diagnostics" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k utcsvc -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DialogBlockingService" | |
| "System32\drivers\disk.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\dmvsc.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\drmkaud.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\dxgkrnl.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\e2f68.inf_amd64_*\e2f68.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe`"" | |
| "System32\drivers\evbda.sys" | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /svc" | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /medsvc" | |
| "$env_assumedhomedrive\Windows\System32\lsass.exe" | |
| "System32\drivers\EhStorClass.sys" | |
| "System32\drivers\EhStorTcgDrv.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k appmodel -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\errdev.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\fxssvc.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\fdc.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "system32\drivers\filecrypt.sys" | |
| "System32\drivers\fileinfo.sys" | |
| "`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\FileSyncHelper.exe`"" | |
| "system32\drivers\filetrace.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\flpydisk.sys" | |
| "system32\drivers\fltmgr.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\Microsoft.Net\Framework64\v*\WPF\PresentationFontCache.exe" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k Camera" | |
| "System32\drivers\FsDepends.sys" | |
| "System32\DRIVERS\fvevol.sys" | |
| "`"$env_assumedhomedrive\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe`" -service" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vmgencounter.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_*\genericusbfn.sys" | |
| "`"$env_assumedhomedrive\Program Files\Google\Chrome\Application\*\elevation_service.exe`"" | |
| #"system32\DRIVERS\googledrive*.sys" | |
| "System32\Drivers\msgpioclx.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "System32\drivers\gpuenergydrv.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /svc" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /medsvc" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\hcmon.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\HdAudio.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\HDAudBus.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\HidBatt.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hidbth.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hidi2c.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hidinterrupt.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hidir.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hidspi.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hidusb.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetSvcs -p" | |
| "System32\drivers\hnswfpdriver.sys" | |
| "System32\drivers\HpSAMD.sys" | |
| "system32\drivers\HTTP.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hvcrash.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "system32\drivers\hvservice.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\hvsocketcontrol.sys" | |
| "System32\Drivers\mshwnclx.sys" | |
| "System32\drivers\hwpolicy.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\hyperkbd.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\HyperVideo.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\i8042prt.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iagpio.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iai2c.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSSi_GPIO.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\iaLPSSi_I2C.sys" | |
| "System32\drivers\iaStorAVC.sys" | |
| "System32\drivers\iaStorV.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\ibbus.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_f75065d93521b024\ibtusb.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\IndirectKmd.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "System32\drivers\intelide.sys" | |
| "System32\drivers\intelpep.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\intelpmax.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\intelppm.sys" | |
| "system32\drivers\iorate.sys" | |
| "system32\DRIVERS\ipfltdrv.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetSvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\IPMIDrv.sys" | |
| "System32\drivers\ipnat.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\ipt.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "System32\drivers\isapnp.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\msiscsi.sys" | |
| "System32\drivers\ItSas35i.sys" | |
| #"`"$env_assumedhomedrive\Program Files\JetBrains\ETW Host\16\JetBrains.Etw.Collector.Host.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\dal.inf_*\jhi_service.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\kbdclass.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\kbdhid.sys" | |
| "system32\drivers\kbldfltr.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\kdnic.sys" | |
| "$env_assumedhomedrive\Windows\system32\lsass.exe" | |
| "System32\Drivers\ksecdd.sys" | |
| "System32\Drivers\ksecpkg.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\ksthunk.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p" | |
| "System32\drivers\l2bridge.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "`"$env_assumedhomedrive\Program Files\LGHUB\lghub_updater.exe`" --run-as-service" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p" | |
| "`"$env_assumedhomedrive\Program Files (x86)\LightingService\LightingService.exe`"" | |
| "system32\drivers\lltdio.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\drivers\logi_generic_hid_filter.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_bus_enum.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_hid_filter.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_hid_lo.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_vir_hid.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_xlcore.sys" | |
| "System32\drivers\lsi_sas.sys" | |
| "System32\drivers\lsi_sas2i.sys" | |
| "System32\drivers\lsi_sas3i.sys" | |
| "System32\drivers\lsi_sss.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "$env_assumedhomedrive\Windows\system32\drivers\luafv.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs" | |
| "system32\drivers\lxss.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LxssManagerUser -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LxssManagerUser -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mausbhost.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mausbip.sys" | |
| "$env_assumedhomedrive\Windows\System32\Drivers\MbamChameleon.sys" | |
| "system32\DRIVERS\MbamElam.sys" | |
| "`"$env_assumedhomedrive\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\Drivers\mbamswissarmy.sys" | |
| "system32\drivers\MbbCx.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k McpManagementServiceGroup" | |
| "System32\drivers\megasas.sys" | |
| "System32\drivers\MegaSas2i.sys" | |
| "System32\drivers\megasas35i.sys" | |
| "System32\drivers\megasr.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_*\x64\TeeDriverW10x64.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\Edge\Application\*\elevation_service.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mlx4_bus.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\mmcss.sys" | |
| "system32\drivers\modem.sys" | |
| #"`"$env_assumedhomedrive\Program Files\MongoDB\Server\*\bin\mongod.exe`" --config `"$env_assumedhomedrive\Program Files\MongoDB\Server\*\bin\mongod.cfg`" --service" | |
| "$env_assumedhomedrive\Windows\System32\drivers\monitor.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mouclass.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mouhid.sys" | |
| "System32\drivers\mountmgr.sys" | |
| "\??\$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Definition Updates\{*}\MpKslDrv.sys" | |
| "System32\drivers\mpsdrv.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p" | |
| "$env_assumedhomedrive\Windows\system32\drivers\mrxdav.sys" | |
| "system32\DRIVERS\mrxsmb.sys" | |
| "system32\DRIVERS\mrxsmb20.sys" | |
| "System32\drivers\bridge.sys" | |
| "$env_assumedhomedrive\Windows\System32\msdtc.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\msgpiowin32.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mshidkmdf.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mshidumdf.sys" | |
| "\??\$env_assumedhomedrive\Windows\system32\drivers\MsIo64.sys" | |
| "System32\drivers\msisadrv.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\msiexec.exe /V" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\MSKSSRV.sys" | |
| "system32\drivers\mslldp.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\MSPCLOCK.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\MSPQM.sys" | |
| "system32\drivers\msquic.sys" | |
| "system32\drivers\msseccore.sys" | |
| "system32\drivers\mssecflt.sys" | |
| "system32\drivers\mssecwfp.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\mssmbios.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\MSTEE.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\MTConfig.sys" | |
| "System32\Drivers\mup.sys" | |
| "System32\drivers\mvumis.sys" | |
| "system32\DRIVERS\nwifi.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetSvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\ndfltr.sys" | |
| "system32\drivers\ndis.sys" | |
| "System32\drivers\ndiscap.sys" | |
| "System32\drivers\NdisImPlatform.sys" | |
| "System32\DRIVERS\ndistapi.sys" | |
| "system32\drivers\ndisuio.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\NdisVirtualBus.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\ndiswan.sys" | |
| "System32\DRIVERS\ndiswan.sys" | |
| "system32\drivers\NDKPing.sys" | |
| "System32\DRIVERS\NDProxy.sys" | |
| "system32\drivers\Ndu.sys" | |
| "system32\drivers\NetAdapterCx.sys" | |
| "system32\drivers\netbios.sys" | |
| "System32\DRIVERS\netbt.sys" | |
| "$env_assumedhomedrive\Windows\system32\lsass.exe" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\Microsoft.NET\Framework64\v*\SMSvcHost.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\netvsc.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\Netwtw10.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\Netwtw12.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\npcap.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\npsvctrig.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "system32\drivers\nsiproxy.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetSvcs" | |
| "`"$env_assumedhomedrive\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe`" -s NvContainerLocalSystem -f `"$env_assumedhomedrive\ProgramData\NVIDIA\NvContainerLocalSystem.log`" -l 3 -d `"$env_assumedhomedrive\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem`" -r -p 30000 -st `"$env_assumedhomedrive\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll`"" | |
| "System32\drivers\nvdimm.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_*\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f $env_assumedhomedrive\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d $env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_*\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem" | |
| "$env_assumedhomedrive\Windows\system32\drivers\nvhda64v.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_*\nvlddmkm.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_*\NvModuleTracker.sys" | |
| "System32\drivers\nvraid.sys" | |
| "System32\drivers\nvstor.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\nvvad64v.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\nvvhci.sys" | |
| "`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\OneDriveUpdaterService.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet" | |
| "System32\drivers\p9rdr.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\parport.sys" | |
| "System32\drivers\partmgr.sys" | |
| "system32\drivers\passthruparser.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "System32\drivers\pci.sys" | |
| "System32\drivers\pciide.sys" | |
| "System32\drivers\pcmcia.sys" | |
| "System32\drivers\pcw.sys" | |
| "system32\drivers\pdc.sys" | |
| "system32\drivers\peauth.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k PeerDist" | |
| "$env_assumedhomedrive\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe" | |
| "System32\drivers\percsas2i.sys" | |
| "System32\drivers\percsas3i.sys" | |
| "$env_assumedhomedrive\Windows\SysWow64\perfhost.exe" | |
| #"$env_assumedhomedrive`\Program Files (x86)\PgBouncer\bin\pgbouncer.exe --service `"$env_assumedhomedrive\Program Files (x86)\PgBouncer\share\pgbouncer.ini`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "system32\drivers\PktMon.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p" | |
| #"$env_assumedhomedrive\Program Files (x86)\GeoComply\//PlayerLocationCheck///Application/service.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "System32\drivers\pmem.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\pnpmem.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\portcfg.sys" | |
| #"`"$env_assumedhomedrive\Program Files\PostgreSQL\14\bin\pg_ctl.exe`" runservice -N `"postgresql-x64-14`" -D `"$env_assumedhomedrive\Program Files\PostgreSQL\14\data`" -w" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\raspptp.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k print" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k PrintWorkflow" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k PrintWorkflow" | |
| #"`"$env_assumedhomedrive\Program Files\Private Internet Access\pia-service.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files\Private Internet Access\pia-wgservice.exe`" `"$env_assumedhomedrive\Program Files\Private Internet Access\data\wgpia0.conf`"" | |
| "$env_assumedhomedrive\Windows\System32\drivers\processr.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "System32\drivers\pacer.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "system32\drivers\pvhdparser.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p" | |
| "$env_assumedhomedrive\Windows\system32\drivers\qwavedrv.sys" | |
| "`"$env_assumedhomedrive\Program Files\erl-*\erts-*\bin\erlsrv.exe`"" | |
| "system32\DRIVERS\ramdisk.sys" | |
| "System32\DRIVERS\rasacd.sys" | |
| #"$env_assumedhomedrive\Windows\System32\drivers\AgileVpn.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\rasl2tp.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs" | |
| "System32\DRIVERS\raspppoe.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\rassstp.sys" | |
| "system32\DRIVERS\rdbss.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\rdpbus.sys" | |
| "System32\drivers\rdpdr.sys" | |
| "System32\drivers\rdpvideominiport.sys" | |
| "System32\drivers\rdyboost.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k localService -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k rdxgroup" | |
| "$env_assumedhomedrive\Windows\System32\drivers\rfcomm.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\rhproxy.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" | |
| #"`"$env_assumedhomedrive\Program Files\Rockstar Games\Launcher\RockstarService.exe`"" | |
| #"`"$env_assumedhomedrive\Program Files\ASUS\ROG Live Service\ROGLiveService.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k RPCSS -p" | |
| "$env_assumedhomedrive\Windows\system32\locator.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k rpcss -p" | |
| "system32\drivers\rspndr.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vms3cap.sys" | |
| "$env_assumedhomedrive\Windows\system32\lsass.exe" | |
| "System32\drivers\sbp2port.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" | |
| "System32\DRIVERS\scfilter.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "System32\drivers\scmbus.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs" | |
| "$env_assumedhomedrive\Windows\System32\drivers\sdbus.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\SDFRd.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k SDRSVC" | |
| "$env_assumedhomedrive\Windows\System32\drivers\sdstor.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\SecurityHealthService.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "`"$env_assumedhomedrive\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\SensorDataService.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p" | |
| "system32\drivers\SerCx.sys" | |
| "system32\drivers\SerCx2.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\serenum.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\serial.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\sermouse.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\sfloppy.sys" | |
| "system32\drivers\SgrmAgent.sys" | |
| "$env_assumedhomedrive\Windows\system32\SgrmBroker.exe" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "System32\drivers\SiSRaid2.sys" | |
| "System32\drivers\sisraid4.sys" | |
| "System32\drivers\SmartSAMD.sys" | |
| "System32\DRIVERS\smbdirect.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k smphost" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\snmptrap.exe" | |
| "system32\drivers\spaceparser.sys" | |
| "System32\drivers\spaceport.sys" | |
| "System32\drivers\SpatialGraphFilter.sys" | |
| "system32\drivers\SpbCx.sys" | |
| "$env_assumedhomedrive\Windows\system32\spectrum.exe" | |
| "$env_assumedhomedrive\Windows\System32\spoolsv.exe" | |
| "$env_assumedhomedrive\Windows\system32\sppsvc.exe" | |
| "System32\DRIVERS\srv2.sys" | |
| "System32\DRIVERS\srvnet.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p" | |
| "$env_assumedhomedrive\Windows\System32\OpenSSH\ssh-agent.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k appmodel -p" | |
| "`"$env_assumedhomedrive\Program Files (x86)\Common Files\Steam\steamservice.exe`" /RunAsService" | |
| "System32\drivers\stexstor.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k imgsvc" | |
| "System32\drivers\storahci.sys" | |
| "System32\drivers\vmstorfl.sys" | |
| "System32\drivers\stornvme.sys" | |
| "system32\drivers\storqosflt.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "System32\drivers\storufs.sys" | |
| "System32\drivers\storvsc.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\storvsp.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_*\swenum.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k swprv" | |
| "$env_assumedhomedrive\Windows\System32\drivers\Synth3dVsc.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\tap-pia-*.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p" | |
| "System32\drivers\tcpip.sys" | |
| "System32\drivers\tcpip.sys" | |
| "System32\drivers\tcpipreg.sys" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\tdx.sys" | |
| #"`"$env_assumedhomedrive\Program Files\TeamViewer\TeamViewer_Service.exe`"" | |
| "System32\drivers\IntelTA.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\terminpt.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService" | |
| "$env_assumedhomedrive\Program Files\A Subfolder\B Subfolder\C Subfolder\SomeExecutable.exe" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\TieringEngineService.exe" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\tpm.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\servicing\TrustedInstaller.exe" | |
| "system32\drivers\tsusbflt.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\TsUsbGD.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\tsusbhub.sys" | |
| "System32\drivers\tunnel.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\uaspstor.sys" | |
| "System32\Drivers\UcmCx.sys" | |
| "System32\Drivers\UcmTcpciCx.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\UcmUcsiAcpiClient.sys" | |
| "System32\Drivers\UcmUcsiCx.sys" | |
| "system32\drivers\ucx01000.sys" | |
| "system32\drivers\udecx.sys" | |
| "system32\DRIVERS\udfs.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UdkSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UdkSvcGroup" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\uefi.inf_amd64_*\UEFI.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\UevAgentDriver.sys" | |
| "$env_assumedhomedrive\Windows\system32\AgentService.exe" | |
| "system32\drivers\ufx01000.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_*\UfxChipidea.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\ufxsynopsys.sys" | |
| "`"$env_assumedhomedrive\Program Files\Microsoft Update Health Tools\uhssvc.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_*\umbus.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\umpass.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_*\urschipidea.sys" | |
| "system32\drivers\urscx01000.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_*\urssynopsys.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\usbaudio.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbaudio2.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbccgp.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbcir.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbehci.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbhub.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\UsbHub3.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbohci.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbprint.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usb80236.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbser.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\USBSTOR.SYS" | |
| "$env_assumedhomedrive\Windows\System32\drivers\usbuhci.sys" | |
| "$env_assumedhomedrive\Windows\System32\Drivers\usbvideo.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\USBXHCI.SYS" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\lsass.exe" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxNetAdp6.sys" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxNetLwf.sys" | |
| "`"$env_assumedhomedrive\Program Files\Oracle\VirtualBox\VBoxSDS.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxSup.sys" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxUSBMon.sys" | |
| "System32\drivers\vdrvroot.sys" | |
| "$env_assumedhomedrive\Windows\System32\vds.exe" | |
| "System32\drivers\VerifierExt.sys" | |
| "system32\drivers\vfpext.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vhdmp.sys" | |
| "system32\drivers\vhdparser.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vhf.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\Vid.sys" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_*\vrd.sys" | |
| #"`"$env_assumedhomedrive\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe`"" | |
| "System32\drivers\vmbus.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\VMBusHID.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vmbusr.sys" | |
| "System32\drivers\vmci.sys" | |
| "$env_assumedhomedrive\Windows\system32\vmcompute.exe" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vmgid.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k ICService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k ICService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\vmnetadapter.sys" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\vmnetbridge.sys" | |
| "$env_assumedhomedrive\Windows\SysWOW64\vmnetdhcp.exe" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\vmnetuserif.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vmswitch.sys" | |
| "system32\drivers\VmsProxyHNic.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\VmsProxyHNic.sys" | |
| "System32\drivers\vmswitch.sys" | |
| "system32\drivers\VmsProxy.sys" | |
| "System32\drivers\vmswitch.sys" | |
| "System32\drivers\vmswitch.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vmusb.sys" | |
| # "`"$env_assumedhomedrive\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe`"" | |
| "$env_assumedhomedrive\Windows\SysWOW64\vmnat.exe" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\vmx86.sys" | |
| "$env_assumedhomedrive\Windows\system32\drivers\mvvad.sys" | |
| "System32\drivers\volmgr.sys" | |
| "System32\drivers\volmgrx.sys" | |
| "System32\drivers\volsnap.sys" | |
| "System32\drivers\volume.sys" | |
| "System32\drivers\vpci.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vpcivsp.sys" | |
| "System32\drivers\vsmraid.sys" | |
| "system32\DRIVERS\vsock.sys" | |
| "$env_assumedhomedrive\Windows\system32\vssvc.exe" | |
| "`"$env_assumedhomedrive\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe`"" | |
| "SysWOW64\drivers\vstor2-x64.sys" | |
| "System32\drivers\vstxraid.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vwifibus.sys" | |
| "System32\drivers\vwififlt.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\vwifimp.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k wusvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\wacompen.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k appmodel -p" | |
| "System32\DRIVERS\wanarp.sys" | |
| "System32\DRIVERS\wanarp.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted" | |
| "`"$env_assumedhomedrive\Windows\system32\wbengine.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k WbioSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\drivers\wcifs.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation -p" | |
| "$env_assumedhomedrive\Windows\system32\drivers\wcnfs.sys" | |
| "system32\drivers\wd\WdBoot.sys" | |
| "system32\drivers\Wdf01000.sys" | |
| "system32\drivers\wd\WdFilter.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "system32\DRIVERS\wdiwifi.sys" | |
| "system32\drivers\WdmCompanionFilter.sys" | |
| "system32\drivers\wd\WdNisDrv.sys" | |
| "`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\NisSrv.exe`"" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k WepHostSvcGroup" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k WerSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "System32\drivers\wfplwfs.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "system32\drivers\wimmount.sys" | |
| "`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\MsMpEng.exe`"" | |
| "system32\drivers\WindowsTrustedRT.sys" | |
| "System32\drivers\WindowsTrustedRTProxy.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\winmad.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "system32\drivers\winnat.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\WinUSB.SYS" | |
| "$env_assumedhomedrive\Windows\System32\drivers\winverbs.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\wmiacpi.sys" | |
| "$env_assumedhomedrive\Windows\system32\wbem\WmiApSrv.exe" | |
| "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_*\WMIRegistrationService.exe" | |
| "`"$env_assumedhomedrive\Program Files\Windows Media Player\wmpnetwk.exe`"" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" | |
| "System32\drivers\WpdUpFltr.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup" | |
| "$env_assumedhomedrive\Windows\system32\drivers\ws2ifsl.sys" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\SearchIndexer.exe /Embedding" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "system32\drivers\WudfPf.sys" | |
| "$env_assumedhomedrive\Windows\System32\drivers\WUDFRd.sys" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\WUDFRd.sys" | |
| "$env_assumedhomedrive\Windows\system32\DRIVERS\WUDFRd.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\xboxgip.sys" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p" | |
| "$env_assumedhomedrive\Windows\System32\drivers\xinputhid.sys" | |
| "`"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE`"" | |
| "$env_assumedhomedrive\Windows\System32\svchost.exe -k secsvcs" | |
| "system32\DRIVERS\wfplwf.sys" | |
| "C:\Windows\system32\drivers\wd.sys" | |
| "C:\Windows\system32\Wat\WatAdminSvc.exe" | |
| "system32\DRIVERS\vwifibus.sys" | |
| "C:\Windows\system32\drivers\vsmraid.sys" | |
| "C:\Windows\system32\drivers\vmbus.sys" | |
| "C:\Windows\system32\drivers\viaide.sys" | |
| "system32\DRIVERS\vhdmp.sys" | |
| "System32\drivers\rdvgkmd.sys" | |
| "C:\Windows\System32\drivers\vga.sys" | |
| "system32\DRIVERS\vgapnp.sys" | |
| "system32\DRIVERS\usbuhci.sys" | |
| "system32\DRIVERS\USBSTOR.SYS" | |
| "system32\DRIVERS\usbhub.sys" | |
| "system32\DRIVERS\usbehci.sys" | |
| "system32\DRIVERS\umbus.sys" | |
| "C:\Windows\system32\drivers\uliagpkx.sys" | |
| "C:\Windows\system32\drivers\uagp35.sys" | |
| "system32\drivers\tsusbhub.sys" | |
| "System32\drivers\truecrypt.sys" | |
| "System32\DRIVERS\tssecsrv.sys" | |
| "system32\drivers\tpm.sys" | |
| "system32\DRIVERS\termdd.sys" | |
| "system32\DRIVERS\tdx.sys" | |
| "system32\drivers\tdtcp.sys" | |
| "system32\drivers\tdpipe.sys" | |
| "System32\drivers\synth3dvsc.sys" | |
| "system32\DRIVERS\swenum.sys" | |
| "C:\Windows\system32\drivers\storvsc.sys" | |
| "C:\Windows\system32\drivers\stexstor.sys" | |
| "System32\DRIVERS\srv.sys" | |
| "system32\DRIVERS\smb.sys" | |
| "C:\Windows\system32\drivers\sisraid4.sys" | |
| "C:\Windows\system32\drivers\SiSRaid2.sys" | |
| "C:\Windows\system32\drivers\sffp_sd.sys" | |
| "C:\Windows\system32\drivers\sffp_mmc.sys" | |
| "C:\Windows\system32\drivers\sbp2port.sys" | |
| "C:\Windows\system32\svchost.exe -k regsvc" | |
| "system32\drivers\rdprefmp.sys" | |
| "system32\drivers\rdpencdd.sys" | |
| "System32\DRIVERS\RDPCDD.sys" | |
| "system32\DRIVERS\rdpbus.sys" | |
| "system32\DRIVERS\rassstp.sys" | |
| "system32\DRIVERS\rasl2tp.sys" | |
| "C:\Windows\system32\drivers\ql40xx.sys" | |
| "C:\Windows\system32\drivers\ql2300.sys" | |
| "system32\DRIVERS\raspptp.sys" | |
| "C:\Windows\system32\drivers\pciide.sys" | |
| "C:\Windows\system32\drivers\ohci1394.sys" | |
| "C:\Windows\system32\drivers\nv_agp.sys" | |
| "C:\Windows\system32\drivers\nvstor.sys" | |
| "C:\Windows\system32\drivers\nvraid.sys" | |
| "`"c:\Program Files\Microsoft Security Client\NisSrv.exe`"" | |
| "`"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe`" -NetMsmqActivator" | |
| "system32\drivers\MSTEE.sys" | |
| "system32\DRIVERS\mssmbios.sys" | |
| "system32\drivers\MSPQM.sys" | |
| "system32\drivers\MSPCLOCK.sys" | |
| "`"c:\Program Files\Microsoft Security Client\MsMpEng.exe`"" | |
| "system32\drivers\MSKSSRV.sys" | |
| "C:\Windows\system32\drivers\msdsm.sys" | |
| "system32\drivers\msahci.sys" | |
| "system32\DRIVERS\mrxsmb10.sys" | |
| "C:\Windows\system32\drivers\mpio.sys" | |
| "system32\DRIVERS\MpFilter.sys" | |
| "system32\DRIVERS\mouclass.sys" | |
| "system32\DRIVERS\monitor.sys" | |
| "system32\DRIVERS\WUDFRd.sys" | |
| "C:\Windows\system32\drivers\sffdisk.sys" | |
| "system32\DRIVERS\NisDrvWFP.sys" | |
| "C:\Windows\system32\drivers\nfrd960.sys" | |
| "C:\Windows\system32\drivers\lsi_*.sys" | |
| "system32\DRIVERS\kbdclass.sys" | |
| "C:\Windows\system32\drivers\isapnp.sys" | |
| "system32\drivers\irenum.sys" | |
| "system32\DRIVERS\intelppm.sys" | |
| "C:\Windows\system32\drivers\iirsp.sys" | |
| "`"C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe`"" | |
| "C:\Windows\system32\drivers\iaStorV.sys" | |
| "system32\DRIVERS\i8042prt.sys" | |
| "C:\Windows\system32\drivers\HpSAMD.sys" | |
| "system32\DRIVERS\HDAudBus.sys" | |
| "system32\drivers\HdAudio.sys" | |
| "C:\Windows\system32\drivers\hcw85cir.sys" | |
| "C:\Windows\system32\drivers\gagp30kx.sys" | |
| "C:\Windows\system32\drivers\elxstor.sys" | |
| "C:\Windows\ehome\ehsched.exe" | |
| "C:\Windows\ehome\ehRecvr.exe" | |
| "C:\Windows\system32\drivers\evbda.sys" | |
| "system32\DRIVERS\e1e6032e.sys" | |
| "System32\drivers\discache.sys" | |
| "C:\Windows\system32\drivers\crcdisk.sys" | |
| "system32\DRIVERS\CompositeBus.sys" | |
| "system32\DRIVERS\compbatt.sys" | |
| "C:\Windows\system32\drivers\cmdide.sys" | |
| "system32\DRIVERS\CmBatt.sys" | |
| "C:\Windows\Microsoft.NET\Framework64\v*\mscorsvw.exe" | |
| "System32\CLFS.sys" | |
| "system32\DRIVERS\cdrom.sys" | |
| "C:\Windows\system32\svchost.exe -k bthsvcs" | |
| "C:\Windows\System32\Drivers\BrUsbSer.sys" | |
| "C:\Windows\System32\Drivers\BrUsbMdm.sys" | |
| "C:\Windows\System32\Drivers\BrUsbWdm.sys" | |
| "C:\Windows\System32\Drivers\Brserid.sys" | |
| "C:\Windows\System32\Drivers\BrFiltUp.sys" | |
| "C:\Windows\System32\Drivers\BrFiltLo.sys" | |
| "system32\DRIVERS\blbdrive.sys" | |
| "system32\DRIVERS\b57nd60a.sys" | |
| "C:\Windows\system32\drivers\bxvbda.sys" | |
| "system32\DRIVERS\athrx.sys" | |
| "system32\DRIVERS\asyncmac.sys" | |
| "C:\Windows\Microsoft.NET\Framework64\v*\aspnet_state.exe" | |
| "C:\Windows\system32\drivers\arcsas.sys" | |
| "C:\Windows\system32\drivers\arc.sys" | |
| "C:\Windows\system32\drivers\appid.sys" | |
| "C:\Windows\system32\IEEtwCollector.exe*" | |
| "C:\Windows\Microsoft.NET\Framework\v*\mscorsvw.exe" | |
| "C:\Windows\System32\Drivers\BrSerWdm.sys" | |
| "C:\Windows\system32\drivers\amdsbs.sys" | |
| "C:\Windows\system32\drivers\amdsata.sys" | |
| "C:\Windows\system32\drivers\amdide.sys" | |
| "C:\Windows\system32\drivers\aliide.sys" | |
| "C:\Windows\system32\drivers\agp440.sys" | |
| "C:\Windows\system32\drivers\adpu320.sys" | |
| "C:\Windows\system32\drivers\adpahci.sys" | |
| "C:\Windows\system32\drivers\adp94xx.sys" | |
| ) | |
| #$services = Get-CimInstance -ClassName Win32_Service | Select-Object Name, PathName, StartMode, Caption, DisplayName, InstallDate, ProcessId, State | |
| $service_path = "$regtarget_hklm`SYSTEM\$currentcontrolset\Services" | |
| $service_list = New-Object -TypeName "System.Collections.ArrayList" | |
| if (Test-Path -Path "Registry::$service_path") { | |
| $items = Get-ChildItem -Path "Registry::$service_path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider | |
| foreach ($item in $items) { | |
| $path = "Registry::"+$item.Name | |
| $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSProvider | |
| if ($data.ImagePath -ne $null){ | |
| $service = [PSCustomObject]@{ | |
| Name = $data.PSChildName | |
| PathName = $data.ImagePath | |
| } | |
| $service.PathName = $service.PathName.Replace("\SystemRoot", "$env_assumedhomedrive\Windows") | |
| $service_list.Add($service) | Out-Null | |
| } | |
| } | |
| } | |
| foreach ($service in $service_list){ | |
| Write-SnapshotMessage -Key $service.Name -Value $service.PathName -Source "Services" | |
| if ($loadsnapshot){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Allowlist Mismatch: Service Name\Path' | |
| Risk = 'Medium' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName | |
| } | |
| $result = Check-IfAllowed $allowtable_services $service.Name $service.PathName $detection | |
| if ($result){ | |
| continue | |
| } | |
| } | |
| foreach ($term in $rat_terms) { | |
| if ($service.PathName -match ".*$term.*") { | |
| # Service has a suspicious launch pattern matching a known RAT | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Service Argument has known-RAT Keyword' | |
| Risk = 'Medium' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName+", RAT Keyword: "+$term | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| if ($service.PathName -match "$env_assumedhomedrive\\Windows\\Temp\\.*") { | |
| # Service launching from Windows\Temp | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Service Launching from Windows Temp Directory' | |
| Risk = 'High' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName | |
| } | |
| Write-Detection $detection | |
| } | |
| # Detection - Non-Standard Tasks | |
| foreach ($i in $default_service_exe_paths){ | |
| if ( $service.PathName -like $i) { | |
| $exe_match = $true | |
| break | |
| } elseif ($service.PathName.Length -gt 0) { | |
| $exe_match = $false | |
| } | |
| } | |
| if ($exe_match -eq $false) { | |
| # Current Task Executable Path is non-standard | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Non-Standard Service Path' | |
| Risk = 'Low' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName | |
| } | |
| Write-Detection $detection | |
| } | |
| if ($service.PathName -match ".*cmd.exe /(k|c).*") { | |
| # Service has a suspicious launch pattern | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Service launching from cmd.exe' | |
| Risk = 'Medium' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName | |
| } | |
| Write-Detection $detection | |
| } | |
| if ($service.PathName -match ".*powershell.exe.*") { | |
| # Service has a suspicious launch pattern | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Service launching from powershell.exe' | |
| Risk = 'Medium' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName | |
| } | |
| Write-Detection $detection | |
| } | |
| if ($service.PathName -match $suspicious_terms) { | |
| # Service has a suspicious launch pattern | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Service launching with suspicious keywords' | |
| Risk = 'High' | |
| Source = 'Services' | |
| Technique = "T1543.003: Create or Modify System Process: Windows Service" | |
| Meta = "Service Name: "+ $service.Name+", Service Path: "+ $service.PathName | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| function Check-Processes { | |
| # Supports Dynamic Snapshotting | |
| # Does not support drive retargeting | |
| # TODO - Check for processes spawned from netsh.dll | |
| if ($drivechange){ | |
| Write-Message "Skipping Process Analysis - No Drive Retargeting" | |
| return | |
| } | |
| Write-Message "Checking Running Processes" | |
| $processes = Get-CimInstance -ClassName Win32_Process | Select-Object ProcessName,CreationDate,CommandLine,ExecutablePath,ParentProcessId,ProcessId | |
| foreach ($process in $processes){ | |
| Write-SnapshotMessage -Key $process.ProcessName -Value $process.ExecutablePath -Source "Processes" | |
| if ($loadsnapshot -and (Check-IfAllowed $allowlist_process_exes $process.ProcessName $process.ExecutablePath)) { | |
| continue | |
| } | |
| ForEach ($term in $rat_terms) { | |
| if ($process.CommandLine -match ".*$term.*") { | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Running Process has known-RAT Keyword' | |
| Risk = 'Medium' | |
| Source = 'Processes' | |
| Technique = "T1059: Command and Scripting Interpreter" | |
| Meta = "Process Name: "+ $process.ProcessName+", CommandLine: "+ $process.CommandLine+", Executable: "+$process.ExecutablePath+", RAT Keyword: "+$term | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| if ($process.CommandLine -match $ipv4_pattern -or $process.CommandLine -match $ipv6_pattern) { | |
| $detection = [PSCustomObject]@{ | |
| Name = 'IP Address Pattern detected in Process CommandLine' | |
| Risk = 'Medium' | |
| Source = 'Processes' | |
| Technique = "T1059: Command and Scripting Interpreter" | |
| Meta = "Process Name: "+ $process.ProcessName+", CommandLine: "+ $process.CommandLine+", Executable: "+$process.ExecutablePath | |
| } | |
| Write-Detection $detection | |
| } | |
| # TODO - Determine if this should be changed to implement allow-listing through a set boolean or stay as-is | |
| foreach ($path in $suspicious_process_paths) { | |
| if ($process.ExecutablePath -match $path){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Suspicious Executable Path on Running Process' | |
| Risk = 'High' | |
| Source = 'Processes' | |
| Technique = "T1059: Command and Scripting Interpreter" | |
| Meta = "Process Name: "+ $process.ProcessName+", CommandLine: "+ $process.CommandLine+", Executable: "+$process.ExecutablePath | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| } | |
| function Check-Connections { | |
| # Supports Dynamic Snapshotting | |
| # Does not support drive-retargeting | |
| if ($drivechange){ | |
| Write-Message "Skipping Network Connections - No Drive Retargeting" | |
| return | |
| } | |
| Write-Message "Checking Network Connections" | |
| $tcp_connections = Get-NetTCPConnection | Select-Object State,LocalAddress,LocalPort,OwningProcess,RemoteAddress,RemotePort | |
| $suspicious_ports = @(20,21,22,23,25,137,139,445,3389,443) | |
| $allow_listed_process_names = @( | |
| "brave", | |
| "chrome", | |
| "Discord", | |
| "firefox", | |
| "GitHubDesktop", | |
| "iexplorer", | |
| "msedge", | |
| "officeclicktorun" | |
| "OneDrive", | |
| "safari", | |
| "SearchApp", | |
| "Spotify", | |
| "steam" | |
| ) | |
| foreach ($conn in $tcp_connections) { | |
| #allowlist_remote_addresses | |
| $proc = Get-Process -Id $conn.OwningProcess -ErrorAction SilentlyContinue | Select-Object Name, Path | |
| Write-SnapshotMessage -Key $conn.RemoteAddress -Value $conn.RemoteAddress -Source 'Connections' | |
| if ($loadsnapshot -and (Check-IfAllowed $allowlist_remote_addresses $conn.RemoteAddress $conn.RemoteAddress)) { | |
| continue | |
| } | |
| if ($conn.State -eq 'Listen' -and $conn.LocalPort -gt 1024){ | |
| Write-SnapshotMessage -Key $proc.Name -Value $proc.Path -Source 'ProcessConnections' | |
| if ($loadsnapshot -and (Check-IfAllowed $allowlist_listeningprocs $proc.Name $proc.Path)) { | |
| continue | |
| } | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Process Listening on Ephemeral Port' | |
| Risk = 'Very Low' | |
| Source = 'Network Connections' | |
| Technique = "T1071: Application Layer Protocol" | |
| Meta = "Local Port: "+$conn.LocalPort+", PID: "+$conn.OwningProcess+", Process Name: "+$proc.Name+", Process Path: "+$proc.Path | |
| } | |
| Write-Detection $detection | |
| } | |
| if ($conn.State -eq 'Established' -and ($conn.LocalPort -in $suspicious_ports -or $conn.RemotePort -in $suspicious_ports) -and $proc.Name -notin $allow_listed_process_names){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Established Connection on Suspicious Port' | |
| Risk = 'Low' | |
| Source = 'Network Connections' | |
| Technique = "T1071: Application Layer Protocol" | |
| Meta = "Local Port: "+$conn.LocalPort+", Remote Port: "+$conn.RemotePort+", Remote Address: "+$conn.RemoteAddress+", PID: "+$conn.OwningProcess+", Process Name: "+$proc.Name+", Process Path: "+$proc.Path | |
| } | |
| Write-Detection $detection | |
| } | |
| if ($proc.Path -ne $null){ | |
| foreach ($path in $suspicious_process_paths){ | |
| if (($proc.Path).ToLower() -match $path){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Process running from suspicious path has Network Connection' | |
| Risk = 'High' | |
| Source = 'Network Connections' | |
| Technique = "T1071: Application Layer Protocol" | |
| Meta = "Local Port: "+$conn.LocalPort+", Remote Port: "+$conn.RemotePort+", Remote Address: "+$conn.RemoteAddress+", PID: "+$conn.OwningProcess+", Process Name: "+$proc.Name+", Process Path: "+$proc.Path | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| } | |
| } | |
| function Check-WMIConsumers { | |
| # Supports Dynamic Snapshotting | |
| # Drive Retargeting..maybe | |
| # https://netsecninja.github.io/dfir-notes/wmi-forensics/ | |
| # https://github.com/davidpany/WMI_Forensics | |
| # https://github.com/mandiant/flare-wmi/blob/master/WMIParser/WMIParser/ActiveScriptConsumer.cpp | |
| # This would require building a binary parser in PowerShell..difficult. | |
| if ($drivechange){ | |
| Write-Message "Skipping WMI Analysis - No Drive Retargeting [yet]" | |
| return | |
| } | |
| Write-Message "Checking WMI Consumers" | |
| $consumers = Get-WMIObject -Namespace root\Subscription -Class __EventConsumer | Select-Object * | |
| foreach ($consumer in $consumers) { | |
| if ($loadsnapshot){ | |
| if ($consumer.CommandLineTemplate -ne $null){ | |
| $val_ = $consumer.CommandLineTemplate | |
| } elseif ($consumer.ScriptFileName -ne $null) { | |
| $val_ = $consumer.ScriptFileName | |
| } | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Allowlist Mismatch: WMI Consumer' | |
| Risk = 'Medium' | |
| Source = 'Services' | |
| Technique = "T1546.003: Event Triggered Execution: Windows Management Instrumentation Event Subscription" | |
| Meta = "Consumer Name: "+ $consumer.Name+", Consumer Value: "+ $val_ | |
| } | |
| $result = Check-IfAllowed $allowtable_wmi_consumers $consumer.Name $val_ $detection | |
| if ($result){ | |
| continue | |
| } | |
| } | |
| if ($consumer.ScriptingEngine -ne $null) { | |
| Write-SnapshotMessage -Key $consumer.Name -Value $consumer.ScriptFileName -Source 'WMI Consumers' | |
| $detection = [PSCustomObject]@{ | |
| Name = 'WMI ActiveScript Consumer' | |
| Risk = 'High' | |
| Source = 'WMI' | |
| Technique = "T1546.003: Event Triggered Execution: Windows Management Instrumentation Event Subscription" | |
| Meta = "Consumer Name: "+$consumer.Name+", Script Name: "+$consumer.ScriptFileName+", Script Text: "+$consumer.ScriptText | |
| } | |
| Write-Detection $detection | |
| } | |
| if ($consumer.CommandLineTemplate -ne $null) { | |
| Write-SnapshotMessage -Key $consumer.Name -Value $consumer.CommandLineTemplate -Source 'WMI Consumers' | |
| $detection = [PSCustomObject]@{ | |
| Name = 'WMI CommandLine Consumer' | |
| Risk = 'High' | |
| Source = 'WMI' | |
| Technique = "T1546.003: Event Triggered Execution: Windows Management Instrumentation Event Subscription" | |
| Meta = "Consumer Name: "+$consumer.Name+", Executable Path: "+$consumer.ExecutablePath+", CommandLine Template: "+$consumer.CommandLineTemplate | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| function Check-Startups { | |
| # Supports Dynamic Snapshotting | |
| # Supports Drive Retargeting | |
| Write-Message "Checking Startup Items" | |
| $paths = @( | |
| "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Run" | |
| "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" | |
| "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunEx" | |
| "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx" | |
| "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices" | |
| "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" | |
| "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" | |
| "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunEx" | |
| "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx" | |
| "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices" | |
| ) | |
| if ($nevermind) { | |
| foreach ($tmpbase in $paths){ | |
| if ($tmpbase -match "REPLACE.*"){ | |
| foreach ($p in $regtarget_hkcu_list){ | |
| $newpath = $tmpbase.Replace("REPLACE", $p) | |
| $paths += $newpath | |
| } | |
| } | |
| } | |
| $startups = @() | |
| } else { | |
| $startups = Get-CimInstance -ClassName Win32_StartupCommand | Select-Object Command,Location,Name,User | |
| #$statups = @() | |
| } | |
| # Redoing this to only read reg-keys instead of using win32_StartupCommand | |
| foreach ($tmpbase in $paths){ | |
| if ($tmpbase -match "REPLACE.*"){ | |
| foreach ($p in $regtarget_hkcu_list){ | |
| $newpath = $tmpbase.Replace("REPLACE", $p) | |
| $paths += $newpath | |
| } | |
| } | |
| } | |
| $startups = @() | |
| foreach ($item in $startups) { | |
| if ($loadsnapshot -and (Check-IfAllowed $allowlist_startup_commands $item.Command $item.Command)) { | |
| continue | |
| } | |
| Write-SnapshotMessage -Key $item.Name -Value $item.Command -Source 'Startup' | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Startup Item Review' | |
| Risk = 'Low' | |
| Source = 'Startup' | |
| Technique = "T1037.005: Boot or Logon Initialization Scripts: Startup Items" | |
| Meta = "Location: "+$item.Location+", Item Name: "+$item.Name+", Command: "+$item.Command+", User: "+$item.User | |
| } | |
| Write-Detection $detection | |
| } | |
| foreach ($path_ in $paths){ | |
| #Write-Host $path | |
| $path = "Registry::$path_" | |
| if (Test-Path -Path $path) { | |
| $item = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider | |
| $item.PSObject.Properties | ForEach-Object { | |
| if ($_.Name -ne "(Default)"){ | |
| if ($loadsnapshot -and ($allowlist_startup_commands.Contains($_.Value))){ | |
| continue | |
| } | |
| Write-SnapshotMessage -Key $_.Name -Value $_.Value -Source 'Startup' | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Startup Item Review' | |
| Risk = 'Low' | |
| Source = 'Startup' | |
| Technique = "T1037.005: Boot or Logon Initialization Scripts: Startup Items" | |
| Meta = "Location: $path_, Item Name: "+$_.Name+", Command: "+$_.Value | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| } | |
| } | |
| function Check-BITS { | |
| # Supports Dynamic Snapshotting | |
| # Maybe with Drive Retargeting | |
| # C:\ProgramData\Microsoft\Network\Downloader | |
| # https://www.giac.org/paper/gcih/28198/bits-forensics/130713#:~:text=These%20files%20are%20named%20%E2%80%9Cqmgr0,Microsoft%5CNetwork%5CDownloader%E2%80%9D. | |
| if ($drivechange){ | |
| Write-Message "Skipping BITS Analysis - No Drive Retargeting [yet]" | |
| return | |
| } | |
| Write-Message "Checking BITS Jobs" | |
| $bits = Get-BitsTransfer -AllUsers | Select-Object * | |
| foreach ($item in $bits) { | |
| if ($item.NotifyCmdLine -ne $null){ | |
| $cmd = [string]$item.NotifyCmdLine | |
| } else { | |
| $cmd = '' | |
| } | |
| Write-SnapshotMessage -Key $item.DisplayName -Value $cmd -Source 'BITS' | |
| if ($loadsnapshot){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Allowlist Mismatch: BITS Job' | |
| Risk = 'Medium' | |
| Source = 'BITS' | |
| Technique = "T1197: BITS Jobs" | |
| Meta = "Item Name: "+$item.DisplayName+", TransferType: "+$item.TransferType+", Job State: "+$item.JobState+", User: "+$item.OwnerAccount+", Command: "+$cmd | |
| } | |
| $result = Check-IfAllowed $allowtable_bits $item.DisplayName $cmd $detection | |
| if ($result){ | |
| continue | |
| } | |
| } | |
| $detection = [PSCustomObject]@{ | |
| Name = 'BITS Item Review' | |
| Risk = 'Low' | |
| Source = 'BITS' | |
| Technique = "T1197: BITS Jobs" | |
| Meta = "Item Name: "+$item.DisplayName+", TransferType: "+$item.TransferType+", Job State: "+$item.JobState+", User: "+$item.OwnerAccount+", Command: "+$cmd | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| function Check-Modified-Windows-Accessibility-Feature { | |
| # TODO - Consider allow-listing here | |
| # Supports Drive Retargeting | |
| Write-Message "Checking Accessibility Binaries" | |
| $files_to_check = @( | |
| "$env_homedrive\Program Files\Common Files\microsoft shared\ink\HID.dll" | |
| "$env_homedrive\Windows\System32\AtBroker.exe", | |
| "$env_homedrive\Windows\System32\DisplaySwitch.exe", | |
| "$env_homedrive\Windows\System32\Magnify.exe", | |
| "$env_homedrive\Windows\System32\Narrator.exe", | |
| "$env_homedrive\Windows\System32\osk.exe", | |
| "$env_homedrive\Windows\System32\sethc.exe", | |
| "$env_homedrive\Windows\System32\utilman.exe" | |
| ) | |
| foreach ($file in $files_to_check){ | |
| $fdata = Get-Item $file -ErrorAction SilentlyContinue | Select-Object CreationTime,LastWriteTime | |
| if ($fdata.CreationTime -ne $null) { | |
| if ($fdata.CreationTime.ToString() -ne $fdata.LastWriteTime.ToString()){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Potential modification of Windows Accessibility Feature' | |
| Risk = 'High' | |
| Source = 'Windows' | |
| Technique = "T1546.008: Event Triggered Execution: Accessibility Features" | |
| Meta = "File: "+$file+", Created: "+$fdata.CreationTime+", Modified: "+$fdata.LastWriteTime | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| } | |
| function Check-PowerShell-Profiles { | |
| # PowerShell profiles may be abused by adversaries for persistence. | |
| # Supports Drive Retargeting | |
| # TODO - Add check for 'suspicious' content | |
| # TODO - Consider allow-listing here | |
| # $PSHOME\Profile.ps1 | |
| # $PSHOME\Microsoft.PowerShell_profile.ps1 | |
| # $HOME\Documents\PowerShell\Profile.ps1 | |
| # $HOME\Documents\PowerShell\Microsoft.PowerShell_profile.ps1 | |
| Write-Message "Checking PowerShell Profiles" | |
| if ($drivechange){ | |
| # TODO - Investigate whether these paths can be retrieved from the HKLM HIVE dynamically | |
| $alluserallhost = "$env_homedrive\Windows\System32\WindowsPowerShell\v1.0\profile.ps1" | |
| $allusercurrenthost = "$env_homedrive\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShellISE_profile.ps1" | |
| } else { | |
| $PROFILE | Select-Object AllUsersAllHosts,AllUsersCurrentHost,CurrentUserAllHosts,CurrentUserCurrentHost | Out-Null | |
| $alluserallhost = $PROFILE.AllUsersAllHosts | |
| $allusercurrenthost = $PROFILE.AllUsersCurrentHost | |
| } | |
| if (Test-Path $alluserallhost){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Review: Global Custom PowerShell Profile' | |
| Risk = 'Medium' | |
| Source = 'PowerShell' | |
| Technique = "T1546.013: Event Triggered Execution: PowerShell Profile" | |
| Meta = "Profile: "+$PROFILE.AllUsersAllHosts | |
| } | |
| Write-Detection $detection | |
| } | |
| if (Test-Path $allusercurrenthost){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Review: Global Custom PowerShell Profile' | |
| Risk = 'Medium' | |
| Source = 'PowerShell' | |
| Technique = "T1546.013: Event Triggered Execution: PowerShell Profile" | |
| Meta = "Profile: "+$PROFILE.AllUsersCurrentHost | |
| } | |
| Write-Detection $detection | |
| } | |
| $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object Name | |
| foreach ($name in $profile_names){ | |
| $path1 = "$env_homedrive\Users\$name\Documents\WindowsPowerShell\profile.ps1" | |
| $path2 = "$env_homedrive\Users\$name\Documents\WindowsPowerShell\Microsoft.PowerShellISE_profile.ps1" | |
| $path3 = "$env_homedrive\Users\$name\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1" | |
| if (Test-Path $path1){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Review: Custom PowerShell Profile' | |
| Risk = 'Medium' | |
| Source = 'PowerShell' | |
| Technique = "T1546.013: Event Triggered Execution: PowerShell Profile" | |
| Meta = "Profile: "+$path1 | |
| } | |
| Write-Detection $detection | |
| } | |
| if (Test-Path $path2){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Review: Custom PowerShell Profile' | |
| Risk = 'Medium' | |
| Source = 'PowerShell' | |
| Technique = "T1546.013: Event Triggered Execution: PowerShell Profile" | |
| Meta = "Profile: "+$path2 | |
| } | |
| Write-Detection $detection | |
| } | |
| if (Test-Path $path3){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Review: Custom PowerShell Profile' | |
| Risk = 'Medium' | |
| Source = 'PowerShell' | |
| Technique = "T1546.013: Event Triggered Execution: PowerShell Profile" | |
| Meta = "Profile: "+$path3 | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| function Check-Outlook-Startup { | |
| # Supports Dynamic Snapshotting | |
| # Supports Drive Retargeting | |
| Write-Message "Checking Outlook Macros" | |
| # allowlist_officeaddins | |
| $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object * | |
| foreach ($user in $profile_names){ | |
| $path = "$env_homedrive\Users\"+$user.Name+"\AppData\Roaming\Microsoft\Word\STARTUP" | |
| $items = Get-ChildItem -Path $path -File -ErrorAction SilentlyContinue | Select-Object * | Where-Object {$_.extension -in $office_addin_extensions} | |
| # Removing this as we are performing this functionality else-where for Office Trusted Location Scanning. | |
| #foreach ($item in $items){ | |
| # Write-SnapshotMessage -Key $item.FullName -Value $item.FullName -Source 'Office' | |
| # If the allowlist contains the curren task name | |
| # if ($loadsnapshot -and ($allowlist_outlookstartup.Contains($item.FullName))){ | |
| # continue | |
| # } | |
| # $detection = [PSCustomObject]@{ | |
| # Name = 'Potential Persistence via Office Startup Addin' | |
| # Risk = 'Medium' | |
| # Source = 'Office' | |
| # Technique = "T1137.006: Office Application Startup: Add-ins" | |
| # Meta = "File: "+$item.FullName+", Last Write Time: "+$item.LastWriteTime | |
| # } | |
| #Write-Detection $detection - Removing this as it is a duplicate of the new Office Scanning Functionality which will cover the same checks | |
| #} | |
| $path = "$env_homedrive\Users\"+$user.Name+"\AppData\Roaming\Microsoft\Outlook\VbaProject.OTM" | |
| if (Test-Path $path) { | |
| Write-SnapshotMessage -Key $path -Value $item.FullName -Source 'Outlook' | |
| if ($loadsnapshot -and (Check-IfAllowed $allowlist_outlookstartup $path $item.FullName)){ | |
| continue | |
| } | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Potential Persistence via Outlook Application Startup' | |
| Risk = 'Medium' | |
| Source = 'Office' | |
| Technique = "T1137.006: Office Application Startup: Add-ins" | |
| Meta = "File: "+$path | |
| } | |
| Write-Detection $detection | |
| } | |
| } | |
| } | |
| function Check-Registry-Checks { | |
| # DEPRECATED FUNCTION | |
| #TODO - Inspect File Command Extensions to hunt for anomalies | |
| # https://attack.mitre.org/techniques/T1546/001/ | |
| # COM Object Hijack Scan | |
| # NULL this out for now since it should be covered in following COM functionality - this function is deprecated | |
| if (Test-Path -Path "Registry::HKCU\SOFTWARE\Classes\CLSIDNULL") { | |
| $items = Get-ChildItem -Path "Registry::HKCU\SOFTWARE\Classes\CLSID" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider | |
| foreach ($item in $items) { | |
| $path = "Registry::"+$item.Name | |
| $children = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider | |
| foreach ($child in $children){ | |
| $path = "Registry::"+$child.Name | |
| $data = Get-Item -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider | |
| if ($data.Name -match '.*InprocServer32'){ | |
| $datum = Get-ItemProperty $path | |
| $datum.PSObject.Properties | ForEach-Object { | |
| if ($_.Name -eq '(default)'){ | |
| $detection = [PSCustomObject]@{ | |
| Name = 'Potential COM Hijack' | |
| Risk = 'High' | |
| Source = 'Registry' | |
| Technique = "T1546.012: Event Triggered Execution: Image File Execution Options Injection" | |
| Meta = "Registry Path: "+$data.Name+", DLL Path: "+$_.Value | |
| } | |
| #Write-Detection $detection | |
| # This is now handled by Check-COM-Hijacks along with HKLM and HKCR checks (which should be identical) | |
| } | |
| } | |
| } | |
| } | |
| } | |
| } | |
| } | |
| function Check-COM-Hijacks { | |
| # Supports Dynamic Snapshotting | |
| # Supports Drive Retargeting | |
| Write-Message "Checking COM Classes" | |
| # TODO - Consider NOT alerting when we don't have a 'known-good' entry for the CLSID in question | |
| # TODO - Some regex appears to be non-functional, especially on HKU inspection - need to figure out why/troubleshoot | |
| # TODO - Inspect TreatAs options | |
| # Malware will typically target 'well-known' keys that are present in default versions of Windows - that should be enough for most situations and help to reduce noise. | |
| $homedrive = $env_assumedhomedrive | |
| $default_hkcr_com_lookups = @{ | |
| "HKEY_CLASSES_ROOT\CLSID\{0000002F-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000300-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000301-A8F2-4877-BA0A-FD2B6645FB94}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000303-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000304-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000305-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000306-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000308-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000309-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000030B-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll|coml2\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000315-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000316-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000319-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000031D-0000-0000-C000-000000000046}\InProcServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000320-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000327-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000032E-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000355-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\System32\\combase\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000507-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000050B-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000514-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000535-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000541-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000542-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000560-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000566-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000602-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000609-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000615-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000618-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000061B-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0000061E-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00000621-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020000-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020001-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020003-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0002000D-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0002000F-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00021400-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0002E005-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0002E006-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{000C103E-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\System32\\msi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{000C1090-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\msi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{000C1094-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\msi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{000D0E00-0000-0000-C000-000000001157}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VVIEWDWG\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{0010668C-0801-4DA6-A4A4-826522B6D28F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00108226-EE41-44A2-9E9C-4BE4D5B1D2CD}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0010890e-8789-413c-adbc-48f5b511b3af}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{001DC1E0-0F8C-4720-98DB-39D32A661422}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{002EB8C6-3D34-4848-9A6D-58E388D55908}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{003e0278-eca8-4bb8-a256-3689ca1c2600}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{006E61DF-1A43-4F2C-B26F-780BAEA3A92D}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0070746C-9A38-4236-822A-72CC4E5C8087}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00722F5F-CB8F-44D3-AC27-CC37F76CFE92}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{008E91AA-A905-4206-A0FE-D4177E1C7BB1}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0095b496-f121-4256-96a0-09179828cc16}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{009F3B45-8A6B-4360-B997-B2A009A16402}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00A77FF7-A514-493e-B721-CDF8CB0F5B59}\InProcServer32" = "$homedrive\\Windows\\system32\\systemcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00B01B2E-B1FE-33A6-AD40-57DE8358DC7D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00B8308C-09F2-4c18-A7B0-4594D6B22EFE}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00BB2764-6A77-11D0-A535-00C04FD7D062}\InProcServer32" = "(shell32\.dll|$homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00C429C0-0BA9-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00C4E345-813F-4401-9A9F-29F7A576FA11}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00CA399E-4CC0-43D2-902B-CEA3D36DC9E4}\InProcServer32" = "$homedrive\\Windows\\System32\\remoteaudioendpoint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00E80F18-EC5B-4FCF-A417-7348991A8D32}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvsvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00eebf57-477d-4084-9921-7ab3c2c9459d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{00f20eb5-8fd6-4d9d-b75e-36801766c8f1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00f210a1-62f0-438b-9f7e-9618d72a1831}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00f24ca0-748f-4e8a-894f-0e0357c6799f}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00f26e02-e9f2-4a9f-9fdd-5a962fb26a98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00f29a34-b8a1-482c-bcf8-3ac7b0fe8f62}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{00F2CE1E-935E-4248-892C-130F32C45CB4}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0102563D-F16D-434d-82A2-37968BD3E31E}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{010911E2-F61C-479B-B08C-43E6D1299EFE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{011B3619-FE63-4814-8A84-15A194CE9CE3}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{011BE22D-E453-11D1-945A-00C04FB984F9}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0131BE10-2001-4C5F-A9B0-CC88FAB64CE8}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01367108-5EE2-4E1C-A8DE-24438065ABC9}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01458CF0-A1A2-11D1-8F85-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0149EEDF-D08F-4142-8D73-D23903D21E90}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1}\InprocServer32" = "$homedrive\\Windows\\system32\\MsCtfMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01504157-8839-4BF6-9B5B-51165A967B2B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{016fd94e-b02a-4ab8-94c6-149fdab56b8d}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01776DF3-B9AF-4E50-9B1C-56E93116D704}\InprocServer32" = "$homedrive\\Windows\\system32\\EditionUpgradeHelper\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{017F10E3-89E4-49F0-B545-618DE31FD27C}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0180E49C-13BF-46DB-9AFD-9F52292E1C22}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01822ABA-23F0-4506-9BBC-680F5D6D606C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{018BA427-F311-44FD-8AA1-ABEEB57739D9}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{018f2d58-f16d-448a-bd87-225c8c5d5c94}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{019f7150-e6db-11d0-83c3-00c04fddb82e}\InprocServer32" = "$homedrive\\Windows\\System32\\(IME\\IMEJP\\imjpapi\.dll|imjp10k\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{01A30791-40AE-4653-AB2E-FD210019AE88}\InprocServer32" = "$homedrive\\Windows\\system32\\mgmtrefreshcredprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01A3BF5C-CC93-4C12-A4C3-09B0BBE7F63F}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01afc156-f2eb-4c1c-a722-8550417d396f}\InProcServer32" = "$homedrive\\Windows\\System32\\actioncenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01B90D9A-8209-47F7-9C52-E1244BF50CED}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01BE4CFB-129A-452B-A209-F9D40B3B84A5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01C20F2B-3DD2-400F-949F-AD00BDAB1D41}\InprocServer32" = "$homedrive\\Windows\\System32\\ia2comproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01C6CA30-792B-404B-A5C2-0A34434B3AA4}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01D0A625-782D-4777-8D4E-547E6457FAD5}\InprocServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01E04581-4EEE-11d0-BFE9-00AA005B4383}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01F36CE2-0907-4d8b-979D-F151BE91C883}\InprocServer32" = "$homedrive\\Windows\\System32\\mfvdsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01F3E95C-7D8F-46e6-A408-9BA5D1FA5067}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01FA60A0-BBFF-11D0-8825-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01fe4a1f-cc5c-44ab-a1e6-cfbd9249146d}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{01FF4E4B-8AD0-3171-8C82-5C2F48B87E3D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{021003e9-aac0-4975-979f-14b5d4e717f8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{021812bc-ae59-4f3c-9e04-72adc0ac9da5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{022BA4BE-26C9-495B-8829-1CDD5946720C}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceElementSource\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{023A36FC-E9D5-419E-824A-CDC66A116E84}\InprocServer32" = "$homedrive\\Windows\\System32\\AuthFWGP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0245858B-948D-4f36-A574-1A71EF5111CB}\InProcServer32" = "$homedrive\\Windows\\System32\\fvecpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02665D88-6A3E-4DFC-BEFF-8CA2118A5061}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{026CC6D7-34B2-33D5-B551-CA31EB6CE345}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0273c57c-6693-4444-b20c-a62a3b185b7e}\InprocServer32" = "$homedrive\\Windows\\System32\\DDOIProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02783ae2-02a6-4403-a482-e08bf20ffd06}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{027C265F-E9C7-4506-8C19-3B91B203AE1D}\InProcServer32" = "$homedrive\\Windows\\System32\\ContactApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{027D3767-28E0-4FFA-98D0-DF67D0CBBE47}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0280284d-ab12-4cb7-9b51-7579e6c3796b}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02805F1E-D5AA-415B-82C5-61C033A988A6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02844640-E37C-4322-A3B8-4C61A2E58879}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02A3586C-D264-40BF-97F7-FE40F7E3A882}\InprocServer32" = "$homedrive\\Windows\\System32\\vdsdyn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02AF6DD2-77E6-44DF-B3E1-57CF1476D8EA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{02BCC737-B171-4746-94C9-0D8A0B2C0089}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\IEAWSDC\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{02C09DB6-F3E3-4C27-970D-17107BF4518E}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02C35120-4924-46EB-BC2B-5FB0DB060948}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imedicapiccps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02C68609-99E3-4A8F-9575-4973D401C06F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdevtools\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02df6db6-9405-4812-b3f6-500e8615b7af}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02E6EC4C-96E4-42E8-B533-336916A0087D}\InProcServer32" = "$homedrive\\Windows\\system32\\lsmproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{02E7E69E-E80A-48E3-8B1D-6448C25B1710}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{02ECA72E-27DA-40E1-BDB1-4423CE649AD9}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03012959-F4F6-44D7-9D09-DAA087A9DB57}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03022430-ABC4-11D0-BDE2-00AA001A1953}\InProcServer32" = "$homedrive\\Windows\\System32\\oleacc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0316BBC2-92D9-4E2E-8345-3609C6B5C167}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_4\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{032C35F6-11E2-497B-9D78-6AD0288FBD48}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{032EE239-DEB8-436E-9043-A2767D457274}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03372354-C040-4C4E-94D1-27DB5A879A33}\InprocServer32" = "$homedrive\\Windows\\System32\\Win32CompatibilityAppraiserCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0340F119-A598-4ed9-B0AC-6F6A12D3E755}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0344ec28-5339-4124-a186-2e8eef168785}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32" = "$homedrive\\Windows\\system32\\wininet\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0363215C-3B87-4C3D-8300-FF3FD3E02B91}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0369B4E5-45B6-11D3-B650-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0369B4E6-45B6-11D3-B650-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{036A9790-C153-11D2-9EF7-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{037BB880-2613-4F6E-9F84-9574CCA8DEAC}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{037c3380-0855-4e8a-8c80-0aa3f697cd27}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837511-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837513-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0383751C-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837521-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837525-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837526-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837527-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837528-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837529-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837530-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837531-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837532-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837538-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837539-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837546-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03837547-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03b5835f-f03c-411b-9ce2-aa23e1171e36}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjptip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{03C06416-D127-407A-AB4C-FDD279ABBE5D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03ca8927-0bf5-4df6-9534-0f5e17851944}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03e15b2e-cca6-451c-8fb0-1e2ee37a27dd}\InprocServer32" = "$homedrive\\Windows\\system32\\tapilua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03E6C474-8D95-4C1B-9268-4AA3FA16DE4F}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03E7DAD7-17A6-4F91-A879-F276B6FD62F8}\InprocServer32" = "$homedrive\\Windows\\System32\\delegatorprovider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{03ECCB13-7A8E-4DBC-B83C-B4E95F9CAD02}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Pal\.Desktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04082FC6-E032-49F2-A263-FE64E9DA1FA3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{0413965e-17f3-46b2-b39f-f8aced04194c}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{041DEBA2-A4CA-45d0-9430-418026E0848A}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0429EC6E-1144-4bed-B88B-2FB9899A4A3D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{043B13A3-C479-48AF-9E98-E9F08A411670}\InprocServer32" = "$homedrive\\Windows\\System32\\UpdateDeploymentProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04731B67-D933-450a-90E6-4ACD2E9408FE}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04788120-12C2-498D-83C1-A7D92E677AC6}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipcima\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{047A9A40-657E-11D3-8D5B-00104B35E7EF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{047DEC5A-95C1-4C86-827F-7B8C92EBA67A}\InProcServer32" = "$homedrive\\Windows\\system32\\winrssrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0482DDE0-7817-11CF-8A03-00AA006ECB65}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{049F2CE6-D996-4721-897A-DB15CE9EB73D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04a1e553-fe36-4fde-865e-344194e69424}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04A578B2-E778-422A-A805-B3EE54D90BD9}\InProcServer32" = "$homedrive\\Windows\\System32\\wmcodecdspps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04A7F8A1-F465-4079-A4FD-B8F4700DF426}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04AF2416-5F4C-4FEB-A9A8-BBF9893A4E6B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04B55BC3-33DE-4d79-94EC-830CDF96CC82}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04CCE2FF-A7D3-11D0-B436-00A0244A1DD2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04e9894c-c756-4fce-b11c-f38888d01279}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneProviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{04FBCBF4-DC23-3CEC-9025-9D4093C26733}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{05058F23-20BE-11d2-8F18-0000F87A4335}\InProcServer32" = "$homedrive\\Windows\\System32\\Pimstore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0520af9e-e3da-4b32-8be8-0f3e475bfc5f}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05238C14-A6E1-11D0-9A84-00C04FD8DBF7}\InProcServer32" = "$homedrive\\Windows\\system32\\els\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05300401-BCBC-11d0-85E3-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{053C9CB8-5BA1-4F47-A6F1-D1D748C7DA93}\InProcServer32" = "$homedrive\\Windows\\System32\\BcastDVR.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{053D33FD-D0D4-44BF-B84E-99478DC343CD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05589F80-C356-11CE-BF01-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpdxm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05589FAF-C356-11CE-BF01-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{055A7699-EAFF-47DF-8E55-41F4C0612BF3}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{055CB2D7-2969-45CD-914B-76890722F112}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{055E80CA-DD63-4C25-93AB-448BBDB7AA17}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{056440FD-8568-48e7-A632-72157243B55B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0567cea8-7b61-4cd4-a9d0-58073b9888f0}\InProcServer32" = "$homedrive\\Windows\\System32\\HdcpHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32" = "$homedrive\\Windows\\system32\\wininet\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05921124-5057-483E-A037-E9497B523590}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\AuraSDK\\AuraSdk_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05A47EBB-8BF0-4CBF-AD2F-3B71D75866F5}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05B8E7A3-7D5D-41DE-B6CC-5E6205837FB7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ENE\\Aac_ENE RGB HAL\\x64\\AacHal_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05BDC38E-5493-487a-A7FF-8CF2246ABC13}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d7}\InProcServer32" = "$homedrive\\Windows\\System32\\taskbarcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d8}\InProcServer32" = "$homedrive\\Windows\\System32\\taskbarcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05DF8D13-C355-47f4-A11E-851B338CEFB8}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05EBA309-0164-11D3-8729-00C04F79ED0D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{05F3561D-0358-4687-8ACD-A34D24C488DF}\InProcServer32" = "$homedrive\\Windows\\System32\\ActionCenterCPL\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05f6fe1a-ecef-11d0-aae7-00c04fc9b304}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{05FDB3A2-5639-4D24-AF7D-4C6FB0684661}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{060AF76C-68DD-11D0-8FC1-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06210E88-01F5-11D1-B512-0080C781C384}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06254B9D-05E9-4FBE-968D-F46DBDC91AF9}\InprocServer32" = "$homedrive\\Windows\\System32\\BingASDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{062584a6-f830-4bdc-a4d2-0a10ab062b1d}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Input\.Inking\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD0-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD1-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD2-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD3-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD4-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD5-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD8-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BD9-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BDA-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06290BDB-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06334b1f-d73e-42f5-a448-5bd2df3c5ec7}\InprocServer32" = "$homedrive\\Windows\\system32\\eapsimextdesktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{063B79F5-7539-11D2-9773-00A0C9B4D50C}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{063B79F6-7539-11D2-9773-00A0C9B4D50C}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06405088-BC01-4E08-B392-5303E75090C8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0647D986-BD6B-48C9-B496-91E73A06F3BD}\InprocServer32" = "mscoree\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{065377f7-9876-4d5a-9f2a-1b4721255a67}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0655E396-25D0-11D3-9C26-00C04F8EF87C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06587E71-F043-403A-BF49-CB591BA6E103}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06622D85-6856-4460-8DE1-A81921B41C4B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{066D2323-D35A-4C15-AE22-F88F136C1613}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{067B4B81-B1EC-489f-B111-940EBDC44EBE}\InprocServer32" = "$homedrive\\Windows\\System32\\cewmdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{068a8476-9229-4cc0-9d49-2fc699dcd30a}\InProcServer32" = "$homedrive\\Windows\\System32\\mfaudiocnv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06946266-393A-456E-92BC-91DDDBF6893C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06993B16-A5C7-47EB-B61C-B1CB7EE600AC}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3gpui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06A03425-C9EB-11d2-8CAA-0080C739E3E0}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06B32AEE-77DA-484B-973B-5D64F47201B0}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06B81C12-A5DA-340D-AFF7-FA1453FBC29A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{06BF8E77-0FEC-4bd3-AFD6-C949AE21E34B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06C792F8-6212-4F39-BF70-E8C0AC965C23}\InProcServer32" = "$homedrive\\Windows\\System32\\UserAccountControlSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06CCA63E-9941-441B-B004-39F999ADA412}\InprocServer32" = "$homedrive\\Windows\\System32\\mmdevapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06DC6740-FD0D-426A-9BF6-20DDBD7D53CE}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{06EEE834-461C-42c2-8DCF-1502B527B1F9}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0700F42F-EEE3-443a-9899-166F16286796}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0709BCEE-E071-4CF1-BD15-BAEC9AA12D75}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxUserDictDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07252659-bb6b-4b79-b78b-623f6699a579}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0725C3CB-FEFB-11D0-99F9-00C04FC2F8EC}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07333BBD-64AF-4206-899D-2809660C61C7}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07369A67-07A6-4608-ABEA-379491CB7C46}\InprocServer32" = "$homedrive\\Windows\\System32\\UpdatePolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07398dcf-2e0b-4ece-99dd-56b262db948b}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_5\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{074BFFFD-4E50-42c1-A7EB-40D9D70F2471}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{076C2A6C-F78F-4C46-A723-3583E70876EA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{078759d3-423b-48ad-ab6a-5638c2884dbe}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0794B86D-0158-4EC1-8D52-E4025DCE746A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07AA0886-CC8D-4e19-A410-1C75AF686E62}\InProcServer32" = "$homedrive\\Windows\\System32\\l2nacp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07B65360-C445-11CE-AFDE-00AA006C14F4}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07C45BB1-4A8C-4642-A1F5-237E7215FF66}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07D26616-6136-11D1-8C9C-00C04FC3261D}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07DC68FA-A15D-4E44-93DE-645060C7B469}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07F94112-A42E-328B-B508-702EF62BCC29}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{07fc2b94-5285-417e-8ac3-c2ce5240b0fa}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{07FFDD7A-0300-4FDC-B113-1C5364E61F54}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{081378D5-CE84-411B-8ABF-883840D7B90D}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Display\.DisplayEnhancementOverride\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0814BEF4-2971-429A-B694-2F3E63912DCF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08165EA0-E946-11CF-9C87-00AA005127ED}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08229782-89C8-4028-BB74-75BB58EF1488}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsmsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08295C62-7462-3633-B35E-7AE68ACA3948}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{082bc1fc-591a-4a9e-9d90-8ab689f49519}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{082C78E1-CD8F-4982-BEB9-BBFE43A0F09A}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0839CA75-2FE4-4608-A1B9-2224E046D6A3}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxEM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08586F78-3B1F-4CDE-9E87-AFFA015B5DE2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.SystemManufacturers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08728914-3F57-4D52-9E31-49DAECA5A80A}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONFILTER\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{087798c4-3c0a-48d4-abc9-ed60912fa139}\InprocServer32" = "$homedrive\\Windows\\system32\\VmApplicationHealthMonitorProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{088714E2-5783-44A2-8552-C9D7E7513339}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{088E8DFB-2464-4C21-BAD2-F0AA6DB5D4BC}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08a99e2f-6d6d-4b80-af5a-baf2bcbe4cb9}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08d450b7-f7e5-4424-8229-11888adb7c14}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08d5bfbf-fbca-4322-9f70-ca9f66f8ed6a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{08DFCEF6-4F00-436F-B621-B1585343C2FB}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08F91D9D-1F00-48C2-B90F-CC75FFAFE727}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{08fedb70-9d27-4bcf-bbb0-99986ae2bcb5}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imecfmps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09017262-fdb4-4ff2-9013-26332c926ee7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0913ACCF-B1AB-4EEE-A0C7-F4D7C12F4EEC}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09144FD6-BB29-11DB-96F1-005056C00008}\InprocServer32" = "$homedrive\\Windows\\System32\\CPFilters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09156f15-2b3d-4864-a60e-82b82baa18da}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09290C14-40BF-40F1-A245-85FC671B5FA3}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{093FF999-1EA0-4079-9525-9614C3504B74}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{09474572-B2FB-11D1-A1A1-0000F875B132}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0947c622-f98a-48a5-9df7-60e5fe202e07}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0955AC62-BF2E-4CBA-A2B9-A63F772D46CF}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09655E95-040C-4654-85AF-48852407FDD9}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0968e258-16c7-4dba-aa86-462dd61e31a3}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{096CBB6C-221A-4A5D-B609-0C7534E3EE1F}\InProcServer32" = "$homedrive\\Windows\\System32\\MbSmsApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_4\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0977EEC5-10F7-44AE-A7FA-D4824EBA5C74}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09799AFB-AD67-11d1-ABCD-00C04FC30936}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{098870b6-39ea-480b-b8b5-dd0167c4db59}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{098ef871-fa9f-46af-8958-c083515d7c9c}\InprocServer32" = "$homedrive\\Windows\\System32\\WaaSAssessment\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0991CE67-3649-4138-85A8-E17D037298DB}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0997898B-0713-11d2-A4AA-00C04F8EEB3E}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{099EB73C-FF12-45C5-BF64-F0277733A6E2}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09a28848-0e97-4cef-b950-cea037161155}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780}\InprocServer32" = "($homedrive\\Program Files( \(x86\))?\\Windows Defender\\shellext\.dll|.*\\shellext\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{09A5DFC5-8BA2-47DD-BF84-FFD7E0B24481}\InProcServer32" = "$homedrive\\Windows\\system32\\windows\.cortana\.onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09A60795-31C0-3A79-9250-8D93C74FE540}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{09A81E78-E1D3-44D4-84E3-C33A04A4CC6E}\InprocServer32" = "$homedrive\\Windows\\System32\\CIWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09AA621D-CF81-408D-9C9F-41399065CAC4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09c5dd34-009d-40fa-bcb9-0165ad0c15d4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09C77DF4-B76F-4875-9781-FB692504F39A}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.SharedPC\.CredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09DBBC77-588F-4517-A485-74A29759F54C}\InProcServer32" = "$homedrive\\Windows\\System32\\eapphost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09f209a1-d04d-4225-9333-076d72a7bb06}\InProcServer32" = "$homedrive\\Windows\\System32\\DMRServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09F4E6FE-F1D3-4E5C-B4CF-25D9C378961D}\InProcServer32" = "$homedrive\\Program Files (x86)\Microsoft\EdgeUpdate\.*\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{09F81337-D568-41d1-A177-D6779AF55847}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A129CAF-A760-4ce3-A812-01087F41C7E9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A14D3FF-EC53-450f-AA30-FFBC55BE26A2}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A16D195-6F47-4964-9287-9F4BAB6D9827}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A235AB7-264B-4D1A-B533-DD7AB44AD94E}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A29F9BD-86B3-4384-B25D-EF1FFE020266}\InprocServer32" = "$homedrive\\Windows\\system32\\WSDScanProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A2EC3B5-6599-42F1-8D7C-AFD6F3771CAD}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A30F902-8398-4ee8-86F7-4CFB589F04D1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A3976C5-4529-4ef8-B0B0-42EED37082CD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A4B5474-4226-4D28-B4FC-369CC68A7211}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A4B8F34-D725-454D-B81D-3BEBE48382DC}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A556D98-CFEE-4D84-82A7-00377F939198}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A56CD6C-B45A-4A6C-A88C-3F42AC7BCED4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A6C76BD-9A96-4FD9-930B-F60AF68F6388}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A77F7E3-36D2-4D32-83A8-496A4680C706}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A860B80-3773-4DDE-85B4-E68C520A858C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0A9AE910-85C0-11D0-BD42-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0a9bbb1e-03ee-4201-9900-abbff56c9c6c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_0\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AA02E8D-F851-4CB0-9F64-BBA9BE7A983D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\mpvis\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AC71593-60FC-4a6a-BF85-A0B93BCC3785}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AD67D92-C11B-419A-AA28-9045B4169097}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.Provisioning\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0ADD8D9B-E3C3-43B5-BBCE-1E158E027A64}\InProcServer32" = "$homedrive\\Windows\\System32\\UserDataPlatformHelperUtil\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0ADDA830-2C26-11D2-AD65-00A0C9AF11A6}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSI Tools\\MergeMod\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AE2DEB0-F901-478b-BB9F-881EE8066788}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AEA3667-1039-43ff-8D21-B1A162090671}\InprocServer32" = "$homedrive\\Windows\\System32\\AppIdPolicyEngineApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0af10cec-2ecd-4b92-9581-34f6ae0637f3}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0af96ede-aebf-41ed-a1c8-cf7a685505b6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AFACED1-E828-11D1-9187-B532F1E9575D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0AFCCBA6-BF90-4A4E-8482-0AC960981F5B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B124F8F-91F0-11D1-B8B5-006008059382}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B1C8EE2-4E12-496F-BA37-D7337B90FB4B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Portable\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B26FE8C-9E57-48FF-AD9F-3084EF402443}\InProcServer32" = "$homedrive\\Windows\\System32\\provops\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B2C35D2-C8BC-4470-BFC0-D6BB1235E5CE}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{0b2c9183-c9fa-4c53-ae21-c900b0c39965}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B2FAAC6-8D0D-40C8-8C06-42D6DAD2F3F1}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0b2feecb-1577-4fa6-9a29-bd9022ebcf90}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B30F034-02D5-4E2B-9BB7-A9F6538F4110}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B3FFB92-0919-4934-9D5B-619C719D0202}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0b43d888-341a-4d8c-8c3a-f9ef5045df01}\InProcServer32" = "$homedrive\\Windows\\System32\\hnsproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0b4c227f-2394-43ff-ba59-bc762f5c46ea}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B4CD745-723E-4D23-B898-47BECD7F0DEF}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\vpnclientpsprovider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0B5A7836-4C16-4560-90B2-0F5DAF6D6D1B}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0b6d74fe-ad29-4c92-ac06-f06bc2f238a7}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0b91a74b-ad7c-4a9d-b563-29eef9167172}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BA2A2AC-A4D5-38CB-AD03-A0D5B6EC4646}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BB3B78C-1807-4249-5BA5-EA42D66AF0BF}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Oracle\\VirtualBox\\VBoxProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BD7E521-4DA6-42D5-81BA-1981B6B94075}\InProcServer32" = "$homedrive\\Windows\\System32\\PNPXAssocPrx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0bdc6fc7-83e3-46a4-bfa0-1bc14dbf8b38}\InProcServer32" = "$homedrive\\Windows\\System32\\logoncontroller\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BE35200-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\mfc42u\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BE35201-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\mfc42u\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BE35202-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\mfc42u\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BE9F729-A4E0-4BED-9FB3-85F1858143B7}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BEBFF02-C139-4f43-AE23-333A4E635ECE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0bf754aa-c967-445c-ab3d-d8fda9bae7ef}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BFCC060-8C1D-11D0-ACCD-00AA0060275C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0BFCF7B7-E7B6-433a-B205-2904FCF040DD}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{0bfee0ab-71c3-4ffe-89ef-bd28bef201e7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C08E3BB-D10B-4CC9-B1B3-701F5BE9D6EC}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Icaros\\64-bit\\IcarosPropertyHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C0B0642-1DEB-43DF-8032-7A9BF5811A74}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c0b25f5-e762-4004-96cd-00ffc1ecb5bf}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C11C759-23B0-4731-8D48-5FE3EA62051F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c15d503-d017-47ce-9016-7b3f978721cc}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c194cb2-2959-4d14-8964-37fd3e48c32d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C1A0EF4-B44F-4179-BDDD-31C27DE7A6D1}\InprocServer32" = "$homedrive\\Windows\\System32\\InternetMailCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C1CC3CF-D7B8-459F-BE18-2F009E2541DC}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C27CFDD-1613-4A0C-BD12-E8D369669152}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C313C67-199B-4e68-884D-D36914E26EDD}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c39a5cf-1a7a-40c8-ba74-8900e6df5fcd}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c3ae323-c4c1-43c6-9fb4-bb4f34fe0e28}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.SystemId\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C3B05FB-3498-40C3-9C03-4B22D735550C}\InProcServer32" = "$homedrive\\Windows\\System32\\rasdlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C41D1E6-9D16-41ED-9CDD-D0665039857B}\InProcServer32" = "$homedrive\\Windows\\system32\\tcpipcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c449b17-06f4-4f1f-a1bf-8cd17fe5d45b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C5672F9-3EDC-4b24-95B5-A6C54C0B79AD}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C657D21-CE8E-4D86-AEEB-63FFBC70846D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C7EFBDE-0303-4c6f-A4F7-31FA2BE5E397}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C7FF16C-38E3-11d0-97AB-00C04FC2AD98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqloledb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0C93795D-E155-444B-9761-1B1C4715AA55}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0c9ac398-8c78-4b4b-b8c6-675ed1b734a1}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CCB8559-9E10-4759-AEFD-51815C3677E3}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CD069CF-AC9B-41F4-9571-3A95A62C36A1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CD397F8-20A2-46F0-BAE8-952DEEEDA2C5}\InProcServer32" = "$homedrive\\Windows\\system32\\ConnectedAccountState\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\InProcServer32" = "$homedrive\\Windows\\system32\\cabview\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0cdb500e-123f-4e98-b446-0f3eae3c7ebc}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CE7A4A6-03E8-4A60-9D15-282EF32EE7DA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CE63743-3E8B-463F-90D8-0274D20FCEBB}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CF07551-EEF2-420C-B5AB-7E4FEB2249CF}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CF32AA1-7571-11D0-93C4-00AA00A3DDEA}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CF774D0-F077-11D1-B1BC-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CF774D1-F077-11D1-B1BC-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CFAE939-931E-4305-8D05-8C76C254EB34}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CFDD070-581A-11D2-9EE6-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0CFF0699-BD9D-495A-A558-DD5C77B70875}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Data\.Activities\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D0D66EB-CF74-4164-B52F-08344672DD46}\InprocServer32" = "$homedrive\\Windows\\System32\\fdssdp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D0E47ED-7220-411f-8F81-1118095DA5E7}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D23F8B4-F2A6-3EFF-9D37-BDF79AC6B440}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D29D708-8F9D-44D9-88BE-1AA7EF30CFCD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D41EBA2-17EA-4B0D-9172-DBD2AE0CC97A}\InprocServer32" = "$homedrive\\Windows\\system32\\srhelper\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D45D530-764B-11d0-A1CA-00AA00C16E65}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D52ABE3-3C93-3D94-A744-AC44850BACCD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0d5c7d36-333d-4f39-9c65-7ab0c48fce32}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinDataModelServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D6417E3-866C-4959-9816-4BF5B85CDAD7}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsrx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D722F1A-9FCF-4E62-96D8-6DF8F01A26AA}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D816B02-D487-44FB-8BD3-7EADB66604CA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0d81ea0d-13bf-44b2-af1c-fcdf6be7927c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0d9948a9-e79f-4a06-8784-c32583d034f2}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0d9b47a2-92b8-4c3b-9147-5b1f1a2e0967}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0D9D975A-C577-4B5C-93B0-D1BE4944DEDE}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0da7bfdf-c0a0-44eb-be82-b7a82c4721de}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DAD2FDD-5FD7-11D3-8F50-00C04F7971E2}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DBD7044-8EA5-4573-A924-FE8565CCE18F}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0dbecec1-9eb3-4860-9c6f-ddbe86634575}\InprocServer32" = "$homedrive\\Windows\\system32\\msheif\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DC1AB8B-A52D-4BA8-BD76-E2819386FB2F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0dc331ee-8438-49d5-a721-e10b937ce459}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DD1B55E-2EB8-42E2-B8D0-F11594A29477}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0dea3e34-6b45-4e36-aa94-9200e0dddea5}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0dec7d0c-bd63-4759-aa64-adefd70dcf9a}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DED49D5-A8B7-4D5D-97A1-12B0C195874D}\InprocServer32" = "$homedrive\\Windows\\System32\\bdaplgin\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{0DFA72F0-D26C-4987-A128-E3A5641C5568}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E1487F2-9865-4CD5-B99A-9C5EB063A2BC}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E1EEFB2-E336-481C-B178-36261EC5A843}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E21C2A5-88A5-408D-A3F4-480755678C61}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E25DC18-9F5E-48B1-80B3-D124E81B773B}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E2B61B8-8E14-4725-B45C-8FD5F809D16D}\InProcServer32" = "$homedrive\\Windows\\System32\\EnterpriseAppVMgmtCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E32D9F9-10FB-4b90-8B24-826B07B084D0}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0e3be0d7-030e-4ca3-a911-d86e24ae0a3c}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\IMTCCFG\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E41CFB8-0506-40F4-A516-77CC23642D91}\InprocServer32" = "$homedrive\\Windows\\System32\\MSFlacDecoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E4EFFC0-2387-11D3-B372-00105A98B7CE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E58372A-2CA5-4866-8443-988215E6EE1F}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E59FEAB-3B5A-49E2-8E2E-BD6C9FDE1DC6}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\binaryinfo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E5CBF21-D15F-11D0-8301-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E681C52-CD03-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0e6daa63-dd4e-47ce-bf9d-fdb72ece4a0d}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E71F9BD-C109-3352-BD60-14F96D56B6F3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E752416-F29E-4195-A9DD-7F0D4D5A9D71}\InprocServer32" = "$homedrive\\Windows\\System32\\AuthFWGP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E890F83-5F79-11D1-9043-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E94CA61-50B3-4ACD-8276-1A281F3357F3}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceElementSource\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0e971350-4039-4a03-85fe-4c210917c26d}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0E9847B3-13E8-44E6-9659-2B60A140A573}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\DMWmiBridgeProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0ea79562-d4f6-47ba-b7f2-1e9b06ba16a4}\InProcServer32" = "$homedrive\\Windows\\System32\\AuthBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0eb06e8d-d00a-11da-a46c-0040f4b33241}\InprocServer32" = "$homedrive\\Windows\\system32\\TSErrRedir\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0ED2F8D5-02B2-48CC-A25A-8B8468E67B45}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0EE4845B-96CD-403b-8609-317330581408}\InprocServer32" = "$homedrive\\Windows\\System32\\DeviceDisplayStatusManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0EEA25CC-4362-4a12-850B-86EE61B0D3EB}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0EEBEAF3-B225-493C-AD14-1DBE8775C8BA}\InProcServer32" = "$homedrive\\Windows\\System32\\LanguagePackManagementCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0EEC1AF6-7664-4D17-88A5-B71EF18A93BC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0EEF5FBE-18F3-478A-BD28-4899C2E90323}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0f3079cc-f843-4c8e-9a5e-4af1e37b4c95}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0f3ed1f2-afdd-4b0c-b6d9-229c1bc58a08}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F3F9F91-C838-415E-A4F3-3E828CA445E0}\InprocServer32" = "$homedrive\\Windows\\System32\\fxscomex\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F469577-F241-4632-941A-C592F64FC1C4}\InProcServer32" = "$homedrive\\Windows\\System32\\VoiceActivationManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F563B5F-8EE2-4516-BA0A-544DE058C75B}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcleanup\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F6221DB-8EE7-450D-A28A-2898956004F2}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F7434B6-59B6-4250-999E-D168D6AE4293}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F7650EE-9AFA-47B4-9BE7-F74D9D3C41D7}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32" = "$homedrive\\Windows\\System32\\taskschd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F92030A-CBFD-4AB8-A164-FF5985547FF6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0f92ff8d-2f19-4b9a-b9dd-3efc2b3becec}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F96E303-CA9A-4CEB-9A1B-A3E7A775E04F}\InProcServer32" = "$homedrive\\Windows\\system32\\IppCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0F9FDB2D-1804-4cde-A2F9-9B380CDACF7A}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\IHDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FA53099-5317-46AF-9376-9A04A4B550F9}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0fafd998-c8e8-42a1-86d7-7c10c664a415}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.ui\.picturepassword|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FB15084-AF41-11CE-BD2B-204C4F4F5020}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msxactps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FB41BD0-3107-40A5-8D49-456E585947B2}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FC988D4-C935-4b97-A973-46282EA175C8}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FDE5092-AA2A-11D1-A7D4-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FD16473-86A0-4991-B88A-D48733BF9873}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\.*\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FE62585-2E14-4bf2-8D61-93954A5F1041}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FEB51A7-30AA-4201-BA5E-97B75740CBC6}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FF66430-C796-3EE7-902B-166C402CA288}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{0FFD3B05-5194-4e02-A4C8-A1449209F10E}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10072CEC-8CC1-11D1-986E-00A0C955B42E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VGX\\vgx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{100B4FC8-74C1-470F-B1B7-DD7B6BAE79BD}\InprocServer32" = "$homedrive\\Windows\\System32\\adrclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{101193C0-0BFE-11D0-AF91-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{102D1D13-BD88-435f-99C1-DE69F1886168}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{103874F6-2837-4156-9C6A-DEE9D37CF3DE}\InProcServer32" = "$homedrive\\Windows\\System32\\settingsync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{103E1E59-66D1-4143-B772-8D846E96FEBF}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1047074A-3407-43ff-8CCB-0060CFE28A93}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{104846ab-42b1-4e38-a80d-136f78c3f258}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{10493933-661B-4083-9CE0-EFE48ADD0770}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1050489C-0702-493F-94AB-58A9C5BE620C}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10794fd1-36a6-4527-8e61-691856d5aa34}\InProcServer32" = "$homedrive\\Windows\\System32\\HdcpHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{108296C1-281E-11D3-BD22-0000F80849BD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{10898C3A-D2EB-483A-BC44-66BCCF03D6F4}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.Devices\.HumanInterfaceDevice\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10964DDD-6A53-4C60-917F-7B5723014344}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10A59D3A-E15C-44EC-B6C8-950E713DCA7D}\InProcServer32" = "$homedrive\\Windows\\system32\\settingsync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10BCEB99-FAAC-4080-B2FA-D07CD671EEF2}\InprocServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10C1EF5E-6155-4c58-B33B-5D5A78532EE8}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10d62541-90d0-42fe-848c-0dbc1ac42eda}\InProcServer32" = "$homedrive\\Windows\\System32\\CoreGlobConfig\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10E2414A-EC59-49D2-BC51-5ADD2C36FEBC}\InProcServer32" = "$homedrive\\Windows\\System32\\dispex\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10E59D21-3860-4ed8-BD52-883E116A892E}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{10FEF81C-0DAA-4af0-B714-1F1689C08C8C}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1108BE51-F58A-4CDA-BB99-7A0227D11D5E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11103421-354C-4CCA-A7A3-1AFF9A5B6701}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1123D0C1-886C-42C3-98E6-7109780E8BE2}\InprocServer32" = "$homedrive\\Windows\\System32\\SmartCardSimulator\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11275A82-5E5A-47fd-A01C-3683C12FB196}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{112BC2E7-9EF9-3648-AF9E-45C0D4B89929}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{114F5598-0B22-40A0-86A1-C83EA495ADBD}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{115193ED-8F85-426D-8792-5B1097807A0F}\InProcServer32" = "$homedrive\\Windows\\System32\\kinsapo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1153ACC9-1943-4b3b-B365-0CB8EF9CDE9B}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11581718-2434-32E3-B559-E86CE9923744}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1163D0CA-2A02-37C1-BF3F-A9B9E9D49245}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{11659a23-5884-4d1b-9cf6-67d6f4f90b36}\InProcServer32" = "$homedrive\\Windows\\System32\\WinTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{116ABC1A-F7DB-45A7-ADDA-D5A57A08C6FF}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{116F8D13-101E-4fa5-84D4-FF8279381935}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11962D33-DEDC-457B-8D75-B3DAD1F202B9}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcCtnr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11993195-1244-4840-AB44-480975C4FFE4}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{119b14a0-eb11-40c7-9a3c-e6a8904827d2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11a25a1d-b9a3-4edd-af83-3b59adbed361}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11d162b6-1cea-4b4a-8037-2518ecd6554b}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11D5C91F-0A98-11D1-BB10-00C04FC9A3A3}\InprocServer32" = "$homedrive\\Windows\\System32\\mycomput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11D61A62-19CA-4F89-AC06-07743E039B71}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv121p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11D893E6-ED32-4826-BCB1-E5F9E15C4036}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11dbb47c-a525-400b-9e80-a54615a090c0}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11E6A93F-EC60-4AD7-A3C8-3DDC3E2E4050}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{11F11442-3359-410C-875E-D21984507B62}\InProcServer32" = "$homedrive\\Windows\\System32\\(usoapi|wuapi)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12044CC7-38BB-487A-AD74-D39F7135304F}\InProcServer32" = "$homedrive\\Windows\\System32\\ComposableShellProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1206F5F1-0569-412C-8FEC-3204630DFB70}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{120CED89-3BF4-4173-A132-3CB406CF3231}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{122595E5-20A2-47D3-8604-4A613FF6CCA7}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatializerApo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{122EC645-CD7E-44D8-B186-2C8C20C3B50F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12426E70-50E2-3129-B617-E252B36ECE89}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1249B20C-5DD0-44FE-B0B3-8F92C8E6D080}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{124E2045-8D63-4C23-B420-BBCD6A0ED61A}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\qoswmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12518493-00B2-11d2-9FA5-9E3420524153}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{125B0F61-0EC3-4f07-9A49-AFB340D9E57F}\InProcServer32" = "$homedrive\\Windows\\System32\\fhlisten\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{126D7983-FAA4-49EF-A081-BD4B22453A1E}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1273567F-5FEE-46B1-8895-BD3AD61A58EE}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{127b106b-b42e-4cd8-b08a-22b66a1c7877}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imesearchps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{128509e9-c44e-45dc-95e9-c255b8f466a6}\InprocServer32" = "$homedrive\\Windows\\System32\\MSFlacEncoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{128ACDCE-4D92-4D16-854F-F40AC7311ABB}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationControllerPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1293C733-3151-48F5-89DE-2457B4AB3FD2}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32" = "$homedrive\\Windows\\System32\\npmproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{129D7E40-C10D-11D0-AFB9-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12C21EA7-2EB8-4B55-9249-AC243DA8C666}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12CDE14D-5ECF-4c56-8233-120DB56647A2}\InprocServer32" = "$homedrive\\Windows\\System32\\mtfspellcheckds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12D3E372-874B-457D-9FDF-73977778686C}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12D51199-0DB5-46FE-A120-47A3D7D937CC}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12D73610-A1C9-11D3-BC90-00C04F72DF9F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12DD4DBB-532B-4FCE-8653-74CDB9C8FE5A}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{12fc5e89-5446-4a7c-ba46-207a29e2945d}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{130F6206-B21A-4B21-9D98-526B5AECC0BB}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1334e551-b2db-429b-a94a-7d6a226ffcbf}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{13482EC3-06A3-4bb3-84A9-193302B8DD54}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13516F23-4A53-4282-A462-CC1571129539}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcCtnr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{135698D2-3A37-4d26-99DF-E2BB6AE3AC61}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1362ada1-eb60-456a-b6e1-118050db741b}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13639463-00DB-4646-803D-528026140D88}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{136BFD13-0C9E-49B3-8C4E-74A235AFEA37}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13709620-C279-11CE-A49E-444553540000}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1372A97E-2034-41ee-A6C1-1B68FAFA75A1}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{137f5ec6-cf6b-482f-acea-c687dfbd199d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\IpsPlugin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13847AF0-912C-470B-87B7-7FC3483BD5F9}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{138508bc-1e03-49ea-9c8f-ea9e1d05d65d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MAPISHELL\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{139D8403-E74F-41d2-B103-8790C5C7A517}\InProcServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\speechuxcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13a4bbe8-6527-40cb-a996-1602829541ef}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13AA3650-BB6F-11D0-AFB9-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13B216F4-3CD0-410F-951B-ECED8D7485C6}\InProcServer32" = "$homedrive\\Windows\\System32\\NFCProvisioningPlugin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13B37A2A-546B-47BF-BBCA-8AC97F1EBDCB}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{13D3C4B8-B179-4ebb-BF62-F704173E7448}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13D557B6-A469-4362-BEAF-52BFD0F180E2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{13DE4A42-8D21-4C8E-BF9C-8F69CB068FCA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13E208E5-F763-4689-BB90-7133C6B7FD54}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13EE36D8-2EFD-44F6-AF3B-75FF35E6C691}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{13F6A0B6-57AF-4BA7-ACAA-614BC89CA9D7}\InProcServer32" = "$homedrive\\Windows\\System32\\ProximityCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14010e02-bbbd-41f0-88e3-eda371216584}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14074e0b-7216-4862-96e6-53cada442a56}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1438B859-8F3B-4053-9C45-EE3D2BAB4611}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{143B03BE-F4B9-4775-979E-5392AB1B7EB2}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1443904b-34e4-40f6-b30f-6beb81267b80}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpTip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14445657-8983-11e5-998B-B4B52FE06611}\InprocServer32" = "$homedrive\\Windows\\System32\\trie\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{144C71F2-7F10-4AB2-BB07-C38F5B9AE05E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14599217-F4F5-4B07-BF65-249B9D59C915}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGCapturePropPage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{145B4335-FE2A-4927-A040-7C35AD3180EF}\InprocServer32" = "$homedrive\\Windows\\System32\\fdssdp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14654CA6-5711-491D-B89A-58E571679951}\InProcServer32" = "$homedrive\\Windows\\System32\\tbauth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{146855FA-309F-3D0E-BB3E-DF525F30A715}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{146A47AB-A2CF-3587-BB25-2B286D7566B4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{14795a8f-78f3-47bd-acb6-e767414fe293}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{147A9C5D-36F4-4e3e-BD47-F5F207425085}\InProcServer32" = "$homedrive\\Windows\\system32\\hgprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1482dc37-fae9-4787-9025-8ce4e024ab56}\InprocServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14834D34-8CEE-459e-8520-2264EC46E099}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{148BD520-A2AB-11CE-B11F-00AA00530503}\InProcServer32" = "$homedrive\\Windows\\System32\\mstask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32" = "$homedrive\\Windows\\System32\\mstask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14910622-09D4-3B4A-8C1E-9991DBDCC553}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{14BE1FB6-7B58-4724-BCF7-4389C7770F07}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{14ce31dc-abc2-484c-b061-cf3416aed8ff}\InProcServer32" = "$homedrive\\Windows\\system32\\shutdownux\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14D0D64D-5493-4E66-AD22-716E81E1D094}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14D4CBD9-7490-4F25-BAA6-1C5E22F6B1E3}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v3\.0\\WPF\\PenIMC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14d7a407-396b-44b3-be85-5199a0f0f80a}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14DD9A1C-7CFF-41be-B1B9-BA1AC6ECB571}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14E74C62-DC97-43B0-8F2F-581496A65D60}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14EEC4CA-22CF-4FA7-96C9-4BD953414079}\InProcServer32" = "$homedrive\\Windows\\System32\\starttiledata\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14F3C12D-7712-42CC-B7CC-64D2BB560C43}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Speech\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14F94ACC-7A15-45A8-898A-CFA5EA3BF453}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Devices\.Sensors\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{14FDABF5-AF35-4975-A073-C5017ABDEEAF}\InProcServer32" = "$homedrive\\Windows\\System32\\dlnashext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{150F28F1-49A5-4C28-BE1A-CFA854A1D04B}\InprocServer32" = "$homedrive\\Windows\\System32\\tpmvsc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1510FB87-5676-40B9-A227-5D0B66866F81}\InProcServer32" = "$homedrive\\Windows\\System32\\eapphost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1531d583-8375-4d3f-b5fb-d23bbd169f22}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{154CF571-B575-4353-A775-D5623728D0F8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.WiFi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15756be1-a4ad-449c-b576-df3df0e068d3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{157D9A5F-5139-4AD7-AC07-6E8B996FE99F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15A58581-C545-46FE-BD72-FC6416CD2AF7}\InprocServer32" = "$homedrive\\Windows\\System32\\LegacyNetUX\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15b0bb4c-0f7d-11D1-b21f-00C04Fb9473f}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15D6504A-5494-499C-886C-973C9E53B9F1}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15DBE5AD-317F-4271-A72F-D73D34B26559}\InProcServer32" = "$homedrive\\Windows\\System32\\LockHostingFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15deef81-c4c4-431f-b0c9-b62cb9ea3aa9}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15E16AEC-F2F0-4E52-B0DF-029D11E58E4B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15EABA99-0ED7-48E5-80B6-19635B525CC2}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15eae92e-f17a-4431-9f28-805e482dafd4}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{15fc1bac-8d83-4e87-8cc2-a70c9f66f943}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{15FD01A3-6E5D-4ECD-9EBD-1813CB3887A1}\InProcServer32" = "$homedrive\\Windows\\system32\\btpanui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1618348E-35B3-4631-8C04-2AB15AF5007D}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1643E180-90F5-11CE-97D5-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{164484A9-35D9-4FB7-9FAB-48273B96AA1D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1649b154-c794-497a-9b03-f3f0121302f3}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1649d1cf-deaf-4a68-abe8-5c9f68572fd1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{165D4642-1278-4486-A3FD-439F5888FCA3}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16671E5F-0CE6-4CC4-9768-E89FE5018ADE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1677ABA1-4346-442F-A74A-D8B9A713B964}\InProcServer32" = "$homedrive\\Windows\\System32\\bcastdvr\.proxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{167c0a56-c490-4623-9225-8ffdc546e56c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1685D4AB-A51B-4af1-A4E5-CEE87002431D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{168eb462-775f-42ae-9111-d714b2306c2e}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{168F4281-EC0D-46D3-951D-FBCB2F7C9079}\InProcServer32" = "$homedrive\\Windows\\system32\\fhsrchapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1698790a-e2b4-11d0-b0b1-00c04fd8dca6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{169A0691-8DF9-11d1-A1C4-00C04FD75D13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{16A0A3B9-9F65-4102-9367-2CDA3A4F372A}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16A78C67-DCE5-45E9-A45E-7A051B50C09E}\InProcServer32" = "$homedrive\\Windows\\system32\\wifidatacapabilityhandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16AA5514-10D0-47F4-8EFD-FF066D924F2B}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16B280C5-EE70-11D1-9066-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16B280C8-EE70-11D1-9066-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16C2C29D-0E5F-45f3-A445-03E03F587B7D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16CA098E-5156-4EDC-B064-741AB2B08A38}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{16CA4E03-FE69-4705-BD41-5B7DFC0C95F3}\InProcServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16d51579-a30b-4c8b-a276-0ff4dc41e755}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{16D5A2BE-B1C5-47b3-8EAE-CCBCF452C7E8}\InProcServer32" = "$homedrive\\Windows\\system32\\webcamui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17072F7B-9ABE-4A74-A261-1EB76B55107A}\InprocServer32" = "$homedrive\\Windows\\System32\\wscapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{170EC3FC-4E80-40AB-A85A-55900C7C70DE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{171252A0-8820-4AFE-9DF8-5C92B2D66B04}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{1722D4D2-7310-468E-9242-42AF7B4DAE4E}\InProcServer32" = "$homedrive\\Windows\\system32\\NetworkQoSPolicyCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17383A17-6B93-4193-9B60-4D4F99C05163}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{173FD26E-B0F7-42BF-BFD0-D91DF64CC298}\InprocServer32" = "$homedrive\\Windows\\System32\\tpmvsc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1765E14E-1BD4-462E-B6B1-590BF1262AC6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1767B93A-B021-44EA-920F-863C11F4F768}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{176961ec-fbfb-4288-b418-c80c86947481}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{176D323D-E591-4535-9A09-26F698E5AC5D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{176d6597-26d3-11d1-b350-080036a75b03}\InprocServer32" = "$homedrive\\Windows\\System32\\colorui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{177C0AFE-900B-48d4-9E4C-57ADD250B3D4}\InprocServer32" = "$homedrive\\Windows\\System32\\DolbyDecMFT\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{177F0C4A-1CD3-4DE7-A32C-71DBBB9FA36D}\InprocServer32" = "$homedrive\\ProgramData\\Microsoft\\VisualStudio\\Setup\\x64\\Microsoft\.VisualStudio\.Setup\.Configuration\.Native\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{178167bc-4ee3-403e-8430-a6434162db17}\InProcServer32" = "$homedrive\\Windows\\system32\\webplatstorageserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{179CC917-3A82-40E7-9F8C-2FC8A3D2212B}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{179EE204-246C-4895-919F-5B1D2414B21C}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{179F3D56-1B0B-42B2-A962-59B7EF59FE1B}\InprocServer32" = "$homedrive\\Windows\\System32\\speech_onecore\\engines\\tts\\MSTTSEngine_OneCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17a8b57c-9502-4494-8580-81a9b8069c09}\InprocServer32" = "$homedrive\\Windows\\System32\\chakradiag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17B001CF-85DA-4D7B-86F9-56119D38692E}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17B21A1B-6C59-48E0-A448-6BC9AD2C5BFE}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17B75166-928F-417d-9685-64AA135565C1}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17C82257-654E-4C47-8E23-DCA24EAA76A0}\InProcServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17CCA47D-DAE5-4E4A-AC42-CC54E28F334A}\InprocServer32" = "$homedrive\\Windows\\system32\\EditionUpgradeManagerObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17CCA71B-ECD7-11D0-B908-00A0C9223196}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{17cd9488-1228-4b2f-88ce-4298e93e0966}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17D6CCD8-3B7B-11D2-B9E0-00C04FD8DBF7}\InprocServer32" = "$homedrive\\Windows\\System32\\objsel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17DB7422-8CEA-4EE5-A68B-59D956D9A5FF}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.ModernDeployment\.ConfigProviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17f418ed-5cd0-4067-be51-4c96d386ebc1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{17fb3711-de14-477f-8b81-32a9c11a6938}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17FC1A80-140E-4290-A64F-4A29A951A867}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{17FE9752-0B5A-4665-84CD-569794602F5C}\InProcServer32" = "($homedrive\\Windows\\System32\\ieproxy\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\ieproxy\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1814CEEB-49E2-407F-AF99-FA755A7D2607}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Mozilla Firefox\\AccessibleMarshal\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{181A38F4-6CE6-4edc-8DB0-6E5631963A1E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{181b54fc-380b-4a75-b3f1-4ac45e9605b0}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{181D6C15-60A6-4BC7-A8E7-389D5BFE4841}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{182C3813-DF97-40fa-9C4E-B7D3E74F00CA}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{184132B8-32F8-4784-9131-DD7224B23438}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1860E246-E924-4F73-B2C5-93E0577E3AA1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{18619969-3835-41E5-B457-44FE0DB77653}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxStreamingDataSourcePS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{186974B7-47BB-4673-9CDF-EBEDDE957427}\InProcServer32" = "$homedrive\\Windows\\System32\\AADJCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{186cda7f-de22-4b95-99b7-49efba0a08f4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{186dd02c-2dec-41b5-a7d4-b59056fade51}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{187463A0-5BB7-11D3-ACBE-0080C75E246E}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{18845040-0fa5-11d1-ba19-00c04fd912d0}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{188890A9-EFC6-4B11-8E76-D8579F739E86}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{18907f3b-9afb-4f87-b764-f9a4e16a21b8}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{189255E0-6EF0-41C5-8A1E-3B391D691215}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{18B1C7EE-68E3-35BB-9E40-469A223285F7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{18C628EE-962A-11D2-8D08-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{18F65133-BB77-4C67-8A64-D427BE942224}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1910E202-236A-43E6-9469-FE0B3149F3D9}\InprocServer32" = "$homedrive\\Windows\\system32\\WwanRadioManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19129EAC-A717-4BBD-87E0-615E3C939668}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19198abd-d4b9-4e14-b156-725f85205f0f}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{191D5A6B-43B9-477A-BB22-656BF91228AB}\InProcServer32" = "$homedrive\\Windows\\System32\\LanguagePackDiskCleanup\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19204EDD-187C-40B7-ADA4-79772BD10FB2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.SmartCards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19227DC0-FC88-4AAA-8C2D-A0DB913AA2FF}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19352205-42B0-4690-9AA4-D7DB9AE5F259}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{193B4137-0480-11D1-97DA-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{195B4D07-3DE2-4744-BBF2-D90121AE785B}\InprocServer32" = "`"$homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\DefenderCSP\.dll`"" | |
| "HKEY_CLASSES_ROOT\CLSID\{19603261-6059-43DF-B9E1-8B4352825A90}\InprocServer32" = "$homedrive\\Windows\\System32\\wiascanprofiles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1965FEA3-3896-438B-B789-F5981797E7E7}\InProcServer32" = "$homedrive\\Windows\\System32\\MapsBtSvcProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1968106d-f3b5-44cf-890e-116fcb9ecef1}\InProcServer32" = "$homedrive\\Windows\\System32\\sud\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{196f128d-dce9-4090-b061-3d29c6ca32c2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{197F74E3-B84B-46DE-8AE6-82F1CD181CDC}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1992BE97-5290-45A1-897C-4E69431A1803}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32" = "$homedrive\\Users\\.*\\AppData\\Local\\Microsoft\\TeamsMeetingAddin\\.*\\x64\\Microsoft\.Teams\.AddinLoader\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19A76FE0-7494-11D0-8816-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19AD99AE-0DD2-495A-AAC4-015E479722FD}\InprocServer32" = "$homedrive\\Windows\\System32\\VscMgrPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19b9dcc7-6f37-4dc7-9da6-8af601c5fce2}\InProcServer32" = "$homedrive\\Windows\\system32\\WWanMM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19BA17F2-2602-4E77-9027-103894607626}\InprocServer32" = "$homedrive\\Windows\\system32\\sharemediacpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19eb3aee-148e-42fe-a569-a7dc9b25d658}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19fb28d1-0e3f-4b94-bd34-8e841aa8b85e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{19FED08E-EFD1-45da-B524-7BE4774A6AEE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A0391BF-9564-4294-B0A4-06C298929EF9}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A06A4DC-E239-3717-89E1-D0683F3A5320}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1a184871-359e-4f67-aad9-5b9905d62232}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A1BDCF1-7EBF-427B-BE56-8D7D2B3D6043}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A32449E-4C06-4d34-B674-452A952511CE}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A34F5C1-4A5A-46DC-B644-1F4567E7A676}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A3F11DC-B514-4B17-8C5F-2154513852F1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A503A1F-BD58-415D-A2FA-A3891F1D99F6}\InProcServer32" = "$homedrive\\Windows\\System32\\wups\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A66AEDC-93C3-4ACC-BA96-08F5716429F7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Shell\.ServiceHostBuilder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A68CF90-753A-4523-A4A4-40CAB4BC6EFF}\InprocServer32" = "$homedrive\\Windows\\system32\\ms3dthumbnailprovider\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A7F9F39-FB98-4405-A66D-954E07714E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\AppVClientPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A8766A0-62CE-11CF-A5D6-28DB04C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A8B3420-AE1D-4DCD-953B-992C429F8861}\InprocServer32" = "$homedrive\\Windows\\System32\\AssignedAccessCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1A9482E3-2C71-44DF-9012-A969577325B6}\InprocServer32" = "mscoree\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1a9ca6d5-2488-46b1-b439-218f2314a059}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ab4a8c0-6a0b-11d2-ad49-00c04fa31a86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1AB78400-B5A3-4D91-8ACE-33FCD1499BE6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ABB62A5-054D-48A4-9509-D717E39E045B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Perception\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1AC32B1A-E379-4CAD-B655-F978A30856EC}\InprocServer32" = "$homedrive\\Windows\\System32\\SmartCardSimulator\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1AD699A6-31F7-4EF0-93E9-FFD576F35D30}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ADD3454-9CD8-449B-8777-341DAC8A3B0A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1AF81E4E-FC45-48ee-B236-A2A663494390}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1b00f3f3-945c-4bd3-ade8-77ece2f75dbd}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinDataModelServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B02C1F5-555B-4802-96A7-ADDDCCBCA38A}\InProcServer32" = "$homedrive\\Windows\\system32\\Dot3MM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B1A897E-FBEE-41CF-8C48-9BF764F62B8B}\InProcServer32" = "$homedrive\\Windows\\system32\\softkbd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1b223276-f79d-46c5-bc7e-3783ebf93b72}\InProcServer32" = "$homedrive\\Windows\\System32\\edgemanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1b283861-754f-4022-ad47-a5eaaa618894}\InProcServer32" = "$homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B2AFB92-0B5E-4A30-B5CC-353DB4F9E150}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B4DEBEC-0475-4564-B2BF-11490C40AACB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B544C20-FD0B-11CE-8C63-00AA0044B51E}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B544C22-FD0B-11CE-8C63-00AA0044B51E}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B544C22-FD0B-11CE-8C63-00AA0044B51F}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B544C24-FD0B-11CE-8C63-00AA0044B520}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B57B2A1-E763-4676-9064-297F1B413632}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B6FC61A-648A-4493-A303-A1A22B543F01}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1b7cd997-e5ff-4932-a7a6-2a9e636da385}\InprocServer32" = "$homedrive\\Windows\\System32\\Chakra\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B979846-AAEB-314B-8E63-D44EF1CB9EFC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B9A0947-4903-45FE-9B96-FE0E80C35D9C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Sensors\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1B9B1983-753C-47ab-9C02-A94EF23154DA}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1b9f2bf2-27f5-4dec-a175-3cf7bb8cfd3e}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BA21EC2-FC80-4515-AAAB-F5766A4B88BC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BA67E3F-8CC4-44E0-848E-4E50B0126BD0}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxAPDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BA783C1-2A30-4ad3-B928-A9A46C604C28}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32" = "$homedrive\\Windows\\System32\\usermgrproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BC39379-8D90-4F18-8817-795C57163770}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BC691FE-2EC5-4F1B-B985-8DA7423CE6E9}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BCD547A-62F6-4F2D-A0E3-B4930A3F3C33}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\EventTracingManagement\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BD3AC02-7468-49C8-80CF-A138ECB84317}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcCtnr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BDF02A4-23B7-4173-8107-A56C23124493}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.3D\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BE49F30-0E1B-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1bef2128-2f96-4500-ba7c-098dc0049cb2}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32" = "$homedrive\\.*\\((Microsoft OneDrive|Microsoft\\OneDrive)|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C0F439D-7C29-4bde-8952-4EEB6A49E048}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C15D484-911D-11D2-B632-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C16EBAB-7C12-4F21-A2A9-56D67931108F}\InProcServer32" = "$homedrive\\Windows\\System32\\HttpsDataSource\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1c1800c1-3258-44c2-be80-3deadb6c5e39}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C1EDB47-CE22-4bbb-B608-77B48F83C823}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C308B42-B4B4-42AD-864C-48440C12B7A5}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C31BAA6-6551-4679-953C-47FA17D1AF6D}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Mozilla Firefox\\notificationserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1c391f2b-801a-416c-9838-6be810293dfc}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C5221CB-C1F6-4999-8936-501C2023E4CD}\InprocServer32" = "$homedrive\\Windows\\System32\\fdBth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1c5346b8-63e1-4c2b-b125-3c5db94e946c}\InprocServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\applets\\imtcskf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1c5759cb-fe4b-464b-a8d3-2687637376c4}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C621200-67B2-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1c773157-69bb-4998-abf1-93a94fd766d3}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C82EAD9-508E-11D1-8DCF-00C04FB951F9}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1c85e599-77dc-416a-ae5d-62569f1872e9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Background\.SystemEventsBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1C97EF1D-74ED-3D21-84A4-8631D959634A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1CC6B704-D0F5-4dc3-A521-13620D89E8BC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1CD0938D-1AC1-49DE-AA04-F2C92D4A02D1}\InProcServer32" = "$homedrive\\Windows\\System32\\FirewallControlPanel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1cedc5da-3614-11d2-bf96-00c04fd8d5b0}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1CFC4CDA-1271-11D1-9BD4-00C04FB683FA}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D0983EA-B409-44ED-8B61-0406BA1E9C93}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_nt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D09B407-A97F-378A-ACCB-82CA0082F9F3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d16438c-54dc-404f-83a9-c041e77a32dd}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D1F0730-0748-4b5f-81DF-865694BD07AC}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D2680C9-0E2A-469d-B787-065558BC7D43}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d27f844-3a1f-4410-85ac-14651078412d}\InprocServer32" = "$homedrive\\Windows\\system32\\acppage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d2b8d89-9324-46a0-b797-5725d8c8d881}\InprocServer32" = "$homedrive\\Windows\\system32\\sdengin2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D3529C7-671A-468d-AD2A-499A96B073D1}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D428C79-6E2E-4351-A361-C0401A03A0BA}\InprocServer32" = "$homedrive\\Windows\\System32\\TSWorkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D49F57D-47D2-4AEE-A69B-593EC558773F}\InProcServer32" = "$homedrive\\Windows\\System32\\(Windows\.Globalization|NaturalLanguage6)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D5532BB-1E08-4002-8445-8BA35E462045}\InProcServer32" = "$homedrive\\Windows\\system32\\hotplug\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D583ABC-8A0E-4657-9982-A380CA58FB4B}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D6322AD-AA85-4EF5-A828-86D71067D145}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d64637d-31e9-4b06-9124-e83fb178ac6e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.FileExplorer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d697619-5d35-44a1-a0f6-1c305324c9d0}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d6f0f8f-857d-4011-9eb2-69776d1916f0}\InProcServer32" = "$homedrive\\Windows\\System32\\MbSmsApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D78ABF5-19B5-4290-A7E3-620748B8307E}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1D858A97-49A3-4805-8390-3BD5976E7ABB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1d8a9b47-3a28-4ce2-8a4b-bd34e45bceeb}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DA08500-9EDC-11CF-BC10-00AA00AC74F6}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DC08C0F-A60F-4C62-9A1B-26E181CE8DB1}\InprocServer32" = "$homedrive\\Windows\\System32\\FilterDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DC715B2-9126-4671-8086-299A44543E0F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\NVXDBat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DCB3A00-33ED-11D3-8470-00C04F79DBC0}\InProcServer32" = "$homedrive\\Windows\\System32\\wmdmps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DF1BDDA-A8FA-4E57-8015-8B621C4DBBE7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DF7C823-B2D4-4B54-975A-F2AC5D7CF8B8}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1DF7D126-4050-47F0-A7CF-4C4CA9241333}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E1714A3-50B9-480b-A94A-636D9A9B56D1}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E35B0D0-49F2-4ACB-A9A5-4D2DA8331B02}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1e46246f-b2ad-4a86-9e08-d0f9e01ee05d}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E54333B-2A00-11d1-8198-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E651CC0-B199-11D0-8212-00C04FC32C45}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E66C960-3DF9-4d3a-A1A7-CEC25E938C60}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1E8F0D70-7399-41BF-8598-7949A2DEC898}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1e94e93c-852d-47fb-9197-7edeb41101b0}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ea1ea14-48f4-4054-ad1a-e8aee10ac805}\InprocServer32" = "$homedrive\\Windows\\System32\\vidreszr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ea5fb56-9ee8-47dc-8998-f45585c2e3e0}\InprocServer32" = "$homedrive\\Windows\\System32\\MFPlay\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1EC2DE53-75CC-11d2-9775-00A0C9B4D50C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ED6DDBB-0401-4498-A093-7D249203200C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech\\Direct Input Force Feedback\\1_1_5\\jerry_forcefeedback_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ee026d0-f551-4c71-aea2-f9897b159eaf}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1EE2EAEF-F6FE-4F5B-B9B0-CC6314541025}\InProcServer32" = "$homedrive\\Windows\\System32\\execmodelclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1ee7337f-85ac-45e2-a23c-37c753209769}\InProcServer32" = "$homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1eeb5b5a-06fb-4732-96b3-975c0194eb39}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1EF94880-01A8-11D2-A90B-00AA00BF3363}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\dsprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f01f4e9-8b75-4e20-8eb0-e49f17f2be61}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F046ABF-3202-4DC1-8CB5-3C67617CE1FA}\InProcServer32" = "$homedrive\\Windows\\system32\\dwmapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F068127-5760-490e-998C-6E35B845F49E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F06F815-7C26-43d1-BA39-3814B4B467C5}\InprocServer32" = "$homedrive\\Windows\\System32\\WordBreakers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f09b058-f3fd-4a9d-a8ba-a8a05f8fe283}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F0BC6AD-46D4-488B-BE1F-047FC7505E60}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F17C39C-99D5-37E0-8E98-8F27044BD50A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F189384-5AD4-45EA-9721-AD3E5288C62A}\InprocServer32" = "$homedrive\\Windows\\System32\\vmwpctrl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f1b577e-5e5a-4e8a-ba73-c657ea8e8598}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_1\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f1f4e1a-2252-4063-84bb-eee75f8856d5}\InprocServer32" = "$homedrive\\Windows\\System32\\WMSPDMOE\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f26a602-2b5c-4b63-b8e8-9ea5c1a7dc2e}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\InProcServer32" = "$homedrive\\Windows\\system32\\rshx32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f3d8aa5-9ebf-4ee4-85c2-ea40379aede8}\InprocServer32" = "$homedrive\\Windows\\System32\\sdiageng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}\InprocServer32" = "$homedrive\\Windows\\system32\\azroleui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F7D1BE9-7A50-40b6-A605-C4F3696F49C0}\InprocServer32" = "$homedrive\\Windows\\system32\\eapp3hst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f849cce-2546-4b9f-b03e-4004781bdc40}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F872270-D68C-4C28-85D9-70CD5FC47A70}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1f9a2c18-d89e-463e-b4f4-bb90152acc64}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmkvsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1F9F18A3-EFC0-3913-84A5-90678A4A9A80}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{1FA9085F-25A2-489B-85D4-86326EEDCD87}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1FABC6A8-AF38-4353-A39E-1AC0F29BDFA4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1fb2a002-4c6c-4de7-85c2-cb8db9a4f728}\InProcServer32" = "$homedrive\\Windows\\System32\\dskquoui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1FCE6123-B675-4790-A629-F3E8AC06F839}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\Edge\\Application\\.*\\BHO\\ie_to_edge_bho_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1fda955b-61ff-11da-978c-0008744faab7}\InprocServer32" = "$homedrive\\Windows\\system32\\dtsh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1fda955c-61ff-11da-978c-0008744faab7}\InprocServer32" = "$homedrive\\Windows\\system32\\dtsh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{1FE45ED3-B842-4CF2-8DF6-43E3D6D10E64}\InProcServer32" = "$homedrive\\Windows\\System32\\audiokse\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20051D1B-321F-3E4D-A3DA-5FBE892F7EC5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{20076C7E-4851-41ed-9EB8-F4E5F2BB0286}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{201600d8-6eff-48ce-b842-e14d37a0682d}\InProcServer32" = "$homedrive\\Windows\\System32\\wpninprc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2025BCB1-370E-4103-9C34-883770F7F2A0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{203b1eed-db9f-40fb-87bd-1990982017d2}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20404060-F24F-4F89-84C6-8AF80B0A17CB}\InProcServer32" = "$homedrive\\Windows\\System32\\audiokse\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20425B74-41F5-426F-A145-13BBB45A2F66}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2048EEE6-7FA2-11D0-9E6A-00A0C9138C29}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{204D5A28-46A0-3F04-BD7C-B5672631E57F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{205447d9-4af1-4f97-a773-e10ff2e44ead}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20578929-A1F0-4EB1-A4BA-66207291CBA3}\InprocServer32" = "$homedrive\\Windows\\System32\\VPNv2CSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{205D7A97-F16D-4691-86EF-F3075DCCA57D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{205EB05C-A2B9-4135-8645-C8673A7B81F4}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{206FA6D0-A493-41FA-943D-3F655088F7B9}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2087c2f4-2cef-4953-a8ab-66779b670495}\InProcServer32" = "$homedrive\\Windows\\system32\\(winhttpcom|winhttp)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32" = "$homedrive\\.*\\((Microsoft OneDrive|Microsoft\\OneDrive)|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{208F7A6F-FB35-4686-9494-AB22B7B2CD78}\InProcServer32" = "$homedrive\\Windows\\System32\\BthAvrcp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{209D8461-E6FB-49DD-A824-C9962A9D2F2B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20b1cb23-6968-4eb9-b7d4-a66d00d07cee}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{20C6F4C2-80A8-4310-A59A-1CC487334236}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC2_v0400\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20CCEF1E-0185-41a5-A933-509C43B54F98}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20cd9315-87d0-40b4-b925-0a8f208e1f8d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20E25881-F081-448e-85C9-4707A9400593}\InProcServer32" = "$homedrive\\Windows\\system32\\profprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20E6D937-F6A7-4C7F-8E69-7E0AF81795FB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.BackgroundManagerPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20E823C2-62F3-4638-96BD-90F4F6784EBC}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{20E8B2FE-7568-46AE-A0DB-76B7F469B92D}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{20ED4A03-6AFD-4FD9-980B-2F6143AA0892}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{210DDC43-689C-46E3-BDC1-38C16C8F4C96}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2111CED3-4393-4490-BA09-0714A7C9EA37}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.WiFiDirect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{212690FB-83E5-4526-8FD7-74478B7939CD}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{212BFFFB-DAB9-4EEF-AF58-3366DAAF4C4F}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncController\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2134da04-4faa-42ed-ada2-43707b4e1de1}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2135f72a-90b5-4ed3-a7f1-8bb705ac276a}\InProcServer32" = "$homedrive\\Windows\\system32\\((credprovs|authui)legacy|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2139e6da-c341-4774-9ac3-b4e026347f64}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_5\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2155fee3-2419-4373-b102-6843707eb41f}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{215B68E5-0E78-4505-BE40-962EE3A0C379}\InProcServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{215B77BA-853F-48C4-8DC4-024E0D68A812}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21690A61-3629-4E3B-A72D-BBC8A88DB81F}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2169A933-95E2-41BA-9377-D3FCE9448381}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Audio\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{216C62DF-6D7F-4E9A-8571-05F14EDB766A}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{217700E0-2001-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{217700E0-2003-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{217700E0-2004-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{217700E0-2005-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{217FC9C0-3AEA-1069-A2DB-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2180D006-7C2A-4058-B5C0-A28D3A114814}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Graphics\.Display\.DisplayColorManagement\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2183DACA-D0BF-4a31-97F7-B87618A81955}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21A36DDA-45BD-4F89-881E-0E18FDE90CDF}\InProcServer32" = "$homedrive\\Windows\\System32\\ShareHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21AEC8CC-EF8C-422a-8CBC-D3FB3735D855}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21B22460-3AEA-1069-A2DC-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{21D6D48E-A88B-11D0-83DD-00AA003CCABD}\InprocServer32" = "$homedrive\\Windows\\System32\\tapi3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21EC2020-3AEA-1069-A2DD-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{21EEDCF3-6B66-4593-8956-E9443F979627}\InProcServer32" = "$homedrive\\Windows\\System32\\EasPolicyManagerBrokerPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21F5A790-53EA-3D73-86C3-A5BA6CF65FE9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{21F71DD1-2398-4150-825A-CBDE00272EE4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{21FE04BD-0FCE-4d3f-A89E-D00CB1421371}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2206CDB3-19C1-11D1-89E0-00C04FD7A829}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2206D773-CA1C-3258-9456-CEB7706C3710}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{220898A1-E3F3-46B4-96EA-B0855DC968B6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{220A0D48-03A8-4F7B-8408-4EB506EF68D9}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\prnfldr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2269DAA3-2A9F-4165-A501-CE00A6F7A75B}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{227188db-3179-4fdf-af3a-da3b85a0b3cc}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{227B1F3B-C276-4DE0-9FAA-C0AD42ADDCF0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{227C5B36-F148-4B4B-AEC1-943E394D9885}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wfascim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{227ec397-6791-4ac6-a762-2f70f99015c2}\InprocServer32" = "$homedrive\\Windows\\System32\\iasrecst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{228136B0-8BD3-11D0-B4EF-00A0C9138CA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadomd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{228136B8-8BD3-11D0-B4EF-00A0C9138CA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadomd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22877a6d-37a1-461a-91b0-dbda5aaebc99}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{228D9A81-C302-11cf-9AA4-00AA004A5691}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{228D9A82-C302-11cf-9AA4-00AA004A5691}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2291478C-5EE3-4bef-AB5D-B5FF2CF58352}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2297EF69-AF4B-441D-8F63-4B69C7692DD0}\InProcServer32" = "$homedrive\\Windows\\System32\\ErrorDetails\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{229FC7D6-9056-4e26-A8B9-F546D40200AF}\InProcServer32" = "$homedrive\\Windows\\System32\\ActiveSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22A7E88C-5BF5-4DE6-B687-60F7331DF190}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22AF56E3-F2E0-4A7E-AA0C-6B226EF5ABF8}\InprocServer32" = "$homedrive\\Windows\\System32\\WorkFoldersShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22B6E688-B3A5-44FC-B0CE-69F20653CD61}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22C21F93-7DDB-411C-9B17-C5B7BD064ABC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22c6c651-f6ea-46be-bc83-54e83314c67f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{22C7DA12-F3FD-4875-8344-7786454F6534}\InProcServer32" = "$homedrive\\Windows\\System32\\ActiveSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpdxm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22D8B4F2-F577-4adb-A335-C2AE88416FAB}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22e5fca2-9c7c-4239-8aed-4d0623f532d8}\InprocServer32" = "$homedrive\\Windows\\System32\\setup\\cmmigr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22EE26E5-2289-11d2-8F43-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22F1B05B-F983-4CC7-A5F6-67BC2701E29A}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{22ff30d1-a59e-4580-9190-da3042ceca64}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\7-Zip\\7-zip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23331F43-1908-4637-940B-1EA31F4E92A1}\InprocServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{233664b0-0367-11cf-abc4-02608c9e7553}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23445657-8A4C-11e5-998D-B4B52FE06611}\InprocServer32" = "$homedrive\\Windows\\System32\\trie\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23571E11-E545-4DD8-A337-B89BF44B10DF}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{235DF164-7970-4B68-8453-2CACFFDD23C9}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\IHDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23650F94-13B8-4F39-B2C3-817E6564A756}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.immersiveshell\.serviceprovider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23B77E99-5C2D-482D-A795-62CA3AE5B673}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipiprt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23C1F3CF-C110-4512-ACA9-7B6174ECE888}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23CC32C8-6654-40CA-AACD-F4712A6CDCAF}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23CF860E-9D2C-451A-8E83-C79C848D85A6}\InProcServer32" = "$homedrive\\Windows\\system32\\sxproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23E26328-3928-40F2-95E5-93CAD69016EB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23f6a6a7-8cbb-4880-93f3-a81af3c07011}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{23F6D342-08C4-4E48-89B3-0BC8BF990783}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{240acdd2-8597-4e04-84d7-fa0068da460b}\InprocServer32" = "$homedrive\\Windows\\System32\\VrdUmed\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{242025BB-8546-48B6-B9B0-F4406C54ACFC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24264891-E80B-4fd3-B7CE-4FF2FAE8931F}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{242A95A9-8D6C-4974-A5DA-D9B6C9E619B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24400D16-5754-11d2-8218-00C04FB687DA}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{24540EBC-316E-35D2-80DB-8A535CAF6A35}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2465E8F5-E0EA-4BFD-B8B8-A3A6BCB485EB}\InprocServer32" = "$homedrive\\Windows\\System32\\storewuauth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2475A152-2C35-4489-BCBA-A269BD3F5BA4}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2489e282-b262-43f9-a0ba-8ddf0c773fa7}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2497F4DE-E9FA-4204-80E4-4B75C46419C0}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{24CA8AEF-F6D8-4732-8DB5-9D83EFD8CFBC}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24D568C5-F3AE-4F91-9CD9-AA18876DA7C2}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24DC3975-09BF-4231-8655-3EE71F43837D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24DF3111-8474-4955-AA18-F6750BAD2A2B}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{24EEC005-3938-3C71-821D-7F68FD850B2D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{250e91a0-0367-11cf-abc4-02608c9e7553}\InprocServer32" = "$homedrive\\Windows\\system32\\adsnt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25150040-b8f1-418e-af61-b51071ac1ee2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{25256c24-3b75-49b3-a433-4bb2f8865896}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25336920-03F9-11cf-8FD0-00AA00686F13}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25336921-03F9-11CF-8FD0-00AA00686F13}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25585dc7-4da0-438d-ad04-e42c8d2d64b9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{255a6fda-6f93-4e8a-9611-ded1169eefb4}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25642426-028D-4474-977B-111BB114FE3E}\InProcServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25983561-9D65-49CE-B335-40630D901227}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25ab468c-3974-4075-be50-193135461727}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{25BAAD81-3560-11D3-8471-00C04F79DBC0}\InprocServer32" = "$homedrive\\Windows\\System32\\mswmdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25BE9228-00AF-11D2-BF87-00C04FD8D5B0}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25CBB996-92ED-457e-B28C-4774084BD562}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25D7BAFF-F559-4D0E-9EA4-B48F936956AA}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25dfe23c-a049-403d-9c45-6c574d49dcf6}\InProcServer32" = "$homedrive\\Windows\\System32\\ACPBackgroundManagerPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25E609E0-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25E609E1-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25E609E4-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput8\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25E609E5-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput8\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25EC352E-72E1-4724-9A28-4AE730072149}\InProcServer32" = "$homedrive\\Windows\\System32\\autoplay\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{25ecf786-a925-4706-a269-eef5ad6899db}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\IMTCCORE\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{25F843F3-1ED6-4B4E-8749-DF294C7FEB30}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{261B8CA9-3BAF-4BD0-B0C2-BF04286785C6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\OUTLCTL\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{263A4743-BC0D-40b6-8F7F-1B2135C204D2}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26445657-50E1-4C9F-8378-FF028FD26816}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2645C449-956D-42A5-9573-AE04FD7B93EC}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{264FFAF3-9A9C-42B7-AEDB-34896CDBC7C1}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{265011AE-5481-4f77-A295-ABB6FFE8D63E}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBDecoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26671179-2ec2-42bf-93d3-64108589cad5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2667745B-5427-42D0-82E5-E432D30786E6}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcons\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcons\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcons\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{266EEE40-6C63-11cf-8A03-00AA006ECB65}\InprocServer32" = "$homedrive\\Windows\\System32\\kstvtune\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{266EEE41-6C63-11cf-8A03-00AA006ECB65}\InprocServer32" = "$homedrive\\Windows\\System32\\kstvtune\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{267cf8a9-f4e3-41e6-95b1-af881be130ff}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{267DB0B3-55E3-4902-949B-DF8F5CEC0191}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26933B26-DA32-49FC-B31F-02BACE3A497D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26A1F020-DDD8-472D-8B7C-2F98B80024F3}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26A37DC6-935D-439B-80DD-C1006AE13D71}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26bdc675-a557-411c-975f-80c4a63428f7}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.StateRepositoryBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26D32566-760A-40A2-AA82-A40366528916}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26DFFE05-90B8-4744-8A17-50B9B64E0009}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26EC0B63-AA90-458A-8DF4-5659F2C8A18A}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26ED43EA-45C6-4EF6-9E9B-1740366C98BF}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{26EEC7CE-6C67-4568-BA8F-52BEA143D756}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{26fdc864-be88-46e7-9235-032d8ea5162e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{27016870-8E02-11D1-924E-00C04FBBBFB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msdarem\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{270411D9-9832-48D5-BC1C-CE606B00F42E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFrameworkPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27171325-5F06-407C-AA8F-61154A674DE2}\InProcServer32" = "$homedrive\\Windows\\System32\\(XpsDocumentTargetPrint|XpsPrint)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354124-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354125-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354126-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354127-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354128-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354129-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2735412A-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2735412B-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2735412C-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2735412D-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2735412E-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27354130-7F64-5B0F-8F00-5D77AFBE261E}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2737EE87-ABA3-4F28-89A6-C370484D85F9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{273eb5e7-88b0-4843-bfef-e2c81d43aae5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{274C2936-A842-45f3-A457-FB4BA4ED1BA2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{274fae1f-3626-11d1-a3a4-00c04fb950dc}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27569A8A-5891-4ad0-A0CE-74D6CBC035A9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{275AF033-1C37-48ED-91F7-8E23C5D9B382}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_nt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InProcServer32" = "$homedrive\\Windows\\system32\\mlang\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2763BE6B-F8CF-39D9-A2E8-9E9815C0815E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2764BCE5-CC39-11D2-B639-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2769280B-5108-498c-9C7F-A51239B63147}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{276C88CA-7533-4A86-B676-66B36080D484}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{276FBFC1-D71F-4619-A7C1-0181077EE283}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32" = "($homedrive\\Program Files( \(x86\))?\\Windows Defender\\MpOav\.dll|`"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MpOav\.dll`")" | |
| "HKEY_CLASSES_ROOT\CLSID\{278407C2-558C-4BED-83A0-B6FA454200BD}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVVideo\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{27949969-876A-41D7-9447-568F6A35A4DC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2797B627-B7FA-4CBF-9472-6B8ACFDF3E41}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2797CF92-415A-43e6-A8F7-A5FAAB783719}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27a4e414-20a5-4dc1-b426-e42289729560}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27AAD1C8-3564-4A15-B0B8-F73F90FB95A7}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27C7D4DD-D73D-426A-AD9C-F989722095FD}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtHkStrokeDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27c98999-2895-4829-b080-5a8b65bd3db0}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27D62E77-6AFE-4AAE-AF27-E6CC20A884D9}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27E4B0FF-4E29-4998-A7A5-5979E8F8A630}\InProcServer32" = "$homedrive\\Windows\\System32\\wlanmediamanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27E986E1-BAEC-3D48-82E4-14169CA8CECF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{27F31D55-D6C6-3676-9D42-C40F3A918636}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{27F71832-6815-48CB-902A-7A1D891BA962}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27F86E83-F66E-455B-BE1F-1ED899C48A2B}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}\InprocServer32" = "$homedrive\\Windows\\system32\\TrustedSignalCredProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{27FE144C-9CAD-4EA6-8232-912FE8A96873}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{280A3020-86CF-11D1-ABE6-00A0C905F375}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{280A7B65-8F00-438F-989B-8EAF9E438A71}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{280ECF1B-B8F6-41B6-BC14-0E58035C4DCC}\InprocServer32" = "$homedrive\\Windows\\system32\\PackageStateChangeHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28404f37-8eff-4c1f-a0fa-84d1c9f2a83e}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinAUG\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2846AE5E-A9FA-36CF-B2D1-6E95596DBDE7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2853ADD3-F096-4C63-A78F-7FA3EA837FB7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2854F705-3548-414C-A113-93E27C808C85}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{285E403A-14CE-41C9-8E55-92921CA0DFB3}\InprocServer32" = "$homedrive\\Windows\\System32\\FluencyDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{286AA738-2928-49af-A410-4118F5C31626}\InprocServer32" = "$homedrive\\Windows\\system32\\dot3hc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28803F59-3A75-4058-995F-4EE5503B023C}\InProcServer32" = "$homedrive\\Windows\\system32\\DevicePairingFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28890E39-A124-4216-B3D8-686F4203AD20}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{288a2d5f-253c-46b4-b58c-2ced3180b993}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{288B5845-2831-42c3-861B-0ADB30446513}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{289228DE-A31E-11D1-A19C-0000F875B132}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28953661-0231-41DB-8986-21FF4388EE9B}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{289978AC-A101-4341-A817-21EBA7FD046D}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32" = "$homedrive\\Windows\\System32\\dlnashext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28AB0005-E845-4FFA-AA9B-F4665236141C}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28AF2E16-0190-44F4-9CED-08AF91145361}\InprocServer32" = "$homedrive\\Windows\\System32\\msrahc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28BCCB9A-E66B-463C-82A4-09F320DE94D7}\InProcServer32" = "(($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)F12App\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\F12Tools\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{28D18BFA-85E3-4419-9AFD-7ECCE53F8D13}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{28F4700C-44EB-4BD8-BC25-95812DE98E08}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{291EE2A7-BFA5-4e9e-A358-C93655556A6C}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{2933BF90-7B36-11D2-B20E-00C04F983E60}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2933BF91-7B36-11D2-B20E-00C04F983E60}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2933BF94-7B36-11D2-B20E-00C04F983E60}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{293ccd4b-0d59-43c0-997e-3449c780ac65}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{294935CE-F637-4E7C-A41B-AB255460B862}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{294EC7E3-94B7-4A6C-8636-09B33674D58F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2959380c-1567-40ec-80b0-05907ad6f9de}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29625281-51CE-3F8A-AC4D-E360CACB92E2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2965e715-eb66-4719-b53f-1672673bbefa}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2968B3C3-CC07-40BE-B78F-094B7C310479}\InProcServer32" = "$homedrive\\Windows\\system32\\Vault\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{297EE78C-BA95-4E94-81D3-D6E7F089C7B5}\InProcServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2981a36e-f22d-11e5-9ce9-5e5517507c66}\InprocServer32" = "$homedrive\\Windows\\System32\\wscapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2984A9DB-5689-43AD-877D-14999A15DD46}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsrx_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{298a6f17-03e7-4bd4-971c-544f359527b7}\InProcServer32" = "$homedrive\\Windows\\System32\\lapscsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{299D0193-6DAA-11d2-B679-006097DF5BD4}\InProcServer32" = "$homedrive\\Windows\\system32\\msieftp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29A6CF6F-D663-31A7-9210-1347871681FC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{29B5828C-CAB9-11D2-B35C-00105A1F8177}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29C69707-875F-3678-8F01-283094A2DFB1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{29C98DFC-AC6B-4788-BDDD-CA41D6D3704A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{29CE1D46-B481-4AA0-A08A-D3EBC8ACA402}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29D365AE-D23B-4004-8658-5ED2A59CD77C}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29EA1611-529B-4113-8EE3-EE0F6DD2C715}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29F06F0C-FB7F-44A5-83CD-D41705D5C525}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ncprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{29FC9ABF-E561-44FD-A8A4-657A4C4DD953}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdmproxy140\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A005C11-A5DE-11CF-9E66-00AA00A3F464}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A038320-5727-4FDC-B703-1EC222C6911F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.HumanInterfaceDevice\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2a11bae2-fe6e-4249-864b-9e9ed6e8dbc2}\InprocServer32" = "$homedrive\\Windows\\System32\\mp4sdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A11F42C-3E81-4ad4-9CBE-45579D89671A}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A3EFC7B-7CEB-496A-9E69-DC40AD179F51}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A614240-A4C5-4C33-BD87-1BC709331639}\InprocServer32" = "$homedrive\\Windows\\System32\\bidispl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A6F3A80-5976-11D2-9524-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A744BD8-158A-4bbf-9513-4A656F6C01D7}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2A7B042D-578A-4366-9A3D-154C0498458E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2aa2b5fe-b846-4d07-810c-b21ee45320e3}\InProcServer32" = "$homedrive\\Windows\\System32\\xmlprovi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2AABFCD0-1797-11D2-ABA2-00C04FB6C6FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2AC015F2-103C-4186-A114-A0C70AC941AC}\InprocServer32" = "$homedrive\\Windows\\System32\\BingASDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2ACFC431-A2E7-4FC6-8C4B-0B4BD201A797}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2ae64751-b728-4d6b-97a0-b2da2e7d2a3b}\InProcServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2af6bcaa-f526-4803-aeb8-5777ce386647}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2AFCECBA-ABA5-404B-8F4F-15BECC9FEE20}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ndisimplatcim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B1C6F4F-4F0D-490F-8D88-A3EAF66130AC}\InProcServer32" = "$homedrive\\Windows\\System32\\MaintenanceUI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B1FFCE5-DD0F-4f1f-B150-A87AE69CE009}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B20FE1A-1B2C-4DC5-8595-616B0E182FD1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2b2cad40-19c1-4794-b32d-397e41d5e8a7}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B32ECC3-C3BB-4701-82BB-EB7FE370D999}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B4099B4-ABED-4014-881E-AB96D7CC4E48}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B445657-7159-42A1-84F0-538E82EE5DE9}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B4B0612-E1F4-376F-A9B9-86BA3F72A670}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2B4F54B1-3D6D-11d0-8258-00C04FD5AE38}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2b8f8a9e-51b6-46db-9d45-ffb33e023823}\InProcServer32" = "$homedrive\\Windows\\System32\\HdcpHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2BB6C5E0-C2B9-3608-8868-21CFD6DDB91E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2BC0EF29-E6BA-11d1-81DD-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2BE1981C-CCF9-4D8B-8DA2-E217287AD983}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2c012f55-1318-44f4-a235-20c4df918fb3}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinDataModelServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C01D35E-79DE-45DE-9D5F-11923C2D0894}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C1EAB37-9E2A-459A-821F-9C58036CF42D}\InProcServer32" = "$homedrive\\Windows\\System32\\KeywordDetectorMsftSidAdapter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C256447-3F0D-4CBB-9D12-575BB20CDA0A}\InProcServer32" = "$homedrive\\Windows\\System32\\faultrep\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C28A1A9-EDB1-4A70-AE14-E0A5C7E81C2C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv100p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C314899-8F99-3041-A49D-2F6AFC0E6296}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C3E140B-7A0D-42d1-B2AA-D343500A90CF}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C63E4EB-4CEA-41B8-919C-E947EA19A77C}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C673043-FC2E-4d67-8920-517D24DEBD2C}\InProcServer32" = "$homedrive\\Windows\\System32\\ActionCenterCPL\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C731933-62A6-31A0-AFE1-1034F46361D2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C786341-0E36-4BE8-AA51-524CC1F2AE15}\InProcServer32" = "$homedrive\\Windows\\System32\\NPSMDesktopProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2c86c843-77ae-4284-9722-27d65366543c}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C875213-FCE5-11d1-A0B0-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2c932742-413c-4b70-82c9-252094ed4c3c}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C941FC5-975B-59BE-A960-9A2A262853A5}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C941FCE-975B-59BE-A960-9A2A262853A5}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2C941FD4-975B-59BE-A960-9A2A262853A5}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2CA8CA52-3C3F-11D2-B73D-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2cc48587-c7b0-4472-8996-3fb162547ce8}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2CD39202-3A2F-4935-9A86-65B919919A7F}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2CFD5F1D-BFAA-4B72-B035-6B691F3A204C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.XboxLive\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2d05c0a1-f85f-4830-b3e0-dc26e701d9aa}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D0F7985-9EE6-427C-AAAA-A9D72CBFA853}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Credentials\.UI\.UserConsentVerifier\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D11CF10-4FE0-45B2-88DF-6FFBF92BE9AB}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D12DD17-6C4E-456E-A953-D210E3C64176}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D1F634B-BA35-4BA0-A3B4-B03AC5FE724A}\InProcServer32" = "$homedrive\\Windows\\system32\\BthpanContextHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D20F990-DA11-4B00-A082-C548EDC78428}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Usb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D2E24CB-0CD5-458F-86EA-3E6FA22C8E64}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2d3468c1-36a7-43b6-ac24-d3f02fd9607a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D3F8A1B-6DCD-4ED5-BDBA-A096594B98EF}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D4156A2-897A-11DB-BA21-001185AD2B89}\InprocServer32" = "$homedrive\\Windows\\System32\\nlmgp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D4156A5-897A-11DB-BA21-001185AD2B89}\InprocServer32" = "$homedrive\\Windows\\System32\\nlmgp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D4D6F88-8B41-40A2-B297-3D722816648B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVVideo\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D533768-8BD9-4D3D-8754-25E0CF5A1290}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D5EC63C-1B3E-3EE4-9052-EB0D0303549C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2d702e20-b8a1-4c0b-a218-32223ce86ea1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\TeamViewer\\outlook\\TeamViewerMeetingAddinShim64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D709E52-123F-49b5-9CBC-9AF5CDE28FB9}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2D8F1801-A70D-48F4-B76B-7F5AE022AB54}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DA1964A-7232-48BF-9946-D0510557C492}\InprocServer32" = "$homedrive\\Windows\\System32\\LegacyNetUX\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}\InprocServer32" = "$homedrive\\Windows\\System32\\wlangpui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DB47AE5-CF39-43C2-B4D6-0CD8D90946F4}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DB5E62B-0D67-495F-8F9D-C2F0188647AC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DCD1DAF-A110-49c0-BFDB-6FDF557B5FDF}\InProcServer32" = "$homedrive\\Windows\\System32\\cscobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DCD7FDB-8809-48E4-8E4F-3157C57CF987}\InprocServer32" = "$homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MPUXAGENT\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{2de55398-137e-4c4c-bf72-5cc7f18d9109}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DE92DB3-CD3E-4ad6-80F9-089036E1C81E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DE967D6-9BE7-458A-9B1C-6D3A6FF425F8}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DEA658F-54C1-4227-AF9B-260AB5FC3543}\InprocServer32" = "$homedrive\\Windows\\System32\\PlaySndSrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DECBCB7-BAC0-316D-9131-43035C5CB480}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2DF0ACC2-6D97-491b-9581-70A6001FD25A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvsvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2df7b51e-797b-4d06-be71-d14a52cf8421}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsvr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2dfb3a35-6071-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E095DD0-AF56-47e4-A099-EAC038DECC24}\InprocServer32" = "$homedrive\\Windows\\System32\\PsisDecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E0BC2B7-6C66-4FD1-AF55-C2D671754431}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E1271D5-2FF2-4EA4-9647-C67A82A2D85C}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2e167ea7-85e3-4395-995a-77af9875d79a}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E17C0EF-2851-459b-A3C8-27A41D4BC9F7}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E1AE5DF-5A6F-420A-9B7B-41E5BA8FA36D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E1DCDFF-AB5C-47B6-AD3B-169E65344720}\InProcServer32" = "$homedrive\\Windows\\System32\\RemoteWipeCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E4D68DD-F8F7-4B7F-8BF9-E71B84A97F17}\InProcServer32" = "($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)F12AppFrame\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E7700B7-27C4-437F-9FBF-1E8BE2817566}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E8EA1E5-F406-46F5-AF10-661FD6539F28}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E8FCB18-A0EE-41AD-8EF8-77FB3A370CA5}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2E9E59C0-B437-4981-A647-9C34B9B90891}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2EBDEE67-3505-43f8-9946-EA44ABC8E5B0}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2EC4C88A-9A75-4C36-A07E-419CB0D78B8E}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\Shared\\MoIME_ps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2ED326ED-C4C0-434a-B4CE-FB0318D725A7}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2eeb4adf-4578-4d10-bca7-bb955f56320a}\InprocServer32" = "$homedrive\\Windows\\System32\\WMADMOD\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{2EF44DE8-80C9-42D9-8541-F40EF0862FA3}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F0888F4-2C5B-4353-A395-40CF3B6BA29E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F096B28-C65D-4C05-A37E-7E88735E32FA}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F2165FF-2C2D-4612-87B2-CC8E5002EF4C}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F29854D-D87F-4B47-8BF8-0C25AEB83FB0}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2f2dc38b-34d2-462c-add4-f74cc15510a1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2f49412a-3ed3-4da7-b041-f2a55fcc1150}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F5E64E3-0B46-4DAF-AEA6-721994E5AC8B}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F63C206-752B-4B26-9DA7-CD264895A7C8}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F6CE85C-F9EE-43CA-90C7-8A9BD53A2467}\InProcServer32" = "$homedrive\\Windows\\System32\\fhshl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2f712f0f-ed71-474b-9529-9b9627ed0a6b}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F7ED5E3-06C9-4B61-97DB-067CC8AE0664}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F81081E-C2AB-40CA-8E3C-AF6022E8AFF4}\InProcServer32" = "$homedrive\\Windows\\System32\\vmsifproxystub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F86B8BD-EFF5-4C07-8FA5-60788517EF95}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\PrintManagementProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2f8891f3-f692-450e-a222-ff28d9daaaf8}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2f893820-7089-46cc-a6e8-c4aae45f151b}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2F94D7B0-BF63-11D1-A6A2-00C04FB9988E}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2FA44F43-D422-4F90-91EF-E6F067BCB947}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2FAE8AFE-04A3-423a-A814-85DB454712B0}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBEncoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2FB21955-33A2-46A0-8F60-B475DC33FD5A}\InProcServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2FC216B0-D2E2-4967-9B6D-B8A5C9CA2778}\InprocServer32" = "$homedrive\\Windows\\System32\\VmSynthNic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2FD96798-0D65-4D57-A095-B57679740E37}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvgames\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{2FF8EAD4-2977-4908-95D8-4BC4CAA1F541}\InProcServer32" = "$homedrive\\Windows\\system32\\ScanPlugin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{300a81e6-a674-4d84-9eed-0337389e7e66}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{301056D0-6DFF-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{301B94BA-5D25-4A12-BFFE-3B6E7A616585}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{301F77B0-A470-11D0-8821-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3020E6D8-7D1A-4D3C-8B62-C4D4B8F28434}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30276b4f-f25c-457c-a4b7-08574f8ea528}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3028902F-6374-48b2-8DC6-9725E775B926}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3037B4CD-A40B-401B-B676-2017EE8FAFF4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows NT\\Accessories\\WordpadFilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{304FC8AB-6643-4DAA-9027-4B21389DCB2D}\InProcServer32" = "$homedrive\\Windows\\system32\\RemoveDeviceElevated\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F391-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f3B3-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f3B4-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f3BB-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F3C2-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F3D6-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F3D9-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f499-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F4CF-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f4e1-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtmled\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f4f5-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtmled\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f4f8-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f5be-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f664-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f667-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f67D-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f6b3-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f6cd-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f6d4-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3050f819-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtmled\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30510483-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30562646-f7b5-4a62-8ced-6f30a70587c5}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imefiles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30590066-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30590067-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3059ACB9-9875-44CC-ABA9-EAA6EFBEBA39}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30655864-f8cd-45f9-b7d6-6721acb69c5e}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3080F90D-D7AD-11D9-BD98-0000947B0257}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3080F90E-D7AD-11D9-BD98-0000947B0257}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{308f826d-88e4-4323-9ad0-51c006148211}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30AC0B94-3BDB-3199-8A5D-ECA0C5458381}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{30B33640-5250-4328-92C5-A1618E406A3A}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30C3B080-30FB-11d0-B724-00AA006C1A01}\InProcServer32" = "$homedrive\\Windows\\System32\\imgutil\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30d49246-d217-465f-b00b-ac9ddd652eb7}\InProcServer32" = "$homedrive\\Windows\\System32\\IDStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{30fb9e79-61dc-4a66-bbff-a362b09a6866}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31143611-AC65-4568-AE76-8A9DAD50EA88}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationControllerPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31220067-EE3A-4ED7-B579-103D74930CB5}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{312A6884-4ABE-4C4E-AE73-C69874C8318B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{312AB530-ECC9-496E-AE0E-C9E6C5392499}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3133A7FE-BC5F-4D81-BF02-184ECC88D66E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3134ef9c-6b18-4996-ad04-ed5912e00eb5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31350404-77AC-4471-B33A-9020A2EDA1D1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3140F5B6-093F-4F94-9141-5DF9EE10BC27}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31430c59-bed1-11D1-8De8-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3156EC84-29BD-4EAA-AE0A-817ED606FA99}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvgames\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{317D06E8-5F24-433D-BDF7-79CE68D8ABC2}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{317E92FC-1679-46FD-A0B5-F08914DD8623}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31879719-E751-4DF8-981D-68DFF67704ED}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31b11d80-9ed7-44f7-b1cd-c95992a738b9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{31b231f6-546d-4f9b-ac95-0f963d72559c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{31C967B5-2F8A-3957-9C6D-34A0731DB36C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{31D0E08E-1AC8-4B50-B591-25F091984A8C}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{31D353B3-0A0A-3986-9B20-3EC4EE90B389}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{320D405F-CC9A-43AE-AB18-90428066E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3213CD15-4DF2-415F-83F2-9FC58F3AEB3A}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32314BC0-BE41-42EA-89B5-2CE53085E22D}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsPinyinDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32314BC0-BE41-42EA-89B5-2CE53085E22E}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsPinyinDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3237555C-C043-4836-AFDE-570D63E9EDAB}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskFlowDataEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3240F7D1-E591-4807-8370-08625D21CAAB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Energy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32433977-2283-4853-8a6d-e7f4cc3053bc}\InprocServer32" = "$homedrive\\Windows\\System32\\fhtask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{324C321B-D91A-451C-AB3C-362A7849773D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32557D3B-69DC-4F95-836E-F5972B2F6159}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3261BF13-9B3E-4DD5-B6D3-0006F3FFE8BC}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32624F4B-F1D5-4877-989E-555640109D2B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32665929-D77E-4ab5-8C08-FBF409B8A233}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3279762A-C6C8-4274-A2FB-FD390DAEB7E7}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3283EEBF-E67D-31AC-8481-A968F3A77E9A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{328489c8-f25e-44b5-93d4-8f811b4dc326}\InProcServer32" = "$homedrive\\Windows\\system32\\AuthExt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{328B0346-7EAF-4BBE-A479-7CB88A095F5B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3292A418-BAC2-4BBF-BB07-66A1CB3B8B7D}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\NetPeerDistCim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32B533BB-EDAE-11d0-BD5A-00AA00B92AF1}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32be5ed2-5c86-480f-a914-0ff8885a1b3f}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpviewerax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32C5A81F-27C0-4E66-A894-786F646F1236}\InprocServer32" = "$homedrive\\Windows\\system32\\eapp3hst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32DA2B15-CFED-11D1-B747-00C04FC2B085}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32E7DC13-1E22-4D7E-8AC7-D2E718DE8042}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32EAC0F0-1C2B-4775-942E-0AC11121A0F4}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{32ff7589-83d5-4e34-86fe-a2d5e27bdf3a}\InprocServer32" = "$homedrive\\Windows\\System32\\srmstormod\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33154C99-BF49-443D-A73C-303A23ABBE97}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3318360C-1AFC-4D09-A86B-9F9CB6DCEB9C}\InProcServer32" = "$homedrive\\Windows\\system32\\msutb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{331B60DA-9E90-4DD0-9C84-EAC4E659B61F}\InprocServer32" = "$homedrive\\Windows\\system32\\spool\\drivers\\x64\\3\\PrintConfig\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{331E8B29-D4C3-4278-B005-671BB919C320}\InprocServer32" = "$homedrive\\Windows\\System32\\DefaultPrinterProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{331E9F3D-9351-4A4D-A2CA-75A16BAFF7BB}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3336B8BF-45AF-429f-85CB-8C435FBF21E4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{333C7BC4-460F-11D0-BC04-0080C7055A83}\InprocServer32" = "$homedrive\\Windows\\System32\\tdc\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{333E6924-4353-4934-A7BE-5FB5BDDDB2D6}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{334125C0-77E5-11D3-B653-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{334796A6-31DC-4B5D-8FD7-14E82186417C}\InprocServer32" = "$homedrive\\Windows\\System32\\DDDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{334857cc-f934-11d2-ba96-00c04fb6d0d1}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{336475D0-942A-11CE-A870-00AA002FEAB5}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33708259-ba1b-4add-9de4-d4f280ea1223}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\VSPerfCollectionTools\\vs2022\\x64\\VSPerfCorProf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{337448ee-2a70-43f7-99f9-40f2857950b9}\InprocServer32" = "$homedrive\\Windows\\System32\\chakra\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33831ED4-42B8-11D2-93AD-00805F853771}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\dsprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}\InProcServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33BCC8EC-0D01-4E10-AD3D-4DAF749873ED}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33C1D1ED-4DAE-47C8-943A-955BC0DAE7C4}\InProcServer32" = "$homedrive\\Windows\\System32\\NetworkProxyCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33C4643C-7811-46FA-A89A-768597BD7223}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}\InProcServer32" = "$homedrive\\Windows\\system32\\msctf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33c86cd6-705f-4ba1-9adb-67070b837775}\InProcServer32" = "$homedrive\\Windows\\System32\\l2nacp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33C89616-F807-4957-BF34-A1C91D7A1A2E}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\NVXDBat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33D9A761-90C8-11d0-BD43-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33de48c4-943f-4b96-8cd8-b117c94576cf}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33F3C8F8-27A1-4DF3-A525-E89CB18881A5}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33FACFE0-A9BE-11D0-A520-00A0D10129C0}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{33fd0563-d81a-4393-83cc-0195b1da2f91}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{341301BA-111C-408D-A8E3-14D1DDC62A6F}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34212D32-6E9E-11E2-BDA0-6B2B6288709B}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3429E395-176B-4a0a-863D-FCA6B19073BA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_9\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3449A1C8-C56C-11D0-AD72-00C04FC29863}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34568a1f-8d5a-4080-99c7-464e2cb40008}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{346D5B9F-45E1-45C0-AADF-1B7D221E9063}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{347CBD95-DD80-4144-81AF-AE803E633A00}\InProcServer32" = "$homedrive\\Windows\\System32\\DXPPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{348ef17d-6c81-4982-92b4-ee188a43867a}\InProcServer32" = "$homedrive\\Windows\\System32\\(XpsDocumentTargetPrint|XpsPrint)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3495E5FA-2A90-3CA7-B3B5-58736C4441DD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{34996c91-9897-40eb-944b-28b5c9308383}\InProcServer32" = "$homedrive\\Windows\\System32\\DevPropMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34B707DC-1133-4EBC-B380-21387A50A89D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\AuraSDK\\AuraSdk_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34c10250-4e26-4950-924d-c2d3651ca94f}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Sockets\.PushEnabledApplication\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34C445BA-07EB-4b5d-8EE9-F66BB9DA403B}\InprocServer32" = "$homedrive\\Windows\\system32\\wpdmtpus\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34CF19E8-A7BA-4775-82CF-FA760A342587}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34DEA897-7365-4f60-BA26-53DA4B89226D}\InProcServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34e5efee-eb08-4714-878a-11bbcbfc592b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpcmld\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34e6abfe-e9f4-4ddf-895a-7350e198f26e}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{34E72398-AB74-43DA-8355-7F60D1BE3F73}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Connectivity\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3508C064-B94E-420b-A821-20C8096FAADC}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{351F7C7A-6186-405E-91A8-32DF82F437C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3522D7AF-4617-4237-AAD8-5860231FC9BA}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3523c2fb-4031-44e4-9a3b-f1e94986ee7f}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3529B1D2-313A-4202-BD3E-5996B7E18A10}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\IpsPlugin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{352EC2B7-8B9A-11D1-B8AE-006008059382}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{3540D440-5B1D-49cb-821A-E84B8CF065A7}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{354F7156-A4F6-47F5-A028-FE2000E92132}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintFilterPipelinePrxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{355822FC-86F1-4BE8-B5F0-A33736789641}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{356F2F88-05A6-4728-B9A4-1BFBCE04D838}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35786D3C-B075-49b9-88DD-029876E11C01}\InProcServer32" = "$homedrive\\Windows\\system32\\wpdshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{357b663c-d9fa-4188-99af-2943920f96c5}\InProcServer32" = "$homedrive\\Windows\\system32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35A069A1-A029-46AF-B531-454C0F66D61F}\InprocServer32" = "$homedrive\\Windows\\system32\\NetworkStatus\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35A5E985-12E6-46ee-B385-E887F3940FB0}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35b1d3bb-2d4e-4a7c-9af0-f2f677af7c30}\InprocServer32" = "$homedrive\\Windows\\System32\\fdWNet\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35B78F79-B973-48C8-A045-CAEC732A35D5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35C5242B-7455-4F9C-962B-369EA43ED6F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35C61CC2-5851-4F2D-89B6-4F9BB4B4193F}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35cc8486-4fb1-11d3-a5da-00c04f88249b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\APPLETS\\imkrcac\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35E62C5B-07E5-40C1-AFA5-CF69E8701BB3}\InProcServer32" = "$homedrive\\Windows\\System32\\Microsoft\.Bluetooth\.Proxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{35E946E4-7CDA-3824-8B24-D799A96309AD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{361290c0-cb1b-49ae-9f3e-ba1cbe5dab35}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\MpProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3613F1D2-C9A5-4f41-A070-E5BB823B2E5B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{361778EC-D741-4CE1-90F9-743435F56E13}\InProcServer32" = "$homedrive\\Windows\\system32\\RemoveDeviceContextHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36383E77-35C2-4B45-8277-329E4BEDF47F}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{363BE3C0-DDD4-4B21-BC6D-7E9DF8CE19CB}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3642BC7D-5E16-4EBD-BBD1-FFFDBE8E8644}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.NetworkOperators\.ESim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3647D1DF-A67B-4882-A74E-67EEB4178F89}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3650f781-4549-46ff-b799-8f2df2541dbb}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{366D4750-AB08-4957-BF80-82133AF2BC86}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{366F6FDF-839D-4ED5-BFC6-7301A42A2F20}\InProcServer32" = "$homedrive\\Windows\\System32\\FrameServerClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{367E582C-F71C-4BF9-AA1B-9F62B793E9C5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{368D4A96-945D-4D76-A3F8-B29636EB9758}\InprocServer32" = "$homedrive\\Windows\\System32\\NotificationPlatformComponent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3692CA39-E082-4350-9E1F-3704CB083CD5}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{369647e0-17b0-11ce-9950-00aa004bbb1f}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3697790B-223B-484E-9925-C4869218F17A}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36a479ef-8b67-4d01-8dda-753cfcb2dd96}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36CB6E0C-78C1-42B2-9943-846262F31786}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36D7422C-EDCF-4881-8054-ADC2AE9B4819}\InprocServer32" = "$homedrive\\Windows\\System32\\WindowsIoTCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36DCDA30-DC3B-4D93-BE42-90B2D74C64E7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{36f0bd14-d84d-468c-b79c-9990f3fa897f}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36F54939-CD3B-4C73-92D5-F9A389ED631C}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{36F99745-23C9-4C9C-8DD5-CC31CE964390}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{370A1D5D-DDEB-418C-81CD-189E0D4FA443}\InprocServer32" = "$homedrive\\Windows\\System32\\VBICodec\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{370BF38C-0451-42e8-9B03-0CAFA95081B6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{370F8FEA-1B4A-470E-B5F7-25AAFC6702F2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{371CCB71-D045-45C5-9952-BB07B1711B0B}\InprocServer32" = "$homedrive\\Windows\\system32\\cmgrcspps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3722c3b1-82e8-4022-8b27-1f8a68b44ac7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{372FCE38-4324-11D0-8810-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3730BBF8-631A-48FB-9085-E2143C11563B}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3734FF83-6764-44B7-A1B9-55F56183CDB0}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{373984C9-B845-449B-91E7-45AC83036ADE}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{374050DD-6190-3257-8812-8230BF095147}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{374CEDE0-873A-4C4F-BC86-BCC8CF5116A3}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{374EE8E8-DEA6-4DB7-B14A-B43EE3E8948E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3756e7f5-e514-4776-a32b-eb24bc1efe7a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{375ff002-dd27-11d9-8f9c-0002b3988e81}\InprocServer32" = "$homedrive\\Windows\\System32\\fdwcn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37600FF7-470B-408F-8718-F2A7ABF0EF20}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{376666C8-61CF-4152-8398-7015FFE165EE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37708080-3519-4ED6-91D5-A64B643863FB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{378E0446-5384-43B7-8877-E7DBDD883446}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}\InProcServer32" = "$homedrive\\Windows\\System32\\InputCloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37903486-85EE-4733-AEFC-8C4496F19DE4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Web\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{379E501F-B231-11D1-ADC1-00805FC752D8}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37A61C8B-7F8E-4d08-B12B-248D73E9AB4F}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37B0353C-A4C8-11D2-B634-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37B03543-A4C8-11D2-B634-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37B03544-A4C8-11D2-B634-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37de7045-5056-456f-8409-c871e0f8b0e0}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37E92A92-D9AA-11D2-BF84-8EF2B1555AED}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{37ea3a21-7493-4208-a011-7f9ea79ce9f5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{38018C19-B0ED-489F-A9DC-96EBF886450B}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3807BD87-D141-439A-B711-25A053A020F7}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{D5307D61-F9BC-4de1-94EA-1DEF24DF4BB2}\InProcServer32" = "$homedrive\\Windows\\system32\\Wpc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{d54e0450-f515-42ac-bf22-b254a2764d49}\InProcServer32" = "$homedrive\\Windows\\system32\\ime\\shared\\imever\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38086A84-31E7-4C8E-BB0E-9758D634C7E1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Shell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38142214-ED63-4965-9214-1BBC06E130E9}\InProcServer32" = "$homedrive\\Windows\\System32\\execmodelclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{D5C82393-AB49-47e9-BE80-B7801443BE43}\InProcServer32" = "$homedrive\\Windows\\System32\\defaultlocationcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{381DDA3C-9CE9-4834-A23E-1F98F8FC52BE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3829dfb4-9eed-434e-88c7-dcbe810b1a6e}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{382AC1B5-9C16-4CCD-9D00-D5053977B8D6}\InprocServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{384742B1-2A77-4CB3-8CF8-1136F5E17E59}\InProcServer32" = "$homedrive\\Windows\\system32\\dwmapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{384ea5ae-ade1-4e8a-8a9b-7bea78fff1e9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3852C2E2-4A16-4b11-8E71-F8904C37EC3D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{385906fb-1482-4f64-8a23-5d74e1ce1815}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{385A91BC-1E8A-4e4a-A7A6-F4FC1E6CA1BD}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3866CD68-0FC3-4563-8888-E107295BC485}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\binaryinfo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38795471-5D0E-452d-BEF8-5339CAF9E30B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3882134d-14cf-4220-9cb4-435f86d83f60}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3886CA90-AB09-49D1-A047-7A62D096D275}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{388D606F-AF7B-4AD2-AC22-6B4FE70CE286}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3gpui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{389EA17B-5078-4CDE-B6EF-25C15175C751}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38be0989-9830-49a8-985b-7741219fd0fb}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38BFA80B-F989-45B2-AAFD-1E0C04E50E56}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38F03426-E83B-4E68-B65B-DCAE73304838}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38fbe75f-57ac-4c15-8988-7c5284c51508}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcProxyStubs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{38FE8128-B282-4A98-B2B0-0BAFB49815FD}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3901CC3F-84B5-4FA4-BA35-AA8172B8A09B}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{390E92C9-FA66-3357-BEF2-45A1F34186B9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3918D75F-0ACB-41F2-B733-92AA15BCECF6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3936E9E4-D92C-4EEE-A85A-BC16D5EA0819}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{39472C07-79C6-4924-96E6-41F699CBAD9C}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{394C052E-B830-11D0-9A86-00C04FD8DBF7}\InProcServer32" = "$homedrive\\Windows\\system32\\els\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{395165EF-52F5-4520-81D6-4D18ED96DDCC}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{39524FB7-028F-4035-8C2B-8E65D2B17E67}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{395671b6-129e-4e7a-a2d8-204cd8e72d6a}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3957a5ba-4448-bec4-24ac-16c4f5784ef5}\InProcServer32" = "$homedrive\\Windows\\system32\\windows\.cortana\.Desktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3967CF2E-B192-4ACA-9D45-868D51201B32}\InProcServer32" = "$homedrive\\Windows\\System32\\WindowsManagementServiceWinRt\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{397c7fba-8bed-47b7-a2b3-07c5fc18b8e9}\InProcServer32" = "$homedrive\\Windows\\System32\\HoloSI\.PCShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{398D1A2A-A0EB-4C2E-BBF9-671EF93CC6EE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.PointOfService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{39AEDC00-6B60-46DB-8D31-3642BE0E4373}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{39B68485-6773-3C46-82E9-56D8F0B4570C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{39C42C60-85F5-40ED-BF39-975A0AA0B2A4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{39F8D76B-0928-11D1-97DF-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A04D93B-1EDD-4f3f-A375-A03EC19572C4}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A410F21-553F-11d1-8E5E-00A0C92C9D5D}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A445657-23E2-4E1E-82AB-D1836874C536}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A57CB65-1857-4239-B130-FA0F8F06522A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A582F0C-9A06-43C3-BB82-7CEEED538DF7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3a59a18b-f03c-48cb-8aa7-181d35291fd7}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjptip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A614B00-FB18-46F3-950E-682A46A48B9F}\InProcServer32" = "$homedrive\\Windows\\System32\\UICOM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A66787A-8B15-4321-A09D-6E862D2DD2D4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\Edge\\Application\\.*\\PdfPreview\\PdfPreviewHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A8CCCBC-0EFD-43a3-B838-F38A552BA237}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A9428A7-31A4-45E9-9EFB-E055BF7BB3DB}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3A965ED4-0E14-4A1B-A71E-972F1C1044F6}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3ABEAFC4-F48F-4517-A9B0-8AD6A94A99A1}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3AC83423-3112-4AA6-9B5B-1FEB23D0C5F9}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3ad05575-8857-4850-9277-11b85bdb8e09}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3ADCE5CC-13C8-4573-B328-ED438EB694F9}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3AE86B20-7BE8-11D1-ABE6-00A0C905F375}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B0398C9-7812-4007-85CB-18C771F2206F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B0BD075-929C-4E52-AAD1-458C81A10B24}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B1599F9-E00A-4BBF-AD3E-B3F99FA87779}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3b176793-1c28-467d-bf13-ff0ac689e18b}\InprocServer32" = "$homedrive\\Windows\\system32\\eapsimextdesktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B17FD9C-F7CF-4736-AF6B-616C2D1ED854}\InprocServer32" = "$homedrive\\Windows\\system32\\activationmanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B1A329C-6562-4183-B229-981062FE72BD}\InprocServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B1B5147-715E-49e0-AE9F-ADF86724BB89}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B269952-C2CE-40CC-BB36-94858E0A7CD4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B2B6775-70B6-45AF-8DEA-A209C69559F3}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B2B92B7-5787-4eb5-931D-9F69E47497A9}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3b2e0be3-3790-4e9d-bec4-91a532702e63}\InProcServer32" = "$homedrive\\Windows\\System32\\ResourceMapper\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B4BE995-61E3-430C-8977-0B21E4427BE7}\InprocServer32" = "$homedrive\\Windows\\System32\\TSWorkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3b517f36-1fd1-41a8-afb3-8b016072f218}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B64E510-8192-4224-A7AD-67E9A86EC479}\InProcServer32" = "$homedrive\\Windows\\System32\\(SetNetworkLocationFlyout|SetNetworkLocation)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B68879A-2CE5-419D-BB70-F39E1F66B06F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\mraut\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_0\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3B873591-9427-4418-A086-79175735738F}\InprocServer32" = "$homedrive\\Windows\\System32\\smbwmiv2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3bb4118f-ddfd-4d30-a348-9fb5d6bf1afe}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BB46AD9-4D42-4EC6-B96B-68973FCD26F1}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BBE95A4-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BBE95DA-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BBE95F5-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BBE95FB-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BBE95FE-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BC4EE9F-1FC1-44DB-81FA-AD94DEC7AF30}\InprocServer32" = "$homedrive\\Windows\\System32\\ieapfltr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BD1F243-9BC4-305D-9B1C-0D10C80329FC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BE786A0-0366-4F5C-9434-25CF162E475E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BE786A0-0366-4F5C-9434-25CF162E475F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BE786A2-0366-4F5C-9434-25CF162E475E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BE786A2-0366-4F5C-9434-25CF162E475F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BEE4890-4FE9-4A37-8C1E-5E7E12791C1F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BF043EF-A974-49B3-8322-B853CF1E5EC5}\InprocServer32" = "$homedrive\\Windows\\System32\\SndVolSSO\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3BF2A5F1-C95E-4F7B-B939-582DB5F32B81}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3bf39b72-0fab-440f-9bcf-1f7fed0fe037}\InProcServer32" = "$homedrive\\Windows\\System32\\wslapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3bfe6eb7-281d-4333-999e-e949e3621de7}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C02F46D-C9D2-4F11-A384-53F0CF917214}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Oracle\\VirtualBox\\VBoxC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3c2654c6-7372-4f6b-b310-55d6128f49d2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C305196-50DB-11D3-9CFE-00C04FD930C5}\InprocServer32" = "($homedrive\\Windows\\system32\\ddraw\.dll|ddraw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C4059B0-FB29-4EBA-9947-289E0D824E64}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C4512DC-AEFA-4a1e-95CF-EDF896092447}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C4708DC-B181-46A8-8DA8-4AB0371758CD}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C5F432A-EF40-4669-9974-9671D4FC2E12}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C852D74-7E49-4FF3-BF21-81EF888078D4}\InprocServer32" = "$homedrive\\Windows\\system32\\mpeval\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C925F4E-F236-4BCF-9330-F15B8AD8765B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3C9DCA8B-4410-3143-B801-559553EB6725}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3ccdfa5a-33ef-46d4-89c6-06298e2e539a}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3CD3CA1E-2232-4BBF-A733-18B700409DA0}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3CDED51A-86B4-39F0-A12A-5D1FDCED6546}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3CE4EA62-DACB-4CC2-848F-C11130F06908}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D07A539-35CA-447C-9B05-8D85CE924F9E}\InprocServer32" = "$homedrive\\Windows\\System32\\cca\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3d09c1ca-2bcc-40b7-b9bb-3f3ec143a87b}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\VMware\\VMware Workstation\\vmnetbridge\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D0C78BF-98BF-4B97-835E-E4269F8E038D}\InprocServer32" = "$homedrive\\Windows\\System32\\TSWorkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D0DB8B7-7484-42BE-BF61-3427A2459A2B}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D0FD779-0C2D-4708-A9BA-62F7458A5A53}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D112E22-62B2-11D1-9FEF-00600832DB4A}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3d154a2d-d911-437e-a30c-5f56a9b7081d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D1975AF-48C6-4f8e-A182-AC5012248AB5}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D367908-928F-3C13-8B93-5E1718820F6D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D4C34BE-7208-4F3B-B74F-37AD231350EF}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D547E96-E934-4756-8DAE-72E0FB535AE4}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D78E42E-FAEA-47D6-8EE2-301A5DEBC025}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnServiceDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3D85CB81-C520-436f-8C9A-8292041A9BDD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3dad6c5d-2167-4cae-9914-f99e41c12cfa}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DBEE9A1-C471-4B95-BBCA-F39310064458}\InprocServer32" = "$homedrive\\Windows\\System32\\WindowsCodecsRaw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DBFEF35-6F15-4453-BC19-D7AD5CC04756}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DC09436-7D83-4BA0-ADDC-CD47F996C5BA}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3dd53d40-7b8b-11D0-b013-00aa0059ce02}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3dd6bec0-8193-4ffe-ae25-e08e39ea4063}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DD82D10-E6F1-11D2-B139-00105A1F77A1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\cimwin32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DDB2114-9285-30A6-906D-B117640CA927}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3DECD5DD-A27B-48DC-8BAA-2682CFA265FF}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3df11260-58db-46ca-85ee-35459e115b9c}\InprocServer32" = "$homedrive\\Windows\\system32\\(eappcfgui|eappcfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E000D72-A845-4CD9-BD83-80C07C3B881F}\InProcServer32" = "$homedrive\\Windows\\System32\\cmlua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3e0f30a5-6c0c-4daf-b41e-7b1011ed7e1c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E23C363-A84B-4B28-A1B0-75EA10595B53}\InProcServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E298C47-0DA7-4418-AAC7-7A6D1F800A14}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E458037-0CA6-41aa-A594-2AA6C02D709B}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E4D4F1C-2AEE-11D1-9D3D-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E500C0C-5D15-4610-8095-7CEBD4C43F24}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E54D3BF-8EFA-400f-B875-B86A309E1CBF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E5509F0-1FB9-304D-8174-75D6C9AFE5DA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E58004E-4CE5-4681-BA56-785A67F9F0DC}\InProcServer32" = "$homedrive\\Windows\\System32\\playtomanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E5FC7F9-9A51-4367-9063-A120244FBEC7}\InprocServer32" = "$homedrive\\Windows\\System32\\cmstplua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E6147C9-902B-48BA-B1B8-5B1FFD874FB2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E669F1D-9C23-11d1-9053-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E6D2639-4C23-4325-B8DB-6E373F20C733}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3e71f26d-136f-4545-813f-35276024b705}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E73C6F7-8937-4C07-85D9-D4447A4BE072}\InProcServer32" = "$homedrive\\Windows\\System32\\GameBarPresenceWriter\.proxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3e83c6bd-8ef0-491c-b4a8-8853e9973829}\InProcServer32" = "$homedrive\\Windows\\System32\\DockInterface\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3E8E0F03-D3FD-3A93-BAE0-C74A6494DBCA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\InProcServer32" = "$homedrive\\Windows\\system32\\docprop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3EC569DC-6FB5-45D1-8B46-E122D27962E9}\InProcServer32" = "$homedrive\\Windows\\system32\\CoreUIComponents\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3EDE135F-6671-4237-A315-E2CCE24DED5B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\compresslib\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3EE60F5C-9BAD-4CD8-8E21-AD2D001D06EB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3EE8CE0F-2507-42DE-A453-8F4D554256E8}\InprocServer32" = "$homedrive\\Windows\\System32\\DefaultDeviceManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3EF76D68-8661-4843-8B8F-C37163D8C9CE}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F052B8E-512B-419D-9E06-9B9ADDC7118C}\InProcServer32" = "$homedrive\\Windows\\System32\\MapsCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F13AB10-AE95-48AA-8C94-533730760A20}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F281000-E95A-11d2-886B-00C04F869F04}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F30C968-480A-4C6C-862D-EFC0897BB84B}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F35F070-99D6-11D2-8D10-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3f454f0e-42ae-4d7c-8ea3-328250d6e272}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F4A4283-6A08-3E90-A976-2C2D3BE4EB0B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F4DACA4-160D-11D2-A8E9-00104B365C9F}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F4F9726-2972-4DD4-AB7C-D119F36803B0}\InProcServer32" = "$homedrive\\Windows\\System32\\fingerprintcredential\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F66389B-BA65-4782-BA9D-B66367C8E7F1}\InProcServer32" = "$homedrive\\Windows\\System32\\powercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F66CF3F-68BE-485e-8BFE-0A005B2D00F2}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F69F351-0379-11D2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F9A55B0-8355-4CE4-B6D6-A65CAC63DB67}\InProcServer32" = "$homedrive\\Windows\\system32\\CellularAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3F9FF9AB-AC3E-40BB-BBC9-27B648AD1FB2}\InprocServer32" = "$homedrive\\Windows\\system32\\XboxGipRadioManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FA7A1C5-812C-3B56-B957-CB14AF670C09}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FA82DD5-DDA4-4025-ADFA-DE0DCE2C1F56}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3fb11ad5-928d-4534-b217-2ffbfdbb6395}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\mscand20\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FB717AF-9D21-3016-871A-DF817ABDDD51}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FBA60A6-7BF5-4868-A2CA-6623B3DFFEA6}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FBF60BD-90B2-2C2F-7286-128BBCF72015}\InProcServer32" = "$homedrive\\Windows\\System32\\ShellCommonCommonProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FC0B520-68A9-11D0-8D77-00C04FD70822}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FC77A3B-14C6-41B6-ACC5-ED80223D81C4}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FD37ABB-F90A-4DE5-AA38-179629E64C2F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3fd7f233-a716-472e-8f2f-c25954f34e96}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FDCEEC6-B14B-37E2-BB69-ABC7CA0DA22F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FF23902-CD1F-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FF292B6-B204-11CF-8D23-00AA005FFE58}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadce\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FF566F0-6E6B-49D4-96E6-B78886692C62}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{3FFB3B8C-EB99-472b-8902-E1C1B05F07CF}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4000C97B-791B-425F-9AD6-5046210503B1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40031115-09D2-3851-A13F-56930BE48038}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4003191F-71FF-49A2-B591-05C606FADB8B}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4020D514-E884-42E9-91DC-E1F09004D3F0}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4026492F-2F69-46B8-B9BF-5654FC07E423}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40319fab-cc2f-4cea-890c-1e676b139824}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4039B326-9F27-4B4A-B460-47A0C6A39D5C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\MSGFILT\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{4044e60c-7b01-4671-a97c-04e0210a07a5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Input\.Inking\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{404A6DE5-D4D6-4260-9BC7-5A6CBD882432}\InprocServer32" = "$homedrive\\Windows\\System32\\mfdvdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4057C1AD-A51F-40BB-B960-22888CEB9812}\InProcServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{405C2D81-315B-3CB0-8442-EF5A38D4C3B8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{405EC9AB-0C64-4B9F-B726-3A858A9E2BD6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4075B76F-FCDC-43B6-B0B9-5A005B38B335}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.immersiveshell\.serviceprovider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4082B93D-99AF-4E6F-BE9F-6AA54C0BC6BE}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40871C59-AB40-471F-8DC3-1F259D862479}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40AE2088-CE00-33AD-9320-5D201CB46FC9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{40AFA0B6-3B2F-4654-8C3F-161DE85CF80E}\InProcServer32" = "$homedrive\\Windows\\System32\\IDStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40B47A8F-C442-4f06-8304-AA1058EDEEA0}\InProcServer32" = "$homedrive\\Windows\\System32\\POSyncServices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40B6664F-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40B66650-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40B66660-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40B66661-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40b8879a-9b26-42fd-8fec-00c32f8443be}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40B92C37-5745-4872-96CE-24D0BE89763A}\InProcServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40F59CE8-4044-45BA-9D52-69D52EFEADCE}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{40F5CB5E-86D7-4378-A87C-CE06448EF6B2}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{410381DB-AF42-11D1-8F10-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41070793-59E4-479A-A1F7-954ADC2EF5FC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4125dd96-e03a-4103-8f70-e0597d803b9c}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{413A30F0-F269-42A0-99D9-3792FF29DAB1}\InprocServer32" = "$homedrive\\Windows\\System32\\DeviceUpdateCenterCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41445657-4118-4689-B300-E7F1EB61FF7B}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41457294-644C-4298-A28A-BD69F2C0CF3B}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfasfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{414ac301-8d95-43c8-99d0-3f25e4076945}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\mscand20\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4150F050-BB6F-11D0-AFB9-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{418008F3-CF67-4668-9628-10DC52BE1D08}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{418201e2-6c9f-42cc-9061-586d9f46ac9e}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnServiceDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{418AFB70-F8B8-11CE-AAC6-0020AF0B99A3}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{418c8b64-5463-461d-88e0-75e2afa3c6fa}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{418DFBFA-4DE8-41C0-A272-727307252DBD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41937347-2aba-4d4c-a4ca-6fe4f11f1bac}\InprocServer32" = "$homedrive\\Windows\\system32\\NetworkItemFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41945702-8302-44A6-9445-AC98E8AFA086}\InprocServer32" = "$homedrive\\Windows\\system32\\MSRAWImage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41970D73-92F6-36D9-874D-3BD0762A0D6F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{41B23C28-488E-4E5C-ACE2-BB0BBABE99E8}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{41B87F43-0094-486B-BD50-8B47FD614BCE}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41B89B6B-9399-11D2-9623-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41B9BE05-B3AF-460C-BF0B-2CDD44A093B1}\InprocServer32" = "$homedrive\\Windows\\system32\\xmlfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41CA099A-B8AF-4fc2-A285-03FAEAA8B109}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{41E300E0-78B6-11ce-849B-444553540000}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41FCCC3A-1FA1-4949-953A-6EE61C46A4D1}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{41fd88f7-f295-4d39-91ac-a85f3149a05b}\InProcServer32" = "$homedrive\\Windows\\System32\\WinTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42044394-8c34-11d1-83bc-00c04fbbc34e}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42060D27-CA53-41f5-96E4-B1E8169308A6}\InprocServer32" = "$homedrive\\Windows\\system32\\RacEngn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42071712-76d4-11d1-8b24-00a0c9068ff3}\InProcServer32" = "$homedrive\\Windows\\system32\\deskadp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42071713-76d4-11d1-8b24-00a0c9068ff3}\InProcServer32" = "$homedrive\\Windows\\system32\\deskmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42089D2D-912D-4018-9087-2B87803E93FB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MSOSB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{42150CD9-CA9A-4EA5-9939-30EE037F6E74}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{421516C1-3CF8-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4224AC84-9B11-3561-8923-C893CA77ACBE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{42281387-EDEA-477C-89DB-6F7033D518AB}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4234d49b-0245-4df3-b780-3893943456e1}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42393E99-8513-42d3-8AEA-E0E5FBDC8F64}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{424B71AF-0695-11D2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{424bed78-ef88-4b7c-945c-b8cf46d56e20}\InProcServer32" = "$homedrive\\Windows\\system32\\credprovhost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{426C82B9-D74C-4873-BC90-28FC7BE0A32A}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4278BB8C-D0FC-4380-A2C4-525B9A396F5B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{427B34A5-2199-467e-BAC2-112AC1A48391}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{427BC7E3-F833-4584-8745-CFAB9D7A5761}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4286FA72-A2FA-3245-8751-D4206070A191}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4290CAD6-A75D-4AC8-A496-56DBBB28EB88}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{429AF92C-A51F-11d2-861E-00C04FA35C89}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{429bc048-379e-45e0-80e4-eb1977941b5c}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42C9B9F5-16FC-47ef-AF22-DA05F7C842E3}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42D69529-136E-49D6-8407-3026853038BF}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{42DFB618-A403-4401-908F-FE979B2215C8}\InProcServer32" = "$homedrive\\Windows\\System32\\LAPRXY\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{42FEBF74-65EA-4D27-B3AC-86393B6AFAE1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{430A9F0B-D367-47BD-9F8C-22CCFC022C50}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_StorageSense\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{430da762-8632-4840-bc61-3eeaa078e62e}\InProcServer32" = "$homedrive\\Windows\\system32\\display\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43136EB5-D36C-11CF-ADBC-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4315D437-5B8C-11D0-BD3B-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43232233-8338-4658-ae01-0b4ae830b6b0}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4323664B-B884-4929-8377-D2FD097F7BD3}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagSvcs\\DiagnosticsHub\.StandardCollector\.Proxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{432D76CE-8C9E-4EED-ADDD-91737F27A8CB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{43324B33-A78F-480F-9111-9638AACCC832}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{433CA926-9887-3541-89CC-5D74D0259144}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4340CECB-0B6B-4F58-B71C-2B2177AE404B}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{434A6274-C539-4E99-88FC-44206D942775}\InprocServer32" = "$homedrive\\Windows\\System32\\AccessibilityCpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4356b08e-ecb5-43d1-8e9f-7bef4fc960fe}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{435899C9-44AB-11D1-AF00-080036234103}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{437ff9c0-a07f-4fa0-af80-84b6c6440a16}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{43886CD5-6529-41c4-A707-7B3C92C05E68}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{439E63BD-5D7D-4ABB-A3AA-0AB1E884AA80}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv140p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43A1BB0E-2CE9-405C-8799-12E7D7550D3F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43A8F463-4222-11d2-B641-006097DF5BD4}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43B07326-AAE0-4B62-A83D-5FD768B7353C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43B63097-9F58-41CC-9375-BB546CE27F4E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\AacVGAHal\\AacVgaHal_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43C103A6-696F-4D05-AF04-9E44A6844B30}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43CD41AD-3B78-3531-9031-3059E0AA64EB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{43D7FDB4-B94D-4415-8792-54AF9FBEBB82}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\netttcim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{43FB1553-AD74-4ee8-88E4-3E6DAAC915DB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4405b37b-60fe-49ed-ba8f-691a78f84daf}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44090B31-CDF9-4ad1-8182-DB5DA3627974}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileCoAuthLib64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44181B13-AE94-3CFB-81D1-37DB59145030}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{442e102b-6f60-4baf-b151-e6e4db841788}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{442FF639-3DA0-4A70-A1D8-579E26C46A60}\InprocServer32" = "$homedrive\\Windows\\system32\\PSModuleDiscoveryProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{443C8934-90FF-48ED-BCDE-26F5C7450042}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{443E7B79-DE31-11D2-B340-00104BCC4B4A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4444AC9E-242E-471B-A3C7-45DCD46352BC}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{444F7305-1D7D-4BE9-8C29-CC3F1D220C40}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4456C5C3-DC01-4FF3-AF4E-06F4EBCC3B09}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{446CDD3B-EFFC-4B23-A625-62CED58C7749}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxAPDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4479C009-4CC3-39A2-8F92-DFCDF034F748}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{447EDBE5-0080-4036-A0BB-7B84C58C604F}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44838BA6-68C6-4951-8CD5-1DD1B4787B53}\InProcServer32" = "$homedrive\\Windows\\System32\\WebcamUi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4487FB5A-9D22-4718-AA9F-C6ED6C4EC169}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44A50F5F-78E2-4D17-930C-68BB9F69EC9E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44af8604-94bb-40fe-8bd0-a8d7d36b44a7}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44C76ECD-F7FA-411c-9929-1B77BA77F524}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44CB442B-9DA9-49df-B3FD-023777B16E50}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44EC053A-400F-11D0-9DCD-00A0C90391D3}\InprocServer32" = "$homedrive\\Windows\\system32\\atl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44f3dab6-4392-4186-bb7b-6282ccb7a9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\mydocs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{44F9A03B-A3EC-4F3B-9364-08E0007F21DF}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{451256BC-E7E8-4506-90F3-8746E107BF08}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4517D557-7ECD-4E88-B330-BE9C95ED9AF6}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4522c772-9a2b-4920-ad7f-62d3d15eac52}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{45234E3E-61CC-4311-A3AB-248082554482}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{453D9F45-B2A2-4DF0-B42A-51A3AEC86452}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{454AFB66-FA8C-4152-9CD6-2A8781B3D505}\InProcServer32" = "$homedrive\\Windows\\System32\\ChatApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{455703F5-BA4C-45A4-B754-AACF7A26B8F4}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{455ACF57-5345-11D2-99CF-00C04F797BC9}\InProcServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{455F24E9-7396-4A16-9715-7C0FDBE3EFE3}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{455f6102-c83a-4d07-ba36-b6da9d589ae2}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4564b25e-30cd-4787-82ba-39e73a750b14}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4582746F-473B-4022-A7E9-887CBEDD8F85}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4582EBA9-6AA1-4D79-824E-728929EF455D}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{45874AC3-B98F-4851-9046-5CFE1E747DD4}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{458AA3B5-265A-4B75-BC05-9BEA4630CF18}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4590F812-1D3A-11D0-891F-00AA004B2E24}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4599202D-460F-3FB7-8A1C-C2CC6ED6C7C8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{45BA127D-10A8-46EA-8AB7-56EA9078943C}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{45F2C32F-ED16-4C94-8493-D72EF93A051B}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{45FB4600-E6E8-4928-B25E-50476FF79425}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{45FD65ED-6BC2-47ae-B391-9E2B79F07C52}\InProcServer32" = "$homedrive\\Windows\\System32\\systemcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46031ba1-083f-47d9-8369-23c92bdab2ff}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46080CA7-7CB8-3A55-A72E-8E50ECA4D4FC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{461CDD3F-D54E-4033-A0AA-6CD24F152AA1}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{461DED9E-81D5-494F-BC96-6432C8645733}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{463AE13F-C7E5-357E-A41C-DF8762FFF85C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{46408325-AF70-4AB0-90D9-7B1779C1AD87}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46445657-1F22-11DA-A2D9-00065B83EE53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\TabIpsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{464510d9-3477-4c8b-97cb-4b4c29f04354}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4655840e-ab1a-49d0-a4c4-261fa1c20e86}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4657278A-411B-11d2-839A-00C04FD918D0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{46615ACE-28BC-47A8-8176-3713A64C9FDC}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAA5-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAA6-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAA7-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAA8-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAA9-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAAA-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAAB-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAAC-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAAD-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAAE-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAAF-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAB0-D393-11D0-9A56-00C04FB68B66}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{4662DAB0-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{466936A9-E281-45E6-A239-9FE53D07B4A5}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenContent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4693FF15-B962-420A-9E5D-176F7D4B8321}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\ODFFILT\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{4697144f-7735-49dc-bb05-401766f4cf39}\InProcServer32" = "$homedrive\\Windows\\System32\\AdaptiveCards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{469afbdf-084f-4dc9-904f-9e824c48bc37}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{46A4DD5C-73F8-4304-94DF-308F760974F4}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46b73c9c-0e62-41ee-86c0-2f8997777f48}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46C166AA-3108-11D4-9348-00C04F8EEB71}\InProcServer32" = "$homedrive\\Windows\\system32\\(hnetcfgclient|hnetcfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46CB32FA-B5CA-8A3A-62CA-A7023C0496C5}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46CF315B-2D3A-4765-852A-6500C42D9865}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{46CF410A-49FF-4045-88EB-71E23CCA4773}\InProcServer32" = "$homedrive\\Windows\\system32\\CMUSBDACASIO64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{46E31370-3F7A-11CE-BED6-00AA00611080}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{46E97093-B2EC-3787-A9A5-470D1A27417C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{46FBCEA0-A318-4B91-89D2-AFE7869481A7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Identity\.Provider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4705A6B4-E4CB-4ed1-AF8D-851C644A0459}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{470C0EBD-5D73-4d58-9CED-E91E22E23282}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47206204-5ECA-11D2-960F-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4723D2C7-E315-466B-A8D3-AB7A5B74B383}\InProcServer32" = "$homedrive\\Windows\\System32\\ffbroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47354492-827E-4b8a-B318-C80EBA1381F0}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{473AA80B-4577-11D1-81A8-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4740316D-2BF9-48EB-A48B-F68298E968AB}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47405ACE-008F-43AB-B6F0-91875029ADC7}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47497F33-F83E-40E0-A1FB-9DE499CA3C7C}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4753da60-5b71-11cf-b035-00aa006e0975}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{475743C2-3495-4FD5-B23D-CB36CF813D19}\InProcServer32" = "$homedrive\\Windows\\System32\\InternetMail\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{475CBF15-C58F-4756-B626-88E2BB50B2FC}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{475E398F-8AFA-43A7-A3BE-F4EF8D6787C9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{477A7D8E-8D26-3959-88F6-F6AB7E7F50CF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{477EC299-1421-4bdd-971F-7CCB933F21AD}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{478B7068-DF14-446F-B5C1-A5B877E7665D}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.ServiceDiscovery\.Dnssd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4795051A-6429-4D63-BCA0-D706532954AC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{47AADF36-BA70-4E24-BBDE-20EC9FC139FD}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvlicensings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47B706B0-B103-4AFD-8ECF-16C2DDF81C15}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\netnccim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47B73B70-1964-444A-B390-FAB1565DCAA3}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47D35BB4-71CC-4810-9669-D03D9FF7CEAF}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceDriverRetrievalClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47D3C68D-7D85-3227-A9E7-88451D6BADFC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{47D4D946-62E8-11cf-93BC-444553540000}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47DFBE54-CF76-11D3-B38F-00105A1F473A}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{47e30d54-dac1-473a-aff7-2355bf78881f}\InprocServer32" = "$homedrive\\Windows\\system32\\ngctasks\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48025243-2D39-11CE-875D-00608CB78066}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{480FF4B0-28B2-11D1-BEF7-00C04FBF8FEF}\InProcServer32" = "$homedrive\\Windows\\System32\\dmusic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48123BC4-99D9-11D1-A6B3-00C04FD91555}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{482BF0FB-CA13-453C-9C9C-BEF9C8F06BA9}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneProviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{483afb5d-70df-4e16-abdc-a1de4d015a3e}\InprocServer32" = "$homedrive\\Windows\\system32\\azroles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4844E347-E354-4B24-9E0C-F4AE31AD55DB}\InProcServer32" = "$homedrive\\Windows\\System32\\XblAuthManagerProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48527bb3-e8de-450b-8910-8c4099cb8624}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{48728B3F-F7D9-36C1-B3E7-8BF2E63CE1B3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4876DC0E-F963-4227-9A8F-19872B75D231}\InProcServer32" = "$homedrive\\Windows\\system32\\StorageContextHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48794782-6a1f-47b9-bd52-1d5f95d49c1b}\InprocServer32" = "$homedrive\\Windows\\System32\\pnpui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{487af411-1d5e-4f7f-b4f4-4721fe1e95d9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{487BA7B8-4DB0-465F-B122-C74A445A095D}\InProcServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{488A2E25-B509-4238-97BA-CAB956F8C2F5}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{488C2839-8ABA-4368-B4DF-8EF11CF99F99}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{489331DC-F5E0-4528-9FDA-45331BF4A571}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{489AE5DA-059A-4aca-93E5-7B7CFD1BD752}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48A75519-CB7A-3D18-B91E-BE62EE842A3E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{48AD62E8-BD40-37F4-8FD7-F7A17478A8E6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{48B4E58D-2791-456C-9091-D524C6C706F2}\InProcServer32" = "$homedrive\\Windows\\System32\\devicengccredprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48C6BE7C-3871-43cc-B46F-1449A1BB2FF3}\InProcServer32" = "$homedrive\\Windows\\System32\\cscobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48C6E96F-A2F3-33E7-BA7F-C8F74866760B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{48D0CFE7-3128-3D2C-A5B5-8C7B82B4AB4F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{48d7ed61-3f9f-4d74-8c2f-a10541d4151d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjplmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48da6741-1bf0-4a44-8325-293086c79077}\InprocServer32" = "$homedrive\\Windows\\system32\\iasdatastore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48DE828C-730C-49AF-AE84-759C609911EE}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48E277F6-4E74-4cd6-BA6F-FA4F42898223}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48e2ed0f-98c2-4a37-bed5-166312ddd83f}\InprocServer32" = "$homedrive\\Windows\\System32\\mfreadwrite\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48E73304-E1D6-4330-914C-F5F514E3486C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONBttnIE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48e7caab-b918-4e58-a94d-505519c795dc}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{48F24523-C8A9-4B95-B848-7BD3D0FE14D7}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48F4CE0C-BC11-4C9B-A165-2097308F9C25}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{48F61E71-E203-4B69-AE20-3F222B5BEC89}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{493CD38D-ED47-4855-BBD0-B887DB871A87}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{493D909F-6CF0-4328-85F5-16A31E12DA58}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4955DD33-B159-11D0-8FCF-00AA006BCC59}\InProcServer32" = "$homedrive\\Windows\\system32\\msimtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{496241E9-161B-4007-AF56-B4E006F65FA9}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49638B91-48AB-48B7-A47A-7D0E75A08EDE}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{497D141A-7A42-4BB6-B017-863FD4DA36BF}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4988dd22-ccec-48ec-9271-5951e8653903}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{498A0351-BA2F-46DD-96D9-C19988FEA0C4}\InProcServer32" = "$homedrive\\Windows\\System32\\AppLockerCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{498B0949-BBE9-4072-98BE-6CCAEB79DC6F}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{499e58ea-40c6-4601-9730-a046d0451f98}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{499EAEEA-2737-4849-8BB6-47F107EAF358}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49A832D7-C7B3-4556-8716-5BDC745C3C1B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49ACAA99-F009-4524-9D2A-D751C9A38F60}\InProcServer32" = "$homedrive\\Windows\\System32\\wscui\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{49BD2BB3-DFBE-4E01-BF21-7DE89ED09ACD}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49C407EF-78B9-4C82-A40B-2FE02F8E771D}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49c47ce0-9ba4-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49C47CE4-9BA4-11D0-8212-00C04FC32C45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49c47ce5-9ba4-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49E9AE53-4547-4045-AAD1-CDC3C6C95D6C}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFrameworkInternalPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49eb6558-c09c-46dc-8668-1f848c290d0b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{49EBD8BE-1A92-4A86-A651-70AC565E0FEB}\InprocServer32" = "$homedrive\\Windows\\System32\\TelephonyInteractiveUser\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49f171dd-b51a-40d3-9a6c-52d674cc729d}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49F371E1-8C5C-4d9c-9A3B-54A6827F513C}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{49F585C0-CE12-4306-9100-B6A28857B10B}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A03DCB9-6E17-4A39-8845-4EE7DC5331A5}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4a04656d-52aa-49de-8a09-cb178760e748}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A1E5ACD-A108-4100-9E26-D2FAFA1BA486}\InprocServer32" = "$homedrive\\Windows\\System32\\icsigd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A1F5480-8271-4CB3-B094-05B41149D025}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A2286E0-7BEF-11CE-9BD9-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A38E4EF-F55B-4A59-8F02-BDEFB0B1308A}\InprocServer32" = "$homedrive\\Windows\\System32\\MSNP\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{4a4d5d1b-869b-4474-806a-4daaa7673e78}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A4EBE8E-AE27-4AA3-B702-F365C4A90FAC}\InProcServer32" = "$homedrive\\Windows\\System32\\fxsutility\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A5869CF-929D-4040-AE03-FCAFC5B9CD42}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A65D267-1539-4BD1-921D-1C49B3E58EB7}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4a698512-80cc-4b0e-8ae6-f394ef39f9d0}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A6B8BAD-9872-4525-A812-71A52367DC17}\InProcServer32" = "$homedrive\\Windows\\System32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A6CBDD0-0922-4463-A2AB-D8F8E21F4A86}\InProcServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A6D04A8-4DCA-4089-933F-0004601872C0}\InProcServer32" = "$homedrive\\Windows\\System32\\wpc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4A6F23B2-B8D6-4CBE-959A-054716902320}\InProcServer32" = "$homedrive\\Windows\\System32\\dmenrollengine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4a714c8e-e664-4024-9c74-1a82a3da842a}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4a76b469-7b66-4dd4-ba2d-ddf244c766dc}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4a7ded0a-ad25-11d0-98a8-0800361b1103}\InProcServer32" = "$homedrive\\Windows\\system32\\mydocs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4AA53027-562B-4653-A8EF-9B92FF74ADA6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4ABF5A06-5568-4834-BEE3-327A6D95A685}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4ac6c205-2853-4bf5-b47c-919a42a48a16}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4AE7C26B-90C8-49FC-8138-84119B709D49}\InProcServer32" = "$homedrive\\Windows\\System32\\RemoteAppLifetimeManagerProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4AF3D182-65F6-401E-B0A8-02B5928D77CA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4AF3F4A4-06C8-4B79-A523-633CC65CE297}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipdskq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4AF4A5FC-912A-11D1-B945-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B0A2997-E555-4F84-B45B-68AB8BC57635}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpendp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B314A47-12E0-4d52-95FE-084B9224DD4F}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4b360c3c-d284-4384-abcc-ef133e1445da}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B534112-3AF6-4697-A77C-D62CE9B9E7CF}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B59AFCC-B8C3-408A-B670-89E5FAB6FDA7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B601364-A04B-38BC-BD38-A18E981324CF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4b77066b-8a60-4162-9456-1b1e994eaf77}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B78D326-D922-44f9-AF2A-07805C2A3560}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B905E0F-8E31-4853-BA9F-9BE581A35535}\InProcServer32" = "$homedrive\\Windows\\System32\\InputInjectionBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4B966436-6781-4906-8035-9AF94B32C3F7}\InprocServer32" = "$homedrive\\Windows\\system32\\spp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4BB24BC2-ABFD-433D-935F-5950B42A4B3F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}\InprocServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4bc70a10-fbab-4ada-8fc4-e4f898a6f810}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4BCCBCE4-20E8-44A1-A170-C9A4D941CBA4}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\dnsclientcim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4BDAFC52-FE6A-11d2-93F8-00105A11164A}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4be5c3b3-53a2-4f2f-af9d-d26a5327eb92}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\APPLETS\\imkrskf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4BE89AC3-603D-36B2-AB9B-9C38866F56D5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4be8a061-c73b-4f23-8114-317aae3e8698}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatializerApo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4bec2015-bfa1-42fa-9c0c-59431bbe880e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4bf684f8-3d29-4403-810d-494e72c4291b}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c1b3c1d-5c78-4a73-be8b-de1ec4b3637e}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C1D33D1-3161-4A76-9487-2677CD589C11}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C1FC63A-695C-47E8-A339-1A194BE3D0B8}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C3624D8-57AF-11E1-B779-E5CC4724019B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C3E5154-0E70-4C0C-9EDC-08277E8F163A}\InProcServer32" = "$homedrive\\Windows\\System32\\ProvPluginEng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C3EBFD5-FC72-33DC-BC37-9953EB25B8D7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C4A5E40-732C-11D0-8816-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C596AEC-8544-4082-BA9F-EB0A7D8E65C6}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C599241-6926-101B-9992-00000B65C6F9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C5EBD71-431C-43A0-B93C-3EBF917B540F}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C60517F-C1F8-473A-B1D8-247952876A5A}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C6470A6-3F91-4f41-850B-DB9BCD074537}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeedsbs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c649c49-c48f-4222-9a0d-cbbf4231221d}\InProcServer32" = "$homedrive\\Windows\\system32\\photowiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C69C54F-9824-38CC-8387-A22DC67E0BAB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C6F940C-3CFE-11D2-9EE7-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c870c20-4ed3-4235-9a2a-7185f8a87d06}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\DICTS\\imkrhjd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c892621-6757-4fe0-ad8c-a6301be7fba2}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C8A0917-F587-4ECF-9C89-48147528F4E1}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C8CC9CB-80CA-4e16-9F60-F5EB55092361}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C8D0AF0-7BF0-4f33-9117-981A33DBD4E6}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_5\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4c9ba57a-e8eb-49db-ba55-811b3e1358b4}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4C9E22B1-0C5D-4D89-8692-6DA1EABED20D}\InProcServer32" = "$homedrive\\Windows\\System32\\\\ProvOps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4cadfae1-5512-456a-9d65-5b5e7e9ca9a3}\InprocServer32" = "$homedrive\\Windows\\System32\\portabledeviceclassextension\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CB26C03-FF93-11d0-817E-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CB43D7F-7EEE-4906-8698-60DA1C38F2FE}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CBE39A3-BD8A-4D51-9BD3-B7853737FD93}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CCEA634-FBE0-11d1-906A-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4cd0569b-0239-4602-84a3-cfc5a9167c82}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4ce6767d-e09b-45dc-831d-20c8b4ea9a26}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CE73F9A-1A00-4EE5-8F17-A4A2A09BC7C7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Payments\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CEC0D02-DEF7-4158-813A-C32A46945FF7}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4CFC7932-0F9D-4BEF-9C32-8EA2A6B56FCB}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmidcprv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D111E08-CBF7-4f12-A926-2C7920AF52FC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D187AC2-D815-3B7E-BCEA-8E0BBC702F7C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D2F086C-6EA3-101B-A18A-00AA00446E07}\InprocServer32" = "mapi32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D317113-C6EC-406A-9C61-20E891BC37F7}\InprocServer32" = "$homedrive\\Windows\\System32\\RACPLDlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D3BD4B7-AD22-4DC4-B889-311DAE0D8AEB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D4D7FAB-11CF-4314-AF4F-B84E96791CEF}\InProcServer32" = "$homedrive\\Windows\\System32\\AppManagementConfiguration\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4d4dedaa-43c5-480d-9ee0-1464f9f4ff4b}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsvr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4d56df98-e082-4bf4-9a09-df655d8427b6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D5C8C2A-D075-11d0-B416-00C04FB90376}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4D728E35-16FA-4320-9E8B-BFD7100A8846}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DB116D1-9B24-4DFC-946B-BFE03E852002}\InProcServer32" = "$homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MPUXAGENT\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DB1AD10-3391-11D2-9A33-00C04FA36145}\InProcServer32" = "$homedrive\\Windows\\System32\\sti\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4db26476-6787-4046-b836-e8412a9e8a27}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DB61F89-EECE-4317-89D2-EC17BF6B27DB}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DBBE9A0-1992-4CCB-B913-2E53DB60E1EF}\InProcServer32" = "$homedrive\\Windows\\System32\\Docking\.VirtualInput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DC9C264-730E-4CF6-8374-70F079E4F82B}\InProcServer32" = "$homedrive\\Windows\\System32\\pwsso\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DD075CB-CCF0-4A26-B970-2ACD092662DB}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\LGJoyHid\\LGHppFrc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DD1D1C3-B36A-4eb4-AAEF-815891A58A30}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DDA1941-77A0-4fb1-A518-E2185041D70C}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DDB6D36-3BC1-11d2-86F2-006008B0E5D2}\InprocServer32" = "$homedrive\\Windows\\System32\\wavemsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4de7016c-5ef9-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DEC904B-9381-4E53-9E1F-7F8168A715F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Patriot\\Aac_Patriot Viper DRAM RGB\\AacHal_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4df0c730-df9d-4ae3-9153-aa6b82e9795a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DF929E7-4C5E-4587-A598-7ED7B3D6E462}\InProcServer32" = "$homedrive\\Windows\\System32\\UICOM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4DFED3F9-B794-4d3c-973B-DDA1C28105A9}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E0680A0-A0A2-11D0-8821-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E14FBA2-2E22-11D1-9964-00C04FBBB345}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E1CB7EC-16D2-4EE0-87EA-B96AD49975E4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E29E41B-D022-4D7D-9ADE-E42352C23DD6}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E3073AC-CE55-B07D-A284-1641E2236DDA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Vpn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4e3c6645-b839-4a06-a27b-0190f9e6a0af}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E3C66D5-58D4-491E-A7D4-64AF99AF6E8B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E40F770-369C-11d0-8922-00A024AB2DBB}\InProcServer32" = "$homedrive\\Windows\\system32\\dssec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E515531-7A71-3CDD-8078-0A01C85C8F9D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E655C26-D8F7-4B99-85CF-7FDA53EB7C30}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E77131D-3629-431c-9818-C5679DC83E81}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E77EC8F-51D8-386C-85FE-7DC931B7A8E7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E781F7F-9430-4F56-A233-70E6E0AC1AF9}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_StorageSense\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4E7D6B2C-1F7E-45B6-9EC0-8FA541BDD163}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4ea9a1b7-e521-4813-a9f8-ba6484902cb5}\InProcServer32" = "$homedrive\\Windows\\System32\\Smbhelperclass\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4eb2f086-c818-447e-b32c-c51ce2b30d31}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4EB31670-9FC6-11CF-AF6E-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4eb7409a-6062-41b9-a28d-9586036785a6}\InProcServer32" = "$homedrive\\Windows\\System32\\tzautoupdate\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4EC3C18E-7203-41E7-990D-A72B57E286A9}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4ED3A719-CEA8-4BD9-910D-E252F997AFC2}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4EDCB26C-D24C-4e72-AF07-B576699AC0DE}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4eeb9b7c-0f47-4fae-a284-a0ec40c5719a}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4EF5D9A8-0116-4C93-8142-0AB93AB603A5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4EFE2452-168A-11d1-BC76-00C04FB9453B}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F23C296-F56E-45AF-904D-D245BF750759}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F272C37-F0A8-350C-867B-2C03B2B16B80}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4f37e3a9-1d2b-42ab-a5b0-31fc05627def}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F414126-DFE3-4629-99EE-797978317EAD}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4f495385-cab7-4470-9e0d-1bc0ec792e04}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F4DB904-CA35-4A3A-90AF-C9D8BE7532AC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsrx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F4DD15E-F431-4536-AEE8-AF20BA847A33}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F58F63F-244B-4c07-B29F-210BE59BE9B4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F637904-2CAB-4F0E-8688-D3717EBD2975}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F664F91-FF01-11D0-8AED-00C04FD7B597}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4f6bcd94-c2a5-42ce-8dbc-31e794be4630}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4F786E23-0F32-4888-BA02-6BB105AE3024}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FA480D8-32A4-4849-B774-DE8BD5242A4C}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4fab6371-6d65-47ba-b8f1-ca6273c6c69e}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FB1CE6D-5334-414A-BBBC-F892A47587E3}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FC7F090-041C-4730-BD24-AF4BA8A2A5E0}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\NVXDBat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FD2A832-86C8-11D0-8FCA-00C04FD9189D}\InProcServer32" = "$homedrive\\Windows\\System32\\ddrawex\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FDBC3E5-7121-4487-AB95-B58EC04648DB}\InprocServer32" = "$homedrive\\Windows\\system32\\ucmhc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FDEF69C-DBC9-454e-9910-B34F3C64B510}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FE04BFD-85B9-49DD-B914-F4C9556B9DA6}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FE24495-28CE-4920-A4C4-E556E1F0DF2A}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4fe2776b-b0f9-4396-b5fc-e9d4cf1ec195}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FE8C25F-C8E9-4322-98EE-A11E117CF049}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FF2FE0E-E74A-4B71-98C4-AB7DC16707BA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FF787E6-9A86-4BA3-BED9-8019A2B4BE1C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{4FFFD315-B178-46E5-A386-A45C7AFF4154}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{50040C1D-BDBF-4924-B873-F14D6C5BFD66}\InprocServer32" = "$homedrive\\Windows\\System32\\mswmdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50055B2F-D4FF-42E1-9D8F-5D48F327F3AC}\InprocServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{500DD1A1-B32A-4a37-9283-1185FB613899}\InProcServer32" = "$homedrive\\Windows\\system32\\timedate\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{50125552-EC89-4049-B1B7-5FDBE38C8509}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvsvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}\InprocServer32" = "$homedrive\\Windows\\system32\\TpmTasks\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{502ed6c5-59b7-4f5d-9d64-03d2bcbad0db}\InprocServer32" = "$homedrive\\Windows\\System32\\TransportDSA\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50369004-DB9A-3A75-BE7A-1D0EF017B9D3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{503E79BF-1D09-4764-9D72-1EB0C65967C6}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsRasterService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{503E9FD4-127C-4d72-84BF-CF3EC3F80D40}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5052A832-2C0F-46c7-B67C-1F1FEC37B280}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{505734c0-686d-456a-9cb3-c666cbda5972}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5058292D-A244-4840-AB44-480975C4FFE4}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50613c35-8120-4721-849e-2df54d82cc33}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjplmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{506229ae-09c7-4ffd-8ec9-6a957f6da601}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{506D89AE-909A-44f7-9444-ABD575896E35}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{506F4668-F13E-4AA1-BB04-B43203AB3CC0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VISSHE\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5088B39A-29B4-4d9d-8245-4EE289222F66}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50A41EF1-6BFA-4b7e-973E-798EA0BEBAD4}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50AAD4C2-61FA-3B1F-8157-5BA3B27AEE61}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{50B1904B-F28F-4574-93F4-0BADE82C69E9}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50B6327F-AFD1-11d2-9CB9-0000F87A369E}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50CA0A46-1588-4161-8ED2-EF9E469CED5D}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50CE75BC-766C-4136-BF5E-9197AA23569E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.Schema\.Shell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50D42F09-ECD1-4B41-B65D-DA1FDAA75663}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\InProcServer32" = "$homedrive\\Windows\\system32\\msimtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50FDBB99-5C92-495E-9E81-E2C2F48CDDAE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{50ff05d3-62ae-402b-9b06-3cf57f74c9dc}\InprocServer32" = "$homedrive\\Windows\\System32\\PlayToReceiver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{510C4E33-05D5-438B-9852-E8406EFF033D}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintIsolationProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51208789-BD2C-475E-8265-438DFBF78F9C}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5135A9C0-F05A-4FBD-8EC6-6B920CD387F6}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51372af3-cae7-11cf-be81-00aa00a2fa25}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{513a0312-3345-4d16-94e5-630b0262c2eb}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}\InprocServer32" = "$homedrive\\Windows\\system32\\acppage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{514B5E31-5596-422F-BE58-D804464683B5}\InProcServer32" = "$homedrive\\Windows\\system32\\intl\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{51571744-7FE4-4FF2-A498-2DC34FF74F1B}\InProcServer32" = "$homedrive\\Windows\\System32\\MSVideoDSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{515980c3-57fe-4c1e-a561-730dd256ab98}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5160F343-7A1F-46C2-9E21-FC7F1DAF37F3}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{516346F3-9E52-4DBF-B0A8-ADF1843BE5FB}\InProcServer32" = "$homedrive\\Windows\\System32\\BthAvctpSvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51648e7c-d7b2-449c-b513-46050dcfd917}\InprocServer32" = "$homedrive\\Windows\\System32\\LegacyNetUX\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51653423-E62D-4FF7-894A-DABB2B8E21E2}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5167B42F-C111-47A1-ACC4-8EABE61B0B54}\InProcServer32" = "$homedrive\\Windows\\System32\\easconsent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{517D95A4-AD61-4C20-B2C8-739E0E79EA32}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{517F6AA6-D6FA-46D0-8094-17FF17E4CCF4}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51840041-B26F-4843-B358-22ABB067396C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51a1467f-96a2-4b1c-9632-4b4d950fe216}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{51ad6d44-32f8-4aa7-9ee6-24a37fa09354}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51B4ABF3-748F-4E3B-A276-C828330E926A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51C0B2CF-5994-4c2c-93F1-1C2CE21DFF4B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51CAFEF2-C040-4022-A152-53033EE9A02B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51CEDF03-4316-47C9-8100-CAC54EC2E33F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51CEFC53-622D-4C7C-B49B-74B9544DAA61}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51D1268C-D0A5-47CC-A514-547F346F45E8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51EF1569-67EE-4AD6-9646-E726C3FFC8A2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{51FC9E18-6E66-4BE2-BA40-3F68213E6EC0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{520CCA61-51A5-11D3-9144-00104BA11C5E}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{520CCA63-51A5-11D3-9144-00104BA11C5E}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{520E9D28-64C4-43df-BEED-02D9A6044A4B}\InProcServer32" = "$homedrive\\Windows\\System32\\FdDevQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5210f8e4-b0bb-47c3-a8d9-7b2282cc79ed}\InprocServer32" = "$homedrive\\Windows\\System32\\WMADMOD\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{52205fd8-5dfb-447d-801a-d0b52f2e83e1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5220cb21-c88d-11cf-b347-00aa00a28331}\InprocServer32" = "$homedrive\\Windows\\System32\\licmgr10\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{522e34a4-07f7-40a1-94d0-1bfe832efc3a}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{523A581F-EC58-40CE-99D3-36BF7897F3EC}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{524B13ED-2E57-40B8-B801-5FA35122EB5C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{524b350e-a28a-425d-a472-c9e2e2c87bfd}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.MediaControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5255EFED-103A-4444-B124-F88F99E4EF8D}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{525C410E-B007-4F15-81DD-49DF9B17139B}\InProcServer32" = "$homedrive\\Windows\\system32\\Vault\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5263233A-23CA-4eea-B9A5-25A23EAAF16C}\InProcServer32" = "$homedrive\\Windows\\System32\\accountaccessor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{527c9a9b-b9a2-44b0-84f9-f0dc11c2bcfb}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{52807600-EA97-4647-A9EE-5EE386A2B524}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.Native\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{528d46b3-3a4b-4b13-bf74-d9cbd7306e07}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52968F2C-56B5-4078-9898-EA595DCA0A6E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{529A9E6B-6587-4F23-AB9E-9C7D683E3C50}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52A2AAAE-085D-4187-97EA-8C30DB990436}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{52B097EB-7F1F-414B-89AB-A0347DE63A8E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52B20D0F-167D-4701-9AAF-9E6C3161E735}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52B65EB7-907C-4D83-A535-283BE9104DE4}\InprocServer32" = "$homedrive\\Windows\\System32\\TelephonyInteractiveUser\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52BC3999-6E52-4E8A-87C4-0A2A0CC359B1}\InProcServer32" = "$homedrive\\Windows\\System32\\AppManagementConfiguration\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52C84ACA-027A-4536-A74A-E0BB50C44782}\InprocServer32" = "$homedrive\\Windows\\system32\\iscsiwmiv2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52ce2fe5-04c3-42fd-8a8b-4251affb8408}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{52F15C89-5A17-48e1-BBCD-46A3F89C7CC2}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53067330-01CE-4027-947F-FF8580E92463}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5310BE71-5C14-4FBC-8CF5-BD75D3F11A44}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{531A5E27-80E7-4EAC-9AC6-13953AF33693}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5326dddc-ec38-428d-b219-ce6dadb35de3}\InProcServer32" = "$homedrive\\Windows\\system32\\van\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5328B3AC-2CEF-41B6-81A5-B8BCF62EFF47}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Shell\.Internal\.AdaptiveCards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53362C64-A296-4F2D-A2F8-FD984D08340B}\InprocServer32" = "$homedrive\\Windows\\System32\\oleacc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53445BED-3213-453B-A12A-79AA20A702DC}\InprocServer32" = "$homedrive\\Windows\\system32\\printui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53510d24-57eb-4713-9afb-e6e60530b87e}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5383EF74-273B-4278-AB0C-CDAA9FD5369E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53a01e9d-61cc-4cb0-83b1-31bc8df63156}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{53A3C917-BB24-3908-B58B-09ECDA99265F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{53bd6b4e-3780-4693-afc3-7161c2f3ee9c}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53BEDF0B-4E5B-4183-8DC9-B844344FA104}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53C74826-AB99-4d33-ACA4-3117F51D3788}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53DEC7F6-5448-43E2-9573-3F7B91B751DC}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53E8EBDD-A50B-46DD-9FAA-42746361EC63}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53E9771B-6A21-4FEC-B8F1-3B0DAE4FACC6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{53eadd15-d8b4-4b89-9d35-c1c7a7718960}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54058896-4775-4C34-8B62-789FB2E263A4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5408B2F0-C816-11D1-8F99-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{540D8A8B-1C3F-4E32-8132-530F6A502090}\InProcServer32" = "$homedrive\\Windows\\system32\\msutb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{541987EE-0E02-411E-9A85-1FC6156E7F4B}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54337179-c8b2-4ed4-95e4-95601c850d8c}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5440837F-4BFF-4AE5-A1B1-7722ECC6332A}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{545AE700-50BF-11D1-9FE9-00600832DB4A}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54702535-2606-11D1-999C-0000F8756A10}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{548968f5-17f7-4751-a581-ff0f1c732995}\InProcServer32" = "$homedrive\\Windows\\system32\\credprovhost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{548F0526-B0EC-4915-9C4E-9CEE327CF105}\InProcServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5491AB67-AFEB-48B1-B8DF-B2D63810EF40}\InProcServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{549365d0-ec26-11cf-8310-00aa00b505db}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54A05253-96FA-4B98-B8FD-9534D7255914}\InProcServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v3\.0\\WPF\\PenIMC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54AF9350-1923-11D3-9CA4-00C04F72C514}\InprocServer32" = "$homedrive\\Windows\\System32\\odbcconf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54B50739-686F-45EB-9DFF-D6A9A0FAA9AF}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_5\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54B7D246-951E-4BEA-B551-93D178284D13}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54CE37E0-9834-41ae-9896-4DAB69DC022B}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54CEE07E-E1C8-45DB-B550-417E75C4CA58}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54d38bf7-b1ef-4479-9674-1bd6ea465258}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54D8502C-527D-43F7-A506-A9DA075E229C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{54E14197-88B0-442F-B9A3-86837061E2FB}\InProcServer32" = "$homedrive\\Windows\\system32\\CoreShellExtFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{54E211B6-3650-4F75-8334-FA359598E1C5}\InProcServer32" = "$homedrive\\Windows\\system32\\(directmanipulation|Uxtheme)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5504BE45-A83B-4808-900A-3A5C36E7F77A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MSOSB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{550D0110-8DCD-11D1-8524-00A02495E426}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VVIEWDWG\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{550DDA30-0541-11D2-9CA9-0060B0EC3D39}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D110-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D112-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D114-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D116-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D118-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D11A-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D11C-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D11E-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D122-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5512D124-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{55136805-B2DE-11D1-B9F2-00A0C98BC547}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55200BC1-D537-44E2-BC6B-DD098A015FA1}\InprocServer32" = "$homedrive\\Windows\\System32\\Microsoft\.Uev\.Office2013CustomActions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5520B6D3-6EC6-3CE7-958B-E69FAF6EFF99}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5537E283-B1E7-4EF8-9C6E-7AB0AFE5056D}\InProcServer32" = "$homedrive\\Windows\\system32\\rasplap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{553858A7-4922-4e7e-B1C1-97140C1C16EF}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{555278E2-05DB-11D1-883A-3C8B00C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{556937b4-9619-4cde-a03b-a0a540bd848c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5569e7f5-424b-4b93-89ca-79d17924689a}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{556FF0D6-A1EE-49E5-9FA4-90AE116AD744}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5584C445-9C6B-4BD6-BBCD-673A440E5546}\InprocServer32" = "$homedrive\\Windows\\System32\\TransliterationRanker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{558c258c-90fe-401c-8772-7edca8016d2c}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{558E3D9C-F033-4A44-A019-4F3F39EC8E4F}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5593941A-F61C-49C3-85F1-D00EBF0D4EB2}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsAdvancedDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{559C6BAD-1EA8-4963-A087-8A6810F9218B}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55B3A0BD-4D28-42fe-8CFB-FA3EDFF969B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(rdbui|sysmain)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55b70dec-4b3b-4e26-ae9c-9e8d131843a1}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeedsbs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55C27CA1-022A-4381-AE5E-3412BF3D31C9}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvlicensings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55c8a077-8073-42f2-b739-970b354ad2a8}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55d7b852-f6d1-42f2-aa75-8728a1b2d264}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{55DE6817-63F3-4DD0-BAFD-7F55C30567B2}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{55F7B88D-A254-4B22-B7BB-FCDBBA1AFA32}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5610F042-FF1D-36D0-996C-68F7A207D1F0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{561185DB-0C34-4572-B965-53DA7B2A58A9}\InProcServer32" = "$homedrive\\Windows\\System32\\GameInput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56198675-BD59-3B10-8346-583781462CEF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{562462DD-4F9A-4110-9D6A-C3CA0407FF76}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56276483-5c2d-472c-b375-23ce4eb6a4f9}\InProcServer32" = "$homedrive\\Windows\\system32\\RdpSaPs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{563DC062-B09A-11D2-A24D-00104BD35090}\InprocServer32" = "$homedrive\\Windows\\System32\\wshcon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5645C8C2-E277-11CF-8FDA-00AA00A14F93}\InprocServer32" = "$homedrive\\Windows\\system32\\mimefilt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{565DCEF2-AFC5-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{566296fe-e0e8-475f-ba9c-a31ad31620b1}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{566A2EFF-5651-4020-AC1A-EB48E4571EA3}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5672BB8A-BBF5-482E-B7B9-742C70C604D8}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{567fb4ad-b538-4044-8eab-796b44d91b43}\InProcServer32" = "$homedrive\\Windows\\System32\\GameChatTranscription\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5686a0d9-fe39-409f-9dff-3fdbc849f9f5}\InprocServer32" = "$homedrive\\Windows\\System32\\mp4sdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56871D63-FE46-4c7e-84BB-5DB82D4A99F8}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56904B22-091C-4459-A2E6-B1F4F946B55F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{56a91da5-5051-49f5-8d23-1f050a63e966}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{56ad4c5d-b908-4f85-8ff1-7940c29b3bcf}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{56CDA654-2AA2-456F-81B1-153FE7B381A2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56BB05DE-7AFF-49D8-9F54-2D0936D56BF6}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56DA6136-B95E-4249-BB50-E4773A2B3B5E}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56E0B3FF-1E09-4c99-88B0-C5AAA22E4105}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56EA1054-1959-467f-BE3B-A2A787C4B6EA}\InProcServer32" = "$homedrive\\Windows\\System32\\(shacctprofile|shacct)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56F68E55-D114-4C64-996E-6E5F2D5340B2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57085E7C-4B2C-4542-BC92-2C30D1175CD5}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57154C7C-EDB2-3BFD-A8BA-924C60913EBF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}\InprocServer32" = "$homedrive\\Windows\\System32\\vssapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5740A302-EF0B-45ce-BF3B-4470A14A8980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57523D96-B7F6-4D2C-8AFC-BCC5F5392E94}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57558531-C262-471E-95DB-8B181925C61B}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57635537-C856-4cc2-AE5C-62C34708070C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{57651662-CE3E-11D0-8D77-00C04FC99D61}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{576C5669-E07F-4a1b-9A7A-8F85D944283B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{576C9E85-1300-4EF5-BF6B-D00509F4EDCD}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{577289b6-6e75-11df-86f8-18a905160fe0}\InprocServer32" = "$homedrive\\Windows\\System32\\wpnprv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57756B48-2D36-478F-B4F4-E8C67C5A9454}\InProcServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{577FAA18-4518-445E-8F70-1473F8CF4BA4}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57804CEE-0B00-49AC-94FD-F26E474CCE16}\InProcServer32" = "$homedrive\\Windows\\System32\\WebcamUI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{578480AA-1B1C-4343-AABD-62C0A273DCB5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{578fef39-5e60-4aaf-855b-b6be18ac223e}\InProcServer32" = "$homedrive\\Windows\\System32\\Family\.Authentication\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5791BC26-CE9C-11D1-97BF-0000F81E849C}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{579648D9-94B1-418D-ACC6-AFA17860F320}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5798643F-DC40-47c2-AA81-2D21B96B933E}\InProcServer32" = "$homedrive\\Windows\\System32\\accountaccessor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57B67A1A-2C81-4820-96EC-FA33567A9155}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57C596D0-9370-40C0-BA0D-AB491B63255D}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsmsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Malwarebytes\\Anti-Malware\\mbshlext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5805137A-E348-4F7C-B3CC-6DB9965A0599}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58141F2A-7598-4B93-9D77-4ADF00E044B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58221C65-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58221C66-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58221C67-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\System32\\mycomput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58221C69-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58221C6A-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5828227c-20cf-4408-b73f-73ab70b8849f}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpcorets\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5842a140-ff9f-4166-8f5c-62f5b7b0c781}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58476F97-6464-4e49-9BCB-DD88816A60A3}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5860E1C5-F95C-4a7a-8EC8-8AEF24F379A1}\InProcServer32" = "$homedrive\\Windows\\System32\\SysFxUI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{586d1936-bc46-4f9c-bf65-77c95ad9d9ad}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58859c43-2c82-454b-86c0-9efb11e54838}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{58897D76-EF6C-327A-93F7-6CD66C424E11}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{58AB2366-D597-11d1-B90E-00C04FC9B263}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58c061d5-8c8f-4439-b50a-bb5f7356e621}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58C2B4D0-46E7-11D1-89AC-00A0C9054129}\InProcServer32" = "$homedrive\\Windows\\System32\\dmsynth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58D052BC-A3DF-3508-AC95-FF297BDC9F0C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{58DDEF94-53B5-4BD5-AF79-C4581BBDf7AC}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58E3C745-D971-4081-9034-86E34B30836A}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58ECEE30-E715-11CF-B0E3-00AA003F000F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadce\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58F75A6D-D949-4320-99E1-A2A2576D581C}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{58fb76b9-ac85-4e55-ac04-427593b1d060}\InprocServer32" = "$homedrive\\Windows\\system32\\dimsjob\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{590AB12E-F706-4BA8-9D08-A1EEC69A687D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\McAfee Security Scan\\.*\\McCorePS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{590E4A07-DAFC-3BE7-A178-DA349BBA980B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{59108A76-472B-4311-A9E0-B6FF399B8C99}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{591209c7-767b-42b2-9fba-44ee4615f2c7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5914e885-9394-4baf-9cd9-71f57e4f6c90}\InProcServer32" = "$homedrive\\Windows\\System32\\Family\.SyncEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59347292-B72D-41F2-98C5-E9ACA1B247A2}\InprocServer32" = "$homedrive\\Windows\\System32\\fxsutility\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{593817A0-7DB3-11CF-A2DE-00AA00B93356}\InprocServer32" = "($homedrive\\Windows\\system32\\ddraw\.dll|ddraw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{593E7688-704F-4E72-B025-15FBA735D786}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.PointOfService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{593FB605-4854-4965-B5A1-70AB54AB6475}\InProcServer32" = "$homedrive\\Windows\\System32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{595397F6-2873-449C-954B-B2E23F89D9D7}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59549856-D7D2-47DD-ADB7-CEC2E8A7E2C5}\InProcServer32" = "$homedrive\\Windows\\System32\\DavSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{595B57CF-4842-41D9-806F-D41DB63CCFFB}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Pal\.Desktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{596742A5-1393-4e13-8765-AE1DF71ACAFB}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59699770-2BF1-46C6-857C-1D509DB7079E}\InprocServer32" = "$homedrive\\Windows\\System32\\puiapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5971EC44-072A-41b7-8E67-D9E045CC196D}\InprocServer32" = "$homedrive\\Windows\\System32\\AppIdPolicyEngineApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{597c1ef7-fc28-451e-8273-417c6c9244ed}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Application Verifier\\vrfauto\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{597D4FB0-47FD-4aff-89B9-C6CFAE8CF08E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5985FC23-2588-4D9A-B38B-7E7AFFAB3155}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59899957-02f6-44ac-a369-7704e65a1364}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{598c2d1b-616c-4782-8cc2-fda9d459be71}\InprocServer32" = "$homedrive\\Windows\\system32\\(eappcfgui|eappcfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59A437AB-74F3-4de2-AFE6-54203634C4DD}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59B4762A-A6A9-43BF-A4E3-1BC20DA752D8}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59B7D16A-C309-47C4-9667-363B9B8D8255}\InProcServer32" = "$homedrive\\Windows\\system32\\spool\\tools\\PrintBrmPs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59B7DE6C-57AF-11E1-B7A4-EACC4724019B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59B9640B-3F70-4D1C-B159-F26EEB8A4C87}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59BA10A2-E577-488D-BAFA-2D0A3D89D93B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59be4990-f85c-11ce-aff7-00aa003ca9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\ntlanui2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59C88A5A-702B-4DAB-9FBE-F53140BA899B}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchph\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59CBCF95-7705-43EF-9586-A46B0D03DDE9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.Workplace\.WorkplaceSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59CDB915-8232-46AD-B38B-497B8B0463AD}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59CE6880-ACF8-11CF-B56E-0080C7C4B68A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59D95679-9799-458F-8B5B-FE00D8DA0AE4}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetTCPIP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59DC47A8-116C-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59EECBFE-C2F5-4419-9B99-13FE05FF2675}\InProcServer32" = "$homedrive\\Windows\\System32\\fcon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59EF44D1-4917-4f05-B10F-48C891E95DCC}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59F927B8-B249-4672-88D5-2D688BAFDF24}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{59FD5FD6-896A-425B-B7B6-E7A0318FC127}\InProcServer32" = "$homedrive\\Windows\\System32\\easinvoker\.proxystub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5a1547af-335f-4ee5-b81e-48afc4cc681a}\InprocServer32" = "$homedrive\\Windows\\System32\\webplatstorageserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A1826AF-F5A9-4495-88CD-A04A6CF07B2D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A18D43E-115B-3B8B-8245-9A06B204B717}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A1DCFD3-7982-48F2-8A3D-5C35272862DE}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MsoAdfPs\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5a4b3263-4381-4499-bf2f-c98d168e3ee2}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A4ED3BD-2F40-44B4-93DA-2B5ECC197B26}\InProcServer32" = "$homedrive\\Windows\\System32\\Docking\.VirtualInput\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_7\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A57485B-151F-4868-945B-FBB95B574075}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A580C11-E5EB-11d1-A86E-0000F8084F96}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5a6efd3c-a6b5-44ee-873f-9b25bdbe045b}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Background\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A823D1E-8DDC-44DD-8AB4-F9D32C7FBB05}\InprocServer32" = "$homedrive\\Windows\\system32\\embeddedmodesvcapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A8A3AAA-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A8A3AAB-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A8A3AAC-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A90DD8E-2A0C-45D1-873A-82B61604CEB2}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A984BF5-D07C-4C99-9E5C-37156F21EE8F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5A98B233-3C59-4B31-944C-0E560D85E6C3}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5AA730D8-0F13-4AD6-B6C6-1EA85218C9A0}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5AAE39BF-397D-4B2F-91FF-E633B3944790}\InProcServer32" = "$homedrive\\Windows\\System32\\SystemSupportInfo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5acb106d-1a06-4fcd-862d-02a74de81835}\InProcServer32" = "$homedrive\\Windows\\System32\\DevPropMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ADDC230-2D07-4480-B66E-FDAA79EB7E09}\InProcServer32" = "$homedrive\\Windows\\System32\\tsf3gip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5AE1DAE0-1461-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5AE8571B-DB50-4B7F-9726-64201BED2FC2}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5AFFD66E-3C01-4217-BE18-414C155F67B1}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B035261-40F9-11D1-AAEC-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\(NetSetupShim|netcfgx)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B18AB61-091D-11D1-97DF-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5b389765-edc1-4adf-9812-1c8a83175892}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5b53b2c2-46d6-433e-ab6e-b82efef22b6e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B681E0D-BD15-4A0E-8B8C-8E90663344E4}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B76534C-3ACC-3D52-AA61-D788B134ABE2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5b858418-cfb4-4b32-8501-54d8b0c59f90}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B89DEEB-4DF1-4CF6-9979-C79185CB95A0}\InProcServer32" = "$homedrive\\Windows\\System32\\provops\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5B9084E3-CE4E-4C66-8713-5B02396C090B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5b934b42-522b-4c34-bbfe-37a3ef7b9c90}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BAF654A-5A07-4264-A255-9FF54C7151E7}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BBC2C71-DEC2-4BA3-961A-36F37D1CC8A5}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5bbd58bb-993e-4c17-8af6-3af8e908fca8}\InProcServer32" = "($homedrive\\Windows\\System32\\ieproxy\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\ieproxy\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BD3EA21-163B-4B17-951E-E73EEBF0601A}\InprocServer32" = "$homedrive\\Windows\\System32\\RotMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BE4911E-3D99-4546-898D-7EE70201C519}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BF01503-42BD-41CA-9F75-A465F07A6B11}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BFF4E02-D379-4050-A382-C6504A980D46}\InProcServer32" = "$homedrive\\Windows\\System32\\powercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5BFFA85A-3384-3540-9940-699120D428A8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Ocr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C0786ED-1847-11D2-ABA2-00C04FB6C6FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C0786EE-1847-11D2-ABA2-00C04FB6C6FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C0D19E4-A364-4ef6-9288-DBD194593879}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C24B264-3A01-475C-8EE8-ED4B9DC4F86C}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5c2dc96f-8d51-434b-b33c-379bccae77c3}\InprocServer32" = "$homedrive\\Windows\\system32\\azroles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C35F099-165E-3225-A3A5-564150EA17F5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C3E6CE8-B218-3762-883C-91BC987CDC2D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C5C1935-0235-4434-80BC-251BC1EC39C6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C615ED6-4F9F-48BE-8D84-17409196DE36}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\OSFPROXY\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C63C1AD-3956-4FF8-8486-40034758315B}\InProcServer32" = "$homedrive\\Windows\\system32\\hnetcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C659257-E236-11D2-8899-00104B2AFB46}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcntl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C659258-E236-11D2-8899-00104B2AFB46}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcntl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5c70bc6a-4ab5-48ee-bce3-e6dd857cbdc6}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5c7dd54c-6ce8-45b6-8b2e-8c5f30dcc0d0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Gaming\.Input\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C8422A6-F64B-4AA6-8D3C-78A3E988AA9E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C90CD39-2B89-4C1C-AA3B-19950958CBDA}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5C9EA9AA-5541-49C5-97C4-781B1E720F5C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5CA9971B-2DC3-3BC8-847A-5E6D15CBB16E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5cb0d309-91e1-4d75-82f6-6536909c1286}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5cb66670-d3d4-11cf-acab-00a024a55aef}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5CBA34AE-E344-40CF-B61D-FBA4D0D1FF54}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5cd80a0d-5627-49ff-ad53-c8b1791c85f6}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5CE34C0D-0DC9-4C1F-897C-DAA1B78CEE7C}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D02926A-212E-11D0-9DF9-00A0C922E6EC}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D084DCB-C187-4bdc-95D1-929CC8418BF8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D08B586-343A-11D0-AD46-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5d1026ee-3f2e-4ccb-a83d-cefb7ac22a71}\InProcServer32" = "$homedrive\\Windows\\System32\\sharemediacpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D2F9804-2614-47e5-9B39-C9F74F51FE98}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D429AF6-D20F-4363-B378-C4AA2FA685EE}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D43F9BA-EE77-485B-ACFC-4AD067DAF7BD}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\Shared\\JpnKorRoaming\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5d4d54b3-9fb4-4662-8173-c48568d5e79e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}\InprocServer32" = "$homedrive\\Windows\\system32\\localsec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D6179D2-17EC-11D1-9AA9-00C04FD8FE93}\InprocServer32" = "$homedrive\\Windows\\system32\\localsec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5d7222bc-b407-410b-b440-080f8172ca09}\InProcServer32" = "$homedrive\\Windows\\System32\\vaultcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D75245F-29AE-450D-8924-A7611DE279AF}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5d8d315e-8adc-48e5-80ed-7ccf370c971f}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D8E73F7-4989-4ac8-8A98-39BA0D325302}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D9DD151-65F4-11CE-900D-00AA00445589}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5D9F720A-82CE-47FB-8030-C52154BF5C29}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DA8B048-EEB0-4c15-9BB9-F2CF953C4F47}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5da8fe1f-f485-4516-be06-426b0dddf555}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DB2625A-54DF-11D0-B6C4-0800091AA605}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DC41690-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DC41691-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DC41692-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DC41693-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DC41694-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DE7918B-BFD7-4C1E-B4E0-B16D0A3EA76B}\InProcServer32" = "$homedrive\\Windows\\System32\\AuthHostProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ded83ef-1e99-48cf-bf83-676d2a6db408}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5DF4E7C5-78E3-4CCA-93CD-DF1639E165FB}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvxdapix\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5E032150-8C1E-4c9e-BC60-36E9BFFCFF56}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5E33D52F-2EE2-48EE-80FC-543DFF43E326}\InprocServer32" = "$homedrive\\Windows\\system32\\igdDiag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5E6AB780-7743-11CF-A12B-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5E90CC8B-E402-4350-82D7-996E92010608}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ead82c2-28f1-4f7f-956d-d37420b5a687}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5EB699B3-9296-41BA-9258-DE70F03B7D6C}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ED4F38C-D3FF-4D61-B506-6820320AEBFE}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ed5ada6-d9c5-4645-afec-6b68e54dcf32}\InProcServer32" = "$homedrive\\Windows\\system32\\DdcComImplementationsDesktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ED98377-87A3-4d86-81F7-3E46E0342833}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5EEB5B52-92F3-4204-A8E9-1E5450DF020A}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F02227D-BF38-48BE-B01A-A47D3006DFA2}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F293F05-14BA-40b9-AE65-58B034579917}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F35421F-3313-4AD6-A3D9-DC4CD7DB4BED}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F3A0F8D-5EF9-3AD5-94E0-53AFF8BCE960}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F5295E0-429F-1069-A2E2-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F5AFF4A-2F7F-4279-88C2-CD88EB39D144}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F64EF81-5A6B-4203-9374-16218714CDFF}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F681803-2900-4C43-A1CC-CF405404A676}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5f6c1ba8-5330-422e-a368-572b244d3f87}\InProcServer32" = "$homedrive\\Windows\\System32\\fdproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F884992-EE6D-418B-9E6C-0C2A0FA94D17}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F8E3D0C-D006-4B68-9F53-F55AFD38059A}\InProcServer32" = "$homedrive\\Windows\\system32\\McpManagementProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5f96067d-e1d5-4e36-b4d6-afa822fe3df3}\InprocServer32" = "$homedrive\\Windows\\System32\\TieringEngineProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5F9A955F-AA55-4127-A32B-33496AA8A44E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{5FA29220-36A1-40f9-89C6-F4B384B7642E}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5FAFD868-E3A3-42AC-969D-B69BBE9A400C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Shell\.ServiceHostBuilder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5FB6752A-59BD-4385-8753-13DEFB1AE728}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5FB7EF7D-DFF4-468a-B6B7-2FCBD188F994}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5FDD51E2-A9D0-44CE-8C8D-162BA0C591A0}\InprocServer32" = "$homedrive\\Windows\\System32\\WindowsCodecsRaw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5ffab5c8-9a36-4b65-9fc6-fb69f451f99c}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6004c347-d3f3-472a-8f9e-319b5c583d55}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{600e7adb-da3e-41a4-9225-3c0399e88c0c}\InprocServer32" = "$homedrive\\Windows\\system32\\cngcredui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{600f8139-d614-4700-bf13-b0ccf9818c73}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{600FDFA3-1EA7-4792-9436-ABB5154A9EB2}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6011C1F5-A2E0-491A-83CD-D4C5CBA72B73\InProcServer32" = "$homedrive\\Windows\\System32\\CspLte\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6011C1F5-A2E0-491A-83CD-D4C5CBA72B73}\InProcServer32" = "$homedrive\\Windows\\System32\\CspLte\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60173D16-A550-47f0-A14B-C6F9E4DA0831}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6017A978-93AD-4F2F-9E2D-07CF8C8DEBC4}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60254CA5-953B-11CF-8C96-00AA00B8708C}\InProcServer32" = "$homedrive\\Windows\\System32\\wshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6038EF75-ABFC-4e59-AB6F-12D397F6568D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{603D3800-BD81-11d0-A3A5-00C04FD706EC}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{603D3801-BD81-11d0-A3A5-00C04FD706EC}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60400283-b242-4fa8-8c25-caf695b88209}\InprocServer32" = "$homedrive\\Windows\\System32\\pnppolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6047F837-D527-467E-9DC1-6D51F92D9E45}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows NT\\Accessories\\WordpadFilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60632754-c523-4b62-b45c-4172da012619}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60664caf-af0d-0005-a300-5c7d25ff22a0}\InProcServer32" = "$homedrive\\Windows\\system32\\shgina\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6069BBFB-987E-4532-A065-D424F2CED667}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\filetrace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{606B3777-3051-401F-974A-E66ACA82A3A3}\InProcServer32" = "$homedrive\\Windows\\system32\\scavengeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60765CF5-01C2-4EE7-A44B-C791CF25FEA0}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{607C052E-2B08-4548-BD1D-EB7665A34788}\InProcServer32" = "$homedrive\\Windows\\System32\\usocoreps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{607fd4e8-0a03-11d1-ab1d-00c04fc9b304}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6089A37E-EB8A-482D-BD6F-F9F46904D16D}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60912A1F-A6E6-4C7F-8E2D-8BE7C6505E2D}\InProcServer32" = "$homedrive\\Windows\\System32\\MicrosoftAccountExtension\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{609E6A89-58A1-4509-AE8D-C577E8D7F320}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.Schema\.DesktopShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60b78e88-ead8-445c-9cfd-0b87f74ea6cd}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60F44560-5A20-4857-BFEF-D29773CB8040}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvEncMFTH264x\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60F6E464-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{60F6E465-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{60F6E466-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{60F6E467-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{60F9F51E-4613-4b35-AE88-332542B567B8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{60fd46de-f830-4894-a628-6fa81bc0190d}\InProcServer32" = "$homedrive\\Windows\\system32\\photowiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6101F767-998E-452B-B54A-E836DD486BAD}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsClassExtension\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6104DF1F-6A08-4883-B285-D438ACE61151}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{612C0A37-9005-4980-871B-C81E5EA187B2}\InProcServer32" = "$homedrive\\Windows\\System32\\GPCSEWrapperCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6131A8EC-78CE-11d2-A3F2-3078302C2030}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{613fba38-a3df-4ab8-9674-5604984a299a}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{614C2902-8C8F-4D8F-90A2-FB9017B19FF9}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6150FC78-21A1-46A4-BF3F-897090C6D79D}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{615a13be-241d-48b1-89b0-8e1d40ffd287}\InProcServer32" = "$homedrive\\Windows\\System32\\lxss\\wslclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61625667-893E-4707-B925-A82B528C00B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61667EE4-8071-46E2-9016-3DB2D7BE9E28}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6171CA77-7A1D-41FD-BE74-AF722A054989}\InProcServer32" = "$homedrive\\Windows\\System32\\AnalogCommonProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6173D628-67F9-49B5-B9C1-D7ABD9E70D34}\InProcServer32" = "$homedrive\\Windows\\System32\\SetNetworkLocation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61A48126-EF74-4D4A-9DDA-43FD542CAD1E}\InprocServer32" = "$homedrive\\Windows\\System32\\(MSWB7|NaturalLanguage6)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61B3E12B-3586-3A58-A497-7ED7C4C794B9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{61b68808-8eee-4fd1-acb8-3d804c8db056}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61B7F4E6-ECD0-4da8-AB2F-9517CDB4B8F1}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsWubiDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}\InprocServer32" = "$homedrive\\Windows\\System32\\edptask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61E79517-4A4E-45D8-9219-30E71A9EFF39}\InprocServer32" = "$homedrive\\Windows\\System32\\TabBtnEx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61f77d5e-afe9-400b-a5e6-e9e80fc8e601}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{61F7B364-432C-4D04-BBC1-7FC1BF3807A8}\InprocServer32" = "$homedrive\\Windows\\System32\\bthprops\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{62079164-233b-41f8-a80f-f01705f514a8}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6208889B-F7A7-44B4-A34E-3C40E83281DB}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{620E38AE-D62C-486B-8339-3DF3C04D88C3}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62112AA1-EBE4-11cf-A5FB-0020AFE7292D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{621E1D58-583A-45B6-B869-E3C53DE71B49}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvGameS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{622A8646-1096-4765-8E07-91A3E661CEF9}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62323107-AD7E-49D1-9223-7ADD7C922D1B}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{623E2882-FC0E-11d1-9A77-0000F8756A10}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6240EF28-7EAB-4dc7-A5E3-7CFB35EFB34D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{62545937-20A9-3D0F-B04B-322E854EACB0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{62547D24-2ACA-4A33-8F15-AE95CE1A45BD}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{626C80C1-D410-4DE4-9E82-1B4B9610C404}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6279b7cb-d768-4fbe-a6d5-add4f711e53b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\APPLETS\\imjpkdic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62907C17-0036-4D44-B59C-70F2621A3EE4}\InprocServer32" = "$homedrive\\Windows\\system32\\Windows\.Management\.SecureAssessment\.CfgProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6295DF27-35EE-11D1-8707-00C04FD93327}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62AAAC25-625B-4297-9842-8E4442FA98F5}\InProcServer32" = "$homedrive\\Windows\\System32\\dialserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62AE1F9A-126A-11D0-A14B-0800361B1103}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62B2DD2C-F129-42EE-BF59-55D3FD21C215}\InProcServer32" = "$homedrive\\Windows\\System32\\Autopilot\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62B43F0E-E7DB-4329-8C13-A966D84A289F}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech\\Direct Input Force Feedback\\1_1_5\\hidpp_forcefeedback_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62B4D041-4667-40B6-BB50-4BC0A5043A73}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62ba9430-9624-46ec-9034-d5ffabb0fca0}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62BE5D10-60EB-11d0-BD3B-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62CE7E72-4C71-4D20-B15D-452831A87D9D}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62D3F5B6-7C5F-4914-82AF-E3C39743F380}\InProcServer32" = "$homedrive\\Windows\\System32\\CspCellularSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62dc1a93-ae24-464c-a43e-452f824c4250}\InProcServer32" = "$homedrive\\Windows\\System32\\WMALFXGFXDSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62E607F5-D6C2-4F5C-92EF-0D68452F5715}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{62E92675-CB77-3FC9-8597-1A81A5F18013}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{63005CD0-8541-439c-A66A-617F4B1F2BCB}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{630A3EF1-23C6-31FE-9D25-294E3B3E7486}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{630BB917-AA3B-4CF5-9D24-AAD1F7D4297A}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6312362E-EDA0-42BA-B7B1-9C8FE3D4D1A4}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{631E88E6-45C5-40DC-B2D4-28B732E45F96}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63260bce-a3fb-4a34-aa51-d4d8e877b62b}\InprocServer32" = "$homedrive\\Windows\\System32\\WorkFoldersShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6329947b-0b98-4bce-91e1-f90e7a84cd16}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{632A2D3D-86AF-411A-8654-7511B51B3D5F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{632B0530-3CBF-44F4-BFDC-750A80D4B00A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63480537-5d3d-4c42-8ac4-22a2bc016244}\InProcServer32" = "$homedrive\\Windows\\system32\\WaaSMedicPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6348A566-0BB9-425C-8E5A-F7ECDCD0419B}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletBackgroundServiceProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{634F8410-E924-46B8-A1B5-E8B08E8B8750}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{636B1538-4AD1-4FA5-831A-403D7146B11D}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{636B9F10-0C7D-11D1-95B2-0020AFDC7421}\InProcServer32" = "$homedrive\\Windows\\System32\\dmusic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{636c15cf-df63-4790-866a-117163d10a46}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{637118F4-0E4E-4C90-BC39-161165F55B6E}\InProcServer32" = "$homedrive\\Windows\\system32\\lockcontroller\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63766597-1825-407D-8752-098F33846F46}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6377013E-2C35-40F3-B8E1-1AB47D12982B}\InprocServer32" = "$homedrive\\Windows\\system32\\WABSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{637c490d-eee3-4c0a-973f-371958802da2}\InProcServer32" = "$homedrive\\Windows\\System32\\WMALFXGFXDSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{638DA67A-FAF8-4148-8DAE-9AB433DE470D}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{639bdb5a-7959-48d4-afc3-44f252bf2924}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{639F5AF5-BCED-4369-AC34-360B16D955FD}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63A4B1FC-259A-4A5B-8129-A83B8C9E6F4F}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63B51F81-C868-11D0-999C-00C04FD655E1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{63C04987-37C1-4CE6-9A11-4E0C1F8FC2A9}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63D6CF0A-104F-45FA-A0ED-8AF48864CD2E}\InprocServer32" = "$homedrive\\Windows\\System32\\DDDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63da6ec0-2e98-11cf-8d82-444553540000}\InProcServer32" = "$homedrive\\Windows\\system32\\msieftp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63df056d-a8c7-4a2e-87ff-215de332c21f}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsvr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63e17c10-2d43-4c42-8fe3-8d8b63e46a6a}\InprocServer32" = "$homedrive\\Windows\\System32\\MSOpusDecoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63E23168-BFF7-4E87-A246-EF024425E4EC}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{63FA5E69-87FE-432d-8F62-9D7A3D7D09C3}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{640b00a1-86d6-4441-953f-2452efc8442d}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Diagnostics\.TraceReporting\.PlatformDiagnosticActions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{640C3348-C248-4A32-A111-CEA662BC9C96}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{641ABA69-56FD-4029-A445-4D8375D3A699}\InProcServer32" = "$homedrive\\Windows\\system32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64226369-CCEB-477D-88D5-7A9CB465BEAC}\InProcServer32" = "$homedrive\\Windows\\system32\\IdCtrls\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6438570B-0C08-4A25-9504-8012BB4D50CF}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{643B0017-1AAE-4AFA-B921-4BE3FB8308A2}\InprocServer32" = "$homedrive\\Windows\\System32\\tspubwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6447ABFE-B1CF-4F4D-BE2D-4924C8C8FE00}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6447E897-294B-409A-BF15-5F349A20F2C0}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64577982-86D7-11d1-BDFC-00C04FA31009}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{64654B35-A024-4807-89D3-C6FDB5A260C7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6468e186-485e-47e4-83d8-8d9318675219}\InProcServer32" = "$homedrive\\Windows\\System32\\credprovhost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64693913-1c21-4f30-a98f-4e52906d3b56}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{647053C3-1879-34D7-AE57-67015C91FC70}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{64708A78-9FA0-4606-8EB7-215E1BC3FA9D}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6473E7E7-D8D6-4696-9FBB-9F41DF134B7B}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{647A6A5A-0E3E-4490-8766-BC1894FD86EE}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\certcom\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{647BD8C2-658B-4ECA-ABC7-FC5C0BF1704D}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{649b3cc6-4621-413f-a08b-5aedd333ff6b}\InProcServer32" = "$homedrive\\Windows\\System32\\KnobsCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{649C7FDB-B3F7-4683-8948-C9189D7C3C1D}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\appprelaunchlib\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{649EEC1E-B579-4E8C-BB3B-4997F8426536}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64AB4BB7-111E-11d1-8F79-00C04FC2FBE1}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64b8ba0e-2fe9-481f-884b-c67bcb531c6d}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceReactivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}\InProcServer32" = "$homedrive\\Windows\\system32\\es\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64BA50D0-40FD-4FD0-A846-65A2ACE6A075}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcRefreshTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64BC32B5-4EEC-4de7-972D-BD8BD0324537}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64D8A8E0-80A2-11d2-8CF3-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64EE4BAC-1027-4736-904D-8BE23B93F82C}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64EEED2C-AE06-44E0-A22E-F4BAD3047339}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{64FE8D29-91B5-42C4-A7CA-BC2DE782205A}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6504AFED-A629-455C-A7F1-04964DEA5CC4}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{650503CF-9108-4DDC-A2CE-6C2341E1C582}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6515834D-6125-4878-A3A3-6B0A73B809A2}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPJOBJ\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6522CF99-94C7-4958-B18D-4F6159E6926B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{652527C4-4A72-4bd3-BFAB-4B06AB172D7C}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{652b8825-7895-4dc7-83ef-1ccc8fae39c0}\InProcServer32" = "$homedrive\\Windows\\System32\\Analog\.Shell\.Broker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65303443-AD66-11D1-9D65-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6539579C-2657-45E5-985F-835E197959C2}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6543D242-A80B-44A3-B828-95C1EC452423}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{655D9BF9-3876-43D0-B6E8-C83C1224154C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65704743-2513-4987-9fc9-826bbedde743}\InProcServer32" = "$homedrive\\Windows\\System32\\UserDeviceRegistration\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6572EE16-5FE5-4331-BB6D-76A49C56E423}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65964407-a5d8-4060-85b0-1ccd63f768e2}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{659CDEAD-489E-11D9-A9CD-000D56965251}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{659CDEAE-489E-11D9-A9CD-000D56965251}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65A04334-9DD4-4FA2-94DB-A62922B8BA24}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65a5160f-a093-48b9-8f79-05098d5087ad}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65B4D3E5-5DAA-48F3-AAFC-43EEA6215244}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\binaryinfo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65BD0711-24D2-4FF7-9324-ED2E5D3ABAFA}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65d00646-cde3-4a88-9163-6769f0f1a97d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65d4221e-35c4-4a66-bdfa-f080bec22720}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_10\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65E96706-3C3D-4929-9C36-29F50EA5E7E7}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{65fa40bd-3ed5-4631-ba9f-68df9a7d9ae6}\InprocServer32" = "$homedrive\\Windows\\System32\\mtffuzzyds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{660b90c8-73a9-4b58-8cae-355b7f55341b}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66182EC4-AFD1-11d2-9CB9-0000F87A369E}\InprocServer32" = "$homedrive\\Windows\\system32\\adsnt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6619A740-8154-43BE-A186-0319578E02DB}\InProcServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WmiPerfClass\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66275315-bfa5-451b-88b6-e56ebc8d9b58}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{663e1a94-a37e-4e8a-9e55-5354b2139790}\InProcServer32" = "$homedrive\\Windows\\System32\\EsclWiaDriver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{667955AD-6B3B-43CA-B949-BC69B5BAFF7F}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{66a1c746-b147-43b8-8d08-a2657bebbe8f}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66B8AA0A-7AA7-4BE6-8F37-344D5767240F}\InProcServer32" = "$homedrive\\Windows\\System32\\dialclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66c2c36e-a363-434c-8e61-e488f0b116f7}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66CE75D4-0334-3CA6-BCA8-CE9AF28A4396}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{66D0DB14-5638-475f-A386-629522D8C461}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66d56b60-97b7-4e6a-9aa1-3ec5e3fdaa0f}\InProcServer32" = "$homedrive\\Windows\\system32\\WinsockHC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{66EC5C50-45B7-48cd-81D6-20A712011AD1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{66eea0f5-001a-4073-a496-783f86fcf4c0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6705C562-0AE7-40EA-8474-F39DAB1813D0}\InProcServer32" = "$homedrive\\Windows\\system32\\RasMM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{671FCFDA-4BE4-432c-A6D3-4179179C3856}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{673DFE75-9F93-304F-ABA8-D2A86BA87D7C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6746c347-576b-4f73-9012-cdfeea251bc4}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6756A641-DE71-11d0-831B-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{675F097E-4C4D-11D0-B6C1-0800091AA605}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{67677441-3350-45B4-9455-4D7F4A50F4E4}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{676E1164-752C-3A74-8D3F-BCD32A2026D6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{677561f9-50fc-4b24-921d-eacb89706059}\InProcServer32" = "$homedrive\\Windows\\system32\\CellularAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6785BFAC-9D2D-4be5-B7E2-59937E8FB80A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{679f85cb-0220-4080-b29b-5540cc05aab6}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{67a33041-b8aa-4429-b02a-60f8d007c29e}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{67A66362-050E-42ff-B241-82C1F51EA9B9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{67EA3D48-83F2-408C-AD46-97F207D79DB3}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{67F07E00-CCEF-11D2-9EF9-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{681FD532-7EC2-4548-9ECE-44AABCFBD254}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{682D63B8-1692-31BE-88CD-5CB1F79EDB7B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6833568B-541D-4290-AF22-3AFB73D1447C}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{683a732e-eee1-4aec-8b45-455890e87ff1}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6850404F-D7FB-32BD-8328-C94F66E8C1C7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{687529e6-4d36-4336-88ea-94b03d16aa4b}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{687607A0-6BA1-4355-99F4-4E3D749FFB19}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{687734A3-65F2-43E5-B9AE-E775B351FD2C}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{687D3367-3644-467a-ADFE-6CD7A85C4A2C}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{68904ac7-1801-47f8-af3a-dac14848fd75}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6896B49D-7AFB-34DC-934E-5ADD38EEEE39}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{68A8692B-67E4-4e3f-BE10-9E287F663CFD}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68b07bff-cb50-4d60-a7d5-02b1a523bc8c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{68B67DA9-7212-396E-9528-33F70547660E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{68c67565-410e-45e6-8560-4091ae193481}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68cfb337-fd99-43af-a64f-8b84c9ce6a56}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68DB2410-63D2-4D4A-9449-FBD53FA4E7A3}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68ddbb56-9d1d-4fd9-89c5-c0da2a625392}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68E1DF8C-9512-4801-A105-25A44DCCB164}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68E3F2FD-31AE-4441-BB6A-FD7047525F90}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68e52c1c-37cb-41d2-afe1-1e77d5f10676}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{68F61FE3-19A4-45F2-92E2-774396C79A4E}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.internal\.shellcommon\.shareexperience\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{68F8AEA9-1968-35B9-8A0E-6FDC637A4F8E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{693644B0-6858-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69375D35-B310-40fd-A7DC-9548E1DBC3B5}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6939BF8D-FF94-492C-9E4E-BD6439D8F867}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VVIEWDWG\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{693BADEA-1EB1-4013-B799-285F624A55BD}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69546697-5b53-43c5-8391-9e227b54957b}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{698F7D05-37F0-4902-8A63-AEF7D44DC7FC}\InprocServer32" = "$homedrive\\Windows\\System32\\pwlauncher\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{699583D1-6BA0-4DF2-B559-2487ED3A58CB}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{699745C2-5066-4B82-A8E3-D40478DBEC8C}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69A0BC0E-7B4E-4EE4-83B5-6C5CE096DAAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ImeSystrayMenu\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69A25C12-1811-11D2-A52B-0000F803A951}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69A25C14-1811-11D2-A52B-0000F803A951}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69a568cf-86d1-4e47-b1fc-a74a110583fb}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{69A95A38-C637-46A0-9FB2-1C939AEBF2E8}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69BE8BB4-D66D-47C8-865A-ED1589433782}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69CE757B-E8C0-4B0A-9EA0-CEA284096F98}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69D76D1B-B12E-4913-8F48-671B90195A2B}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\policman\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69F14E67-6183-4854-A16C-74273814F10C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.SerialCommunication\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{69F31C37-09E1-433b-AECB-EBC83E4065D9}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A01FDA0-30DF-11d0-B724-00AA006C1A01}\InProcServer32" = "$homedrive\\Windows\\System32\\imgutil\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A02951C-B129-4D26-AB92-B9CA19BDCA26}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A08CF80-0E18-11CF-A24D-0020AFD79767}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A10CEAB-0813-48BA-9769-BD98F03F3EB8}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A205B57-2567-4a2c-B881-F787FAB579A3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A206B40-465E-487A-AD5C-CCE637EA9EDA}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A22E68F-887C-4221-9DF1-EE0B3AC76497}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6a2af23e-b6d9-4a72-938d-9bffc96be71e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.HostName\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A2E0670-28E4-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{6a30ad66-de02-407c-8ea3-b1c03e1faa87}\InProcServer32" = "$homedrive\\Windows\\System32\\pickerplatform\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A323D92-38A8-449B-8A98-CB1CF3903F5B}\InProcServer32" = "$homedrive\\Windows\\system32\\PrintPlatformConfig\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A45335D-4C3A-44B7-B61F-C9808BBDF8ED}\InprocServer32" = "$homedrive\\Windows\\System32\\VmSynthNic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A45335E-4C3A-44B7-B61F-C9808BBDF8ED}\InprocServer32" = "$homedrive\\Windows\\System32\\VmSynthNic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A49950E-CE8A-4EF7-88B4-9D112366511C}\InProcServer32" = "$homedrive\\Windows\\system32\\softkbd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A514DB9-3EC1-4F36-9F95-BC0B00152D0B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A5B0C7C-5CCB-4F10-A043-B8DE007E1952}\InprocServer32" = "$homedrive\\Windows\\system32\\MsRdpWebAccess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A5FEA5B-BF8F-4EE5-B8C3-44D8A0D7331C}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A602D88-1FC3-47CC-ABC4-D1F9BCBFC569}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A68CC80-4337-4dbc-BD27-FBFB1053820B}\InProcServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A6F4B83-45C5-4ca9-BDD9-0D81C12295E4}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6a91029e-aa49-471b-aee7-7d332785660d}\InprocServer32" = "$homedrive\\Windows\\System32\\(IME\\IMEJP\\imjpapi\.dll|imjp10k\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_7\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6A98D0C3-3A85-4193-AAB6-333D338E178E}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6aa17c06-0c75-4006-81a9-57927e77ae87}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6ACB028E-48C0-4A44-964C-E14567C578BA}\InprocServer32" = "$homedrive\\Windows\\System32\\sppwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6AD28EE1-5002-4E71-AAF7-BD077907B1A4}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6AD7D671-3199-4D10-9372-F44DAF1DC867}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6ADF60C7-C49A-4C58-9ABA-5EB68FB7C3D3}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Feedback\.Analog\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6AE29350-321B-42be-BBE5-12FB5270C0DE}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6af6b181-3a90-4fac-9655-b34041d46b8f}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6AFCCE9E-85F0-475C-944E-9357B84A4975}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6AFE625A-6ED7-4475-BD04-47170B77D584}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B0182CC-5D01-4AA2-B295-B99C1451ECA0}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B0B3E6B-A2C5-4514-8055-AFE8A95242D9}\InprocServer32" = "$homedrive\\Windows\\System32\\MSFlacDecoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B127DF8-E5D6-42CA-B6A8-2FDA5F7FAB17}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B13B293-30FD-4abb-8E41-29B1F88297E2}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6b19c2a9-50ba-4275-b99b-13dcf69b9f19}\InprocServer32" = "$homedrive\\Windows\\system32\\NfcRadioMedia\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B273FC5-61FD-4918-95A2-C3B5E9D7F581}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B2D6BA0-9F3E-4f27-920B-313CC426A39E}\InProcServer32" = "$homedrive\\Windows\\System32\\OpcServices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6b33163c-76a5-4b6c-bf21-45de9cd503a1}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B34D24A-213B-4929-A8A1-F0A94EBDC8BF}\InProcServer32" = "$homedrive\\Windows\\System32\\MaintenanceUI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6b3598cc-db4d-4992-95b9-5d7d327c0dc7}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B362280-6915-11D2-951F-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B462062-7CBF-400D-9FDB-813DD10F2778}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B5623CD-8C50-473E-940F-1F4FC8923B8F}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtCangJieDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B56A227-7150-4A1F-A114-C959EB8F8C24}\InProcServer32" = "$homedrive\\Windows\\System32\\appmgmts\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B6F9D2D-6D49-4026-83A6-86DFC1C3C6F0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B7752CB-6AAF-4734-A0CE-47EB0D6C093F}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B8195EE-950E-4F71-86F3-ADD77B191420}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B831E4F-A50D-45FC-842F-16CE27595359}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6B86FF0A-31A6-4910-A973-E8D953EADBEF}\InprocServer32" = "$homedrive\\Windows\\System32\\ChsStrokeDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BA8349F-FDF4-4246-A724-32C943AED24F}\InprocServer32" = "$homedrive\\Windows\\system32\\SebBackgroundManagerPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC09692-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iasrecst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0969D-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0969F-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096A0-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096B1-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iaspolcy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096B3-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iaspolcy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096B7-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096B8-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096BC-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iashlpr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096C6-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasads\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096C8-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasads\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096DA-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasrad\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096DB-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096DC-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096DD-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096DE-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096DF-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096E0-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096E1-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC096E5-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC09894-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasrad\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC09896-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC09897-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC09898-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC09899-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0989A-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0989B-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0989C-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0989D-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0989E-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC0989F-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasrad\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098A4-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098A5-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098A6-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098A7-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098A9-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098AC-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC098AD-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC1CFFA-8FC1-4261-AC22-CFB4CC38DB50}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BC752F7-9721-49F8-873B-9FECB6215DE3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BD6AECA-AFB0-45B7-BAC4-F292EC0F3F41}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6bdadf65-eb94-419b-907c-0ba9dda7f0df}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BF0A714-3C18-430b-8B5D-83B1C234D3DB}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BF52A52-394A-11d3-B153-00C04F79FAA6}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6BFCACDC-A6A6-4343-9CF6-83A83727367B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C09BB55-D683-4da0-8931-C9BF705F6480}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C1776CD-4E5A-4DEB-B810-8DD4AA5DC6E4}\InProcServer32" = "$homedrive\\Windows\\System32\\LockController\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C177EBD-C42D-4728-A04B-4131892EDBF6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{6c19be35-7500-11d1-ad94-00c04fd8fdff}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\esscli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C1B3099-127A-4BE1-93BC-DD4771EEEF90}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C1C243A-2146-3342-8078-AC4BFB9DB4E9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C337B26-3E38-4F98-813B-FBA18BAB64F5}\InProcServer32" = "$homedrive\\Windows\\system32\\(Windows\.Data\.Pdf|glcndFilter)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C3EE638-B588-4D7D-B30A-E7E36759305D}\InprocServer32" = "$homedrive\\Windows\\system32\\activationmanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C752774-29FB-4e50-8BB1-97098425A77C}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceMetadataRetrievalClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6C7977F4-DB5B-4977-9A41-C7344CC43DB9}\InProcServer32" = "$homedrive\\Windows\\System32\\fingerprintcredential\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6c955eca-04ce-4f1e-84fe-d8a526ce3137}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6ca50344-051a-4ded-9779-a43305165e35}\InprocServer32" = "$homedrive\\Windows\\System32\\mfh264enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6CE77FA1-033F-4275-A363-44B04E289AB6}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcProCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6CED0DAA-4CDE-49C9-BA3A-AE163DC3D7AF}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6CF48EF8-44CD-45d2-8832-A16EA016311B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6cf497b5-370a-4da6-afd7-6e4e0297fab2}\InProcServer32" = "$homedrive\\Windows\\System32\\HvsiManagementApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6CFAD761-735D-4AA5-8AFC-AF91A7D61EBA}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D0F3287-6D07-4234-A3BC-EE1CD693372E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D14D8F9-DCB2-427c-91BB-E161E5870FFD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D1FBE59-A654-4A0E-8534-4505008DC528}\InProcServer32" = "$homedrive\\Windows\\system32\\CoreShellExtFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D3951EB-0B07-4fb8-B703-7C5CEE0DB578}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D40A6F9-3D32-4FCB-8A86-BE992E03DC76}\InProcServer32" = "$homedrive\\Windows\\System32\\SecurityHealthSSO\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D48E7F7-8ECD-404C-8E30-81C49E8E36EE}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D4A3650-628D-11D2-AE0F-006097B01411}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D5313C0-8C62-11D1-B2CD-006097DF8C11}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D68D1DE-D432-4B0F-923A-091183A9BDA7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D6B3CD8-1278-11D1-9BD4-00C04FB683FA}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6d6d5c8a-b008-4c62-8f4c-8c11a6a88f25}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D7A4B0E-66D5-4AC3-A7ED-0189E8CF5E77}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipiprt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6d88dda9-359a-46d7-93d5-f1ea8995ab61}\InprocServer32" = "$homedrive\\Windows\\system32\\activationmanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D8BB3D3-9D87-4a91-AB56-4F30CFFEFE9F}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D93C83D-31C1-490E-B5F9-068A80E3D7CB}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceDriverRetrievalClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6D99EF93-C3AB-4539-8F2D-BB1BEF21D415}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6DA736C9-DCDE-4651-82A8-56E4EF1D8DD7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6DAF9757-2E37-11D2-AEC9-00C04FB68820}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6db29a9b-10d0-4b93-b86a-188fc998eff8}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6DC25420-C66D-44B5-B3D3-78EECFFA6DB0}\InProcServer32" = "$homedrive\\Windows\\System32\\\\DMAlertListener\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6DD062C7-B6E6-4702-98B0-6E6AB46C877D}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6e10d302-789d-4237-9037-6a675bdf6511}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E182020-F460-11CE-9BCD-00AA00608E01}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{6e18f9c6-a3eb-495a-89b7-956482e19f7a}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6e29fabf-9977-42d1-8d0e-ca7e61ad87e6}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6e33091c-d2f8-4740-b55e-2e11d1477a2c}\InProcServer32" = "$homedrive\\Windows\\system32\\shimgvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E3D2534-AAB3-4FB6-A574-3C9A603AA308}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E3D2E94-E6D8-4afd-AFDE-ABD26CA88BF5}\InProcServer32" = "$homedrive\\Windows\\System32\\faultrep\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E449686-C509-11CF-AAFA-00AA00B6015C}\InProcServer32" = "$homedrive\\Windows\\System32\\inseng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E4B938E-4BA1-4E8D-BCBA-8C51CE95F94F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E4FCB12-510A-4d40-9304-1DA10AE9147C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E582707-CCAF-4333-A9B9-3B4F75C362E0}\InProcServer32" = "$homedrive\\Windows\\system32\\SyncInfrastructure\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E5D1F2A-AF9A-419A-9CAF-C5A5C32C3CF8}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E625D11-49B9-4CA6-A697-DD04FD60C41F}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6e682784-1eca-4cf2-988d-96b6e89e9a4d}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E78DAD9-E187-4D6E-BA63-760256D6F405}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPSESS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6E7E2EF2-F881-472A-8E32-17CA95710402}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\MDMAppProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EA4B9B1-0121-46C9-95CF-8E5392CB8234}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EB22881-8A19-11D0-81B6-00A0C9231C29}\InprocServer32" = "$homedrive\\Windows\\System32\\Com\\comadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EBFDF36-23A6-4F02-8800-CAB1CFEE43ED}\InProcServer32" = "$homedrive\\Windows\\System32\\ReportingCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EC153C1-371E-47E1-A896-2F7F80EB7842}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EDD6D74-C007-4E75-B76A-E5740995E24C}\InProcServer32" = "$homedrive\\Windows\\System32\\cmlua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EE84065-8BA3-4a8a-9542-6EC8B56A3378}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONFILTER\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{6EF07F29-F9B8-4DA4-B59E-13DEA060AD60}\InprocServer32" = "$homedrive\\Windows\\System32\\cmstplua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6f13dd2e-ebee-4dd5-a72e-850b2087f5dd}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F26A6CD-967B-47FD-874A-7AED2C9D25A2}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F3DD387-5AF2-492B-BDE2-30FF2F451241}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F3F133D-61E3-4153-8AAE-056031E2B597}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6f45dc1e-5384-457a-bc13-2cd81b0d28ed}\InProcServer32" = "$homedrive\\Windows\\system32\\((credprovs|authui)legacy|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F58F65F-EC0E-4ACA-99FE-FC5A1A25E4BE}\InProcServer32" = "$homedrive\\Windows\\System32\\LanguageComponentsInstaller\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6f5bad87-9d5e-459f-bd03-3957407051ca}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F674828-9081-3B45-BC39-791BD84CCF8F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_0\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F7C8E8F-DC69-4e3f-BC05-439962A05FD5}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F8527BF-5AAD-3236-B639-A05177332EFE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{6F8CF952-B381-44D3-9704-0ED7C3C4E677}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6f92a312-7524-407a-9555-6af7d22648ee}\InprocServer32" = "$homedrive\\Windows\\System32\\HashtagDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6FBD703B-FECE-4348-B93D-6E92AC097F17}\InProcServer32" = "$homedrive\\Windows\\System32\\MsftOemDllIgneous\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{6ffa842b-fd90-4a0e-9315-21c52b2457aa}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC1-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC3-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC4-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC5-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC6-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC7-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACC8-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACD1-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACD3-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACD4-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7007ACD5-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7013943A-E2EC-11D2-A086-00C04F8EF9B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7016F8FA-CCDA-11D2-B35C-00105A1F8177}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70351E05-D2BD-4817-9FFD-A6D4A9A90282}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{703574D6-AA1B-4FBF-A938-9A59C89343FA}\InprocServer32" = "$homedrive\\Windows\\system32\\pcsvDevice\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7037C8FC-97F7-4AE5-BF2D-5D2660C97878}\InProcServer32" = "$homedrive\\Windows\\System32\\VoiceActivationManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{703E7517-FA6F-43E2-9418-EFBE2A1357F0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Wallet\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{704033A7-A100-403E-AD9E-D6FEC5FF457E}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdevtools\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70438d09-456a-4a6f-86fe-1c1a3afc699e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7050ebf0-1dbf-4528-838e-f7e10089fc4b}\InprocServer32" = "$homedrive\\Windows\\System32\\VmCrashDump\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7057e952-bd1b-11d1-8919-00c04fc2c836}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{706A79C0-1AC4-4E25-B311-93B643C1E499}\InprocServer32" = "$homedrive\\Windows\\system32\\WinMsoIrmProtector\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70707B39-B2CA-4015-ABEA-F8447D22D88B}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAudDecMFT\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC01-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC05-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC07-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC13-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC31-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC32-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC33-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC61-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC62-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC71-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC75-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071EC77-663B-4BC1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECA0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECA3-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECA5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECA7-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECA8-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECA9-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECAF-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB3-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB4-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB6-663B-4BC1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB7-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECB8-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECBF-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECE0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECE5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECF1-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7071ECFA-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70804ECC-7272-4dc8-AFFC-97CD66AAA282}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7086AD76-44BD-11D0-81ED-00A0C90FC491}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdlgs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70A738D1-1BC5-3175-BD42-603E2B82C08B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{70A92FA3-7FD8-4808-9A05-6B2FD19AA5B3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70cba7d2-50a5-4383-8aa5-b378c01c7364}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70E102B0-5556-11CE-97C0-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70F36578-2741-454F-B494-E8563DDD1CB4}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvDecMFTMjpegx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70f598e9-f4ab-495a-99e2-a7c4d3d89abf}\InprocServer32" = "$homedrive\\Windows\\System32\\WMADMOE\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{70f98452-3c38-4271-8e76-6f444852ebc8}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceWiaCompat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{70FF37C0-F39A-4B26-AE5E-638EF296D490}\InprocServer32" = "$homedrive\\Windows\\System32\\RACPLDlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{711001CD-CC1D-4470-9B7E-1EF73849C79E}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationConfiguration\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7112FB6A-700C-4C25-BB31-5B13CE60CC29}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{713790EE-5EE1-45ba-8070-A1337D2762FA}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{713aacc8-3b71-435c-a3a1-be4e53621ab1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{71455ADC-0A77-405F-BF67-EA663D276653}\InProcServer32" = "$homedrive\\Windows\\system32\\BthMtpContextHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{714b2440-bc96-48b9-9738-2a728c653464}\InprocServer32" = "$homedrive\\Windows\\System32\\vmvpci\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7153AC3A-D502-4A96-83AC-32C80FA6844A}\InprocServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{715D9C59-4442-11D2-9605-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7165c8ab-af88-42bd-86fd-5310b4285a02}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7170F2E0-9BE3-11D0-A009-00AA00B605A4}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{717ef4fe-ac8d-11d0-b945-00c04fd8d5b0}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71932D43-3CA5-46EF-B013-3F9A695996ED}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7197647A-7D2B-42E3-B6E2-9BAABBDC8B67}\InprocServer32" = "$homedrive\\Windows\\system32\\EnterpriseDesktopAppMgmtCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{719ff33d-43af-4d4a-a89a-1599e6d88a37}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71A5EC7F-F325-4376-9D94-622C372E256F}\InProcServer32" = "$homedrive\\Windows\\System32\\srumapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71D99464-3B6B-475C-B241-E15883207529}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71DA2664-3D4F-42A0-BCBB-D76F30C00946}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71E32BAA-73EE-40a1-933C-F166F0192B72}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{71E38F91-7E88-11CF-9EDE-0080C78B7F89}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F080AA-8661-4093-B15E-4F6903E77D0A}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\MPCVR\\MpcVideoRenderer64\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71f3a4a2-dc3f-4ad1-a1ad-81e2109d4414}\InprocServer32" = "$homedrive\\Windows\\System32\\Win32_DeviceGuard\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{71f96385-ddd6-48d3-a0c1-ae06e8b055fb}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96460-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96461-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96462-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96463-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96464-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96465-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96466-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F96467-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{71F9BB80-B88F-48EC-BA54-F92F732208A3}\InProcServer32" = "$homedrive\\Windows\\System32\\SEMgrPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{720B8500-17B3-4C89-AE84-2CFE7251B4B8}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\contextp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{720D4AC0-7533-11D0-A5D6-28DB04C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{7210D183-F81E-4CEA-A2B9-E73C4ECB067A}\InprocServer32" = "$homedrive\\Windows\\system32\\mssph\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72213061-c9bc-40be-a916-a28f5fba091e}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72422AA4-3536-41FA-965E-D5D9DD130297}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{725F645B-EAED-4fc5-B1C5-D9AD0ACCBA5E}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72682FC4-040A-430a-BE0B-224574B953FE}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{726BBDF4-6C6D-30F4-B3A0-F14D6AEC08C7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{727af81a-cacf-4e37-9df7-a22ed974f298}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{728a21c5-3d9e-48d7-9810-864848f0f404}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72967901-68EC-11D0-B729-00AA0062CBB7}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72967903-68EC-11D0-B729-00AA0062CBB7}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72970BEB-81F8-46D4-B220-D743F4E49C95}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\vsswmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72A7994A-3092-4054-B6BE-08FF81AEEFFC}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72b36e70-8700-42d6-a7f7-c9ab3323ee51}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{72B624DF-AE11-4948-A65C-351EB0829419}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72B66649-3DBF-429F-BD6F-7774A9784B78}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72BFEB11-2681-490D-874B-652FC1D75ED8}\InprocServer32" = "($homedrive\\Windows\\System32\\wlidcli\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\wlidcli\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{72c57034-02c4-4e9f-bf9c-ca711031757e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72C97D74-7C3B-40AE-B77D-ABDB22EBA6FB}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72C984BA-0666-4D3F-A0DE-96BF43838E6E}\InprocServer32" = "$homedrive\\Windows\\System32\\VaultRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72d3edc2-a4c4-11d0-8533-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72D633FF-401E-4AB4-BF80-143E4E907407}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{72eb61e0-8672-4303-9175-f2e4c68b2e7c}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7312498D-E87A-11d1-81E0-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73257e95-0378-49d6-a954-44aabc841eab}\InprocServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{734AC5AE-68E1-4FB5-B8DA-1D92F7FC6661}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPICMP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73647561-0000-0010-8000-00AA00389B71}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{73843B93-848F-453B-953D-2E5B911429DC}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7390f3d8-0439-4c05-91e3-cf5cb290c3d0}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73959FD1-7360-42F7-807D-622341783DC0}\InProcServer32" = "$homedrive\\Windows\\System32\\AppXDeploymentClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73AD6842-ACE0-45E8-A4DD-8795881A2C2A}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73B7DC00-F498-4ABD-AB79-D07AFD52F395}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\TextMgrP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73baee40-73e1-4d79-b95d-17b46be9ea08}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73BCA54E-6AEB-4597-8F27-E1284FF12722}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73bf00aa-f928-4a23-b598-cd8afb33d717}\InProcServer32" = "$homedrive\\Windows\\system32\\webplatstorageserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73C037E7-E5D9-4954-876A-6DA81D6E5768}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73CFD649-CD48-4fd8-A272-2070EA56526B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73D14237-B9DB-4efa-A6DD-84350421FB2F}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73DA5D04-4347-45D3-A9DC-FAE9DDBE558D}\InprocServer32" = "$homedrive\\Windows\\System32\\Mpeg2Data\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{73EB8142-4A74-49FD-A0FC-05FAEED4CD51}\InprocServer32" = "$homedrive\\Windows\\system32\\AuditNativeSnapIn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{73FB9979-623F-41A6-BF1C-BA817C519C4F}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{740A6AF1-F502-435E-BD8C-235A2749ECA0}\InprocServer32" = "$homedrive\\Windows\\System32\\uwfcsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{740e40d8-5d9f-46be-98dd-39915e3c32ef}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{740EC24D-46AD-4334-A076-41CCC3F8D9B4}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74210DE2-C7E1-42FE-8959-287D5064D433}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGSpeakerPropPage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74246bfc-4c96-11d0-abef-0020af6b0b7a}\InprocServer32" = "$homedrive\\Windows\\System32\\devmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{742AD1FB-B2F0-3681-B4AA-E736A3BCE4E1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{743a6e3b-a5df-43ed-b615-4256add790b8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{743B5D60-628D-11D2-AE0F-006097B01411}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{743F1DC6-5ABA-429F-8BDF-C54D03253DC2}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7444C717-39BF-11D1-8CD9-00C04FC29D45}\InprocServer32" = "$homedrive\\Windows\\system32\\cryptext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7444C719-39BF-11D1-8CD9-00C04FC29D45}\InprocServer32" = "$homedrive\\Windows\\system32\\cryptext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7447A267-0015-42C8-A8F1-FB3B94C68361}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{745057c7-f353-4f2d-a7ee-58434477730e}\InprocServer32" = "$homedrive\\Windows\\System32\\mfwmaaec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7459A610-B47B-4655-B86D-29D04B2755C1}\InProcServer32" = "$homedrive\\Windows\\System32\\provisioningcsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74620884-155F-4B72-A4F0-0FADDBC0721E}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74628299-57EC-4F12-BA1C-08B477BF447A}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7469AE5E-1CA1-4181-970C-BDFD8EAA2C4F}\InProcServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7473b52d-97d9-41bb-ae03-2d3d51eb42b8}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imefiles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74761821-E040-423d-9399-35BBA3ECFFF5}\InProcServer32" = "$homedrive\\Windows\\system32\\daconn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7478EF65-8C46-11d1-8D99-00A0C913CAD4}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7478EF69-8C46-11d1-8D99-00A0C913CAD4}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7478f1a6-c1bb-4a4c-b7d2-6d4cc34dfffd}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74807f67-0058-440d-8600-65541a7fbbea}\InProcServer32" = "$homedrive\\Windows\\System32\\rshx32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7487cd30-f71a-11d0-9ea7-00805f714772}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{748F920F-FB24-4D09-B360-BAF6F199AD6D}\InprocServer32" = "$homedrive\\Windows\\System32\\srmshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{749962AB-D849-46D5-A39C-75A8307C2C86}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74ABD359-DD57-46b2-B459-B8FC803E67D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74b077e8-32de-40ab-be4e-65609f575459}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{74BDD0B9-38D7-3FDA-A67E-D404EE684F24}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{75048700-EF1F-11D0-9888-006097DEACF9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{750fdf10-2a26-11d1-a3ea-080036587f03}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7519A68F-E6F1-422E-B741-F9B960CBAA97}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75207391-23F2-4396-85F0-8FDB879ED0ED}\InProcServer32" = "$homedrive\\Windows\\servicing\\CbsApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75215200-A2FE-30F6-A34B-8F1A1830358E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{752438CB-E941-433F-BCB4-8B7D2329F0C8}\InprocServer32" = "$homedrive\\Windows\\system32\\firewallcontrolpanel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{753EE549-D0D2-4B22-8A49-65B667B747B4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Sensors\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7542E960-79C7-11D1-88F9-0080C7D771BF}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7548A939-2776-46CF-8F62-1D1F488DEDF0}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75587F04-6EFF-443e-BED5-637117299643}\InProcServer32" = "$homedrive\\Windows\\system32\\daconn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{756c119d-9124-4693-80d8-2c1e49afab1f}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{756E6C18-79CC-3842-9E47-7C80011D303A}\InprocServer32" = "mscoree\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75718C9A-F029-11D1-A1AC-00C04FB6C223}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75847177-f077-4171-bd2c-a6bb2164fbd0}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7584c670-2274-4efb-b00b-d6aaba6d3850}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75999EBA-0679-3D43-BDC4-02E4D637F1B1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{75AB852C-0441-46D4-A205-EF0A33F98255}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75BDD7A1-1224-41DA-90B4-457ACD874F12}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75C9378A-7E89-11d2-B116-00805FC73204}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75CA41C9-9F1D-41BC-9285-65595759E52B}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{75FC37F9-423B-483F-8A2E-AA2CADA4106F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Credentials\.UI\.CredentialPicker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7601591E-EEC1-43c9-ACC5-F5EA31C7A364}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidfdp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{760681E7-B985-41CE-BCBE-2985A1DFC61C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7658816D-64C1-4483-B831-DDC4470014B2}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7658F2A2-0A83-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7669CAD6-BDEC-11D1-A6A0-00C04FB9988E}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76765b11-3f95-4af2-ac9d-ea55d8994f1a}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{767EE1f6-2006-43EA-8278-90B37AC8FD02}\InProcServer32" = "$homedrive\\Windows\\System32\\efswrt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7693E886-51C9-4070-8419-9F70738EC8FA}\InprocServer32" = "$homedrive\\Windows\\system32\\mswebp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{769B8B68-64F7-3B61-B744-160A9FCC3216}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76B4FCAC-BB29-11DB-96F1-005056C00008}\InprocServer32" = "$homedrive\\Windows\\System32\\CPFilters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76be8257-c4c0-4d37-90c0-a23372254d27}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76CCA200-8292-4BC5-B400-9265D00C1193}\InProcServer32" = "$homedrive\\Windows\\System32\\SpaceControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76D0CB12-7604-4048-B83C-1005C7DDC503}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76DAE2C2-5444-469F-9B1F-A853A5D565E2}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{76F363F2-7E9F-4ED7-A6A7-EE30351B6628}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{770e8e77-4916-441c-a9a7-b342d0eebc71}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{771B6EF5-30DD-443D-8CC5-E737EB051EEE}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7724F5B4-9A4A-4a93-AD09-B06F7AB31035}\InProcServer32" = "$homedrive\\Windows\\system32\\DAMM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7734DE5F-5567-4C16-81A0-8127AFA4F1FC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGRenderPropPage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7735B86B-2EAB-43EF-B5DE-31A15F767C14}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7751F46E-39B2-4b50-A7E3-23EF598ECD85}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{7757BA9B-7986-4866-B53F-A31E89FCBA15}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77597368-7B15-11D0-A0C2-080036AF3F03}\InprocServer32" = "$homedrive\\Windows\\system32\\printui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7760EF40-2920-44BA-8B47-2D42B1740139}\InProcServer32" = "$homedrive\\Windows\\System32\\MCCSEngineShared\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7763B7C0-A5FD-4AA9-BD1B-58B17137236B}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77646a68-ad14-4d53-897d-7be4dde5f929}\InProcServer32" = "$homedrive\\Windows\\System32\\TempSignedLicenseExchangeTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7775dec3-6a3e-4c57-bac2-4f1774e54b1b}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777B6BBD-2FF2-11D3-88FE-00C04F8EF9B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA815-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA816-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA81A-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA851-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwtpw32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA853-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwtpdui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA87C-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8D2-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8E3-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8E5-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8E7-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8E9-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8F5-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwreg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8F9-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwreg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777BA8FB-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwreg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777D0CFF-0375-43b9-8532-FB04A4903593}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpeffects\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{777F668E-3272-39CD-A8B5-860935A35181}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{778DE47F-7ADC-4C4D-974D-771BD1675DC5}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77963C0E-91BA-479E-9192-686DDA6BB722}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationController\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77A1C827-FCD2-4689-8915-9D613CC5FA3E}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77B6E213-6911-441E-8849-AF63C813D6BE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Lights\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_8\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A70-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A71-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A72-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A73-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A74-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A75-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5A90-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5AA0-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5AA1-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CA5AA2-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77CBBBB7-6CD0-48ED-A02B-52FBB0E43ECD}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77F10CF0-3DB5-4966-B520-B7C54FD35ED6}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77F419AA-771A-45ff-AC66-7567FA3243D3}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{77F7F122-20B0-4117-A2FB-059D1FC88256}\InprocServer32" = "$homedrive\\Windows\\System32\\wpdsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{780102B0-C43B-4876-BC7B-5E9BA5C88794}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78065982-b44b-41c6-a9a3-f2fd11746223}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78103FB7-AED7-4066-8BCD-30BB27B02331}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{782FC20A-81CF-43DE-A625-072155BCD30C}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78317482-5b49-4093-9c34-2758fc63bef0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{784215B4-0D2E-11D3-920A-00C0DF10D434}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{784BD832-A28C-409A-B440-DAC2028CFA5E}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78530B75-61F9-11D2-8CAD-00A024580902}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{786CDB70-1628-44A0-853C-5D340A499137}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78788f3f-e820-4d2f-bf5f-3252c7946aa4}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{787A2D6B-EF66-488D-A303-513C9C75C344}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{7888E5FE-6C66-4A34-B217-FA2292073F4A}\InProcServer32" = "$homedrive\\Windows\\System32\\wmpps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78A1BEBB-AA1D-43ED-9147-42BA274AF66F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Management\.SecureAssessment\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78A51822-51F4-11D0-8F20-00805F2CD064}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78A683B3-A5CE-484D-9559-221D1CB45EC5}\InProcServer32" = "$homedrive\\Windows\\System32\\CleanPCCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78D22140-40CF-303E-BE96-B3AC0407A34D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{78DE489B-7931-4f14-83B4-C56D38AC9FFA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{78fe669a-186e-4108-96e9-77b586c1332f}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79176FB0-B7F2-11CE-97EF-00AA006D2776}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{7924BBA8-1913-4B0E-8E6F-6F45CE499731}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\nlmcim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7931F65C-2564-4C19-AE71-E7DDFA008F6A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{793239d0-2bed-4e9a-a276-0c8bf918c42e}\InProcServer32" = "$homedrive\\Windows\\System32\\UserDeviceRegistration\.Ngc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79376820-07D0-11CF-A24D-0020AFD79767}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7940ACF8-60BA-4213-A7C3-F3B400EE266D}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7945F814-7BFB-4506-A113-2BD66CDC713A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7946ede1-839d-49be-9c1d-27c44529e093}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{794873D1-35DB-44c2-8BD2-F332A433C80E}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79512918-11cd-4f7c-a294-de1ff011a194}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7970614A-BD82-439E-A828-CC96F8E91428}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{797A9BB1-9E49-4e63-AFE1-1B45B9DC8162}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{797B2BFB-AB33-4850-8126-9A07C20FC628}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.LowLevel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{798059F0-89CA-4160-B325-AEB48EFE4F9A}\InprocServer32" = "$homedrive\\Windows\\System32\\mfvdsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79834058-0A20-44dc-AD9B-CE07DC6E379C}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7988B571-EC89-11cf-9C00-00AA00A14F56}\InProcServer32" = "$homedrive\\Windows\\System32\\dskquota\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7988B573-EC89-11cf-9C00-00AA00A14F56}\InProcServer32" = "$homedrive\\Windows\\System32\\dskquoui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7998DC37-D3FE-487C-A60A-7701FCC70CC6}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\repdrvfs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7999FC25-D3C6-11CF-ACAB-00A024A55AEF}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79C43ADB-A429-469F-AA39-2F2B74B75937}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79CEEEBE-BDE0-4C05-9D92-155F78BB7D2B}\InprocServer32" = "$homedrive\\Windows\\system32\\activationclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79DBA461-677B-448A-8A5E-3006DABAF6F9}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79DEA627-A08A-43AC-8EF5-6900B9299126}\InProcServer32" = "$homedrive\\Windows\\system32\\(directmanipulation|Uxtheme)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9d0-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\hlink\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9d1-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\hlink\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9e0-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9e2-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9e3-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9e5-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9e6-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9e7-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79EAC9F1-BAF9-11CE-8C82-00AA004BA90B}\InProcServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79eac9f2-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79EB1402-0AB8-49C0-9E14-A1AE4BA93058}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Sockets\.PushEnabledApplication\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79F8E185-4E45-4B74-8182-02AA430661E4}\InProcServer32" = "$homedrive\\Windows\\System32\\Themes\.SsfDownload\.ScheduledTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{79FD7442-008F-42D9-ADFA-377C441D2DB1}\InprocServer32" = "($homedrive\\Windows\\System32\\wlidcli\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\wlidcli\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A076CE1-4B31-452a-A4F1-0304C8738100}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A0CC021-2939-4379-AA82-12AECC3538F6}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A0F6AB7-ED84-46B6-B47E-02AA159A152B}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A213AA7-866F-414A-8C1A-275C7283A395}\InprocServer32" = "$homedrive\\Windows\\System32\\FsNVSDeviceSource\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7a54bbed-bb9b-425a-8bd7-1a5410923dcf}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A56C4CB-D678-4188-85A8-BA2EF68FA10D}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A63D67D-014E-4f5f-AE9D-CC0C1FE16DAC}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7A80E4A8-8005-11D2-BCF8-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7a836eee-3676-46fb-ba6f-2de2ce38cbb3}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7a872d34-bc6b-4f83-b199-22e9c0a91ddc}\InProcServer32" = "$homedrive\\Windows\\System32\\credprovhost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7aa7790d-75d7-484b-98a1-3913d022091d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AA809F6-C072-11DF-AC23-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AA809F7-C072-11DF-AC23-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AA809F8-C072-11DF-AC23-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AAE5B4F-488C-419b-95E2-923F2AA70FFD}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AB36653-1796-484B-BDFA-E74F1DB7C1DC}\InProcServer32" = "$homedrive\\Windows\\System32\\MsSpellCheckingFacility\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AB549A8-2527-4126-A255-1CC43E1B096E}\InProcServer32" = "$homedrive\\Windows\\system32\\IppCommonProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7abbbcca-e01b-4560-8228-92e1eedbc908}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AD84985-87B4-4a16-BE58-8B72A5B390F7}\InProcServer32" = "($homedrive\\Windows\\System32\\playtomenu\.dll|$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssui\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AE01D6C-BEE7-38F6-9A86-329D8A917803}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AE844F0-ECA8-3F15-AE27-AFA21A2AA6F8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AF4D6DC-F176-4db8-BB59-EB5DAA841844}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AFA253E-F823-42f6-A5D9-714BDE467412}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7afb974e-3842-4106-a702-82a13e088f46}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B014A0C-A42A-4268-BFE0-AFCA9745CD53}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B0C11A0-2FAF-40d4-9FE5-28FA27C85442}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B134486-8B58-4802-A6AE-1A5E708DBCC6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B19A919-A9D6-49E5-BD45-02C34E4E4CD5}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B2801E6-0BC6-4c92-B742-6BE9B01AE874}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B31547E-EF7E-479b-9494-2216DC179E61}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B3BC2A0-AA50-4ae7-BD44-B03649EC87C2}\InprocServer32" = "$homedrive\\Windows\\System32\\WSTPager\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{7b40792d-05ff-44c4-9058-f440c71f17d4}\InprocServer32" = "$homedrive\\Windows\\System32\\tdh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7b4a83b6-f704-4b77-8e3d-c6087e3a21d2}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B5A12E8-0C60-4939-A046-11CF879B19FB}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B769B29-35F0-3BDC-AAE9-E99937F6CDEC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7b81be6a-ce2b-4676-a29e-eb907a5126c5}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B82D688-3B9E-4090-8ECD-FC84E454C923}\InProcServer32" = "$homedrive\\Windows\\System32\\msvproc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7b8a2d94-0ac9-11d1-896c-00c04Fb6bfc4}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7b8a2d95-0ac9-11d1-896c-00c04Fb6bfc4}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B90DAE3-4AD0-4F0D-BE80-A26B296C3156}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7B938A6F-77BF-351C-A712-69483C91115D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7b9e38b0-a97c-11d0-8534-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BA4C740-9E81-11CF-99D3-00AA004AE837}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7bafb3b1-d8f4-4279-9253-27da423108de}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvsdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BB17C5A-3176-4B40-A3F9-39D4A64D7E83}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BC115CD-1EE2-3068-894D-E3D3F7632F40}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BD29E00-76C1-11CF-9DD0-00A0C9034933}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BD29E01-76C1-11CF-9DD0-00A0C9034933}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BD7AB1C-F2C5-60C2-8D00-C2E50336A954}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7be73787-ce71-4b33-b4c8-00d32b54bea8}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7BF2A436-2A30-4797-90EE-0F66B8426D75}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C07E0D0-4418-11D2-9212-00C04FBBBFB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msdaprst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C127AC8-EC8D-40f2-91D0-B791CFC2397B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C22A465-6B21-4132-BA6A-FDABC91A4243}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C23220E-55BB-11D3-8B16-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C28841A-AB97-498e-98C4-F6F143366FBC}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C3269CC-95B0-41C7-BCD7-F96640883669}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C443A25-0ECE-4543-B776-B3BBCF77F007}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C48D08B-0DA5-4BA4-9C6E-4BB65DEB2005}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C50E1E9-DB15-4410-89C5-D27F4B727368}\InprocServer32" = "$homedrive\\Windows\\system32\\CredProvHelper\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C606A3F-8AA8-4E36-92D6-2B6AFEC0B732}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7c61d0a6-af7e-483a-b705-d2c5c2264656}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7c67eb93-8eff-4e48-889f-45ba299bc46f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7c83c056-1d0d-4c8e-a6b0-89e79c213559}\InProcServer32" = "$homedrive\\Windows\\system32\\oobe\\SetupCleanupTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7C92505F-53A4-4D39-B31C-871D82A907DE}\InProcServer32" = "$homedrive\\Windows\\System32\\intl\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{7cacbd7b-0d99-468f-ac33-22e495c0afe5}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7CB359C5-570F-43c6-971F-1DB499EE57A1}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7CCDF9F4-E576-455A-8BC7-F6EC68D6F063}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7cd3c903-d2e9-4a4d-8af3-3025445b24bf}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7CD4F369-6379-4EBB-86D4-87DA8E63CA3B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Store\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7CD6B491-C1A1-4F1C-B36E-A91B011DFADD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D0A1EC2-2196-42D9-BBB2-85BF6FC65D49}\InProcServer32" = "$homedrive\\Windows\\System32\\DesktopSwitcherDataModel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D0E1FD9-E110-45A9-9C24-95E7680D9CB8}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiverExt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D3195FF-A16A-43c3-9E50-E8A0975B234C}\InProcServer32" = "$homedrive\\Windows\\system32\\BthpanContextHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7d39c56f-6075-47c9-9bae-8cf9e531b5f5}\InprocServer32" = "$homedrive\\Windows\\System32\\msflacencoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D47A75E-E79D-4D11-8A11-362F816C04A9}\InProcServer32" = "$homedrive\\Windows\\System32\\MixedRealityRuntime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D4F81CB-1EC8-40B8-BDA4-483462EE62FF}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D559C10-9FE9-11d0-93F7-00AA0059CE02}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D5F3CBA-03DB-4BE5-B4B3-6DBED19A6833}\InprocServer32" = "$homedrive\\Windows\\System32\\storewuauth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D892F85-CC71-48fe-BFF6-72B7BD4F9C27}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7D8AA343-6E63-4663-BE90-6B80F66540A3}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7DB7A939-E5C8-4eaa-B3E0-43CE04CAFFBE}\InProcServer32" = "$homedrive\\Windows\\System32\\sdcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7db875bd-1b88-4c5f-9e4c-ed23eaff24e1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7DE087A5-5DCB-4df7-BB12-0924AD8FBD9A}\InprocServer32" = "$homedrive\\Windows\\System32\\WSMAUTO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{7DED4D39-BE20-4AB6-983A-EB4ADCD9C93D}\InprocServer32" = "$homedrive\\Windows\\System32\\ieapfltr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7df2cfcd-6c09-415a-ae9d-5263f4964cbb}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7DF62B50-6843-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7DF8EF76-D449-485f-B4EB-58DC96B31EDB}\InProcServer32" = "$homedrive\\Windows\\system32\\hgprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E08E268-CD23-4E97-B433-AB31D5BFB6AE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E1A1FA9-EF4F-41E6-8F95-684ED50E039A}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7e320092-596a-41b2-bbeb-175d10504eb6}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvxencd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E3393AB-2AB2-320B-8F6F-EAB6F5CF2CAF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E34AB89-0684-3B86-8A0F-E638EB4E6252}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E37D5E7-263D-45CF-842B-96A95C63E46C}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E3FCEA1-31B4-11D2-AE1F-0080C7337EA1}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E45546F-6D52-4D10-B702-9C2E67232E62}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E48C5CF-72F6-4C84-9F43-B04B87B31243}\InprocServer32" = "$homedrive\\Windows\\System32\\wshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E4A23E2-B969-4761-BE35-1A8CED58E323}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsServices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E53D66F-70CE-41CD-97AF-ECB4FC7D0670}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7e5fe3d9-985f-4908-91f9-ee19f9fd1514}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E66DBEF-2474-4E82-919B-9A855F4C2FE8}\InprocServer32" = "$homedrive\\Windows\\system32\\wscproxystub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E6FA97B-72A8-45F1-A00B-6569192FFF91}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7E8BC44E-AEFF-11D1-89C2-00C04FB6BFC4}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7e99c0a3-f935-11d2-ba96-00c04fb6d0d1}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7EAD5C10-8B3F-11E6-AE22-56B6B6499611}\InProcServer32" = "$homedrive\\Windows\\system32\\bnmanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7EB5FBE4-2100-49E6-8593-17E130122F91}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7ECEAD6D-6452-4DED-B567-7BB9947D7669}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7ED25D63-48E5-4BE3-8539-3040B0B8991C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7EE0A24E-A8C6-46ae-A875-8E7C3D18AEAF}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7EEBC371-4A02-413C-9419-B9DC70382AAD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7EFA68C6-086B-43e1-A2D2-55A113531240}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7efc002a-071f-4ce7-b265-f4b4263d2fd2}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F00FA1E-9820-47B1-9C4F-8701F1432177}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7f065fc8-efc7-4cab-82e0-694a14e910f2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F12E753-FC71-43D7-A51D-92F35977ABB5}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F1899DA-62A6-11D0-A2C6-00C04FD909DD}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F43B400-1A0E-4D57-BBC9-6B0C65F7A889}\InProcServer32" = "$homedrive\\Windows\\system32\\catsrvps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F4F2318-4AF6-432b-B957-B30D0779234E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F6BCBE5-EB30-370B-9F1B-92A6265AFEDD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F71DB2D-1EA0-3CAE-8087-26095F5215E6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F72CC7A-74A0-45B4-909C-14FB8186DD7E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipdfs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F8C7DC5-D8B4-3758-981F-02AF6B42461A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7f8e7858-c362-4c0a-b868-4cdd929da715}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F976B72-4B71-3858-BEE8-8E3A3189A651}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7F9CB14D-48E4-43B6-9346-1AEBC39C64D3}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FA73865-842A-48A4-9C11-827EE31F731D}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FA999A5-502F-4A8B-932E-5C84FD8254AB}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FB1D98A-F895-4761-8DC2-774969C84D10}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPJOBJ\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FD3958D-0A14-3001-8074-0D15EAD7F05C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FE0D935-DDA6-443F-85D0-1CFB58FE41DD}\InProcServer32" = "$homedrive\\Windows\\System32\\certcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FE402D6-B253-28D1-B35F-6189448727C0}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FE87A55-1321-3D9F-8FEF-CD2F5E8AB2E9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7febaf7c-18cf-11d2-993f-00a0c91f3880}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{7FF0997A-1999-4286-A73C-622B8814E7EB}\InprocServer32" = "$homedrive\\Windows\\System32\\encapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80009818-f38f-4af1-87b5-eadab9433e58}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{802B1FB9-056B-4720-B0CC-80D23B71171E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80520d81-f629-4bdb-aede-2563ee56cd56}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{805B7F91-C9CF-4EDF-ACA6-775664FDFB3E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8066FB71-AFA1-343E-8070-44AB4F3F85C9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{806f5b1a-d0db-4a89-94d8-c5712e796f9b}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{807583E5-5146-11D5-A672-00B0D022E945}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\MSOXMLMF\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8078DA75-F43F-341D-A00E-20D6D736415E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{807C1E6C-1D00-453f-B920-B61BB7CDD997}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{807e5a10-4856-4f9a-8e3c-a1f7e75648b3}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8082C5E6-4C27-48ec-A809-B8E1122E8F97}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8097A103-F7BC-4a17-876C-EE8446752464}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8099904b-0b91-4906-a89d-11de2bd8f737}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{809B6661-94C4-49E6-B6EC-3F0F862215AA}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{809fee14-1687-41d3-b333-5c2572c743c5}\InProcServer32" = "$homedrive\\Windows\\system32\\DdcComImplementationsDesktop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80A09B21-11E7-462B-844A-1EB3415BB4A8}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.Compression\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80a90d72-a834-4f3d-ad3b-c7abbe4a0f66}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80BA3813-908F-4D4C-A5FF-263640AD5B7A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80c68d96-366b-11dc-9eaa-00161718cf63}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{80CB8C11-0E10-45F4-A1BA-EAD3838D7034}\InprocServer32" = "$homedrive\\Windows\\System32\\vdsvd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80F94176-FCCC-11D2-B991-00C04F8ECD78}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{80FCA77A-FBCB-4F7D-BC84-547E3F79D618}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81007291-f070-4c4f-b978-ad1bec84babc}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8101368E-CABB-4426-ACFF-96C4108120CD}\InprocServer32" = "$homedrive\\Windows\\System32\\fdPnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{810E402F-056B-11D2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{811F592B-CDE7-4ca4-A6D4-7BB3F60AD8FB}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81218F10-A8AA-44C4-9436-33A42C3852E9}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{812F944A-C5C8-4CD9-B0A6-B3DA802F228D}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8135397C-5C6C-4f6b-8E93-30685615F4EA}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81397204-F51A-4571-8D7B-DC030521AABD}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{814B9800-1C88-11D1-BAD9-00609744111A}\InprocServer32" = "$homedrive\\Windows\\System32\\vbisurf\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{814B9801-1C88-11D1-BAD9-00609744111A}\InprocServer32" = "$homedrive\\Windows\\System32\\vbisurf\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{815509B5-2940-4287-83DD-13EA06E181DD}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8159d2c0-0e05-46b2-a4ce-6d16b477d375}\InprocServer32" = "$homedrive\\Windows\\System32\\emojids\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{815E42F5-B141-45C2-B844-0BDFE9C558E2}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81667C73-F396-44a3-923B-3749C0840A58}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8168e74a-b39f-46d8-adcd-7bed477b80a3}\InprocServer32" = "$homedrive\\Windows\\System32\\MemoryDiagnostic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81796171-DF5F-4F1B-A80C-BE4715D3C6BB}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsreng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{817F98C4-C9D9-4B8F-B8D0-413C8E5DBBB7}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81830747-809f-45dd-82b9-c7d943a4380b}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{819469D2-D0CF-11d1-8E0B-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{819d1334-9d74-4254-9ac8-dc745ebc5386}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{81b43e73-e814-4dcd-a7c6-e22e7fe6a029}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{81BD8EE8-F713-36A5-B7D5-9E92ACB4A18A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{81C5FE01-027C-3E1C-98D5-DA9C9862AA21}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{81E4DE90-AD0A-48C8-BE83-567EB91A0C27}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{81E9DD62-78D5-11D2-B47E-006097B3391B}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{820825FD-1358-4705-8FEB-56B5CEE8BFD5}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82345212-6ACA-4B38-8CD7-BF9DE8ED07BD}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{823535A0-0318-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{823B8267-735C-477E-8151-0FA9ADC8AB3A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{82569ac2-3564-4f80-b3c5-cfd842e40d2d}\InProcServer32" = "$homedrive\\Windows\\System32\\CspProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8278F931-2A3E-11d2-838F-00C04FD918D0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{827b7a93-2c48-433e-b247-8e3be20aab4a}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{827CE1A1-8255-4165-8C83-8379F8C127AE}\InprocServer32" = "$homedrive\\Windows\\System32\\wlangpui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82800303-1F33-402D-B832-052E23E9B7F9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.AccountsControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82b0d8c9-3ecc-4f1c-984c-6a85c1da2244}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82BD0E67-9FEA-4748-8672-D5EFE5B779B0}\InProcServer32" = "$homedrive\\Windows\\system32\\(wincredui|credui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82c588e7-e54b-408c-9f8c-6af9adf6f1e9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82d353df-90bd-4382-8bc2-3f6192b76e34}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdecod\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{82d792e9-8f8c-4f4a-9dbf-06253e4562a8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{83081C08-382C-4ED4-ACCF-DCBECA021010}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{831C89F1-E6AD-47C5-997A-E417B506532F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83267d9b-a70d-469d-bab0-c4e3181209d1}\InprocServer32" = "$homedrive\\Windows\\system32\\srmscan\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8336e323-2e6a-4a04-937c-548f681839b3}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{833A69FB-5E17-4893-85A5-1EF469217372}\InprocServer32" = "$homedrive\\Windows\\system32\\WlanRadioManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83472593-4fe6-4f44-a14c-fc8d4b4ff3f5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{835C38DC-820F-4CDF-ADC1-3A0DAC5A1C6B}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8368958c-a3ec-491f-9b4d-18f3f8287ee2}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{836932DD-FD20-4155-B781-DC3494D06C5A}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8369AB20-56C9-11D0-94E8-00AA0059CE02}\InProcServer32" = "$homedrive\\Windows\\System32\\occache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{836CD085-B3D3-4b5c-BBCB-224F35EB0CCD}\InprocServer32" = "$homedrive\\Windows\\System32\\wpnprv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{836FA1B6-1190-4005-B434-7ED921BE2026}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8373ce97-72b7-4fb2-b5e8-b38aa083d734}\InprocServer32" = "$homedrive\\Windows\\system32\\WinSyncProviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{837A6733-1675-3BC9-BBF8-13889F84DAF4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{838A77A6-14D4-439C-925F-30EE58005026}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8398EE59-134A-420A-934A-D86A7F900D9A}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83B52078-E93E-425B-926F-DE6169875E41}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83B8BCA6-687C-11D0-A405-00AA0060275C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83bb272f-7d5e-4b6e-9250-889893f0dac7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{83bbcbf3-b28a-4919-a5aa-73027445d672}\InProcServer32" = "$homedrive\\Windows\\System32\\wiashext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83BC5EC0-6F2A-11d0-A1C4-00AA00C16E65}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83BF6728-A96E-4228-B442-DB539208D56E}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83C25742-A9F7-49FB-9138-434302C88D07}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MSOSB\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{83d6f579-4a45-439f-994e-7ec23c46b13e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83e05bd5-aec1-4e58-ae50-e819c7296f67}\InProcServer32" = "$homedrive\\Windows\\system32\\iasdatastore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83E94DBF-7F97-46B0-A6F0-360FE982BF83}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{83F18638-2238-4B33-9FF8-24E759ADDC66}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8408B448-06CC-47A0-B482-BDAB666AF557}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceSetupStatusProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{840A0DD9-DC22-4f92-ABCE-894E6D8DCF47}\InProcServer32" = "$homedrive\\Windows\\System32\\remoteaudioendpoint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{840f3a85-dde5-4503-9529-4cfa8e5ca201}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8418E676-926B-4F83-9796-E2EC9C556906}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8421E7A1-1887-42A3-859F-1D8C20814C85}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{842a1268-6e6a-465c-868f-8bc445b9828f}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{842D84C9-C347-11D1-8F64-00C04FB611C7}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84302F97-7F7B-4040-B190-72AC9D18E420}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84465401-2886-4CE0-AF50-C0560226ED40}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv80p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84548587-A7FF-45FD-8FC9-A4E89180B474}\InProcServer32" = "$homedrive\\Windows\\System32\\edpcsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84589833-40D7-36E2-8545-67A92B97C408}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{846225EA-B241-42A7-9D46-A694ECD5A781}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{846727BE-C1B7-4A57-A638-A07264752C50}\InProcServer32" = "$homedrive\\Windows\\System32\\WwaApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84840C72-9913-4D9F-BEE4-447A8A875B82}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\appbackgroundtask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8496e040-af4c-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{849F5497-5C61-4023-8E10-A28F1A8C6A70}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84A3979A-6DD5-4a45-87B9-CBB47E0BF185}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84a3a6bf-f1d8-496e-9f05-d3de70973152}\InprocServer32" = "$homedrive\\Windows\\System32\\WWanHC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32" = "$homedrive\\Users\.*\\GoToMeeting\\.*\\G2MOutlookAddin64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84C050B8-8B00-409C-B752-6AFE92D9B812}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84C22490-C68A-4492-B3A6-3B7CB17FA122}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84CCE1D2-97AD-4448-AF0F-A79164073A60}\InProcServer32" = "$homedrive\\Windows\\System32\\themecpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84D586C4-A423-11D2-B943-00C04F79D22F}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84DE202D-5D95-4764-9014-A46F994CE856}\InprocServer32" = "$homedrive\\Windows\\System32\\AdmTmpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84DE202E-5D95-4764-9014-A46F994CE856}\InprocServer32" = "$homedrive\\Windows\\System32\\AdmTmpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84e04a55-2d42-4909-86e3-62fd11483e8b}\InProcServer32" = "$homedrive\\Windows\\system32\\setupcln\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84E65691-8602-4A84-BE46-708BE9CD4B74}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84EAAE65-2F2E-45F5-9BB5-0E857DC8EB47}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{84f0fae1-c27b-4f6f-807b-28cf6f96287d}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{84F70B6C-D59E-394A-B879-FFCC30DDCAA2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{84FC747A-1940-3D85-8819-EA53FC73DB1B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{85074451-173D-4091-8648-C0E196BB363E}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8509bb76-ffa3-4827-ba5e-2e786010f42f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{850D1D11-70F3-4BE5-9A11-77AA6B2BB201}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{851257E8-47C3-43E6-A937-31731537BDFB}\InprocServer32" = "$homedrive\\Windows\\System32\\DTUHandlerPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85131630-480C-11D2-B1F9-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85131631-480C-11D2-B1F9-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85423CAE-A5E8-4AB4-BC89-D4FC6C283F63}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{854CB94F-2279-4F7F-AC62-31E22E4D8899}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{855fec53-d2e4-4999-9e87-3414e9cf0ff4}\InProcServer32" = "$homedrive\\Windows\\system32\\wdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8570b44e-d109-42d3-be32-0f8d446669c5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8580ca99-925D-4537-959B-B7C9EA45FC01}\InprocServer32" = "$homedrive\\Windows\\system32\\desktopshellext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{858DACA2-78B4-412F-9A4E-315BBB4E1F21}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8596E5F0-0DA5-11D0-BD21-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8598dfba-be26-4209-8582-78189fa271b1}\InProcServer32" = "$homedrive\\Windows\\System32\\srm_ps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{859AC360-A8F0-4d82-BBC7-7E28529FCC46}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85AFC315-CAC7-4475-875B-D7161BA14874}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85B3D708-4313-43F4-959B-829654791E8C}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85cfccaf-2d14-42b6-80b6-f40f65d016e7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85D88658-CFDB-4F51-AD06-4DAC60CB5AFB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{85e94d25-0712-47ed-8cde-b0971177c6a1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8601319a-d7cf-40f3-9025-7f77125453c6}\InprocServer32" = "$homedrive\\Windows\\system32\\sxsstore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{860d36ee-748e-4b73-ae45-c33187e6f166}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\applets\\imjpclst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86151827-E47B-45ee-8421-D10E6E690979}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86193C76-0DCA-4B33-83CA-6D7DCCA48D0B}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{862321c3-70b2-4ee2-8231-87ec05819d98}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{863aa9fd-42df-457b-8e4d-0de1b8015c60}\InProcServer32" = "$homedrive\\Windows\\system32\\prnfldr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{863FA3AC-9D97-4560-9587-7FA58727608B}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86422020-42A0-1069-A2E5-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{864A1288-354C-4D19-9D68-C2742BB14997}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{864A9449-05B7-4A4F-B2FB-7CBACA74A5B1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.UI\.Logon\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8652CE55-9E80-11D1-9053-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{865ab07b-1c8e-48c0-b9a7-fa6c5ff48f7b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8664DA16-DDA2-42AC-926A-C18F9127C302}\InProcServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8670C736-F614-427b-8ADA-BBADC587194B}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8685C4A9-D0E4-444C-87A0-D9FB858235A7}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86bec222-30f2-47e0-9f25-60d11cd75c28}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86c14003-4d6b-4ef3-a7b4-0506663b2e68}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86c815aa-4888-4063-b0ab-03c49f788be4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86C86720-42A0-1069-A2E8-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{86d5eb8a-859f-4c7b-a76b-2bd819b7a850}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86EB3FD8-E142-4f3d-B3D3-5D8F41097D58}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86F56B7F-A81B-478d-B231-50FD37CBE761}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{86F80216-5DD6-4F43-953B-35EF40A35AEE}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{86FFEF81-E868-46F8-ACC2-290C2D8C3659}\InProcServer32" = "$homedrive\\Windows\\System32\\DuCsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87099231-C7AF-11D0-B225-00C04FB6C2F5}\InprocServer32" = "$homedrive\\Windows\\System32\\fxscom\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{870AF99C-171D-4f9e-AF0D-E63DF40C2BC9}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8711FA7E-7548-486F-A691-7716BBA5601D}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87123A30-0975-417D-9457-10066C5B69C3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{871463A8-6A0B-40A6-AF6E-FE733CAA1768}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87170aa7-42d4-4999-8537-49e3d4ae0767}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Streaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{872f8dc8-dde4-43bd-ac7a-e3d9fe86ceac}\InProcServer32" = "$homedrive\\Windows\\System32\\SystemResetPlatform\\SystemResetSSO\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{874131cb-4ecc-443b-8948-746b89595d20}\InprocServer32" = "$homedrive\\Windows\\System32\\WMSPDMOD\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8754DA31-5CF5-49c7-BDCF-C03045DA5A09}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87630419-6216-4ff8-a1f0-143562d16d5c}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8770D941-A63A-4671-A375-2855A18EBA73}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{877A0BB7-A313-4491-87B5-2E6D0594F520}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{877ca5ac-cb41-4842-9c69-9136e42d47e2}\InprocServer32" = "$homedrive\\Windows\\system32\\sdshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{877E4351-6FEA-11D0-B863-00AA00A216A1}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{8787dae2-d998-4ff4-a5d3-1d5fc4057c1c}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\VSPerfCollectionTools\\vs2022\\x64\\VSPerfCorProf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{878EC44B-7E5A-4e88-B688-7138196240C7}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{879fb53b-cba3-4fc8-b233-d9a93afa7fbc}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87A45ECB-6B91-4207-8C2A-8F5136B4495A}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.LockScreen\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87AB8051-37BD-4e70-83C0-1E4F9AE1D37D}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87BB326B-E4A0-4de1-94F0-B9F41D0C6059}\InprocServer32" = "$homedrive\\Windows\\system32\\eapp3hst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87C8BA99-B13E-4BAE-87EE-E14A13172B26}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintWSDAHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87CB4E0D-2E2F-4235-BC0A-7C62308011F6}\InProcServer32" = "$homedrive\\Windows\\system32\\defragproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87CDE238-C2D9-4E31-99D7-DCD6A7E15F19}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87D5FBE0-B972-450B-A488-5FE6347B45C8}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{87FC0268-9A55-4360-95AA-004A1D9DE26C}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88004A5C-CEAC-41b9-A7A8-D5E166D32ACF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{880ac964-2e34-4425-8cf2-86ada2c3a019}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{882BC1E4-C79E-475D-8CC7-CC8D112FDB17}\InProcServer32" = "$homedrive\\Windows\\System32\\RMSRoamingSecurity\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{883373C3-BF89-11D1-BE35-080036B11A03}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8833BC41-DC6B-34B9-A799-682D2554F02F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8839A1BA-6D01-4525-98EB-723C628320F0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}\InprocServer32" = "$homedrive\\Windows\\system32\\srcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8841d728-1a76-4682-bb6f-a9ea53b4b3ba}\InProcServer32" = "$homedrive\\Windows\\System32\\keymgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88445657-4A4E-4949-8FED-72B831C7C662}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884CFF4F-0BB0-4CAA-83BD-4FB9ECE938FA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2000-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2001-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2002-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2003-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2007-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2008-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2009-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e200b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e200c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e200d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e200e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e200f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2010-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2011-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2012-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2013-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2014-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2015-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2016-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2017-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2018-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2019-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e201a-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e201b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e201c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e201d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e201e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e201f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2020-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2021-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2022-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2023-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2024-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2025-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2026-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2027-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2028-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e202a-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e202b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e202c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e202d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e202e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e202f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2030-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2031-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2032-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2033-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2034-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2036-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2037-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2038-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2039-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e203a-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e203b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e203d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e203f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2042-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2043-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2044-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2045-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2046-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e204c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2051-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e205e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e205f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2060-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2061-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{884e2062-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8854F6A0-4683-4AE7-9191-752FE64612C3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\Inkdiv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8856918E-74C7-431C-B63D-3A5FDCC6AC08}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\MsDtcWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{885735DA-EFA7-4042-B9BC-195BDFA8B7E7}\InProcServer32" = "$homedrive\\Windows\\System32\\AzureSettingSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{886D29DD-B506-466B-9FBF-B44FF383FB3F}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8872FF1B-98FA-4D7A-8D93-C9F1055F85BB}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8874E3B6-1898-4F93-84A1-8055D295617B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88753B26-5B24-49bd-B2E7-0C445C78C982}\InProcServer32" = "$homedrive\\Windows\\System32\\msvproc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88866959-07B0-4ED8-8EF5-54BC7443D28C}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{889900c3-59f3-4c2f-ae21-a409ea01e605}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88B02583-527D-43fa-B2C3-7A4C93D37C94}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88C0DC64-E224-46E1-80A9-A5582A01BD70}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88c524ca-551b-4c01-9a42-cdb16b745291}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88C6C381-2E85-11D0-94DE-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\occache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88C8A919-EB24-3CCA-84F7-2EA82BB3F3ED}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{88D042C8-EAC5-4F86-85D1-F4446AAFE1D4}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\hidpp_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LGHppFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a05-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a06-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a07-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a08-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a09-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a0a-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a0b-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a0c-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a0e-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a0f-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a10-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88d96a11-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}\InProcServer32" = "$homedrive\\Windows\\System32\\fde\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88EEBD3A-9091-44b8-92A7-F0D595422D90}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{88FC94D1-2ABB-42CF-8A07-4BC54F66EDDF}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{890CB943-D715-401B-98B1-CF82DCF36D7C}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\vdswmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8929fd8a-3967-4896-a02d-f126195af6f7}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{894132FE-635E-4F2F-B7AC-BB081636B1DB}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicesFlowBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{894BF76C-115F-44B7-9B32-ABFA7E6A804A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{896664F7-12E1-490f-8782-C0835AFD98FC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{896C2B1D-3586-4FA5-B419-41F4A6D38CF1}\InProcServer32" = "$homedrive\\Windows\\system32\\SyncInfrastructure\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8973b4ef-7da5-4031-a333-f65609a4dcf4}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{898F8BC2-C6E3-4CD7-B04A-72E5B490B4C6}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89917B7C-A1A6-11DF-8BF6-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhtask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89A0CBA3-F995-48BA-A751-F27D64BEE9E7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89A86E7B-C229-4008-9BAA-2F5C8411D7E0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{89AA9BF2-38EE-4444-8AE5-8CA90AAC64F6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89B53798-9A96-4758-9571-93B72CAA5381}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvvitvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89BCC804-53A5-3EB2-A342-6282CC410260}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{89C2E132-C29B-11DB-96FA-005056C00008}\InprocServer32" = "$homedrive\\Windows\\System32\\CPFilters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89d1d0c2-a3cf-490c-abe3-b86cde34b047}\InprocServer32" = "$homedrive\\Windows\\System32\\ReAgentTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89D26277-8408-3FC8-BD44-CF5F0E614C82}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{89D83576-6BD1-4c86-9454-BEB04E94C819}\InprocServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89dc1cf7-97b5-4389-a6af-c08fb4d5a408}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89EA5B5A-D01C-4560-A874-9FC92AFB0EFA}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{89F2B8EB-AEDA-4057-A05B-A7D6181B63C6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Core\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A01C400-A3E0-4F8D-A933-FF780F22BD87}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A03567A-63CB-4BA8-BAF6-52119816D1EF}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A03E749-672E-446E-BF1F-2C11D233B6FF}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A0A83A7-7A6D-48D6-8F3D-9029D8A76E06}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A11B5FA-3C92-4E8B-8382-3C71B757D679}\InprocServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A1A8BB1-242F-431A-9F5B-254BA754631C}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A22069C-1EF7-45D2-A409-219540D00A76}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A23E65E-31C2-11d0-891C-00A024AB2DBB}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A3E2E1E-A40B-4650-9FB4-30072A68E661}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A3FD229-B2A9-347F-93D2-87F3B7F92753}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A44FFB7-8140-432F-BEC5-1B5FF725BAC8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A4D840D-AB27-4c8f-AB9C-765CA85C73B7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A667154-F9CB-11D2-AD8A-0060B0575ABC}\InProcServer32" = "$homedrive\\Windows\\System32\\dswave\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A674B49-1F63-11D3-B64C-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A674B4C-1F63-11D3-B64C-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A674B4D-1F63-11D3-B64C-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A6842BB-84DB-4EFA-99B9-06C850DF53FC}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8a696d12-576b-422e-9712-01b9dd84b446}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\MpProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8a7cae0e-5951-49cb-bf20-ab3fa1e44b01}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A89CB2C-1ED0-4709-A39C-FC34115DD660}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A9263D3-FD4C-4EDA-9B28-30132A4D4E3C}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A95E9F1-1C07-4711-8DDA-10A35B26271E}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A99553A-7971-4445-93B5-AAA43D1433C5}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8A9B1CDD-FCD7-419c-8B44-42FD17DB1887}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8AA829D6-E867-492A-8AB7-7363E4859BA9}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcIsoCtnr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ac3587a-4ae7-42d8-99e0-0a6013eef90f}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8AC838A3-44C0-4015-A95E-CCAB02A3CFE2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8AD5CECD-DF0D-41C3-BA21-1E22114CC73C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ADBB9D2-2107-4044-9B63-0488124AD2F6}\InProcServer32" = "$homedrive\\Windows\\System32\\TetheringConfigSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ADD018C-5C5F-43C5-BE1E-07BAE85593B7}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ADE5386-8E9B-4F4C-ACF2-F0008706B238}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8AE0163F-EDDD-4B0A-9C61-F7DD8B6137AE}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8AE85776-D1E6-4043-A94C-1529D0E26E41}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8aeff2c9-c97f-47b6-b27c-bd5969fe94d0}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8AF662BF-65A0-4D0A-A540-A338A999D36F}\InprocServer32" = "$homedrive\\Windows\\System32\\FaceCredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8b08efa2-bf11-4fa3-bbb4-655fb37c4fad}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8B19C1CD-C80C-4AEC-AAE2-4E39FEDD24D0}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\MDMSettingsProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8b1f4c40-9d24-4427-b9fa-cc4388492394}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Custom\.PS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8b20cd60-0f29-11cf-abc4-02608c9e7553}\InprocServer32" = "$homedrive\\Windows\\system32\\adsnt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8b40abb8-6c65-465a-8c4b-26224df3125f}\InprocServer32" = "$homedrive\\Windows\\System32\\(Windows\.Data\.Pdf|glcndFilter)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8B7FBFE0-5CD7-494a-AF8C-283A65707506}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8B918B82-7985-4C24-89DF-C33AD2BBFBCD}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BB37D52-EB34-4A69-A013-DE72CF54EBE2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_4\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BD21D10-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BD21D20-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BD21D30-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BD21D40-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BD21D50-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BD21D60-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BDCE735-A077-406B-B526-F1465DD4D35C}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BE38B01-5124-478D-BF64-B487D2FC79C0}\InProcServer32" = "$homedrive\\Windows\\system32\\peopleband\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8be9f5ea-e746-4e47-ad57-3fb191ca1eed}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8bf9a910-a8ff-457f-999f-a5ca10b4a885}\InProcServer32" = "($homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll|SmartcardCredentialProvider\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8bfc4ca2-441f-4a4f-9891-4e6a6d5d2745}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C0A1AC2-C6B3-447D-B971-35204B263972}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C1425C9-A7D3-35CD-8248-928CA52AD49B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C1645B0-9864-465E-BE75-990B030E4B11}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C19ADE1-A894-4f78-BCB1-854A1464E442}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C1C28BE-1ADC-4C83-82F9-B1670FB9D04B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv90p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8c2031f1-b169-4e7c-9cb0-56f18d7b0c01}\InprocServer32" = "$homedrive\\Windows\\System32\\iasrecst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C334A55-DDB9-491c-817E-35A6B85D2ECB}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C38232E-3A45-4A27-92B0-1A16A975F669}\InprocServer32" = "$homedrive\\Windows\\System32\\wscapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C40D44A-4EDE-3760-9B61-50255056D3C7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8c4fb173-81ae-4399-9208-591a574a893f}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8c4fb175-81ae-4399-9208-591a574a893f}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanconn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8c537469-1ea9-4c85-9947-7e418500cdd4}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C60ACD5-B217-49D1-97E7-DF350C818CD7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8c7eaf13-fbd6-4ed8-ac79-fb12fcd71326}\InprocServer32" = "$homedrive\\Windows\\System32\\sdengin2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C836AF9-FFAC-11D0-8ED4-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comrepl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8C89071F-452E-4E95-9682-9D1024627172}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8CC06626-FE29-4742-8F2D-08826B923497}\InprocServer32" = "$homedrive\\Windows\\System32\\ihds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8CD3AEA5-4B3B-4DE1-93EE-42BF9137194F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8cdabae1-71ef-4634-8a92-2100a5eb638f}\InProcServer32" = "$homedrive\\Windows\\System32\\bcp47langs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8cec58e7-07a1-11d9-b15e-000d56bfe6ee}\InprocServer32" = "$homedrive\\Windows\\System32\\HelpPaneProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8CF89BCB-394C-49b2-AE28-A59DD4ED7F68}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D008BF5-038F-4D3D-A6F3-64CF62462D7E}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D04238E-9FD1-41C6-8DE3-9E1EE309E935}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8d14113b-5715-4714-8a20-69fc343626de}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D1C559D-84F0-4BB3-A7D5-56A7435A9BA6}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8d1e5d4b-a99c-4408-b0f0-ccab9e5835a1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D36569B-14D6-3C3D-B55C-9D02A45BFC3D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D4D57E0-071A-42C7-A00A-14B3A91BE68F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Streaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D4F994C-EBBE-4F8D-BA4B-AE20CD36E72D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D750ED5-F41E-4DD0-BF17-B1A53741BB5B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D759BEE-4828-47ad-9B19-F873D5E0F945}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobewirelessplugin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8d80504a-0826-40c5-97e1-ebc68f953792}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8D9945C3-A621-4F52-8641-6D8B755F42E2}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DA6DB1C-8114-40c6-9D97-D2E7E9757D67}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DB0224B-3D65-4F6F-8E12-BEB4B78B8974}\InprocServer32" = "$homedrive\\Windows\\System32\\mfnetsrc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DB2180F-BD29-11D1-8B7E-00C04FD7A924}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DBEF13F-1948-4AA8-8CF0-048EEBED95D8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DDA2943-4787-4B48-9336-CAE6746DF276}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DE39096-D24E-4DF3-B24B-1B7F770BF799}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8DE9C74C-605A-4acd-BEE3-2B222AA2D23D}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E3A359F-559A-4b6a-98A9-1690A6100ED7}\InprocServer32" = "$homedrive\\Windows\\System32\\vmserial\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E4062D9-FE1B-4b9e-AA16-5E8EEF68F48E}\InprocServer32" = "$homedrive\\Windows\\System32\\RegCtrl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E528C21-9D52-4030-BA92-3481227ADDD1}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E585CE0-F0EB-4F2E-BDC6-6B69806291C8}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E67B5C5-BAD3-4263-9F80-F769D50884F7}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E6E6079-0CB7-11d2-8F10-0000F87ABD16}\InprocServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E757038-BE02-4bce-9680-E4BE0C6C70CD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E7C2AFB-72B9-415C-9AC2-5037693309B7}\InProcServer32" = "$homedrive\\Windows\\System32\\InputCloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8e827c11-33e7-4bc1-b242-8cd9a1c2b304}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8e85d0ce-deaf-4ea1-9410-fd1a2105ceb5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E871B70-0F3D-4605-8919-89A7ACBA199C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8e87e7b8-896b-4e67-bfa2-45c67d60ac3a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E8F1601-AE98-3DAC-B48B-EC27C95A481E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E974B5A-A286-37DA-94F8-5872C500EB0E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8E989135-2736-4767-8160-EA3613F69D24}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ea134cb-1567-4f90-a6d0-7ecbb2ac3f85}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Diagnostics\.Telemetry\.PlatformTelemetryClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8EB9BA6E-CEED-4D06-B7F6-EA6047221299}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ECD4EAD-0970-47E2-A035-7147F68FA986}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8ED392B6-23C2-4C3C-9126-D12D6BE621FD}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8EE97210-FD1F-4b19-91DA-67914005F020}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F22970F-2910-4baf-9B34-396F18318C17}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8f3080a6-af99-4f2e-a806-f3d5702a0444}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F45C7FF-1E6E-34C1-A7CC-260985392A05}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F60C6E5-0436-4B12-B53E-CA259BBD8868}\InProcServer32" = "$homedrive\\Windows\\System32\\ContactApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F6D198C-E66F-3A87-AA3F-F885DD09EA13}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F70DED9-9E4E-4CD1-8547-C83666D055E3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F7D49DF-F271-4913-8A85-F73ACCE31138}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8F914656-9D0A-4EB2-9019-0BF96D8A9EE6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FA0D5A8-DEDF-11D0-9A61-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FADC6A8-183E-4DFC-944A-84A323334B98}\InprocServer32" = "$homedrive\\Windows\\System32\\findnetprinters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FC87FFF-7B63-45D9-8FB7-8C26FECA7DC3}\InprocServer32" = "$homedrive\\Windows\\System32\\ContactHarvesterDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FD730C1-DD1B-3694-84A1-8CE7159E266B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FD7E19C-3BF7-489B-A72C-846AB3678C96}\InProcServer32" = "$homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FE3AA4C-4FFF-11E0-9EAE-3586DFD72085}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FF711AE-1954-4f87-B94B-3D8C4C50CAE4}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{8FFE37E7-DDD3-434A-9DEB-1202D1BE31F7}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90087284-d6d6-11d0-8353-00a0c90640bf}\InprocServer32" = "$homedrive\\Windows\\System32\\devmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{900be39d-6be8-461a-bc4d-b0fa71f5ecb1}\InprocServer32" = "$homedrive\\Windows\\System32\\wdi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{900c0763-5cad-4a34-bc1f-40cd513679d5}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{900D45EE-BF25-4DC6-AA92-683E9E932FC2}\InProcServer32" = "$homedrive\\Windows\\System32\\QuietHours\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{901F6B1C-2FC6-4C28-BC8A-86C82765E96B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90511715-D0AD-4DAA-A18B-254BD3AE1CF2}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9052FC30-F3B5-49F7-91DB-9E78A2AB3900}\InProcServer32" = "$homedrive\\Windows\\System32\\SpaceControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9053699F-A341-429D-9E90-EE437CF80C73}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{905667aa-acd6-11d2-8080-00805f6596d2}\InProcServer32" = "$homedrive\\Windows\\System32\\wiashext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9059f30f-4eb1-4bd2-9fdc-36f43a218f4a}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{905b55a8-77f0-4d28-80dd-e46b1412343f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{90660ACD-45E4-4AE2-B291-B74BA8E08D40}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnRanker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90903716-2F42-11D3-9C26-00C04F8EF87C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90954C68-4D60-4023-A1F8-C6AF6F62E1C8}\InProcServer32" = "$homedrive\\Windows\\System32\\netcenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{90AE59CE-C67A-492B-A4DE-78A6EA95AF68}\InprocServer32" = "$homedrive\\Windows\\system32\\wpnuserservice\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90B584D3-72AA-400F-9767-CAD866A5A2D8}\InProcServer32" = "$homedrive\\Windows\\system32\\ddp_ps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90b9bce2-b6db-4fd3-8451-35917ea1081b}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90BA30DD-785C-4186-9F44-B7D2EA994EA5}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90bd963c-925a-4628-b905-fa122a1890a6}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90BE9587-37b7-477C-81A7-BA7C5C40FF81}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90C69BBB-7F1D-4833-AF4E-87A7E5C4288B}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\Shared\\JpnKorRoaming\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{90ED9FAA-A6E5-4671-8E50-1C060F8B9C47}\InprocServer32" = "$homedrive\\Windows\\servicing\\wrpintapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{90F1A06E-7712-4762-86B5-7A5EBA6BDB01}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{90F1A06E-7712-4762-86B5-7A5EBA6BDB02}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{90f8c90b-04e0-4e92-a186-e6e9c125d664}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InProcServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91145a83-a6c3-4181-89ff-8365f096f90d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9127081a-04b5-4044-b4c5-c7a9718e8795}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{912A4CBA-0401-4631-91CF-5DDD3E3D6829}\InprocServer32" = "$homedrive\\Windows\\System32\\DDDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{912D9D84-DC73-48FA-8BD8-5315DE4B8FA8}\InProcServer32" = "$homedrive\\Windows\\System32\\EmailApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91363F1E-E7CA-4959-85D6-963719EC79FC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{913a6daa-57ee-4551-9ada-64d329d306a5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{914feed8-267a-4baa-b8aa-21e233792679}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{91591469-EFEF-3D63-90F9-88520F0AA1EF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9173D971-B142-38A5-8488-D10A9DCF71B0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9173e885-d54f-464a-8d04-86440a1246d3}\InProcServer32" = "$homedrive\\Windows\\System32\\ploptin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{917BD8CB-3BB6-4124-9383-B7D21AC07F79}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9185F743-1143-4C28-86B5-BFF14F20E5C8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91888BF6-FED1-4acd-9CB1-6C2F80AE58A3}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9193A8F9-0CBA-400E-AA97-EB4709164576}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9197e04d-2b9f-4849-8bf7-75294eb5c043}\InprocServer32" = "$homedrive\\Windows\\System32\\umb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91ECFDB4-2606-43E4-8F86-E25B0CB01F1E}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91EF7526-96DB-489D-8F61-53E2B4DC4039}\InProcServer32" = "$homedrive\\Windows\\System32\\easconsent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91f39028-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91f39029-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91f3902a-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{91F672A3-6B82-3E04-B2D7-BAC5D6676609}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9200689A-F979-4eea-8830-0E1D6B74821F}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92038079-b9ef-428f-87f0-0463fcb1272a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9203C2CB-1DC1-482D-967E-597AFF270F0D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9207d8c7-e7c8-412e-87f8-2e61171bd291}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9209B7D1-6DA5-43E4-BCD1-F2BE497635E7}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpendp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2600-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2601-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2602-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2603-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2604-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2605-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2606-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2607-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2608-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2609-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B260A-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B260B-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B260C-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B260D-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B260E-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B260F-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{920B2610-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{92187326-72B4-11d0-A1AC-0000F8026977}\InprocServer32" = "$homedrive\\Windows\\System32\\gcdef\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92192FD8-C1CB-434B-A8E8-B7F3AC424EE4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92337A8C-E11D-11D0-BE48-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92396AD0-68F5-11d0-A57E-00A0C9138C66}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadrh15\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{923B6A38-CA24-4FB7-8914-DD55838B30E1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.SharedPC\.CredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92498132-4D1A-4297-9B78-9E2E4BA99C07}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssci\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{924ccc1b-6562-4c85-8657-d177925222b6}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll|$homedrive\\Program Files( \(x86\))?\\Windows Sidebar\\sbdrop\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9252D922-D666-478A-9770-7C0C63BC2692}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9264B7DC-A82F-4AFD-89C8-4F399DA7B028}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{926749fa-2615-4987-8845-c33e65f2b957}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{926b23ab-fd60-43f1-8f63-b24cabdf5316}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{926f41f7-003e-4382-9e84-9e953be10562}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9271B890-7BBF-48DB-ACB3-F973DC34156D}\InProcServer32" = "$homedrive\\Windows\\System32\\rasdlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92755472-2059-3F96-8938-8AC767B5187B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{927907E5-A066-4b07-BD4F-F53C7B748124}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{927971f5-0939-11d1-8be1-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{927ea2af-1c54-43d5-825e-0074ce028eee}\InprocServer32" = "$homedrive\\Windows\\System32\\energytask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9280E842-F931-4D24-B074-739FB4DA43F4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{928A906F-EADB-4EE2-8961-FE734AF257D1}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92A5010F-4404-4035-8D53-B87F5A736809}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92A8CCF5-2725-4E95-9264-74FAB86FBBCA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92ab5af7-a374-417e-b2e2-9b317353a322}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{92ad68ab-17e0-11d1-b230-00c04fb9473f}\InprocServer32" = "$homedrive\\Windows\\system32\\stclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92b66080-5e2d-449e-90c4-c41f268e5514}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92B94828-1AF7-4e6e-9EBF-770657F77AF5}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92BC73D8-9313-42CC-8C1B-FCF94ED2C7B4}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92BF3D3E-E9D0-48a7-A459-98992E92A96B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92c85649-0892-4bc7-9b63-949f64149a26}\InprocServer32" = "$homedrive\\Windows\\System32\\setup\\pbkmigr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92CC85F4-ACA4-4D72-94C8-49D1CAD0985F}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92D2CC58-4386-45a3-B98C-7E0CE64A4117}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92dbad9f-5025-49b0-9078-2d78f935e341}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{92E76A74-2622-3AA9-A3CA-1AE8BD7BC4A8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{92ED88BF-879E-448f-B6B6-A385BCEB846D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9301E380-1F22-11D3-8226-D2FA76255D47}\InProcServer32" = "$homedrive\\Windows\\System32\\dmloader\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9305969B-F45F-47e5-A954-6EA879E874CC}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93073C40-0BA5-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9311A763-D284-4CE5-B2AA-6A99D9305D60}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9317AE81-BCD8-47B7-AAA1-A28062E41C71}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\IntelliTrace\\ProfilerProxy\\amd64\\Microsoft\.IntelliTrace\.ProfilerProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9324DA94-50EC-4A14-A770-E90CA03E7C8F}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93412589-74D4-4E4E-AD0E-E0CB621440FD}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9343812e-1c37-4a49-a12e-4b2d810d956b}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93443EB9-3F77-4DBE-84A2-D8467C1DD847}\InProcServer32" = "$homedrive\\Windows\\System32\\RemovableMediaProvisioningPlugin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93445657-12CA-4B80-AB18-9996D7293EC6}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{934A7048-1E4A-4D6E-9A9A-CB739F519B07}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{934A9523-A3CA-4BC5-ADA0-D6D95D979421}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{934b410c-43e4-415e-9935-fbc081ba93a9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{934D4698-6A59-48f8-9F29-9FB30670320E}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{935249A5-B5E8-43F6-A991-61435E5954B3}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9357ffb2-0013-4c8e-9501-8e4e26f647d5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Background\.SystemEventsBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93714ED0-53F0-11D2-9EE6-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{937847E7-C78A-4834-9CE8-5F3EC99BD604}\InProcServer32" = "$homedrive\\Windows\\system32\\AuthExt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{937C1A34-151D-4610-9CA6-A8CC9BDB5D83}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9381AF33-66A3-4D5A-8AF2-9515B1DC19A5}\InProcServer32" = "$homedrive\\Windows\\System32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9394EA54-BA1B-4CE7-B2E5-E28067460B93}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{5CFC7AAA-B618-4CE5-B425-82AF695B1BA3}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{939D20AC-8036-406F-BD5C-BF672896BD71}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93A094D7-51E8-485b-904A-8D6B97DC6B39}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93a56381-e0cd-485a-b60e-67819e12f81b}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93AAD2A0-036A-4B11-A078-DA8776B38139}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.datatransfer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93AC9CB8-27D5-4482-BFDF-68F21C7454A3}\InProcServer32" = "$homedrive\\Windows\\system32\\mscandui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93AF0C51-2275-45D2-A35B-F2BA21CAED00}\InprocServer32" = "$homedrive\\Windows\\System32\\mfAACEnc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93C063B0-68CB-4DE7-B032-8F56C1D2E99D}\InprocServer32" = "$homedrive\\Windows\\System32\\MMDevApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93CB110F-9189-4349-BD9F-392D9A4D0096}\InProcServer32" = "$homedrive\\Windows\\System32\\accessibilitycpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93cf36dd-dc00-499c-8477-7cbe51501a15}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{93D11DE9-5F6C-354A-A7C5-16CCCA64A9B8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{93F551D6-2F9E-301B-BE63-85AEF508CAE0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{941b8883-7f97-4389-9c66-49630c5ba2a9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Signals\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{941C53C2-D2D7-4C74-84EA-28F8F6438D4B}\InProcServer32" = "$homedrive\\Windows\\System32\\mbaeapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94297043-BD82-4DFD-B0DE-8177739C6D20}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{942A8E4F-A261-11D1-A760-00C04FB9603F}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{942B7909-A28E-49a1-A207-34EBCBCB4B3B}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{942bc614-676c-464e-b384-d3202aaa02da}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9432194C-DF54-4824-8E24-B013BF2B90E3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{94357B53-CA29-4b78-83AE-E8FE7409134F}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{943FD346-D23E-42F3-8859-67F05CE92021}\InProcServer32" = "$homedrive\\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9440861a-25ca-4bc2-833e-866a6191d110}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9440F424-33D8-4114-BC6E-033867239A09}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94426DE2-3211-11d2-A0DB-00C04F8EDCEE}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{944D4C00-DD52-11CE-BF0E-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9456A480-E88B-43EA-9E73-0B2D9B71B1CA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94596c7e-3744-41ce-893e-bbf09122f76a}\InProcServer32" = "($homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll|SmartcardCredentialProvider\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{947812B3-2AE1-4644-BA86-9E90DED7EC91}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{948B45F7-EFB8-46fb-8704-B340D847227A}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{948CFD8C-1888-4E52-8703-99610347EBB6}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94971F89-D2EB-44ED-A217-A9BF27B74B65}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{949CAC9A-8ED9-42B5-9BB8-637D43127E5D}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94a909a5-6f52-11d1-8c18-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94AB5C27-C954-4218-B0A1-29640412EFBE}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94abaf2a-892a-11d1-bbc4-00a0c90640bf}\InprocServer32" = "$homedrive\\Windows\\System32\\devmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94B23D4D-1040-4C4B-9081-85D8D6FA36C4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94C00EC1-6E51-447A-87FA-8DF83767C155}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9diag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94d86820-3128-41cd-be63-5e7bbd96a958}\InprocServer32" = "$homedrive\\Windows\\system32\\ttlscfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94E7F5BD-FC4F-446C-93D2-3942E8FE34C9}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{94FBC195-CB86-4142-9A6A-8E9CCF0D4F4D}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9546306B-1B68-33AF-80DB-3A9206501515}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{95688ffa-250d-49bd-b40a-8ed3a8ef4c8e}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{956FADED-2450-4ABB-9F8C-4629FAFEBB92}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{958A1709-3B44-11D1-AD74-00C04FC2ADC0}\InprocServer32" = "$homedrive\\Windows\\system32\\txflog\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{958a6fb5-dcb2-4faf-aafd-7fb054ad1a3b}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95A24F08-5D9A-46F4-8B35-F9905397C741}\InProcServer32" = "$homedrive\\Windows\\system32\\spool\\drivers\\x64\\3\\PrintConfig\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95B01D73-A5FA-4DA1-91C4-935F1AB7763E}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicesFlowBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95B4ABA8-6D5B-4F99-9A9D-4A5EF4C75AFD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95BD18C1-D7FB-4BD3-839A-1C37C90131B1}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95CABCC9-BC57-4C12-B8DF-BA193232AA01}\InProcServer32" = "$homedrive\\Windows\\System32\\vaultcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95CE8412-7027-11D1-B879-006008059382}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{95D9BDD0-D1EE-4605-98A2-5551EA3FB39A}\InProcServer32" = "$homedrive\\Windows\\System32\\uimanagerbrokerps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32" = "$homedrive\\Windows\\System32\\OneCoreUAPCommonProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95F39BD0-A301-49BF-B80C-017F5616B26A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{95FEE196-49F0-4C30-B16C-22C7B75C18EC}\InprocServer32" = "$homedrive\\Windows\\System32\\mfksproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{960005AE-F0A9-4DDB-982D-7C97671650B1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.EnrollmentStatusTracking\.ConfigProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{960CE120-E284-45CE-83BC-A15B2EEE3DE8}\InprocServer32" = "$homedrive\\Windows\\System32\\ContactHarvesterDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96236A71-9DBC-11DA-9E3F-0011114AE311}\InProcServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96236A85-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96236A8F-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96236A90-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96236A91-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_1\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96484065-846E-4C01-8D2A-44253F59B606}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsEM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{964A239F-6039-4A44-BB9B-EC0FEAFE28FC}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{964AA3BD-4B12-3E23-9D7F-99342AFAE812}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\PHISON\\Aac_PHISON HAL\\AacHal_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{966F107C-8EA2-425D-B822-E4A71BEF01D7}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvEncMFThevcx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{966f985a-57d2-4e69-b363-0ef69ad32cee}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96705EE3-F7AB-3E9A-9FB2-AD1D536E901A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{96709adb-52b9-4735-8534-3a8b32631432}\InProcServer32" = "$homedrive\\Windows\\System32\\CertEnroll\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96749373-3391-11D2-9EE3-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96749377-3391-11D2-9EE3-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{967696C6-354C-4B5C-9CC8-BD9E1C480C77}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v3\.0\\WPF\\PenIMC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{968AD211-D1B1-444B-9F59-51701D1128D3}\InProcServer32" = "$homedrive\\Windows\\System32\\remoteaudioendpoint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{969025FF-F069-4D77-ADA5-6686D1877DCA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.LockScreen\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96A058CD-FAF7-386C-85BF-E47F00C81795}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{96AC7453-0B2A-451e-9A1A-203CA034AF96}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96b42929-01f1-468c-b521-6294ab438f4a}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.ui\.creddialogcontroller\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96B9DAE3-CF15-45e9-9719-57285348225E}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96BEC059-2052-4e44-8E11-123ACDC936FE}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96c7a5ef-0e2c-46d7-9bc1-6445c2444d7a}\InProcServer32" = "$homedrive\\Windows\\System32\\threadpoolwinrt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96C8AD95-C199-44DE-B34E-AC33C442DF39}\InProcServer32" = "$homedrive\\Windows\\System32\\Pimstore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{96f8e0d2-86e5-4898-8fb1-153682e11900}\InProcServer32" = "$homedrive\\Windows\\System32\\(Windows\.Globalization|NaturalLanguage6)\.Fontgroups\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{97061DF1-33AA-4B30-9A92-647546D943F3}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{971127BB-259F-48c2-BD75-5F97A3331551}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{973A7390-2608-3943-9015-D798D1217C08}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{973E4CE8-85A2-4207-8147-4778B50644DB}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinAUG\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9743B50B-3190-4061-8DA3-BE13AA02181E}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{974C63D2-6846-4F6B-BF27-BF71ADB1E608}\InProcServer32" = "$homedrive\\Windows\\system32\\PrintPlatformConfig\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}\InprocServer32" = "$homedrive\\Windows\\system32\\els\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{975ABEDC-F64B-436d-ABFF-44B932459856}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{978b010d-d731-48af-b6a9-afe5dfe2fac9}\InProcServer32" = "$homedrive\\Windows\\System32\\AppLockerCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{978C9E23-D4B0-11CE-BF2D-00AA003F40D0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{97A2762C-403C-4953-A121-7A75ABCE4373}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{97CBCB09-9D73-4D90-9311-A78626569953}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatialStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{97d47d56-3777-49fb-8e8f-90d7e30e1a1e}\InprocServer32" = "$homedrive\\Windows\\System32\\WorkFoldersShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{97e467b4-98c6-4f19-9588-161b7773d6f6}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9800F18F-3D86-4744-A7D0-540989C86D7B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98042251-8C2B-4FC4-93E2-B1DB331EF5B9}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{981D9411-909E-42A7-8F5D-A747FF052EDB}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9821D278-84E2-4D6A-8712-2C6E23D43C7B}\InProcServer32" = "$homedrive\\Windows\\System32\\EnterpriseModernAppMgmtCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98230571-0087-4204-b020-3282538e57d3}\InprocServer32" = "$homedrive\\Windows\\System32\\colorcnv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98455561-5136-4d28-AB08-4CEE40EA2781}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{984F9804-3314-4FA4-AC8C-E688D4133C51}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\krnlprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{987D8DFA-3E2C-4929-9C51-61AC8E00CBC3}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{987E88E6-4708-497A-961C-8C9AD54EDCE8}\InProcServer32" = "$homedrive\\Windows\\System32\\edgemanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98859A6C-02F2-43FC-ADB0-CE6D10F1A1AA}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9885AEF2-BD9F-41E0-B15E-B3141395E803}\InprocServer32" = "$homedrive\\Windows\\System32\\mapstoasttask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9887A40F-B86C-4531-904B-4C70A3AB6D1B}\InprocServer32" = "$homedrive\\Windows\\System32\\VocabRoamingHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98A1B01E-E363-46e9-A68F-C6078DAABB8C}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98A238A9-D8A2-4E57-84AF-6CF88FF719DA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98af66e4-aa41-4226-b80f-0b1a8f34eeb4}\InProcServer32" = "$homedrive\\Windows\\System32\\dfshim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98AFF3F0-5524-11D0-8812-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98C97BD2-E32B-4AD8-A528-95FD8B16BD42}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98D9CA81-452B-4A98-96A3-7D510C7C4F9F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.UserDeviceAssociation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98F63271-6C09-48B3-A571-990155932D0B}\InprocServer32" = "$homedrive\\Windows\\System32\\Setup\\FXSOCM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9909aba6-519d-4b42-b57f-cc1408214ddb}\InProcServer32" = "$homedrive\\Windows\\System32\\shcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{990a9f8f-301f-45f7-8d0e-68c5952dba43}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{990F07C7-78DC-4BD2-B145-5F791410BDDE}\InprocServer32" = "$homedrive\\Windows\\System32\\TelephonyInteractiveUser\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{991DA7E5-953F-435B-BE5E-B92A05EDFC42}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{992CFFA0-F557-101A-88EC-00DD010CCC48}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9942DB71-3E0C-4A42-881B-CC7F6FB1DA14}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{994B3B2F-2880-4318-A583-15C38A01F571}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9970407f-eb6c-40bc-96d4-6e8b69b2017f}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Playback\.ProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99793286-77CC-4B57-96DB-3B354F6F9FB5}\InProcServer32" = "$homedrive\\Windows\\system32\\(directmanipulation|Uxtheme)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99847C33-B1B4-11D1-8F10-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99969a8f-27e6-4adf-ab9f-b5b5e90d4733}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{99A16964-6591-4FE1-B7EC-27C6D756A1CE}\InprocServer32" = "$homedrive\\Windows\\System32\\TransliterationRanker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99a73266-0cdf-4479-88af-1842cbaada22}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99acf7f6-ef55-4ef9-8e27-3b784a6b4639}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99B29D3B-368A-4BE6-B675-805A69114497}\InProcServer32" = "$homedrive\\Windows\\System32\\usermgrproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99c0179c-c20c-488c-a510-bd779b9376ae}\InprocServer32" = "$homedrive\\Windows\\system32\\bcdsrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99CDC6E0-DA00-4dfa-8EB8-831D774F8891}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99cdfdaf-3573-4d97-bc06-d7c36627edef}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99D353BC-C813-41ec-8F28-EAE61E702E57}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99D54F63-1A69-41AE-AA4D-C976EB3F0713}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99d6470e-d780-4fce-99d2-40324846c10b}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99D651D7-5F7C-470E-8A3B-774D5D9536AC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99dcd00c-fbd6-42d3-9dfd-1b5ad7058f61}\InprocServer32" = "$homedrive\\Windows\\System32\\gpupvdev\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99E0D1EC-0A0D-4E50-B8A1-82A8B6ECE5CB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99E89F48-A745-416d-A4E0-ECF53C65DFA0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99EB9580-04EC-4B4C-99F5-52B616D444D9}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99EFDAD1-0F11-4A6B-A702-4E1C37D1A3EF}\InProcServer32" = "$homedrive\\Windows\\System32\\fcon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{99F997ED-DFD1-4F67-B367-9B52B8225A85}\InProcServer32" = "$homedrive\\Windows\\System32\\DavSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9a010fcc-488b-4836-94fd-c489f8e1ed7d}\InprocServer32" = "$homedrive\\Windows\\system32\\ndishc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9a02e012-6303-4e1e-b9a1-630f802592c5}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9a07804e-7050-41d5-a244-badc038df532}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9a096bb5-9dc3-4d1c-8526-c3cbf991ea4e}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A17DFD1-34FA-4D61-B9BB-3A1097E7FADF}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A1A6626-E967-4E10-A74E-4A51895E4F93}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9a2584c3-f7d2-457a-9a5e-22b67bffc7d2}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A2B23E4-2A50-48DB-B3C3-F5EA12947CB8}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Common Files\\Microsoft Shared\\MSEnv\\VSFileHandler_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A31D292-655F-48F7-B5AD-553358BCD0C9}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A3E1311-23F8-42DC-815F-DDBC763D50BB}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A43A844-0831-11D1-817F-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A4948D9-13FC-4FAC-B60A-FBA6EE0FB11C}\InProcServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A4A4A51-FB3A-4F4B-9B57-A2912A289769}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A4B942C-C16D-44D2-BDAA-1BD772A4050B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A5EA990-3034-4D6F-9128-01F3C61022BC}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A653086-174F-11D2-B5F9-00104B703EFD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A7C3FC6-8C9E-40A8-8CD9-0F3715483825}\InProcServer32" = "$homedrive\\Windows\\system32\\lpksetupproxyserv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9A944885-EDAF-3A81-A2FF-6A9D5D1ABFC7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9a97f12a-6b73-4dc4-b3c1-e9244c03adac}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9AA0422B-E5C5-4A6B-ACEC-C96E2E05B353}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ab3b1c9-3225-4bb4-93b6-bfb3c0d93743}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9AB6A28C-748E-4B6A-BFFF-CC443B8E8FB4}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAlacEncoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ac9fbe1-e0a2-4ad6-b4ee-e212013ea917}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9AED384E-CE8B-11D1-8B05-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B0C8B3B-8CA5-46cb-B0DD-64542BBA21DC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B0EFD60-F7B0-11D0-BAEF-00C04FC308C9}\InprocServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B1D2710-8AEE-4B64-B5DB-0F1086A63877}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9b359d1b-ad5c-412f-a654-a431424359de}\InProcServer32" = "$homedrive\\Windows\\System32\\cscobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B39403C-8B6D-430D-AE71-9EE1DC6E74C5}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B39610A-38D1-43f1-9FAF-D4E5CA50B4B2}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B467978-A0CF-480B-965B-5A5FAC1D8277}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B496CE1-811B-11CF-8C77-00AA006B6814}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{9b4e5207-9539-4258-b4a0-4e70e9e565ec}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B55AA0E-1BC2-46e4-B306-DF9BDFDCC644}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B5EC720-9A44-4811-8B9F-24BD53F2050D}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvgames\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B67E7B7-12BA-4B81-9874-E96D8C7C07F8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B77C0F2-8735-46c5-B90F-5F0B303EF6AB}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B78F0E6-3E05-4A5B-B2E8-E743A8956B65}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpsharercom\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B8C4620-2C1A-11D0-8493-00A02438AD48}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B924EC5-BF13-3A98-8AC0-80877995D403}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B9501E9-A3F8-4F29-98BA-8FBB9504D5F8}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9B97D384-048C-4e24-926D-DB6F0841C9E4}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BA05971-F6A8-11CF-A442-00A0C90A8F39}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9bb6c87b-83af-4e4b-8151-865efd1e414c}\InprocServer32" = "$homedrive\\Windows\\System32\\vmpmem\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BC49CE1-EFA7-4C49-8BB2-5355FEA6C170}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BC773B8-9B6C-400F-8AF0-0DFDD1C43229}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BCE6E2B-116B-420F-928B-5356D1629979}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BD1F370-1212-4794-AA9B-9EBD575091D5}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BDAC276-BE24-4F04-BB22-11469B28A496}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\VideoLAN\\VLC\\axvlc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BF86F6E-B0E1-348B-9627-6970672EB3D3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BF8D948-5C56-450e-BAF8-D6144C6E81CB}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9BFFC57B-DF4D-48F7-8C61-B3C969839F74}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C07355E-C50A-45D2-B4A3-0A8235F8047F}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C125A6F-EAE2-3FC1-97A1-C0DCEAB0B5DF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9c15e692-86da-4ab8-8b5e-6ac79deb6f20}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C1878FA-A0CB-4F01-8762-A6BF18021C94}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvwss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C1CC6E4-D7EB-4EEb-9091-15A7C8791ED9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C33C4AB-BC91-4A79-BF47-7C90CEBC3AA3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C49FB9B-4E8C-43AE-BACF-76404B422264}\InprocServer32" = "$homedrive\\Windows\\system32\\DscTimer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9c4be1de-7bb5-40c3-a5fa-dfdb7c54c971}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C4D3346-650D-472d-A867-6F595B39D973}\InprocServer32" = "$homedrive\\Windows\\system32\\AuditPolicyGPInterop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C502F01-0D36-4f16-8AC9-8693E0D84E44}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C62D90D-9C14-400a-942A-404ABA5E1F38}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C67F424-22DC-3D05-AB36-17EAF95881F2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C695035-48D2-4229-8B73-4C70E756E519}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C7684B5-FC31-4e57-A852-282D907911CC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvsvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9c7a1728-b694-427a-94a2-a1b2c60f0360}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32" = "$homedrive\\Windows\\System32\\TaskSchdPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9c8db22b-8ddc-471c-9628-48847514b424}\InProcServer32" = "$homedrive\\Windows\\System32\\wcmapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CAB4470-D6FA-4903-986C-7D5A755B2691}\InprocServer32" = "$homedrive\\Windows\\System32\\RoamingSecurity\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9caf4a2e-c957-48c7-b4d2-4d11188e0b94}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9cb233a5-a4a5-46b9-ab13-db07ce949410}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CB5172B-D600-46BA-AB77-77BB7E3A00D9}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CB89EFF-B39E-4D5C-A493-F2171580CC21}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CB98DB1-4D09-4538-A192-2D3D8C0B6CDB}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CC1CC97-48C6-43DB-8265-4BD9C8E192DD}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9cca66bb-9c78-4e59-a76f-a5e9990b8aa0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CD64701-BDF3-4D14-8E03-F12983D86664}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CDAEA40-A7D3-4cc5-AED0-B5E35AD0F169}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9CE31F69-2605-420C-A30E-B60A164DB44D}\InProcServer32" = "$homedrive\\Windows\\System32\\ChatApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9cfc2df3-6ba3-46ef-a836-e519e81f0ec4}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9cfc6d75-e648-47a8-9ea0-fb0907558952}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9d06f027-cbfc-421a-97b3-f09a8a9359bc}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D079FE7-A102-4F3F-AD2E-A2C88C851CEE}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D148290-B9C8-11D0-A4CC-0000F80149F6}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D148291-B9C8-11D0-A4CC-0000F80149F6}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D27B916-4F17-4EE8-A71C-D84222993D64}\InProcServer32" = "$homedrive\\Windows\\system32\\CellularAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D309F77-4655-372E-84B0-B0FB4030F3B8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D3C0751-A13F-46a6-B833-B46A43C30FE8}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D48CE47-9E1C-4D41-B480-260563C0B724}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D5E24EF-485C-4503-A47D-4A52AF8E817B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv120p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D5F55E3-B423-492F-AC3B-B7F6CBC563B9}\InProcServer32" = "$homedrive\\Windows\\System32\\eUICCsCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D71A98F-1E45-42EC-AF3D-FA13BEFB955C}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D745ED8-C514-4D1D-BF42-751FED2D5AC7}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D7F0E95-8848-47B3-8D0E-E6C0E396E640}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D958C62-3954-4b44-8FAB-C4670C1DB4C2}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9D99BE80-B271-4524-BA35-30414FE18F0E}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintWSDAHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DA2F8B8-59F0-3852-B509-0663E3BF643B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DA3DFB6-DB99-4A52-B52B-058E0C6B7956}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}\InprocServer32" = "$homedrive\\Windows\\System32\\(MSWB7|NaturalLanguage6)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DAC2C1E-7C5C-40eb-833B-323E85A1CE84}\InProcServer32" = "$homedrive\\Windows\\System32\\wscinterop\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DB7A13C-F208-4981-8353-73CC61AE2783}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DBD2C50-62AD-11d0-B806-00C04FD706EC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DC486E3-B0E8-4230-81C4-A84D019E2B98}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_extensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DCCCE22-C057-424E-B8D1-67935988B174}\InprocServer32" = "$homedrive\\Windows\\System32\\hascsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DCF998B-4A06-4E97-ABC4-576E80D22678}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DD35758-AAF5-4894-ADAA-77A492F54E0A}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9DE85094-F71F-44f1-8471-15A2FA76FCF3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9dea6e0b-8856-45d8-a424-57244aef1e3c}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9df523b0-a6c0-4ea9-b5f1-f4565c3ac8b8}\InProcServer32" = "$homedrive\\Windows\\system32\\timedate\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B69-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B6C-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B6E-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B70-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B74-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B76-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssph\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B7F-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B8A-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B8B-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B8D-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B8E-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B90-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175B98-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175BA8-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175BA9-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175BB7-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E175BB8-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E28EF95-9C6F-3A00-B525-36A76178CC9C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E31421C-2F15-4F35-AD20-66FB9D4CD428}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E358D23-02B2-4CCD-9FEE-6B75EE8DD5CA}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\tpcps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}\InProcServer32" = "$homedrive\\Windows\\System32\\sendmail\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}\InProcServer32" = "$homedrive\\Windows\\System32\\sendmail\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9e752621-4573-4308-81c6-9f210db29e85}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E77AAC4-35E5-42A1-BDC2-8F3FF399847C}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E797ED0-5253-4243-A9B7-BD06C58F8EF3}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EA60ECA-3DCD-340F-8E95-67845D185999}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EB7C6FC-0C96-4EE0-9B8A-F4BDA7D305E1}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.datatransfer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EBB177D-0161-4e2c-81B0-E15D586CFC9F}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EC4B4F9-3029-45ad-947B-344DE2A249E2}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ecf51f8-cfb1-458d-9485-f5a231afd22f}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ECF752A-518E-46b1-8691-F5090F5E9A14}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ED13477-E909-45BC-BADC-2106D04D6BD7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ED5FD4B-40C3-4DE3-8597-98ECD17035DA}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ED96B20-73AA-11D2-952C-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ED96B21-73AA-11D2-952C-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ED96B22-73AA-11D2-952C-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EE20F7D-20A3-4E75-BC6D-204304AB6C8B}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EE72A18-7BD4-44E1-8BA9-1E8E60D8CCA3}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WdacWmiProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EF96870-E160-4792-820D-48CF0649E4EC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9EFD4CF2-0BAA-350B-9D73-0974077B2F7B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F074EE2-E6E9-4d8a-A047-EB5B5C3C55DA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32" = "$homedrive\\Windows\\System32\\PCShellCommonProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F36C194-166C-4cbf-B7EA-BF039F950172}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F377D7E-E551-44f8-9F94-9DB392B03B7B}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9f37f39c-6f49-11d1-8c18-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F38CF19-B7A6-452A-BF0B-383F3C1D50C2}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxRanker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F4F643B-8806-4861-8A79-6699E94DCF66}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F50E8B1-9530-4DDC-825E-1AF81D47AED6}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F66347C-60C4-4C4D-AB58-D2358685F607}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9f75fdc4-0aba-4866-88a9-75ebb9e7d584}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F7D7BB5-20B3-11DA-81A5-0030F1642E3C}\InprocServer32" = "$homedrive\\Windows\\System32\\SmiEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F821051-83C5-4816-BB38-5F5FA3B65DDB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F8233AC-BE49-4C79-8EE3-E7E1985B2077}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9F8E6421-3D9B-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FAE1230-74AC-4e33-B59C-4051BBEB0803}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9fb45d27-dfe3-4383-b117-ab631787649a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.ui\.picturepassword|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FBC2D8F-6F52-4CFA-A86F-096F3E9EB4B2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\ODFFILT\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FC8E510-A27C-4B3B-B9A3-BF65F00256A8}\InProcServer32" = "$homedrive\\Windows\\system32\\dataexchange\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FD4E808-F6E6-4e65-98D3-AA39054C1255}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FE5F349-1D9F-408E-AE4D-8FC50A12DF80}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FE63AFD-59CF-4419-9775-ABCC3849F861}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ff13758-469b-45a8-8cc7-72182bd7e9ba}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\applets\\imjpskf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9FF65B15-F7B4-4858-BFE6-DB2083DEDF68}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{9ff7242c-364d-425d-95ce-c64f8ee140d1}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a00e1768-4a9b-4d97-afc6-99d329f605f2}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a00ee528-ebd9-48b8-944a-8942113d46ac}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a015411a-f97d-4ef3-8425-8a38d022aebc}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0202464-B4B4-4b85-9628-CCD46DF16942}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A020FAD9-D661-4857-AA43-E6A86FF1163E}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0227FFC-3AA7-4dc3-9FD7-125745C9EAF6}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{A02797fC-C4AE-418C-AF95-E637C7EAD2A1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a028ae76-01b1-46c2-99c4-acd9858ae02f}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrtip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A03CD5F0-3045-11CF-8C44-00AA006B6814}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{A05AD39D-C5E6-4723-8802-AB7788548580}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a07034fd-6caa-4954-ac3f-97a27216f98a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A09CCA86-27BA-4F39-9053-121FA4DC08FC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0A7A57B-59B2-4919-A694-ADD0A526C373}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0A8C450-92FC-422a-AA04-0A19E8D65AC7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0ABC02B-D279-4FA3-9D37-199D4D3F8152}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0ADD4EC-5BD3-4f70-A47B-07797A45C635}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0B9B497-AFBC-45AD-A8A6-9B077C40D4F2}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0C63C30-F08D-4AB4-907C-34905D770C7D}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0CAF057-8D9E-4d01-8CDD-5F469B153A9F}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a0d018ee-1100-4389-ab44-464faf001288}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0E2E749-63CE-3651-8F4F-F5F996344C32}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0F5F5DC-337B-38D7-B1A3-FB1B95666BBF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0F8D82C-E4D8-4ED9-BD3A-867A830B12BA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A0F93E27-F05D-4153-A151-F3720369A4C7}\InprocServer32" = "$homedrive\\Windows\\system32\\signdrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a1019a03-1281-47b1-93bc-856d5f0cda43}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.AllJoyn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a10dfc9e-ff12-4e7f-bc74-8fe9053920f0}\InprocServer32" = "$homedrive\\Windows\\system32\\WinSyncProviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1170F2C-C5A4-467F-8EB3-50571D7201AE}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a11850eb-4501-4dea-9ef5-1d37f57d247d}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A11DB3DC-5FF6-4a0b-AEE6-29BCAC1E11E0}\InProcServer32" = "$homedrive\\Windows\\system32\\ndfetw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1230201-1439-4E62-A414-190D0AC3D40E}\InProcServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1230401-67a5-4df6-a730-dce8822c80c4}\InProcServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A12E5BCB-9758-4FBE-9B85-F50C822E6B5E}\InProcServer32" = "$homedrive\\Windows\\system32\\EnterpriseAppMgmtClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A139E32E-EA10-4B93-A813-A9E44ADA2938}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a1570149-e645-4f43-8b0d-409b061db2fc}\InprocServer32" = "$homedrive\\Windows\\System32\\portabledeviceconnectapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A158544D-66FA-4F19-8806-F3CA2E2A4C52}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A164C0BF-67AE-3C7E-BC05-BFE24A8CDB62}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A166CF69-93B2-49FB-8143-DCEFD4BF8BA9}\InProcServer32" = "$homedrive\\Windows\\System32\\wcmapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a16e1bff-a80d-48ad-aecd-a35c005685fe}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A17DA8D0-F67D-47A0-9EC4-19C486383206}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsmsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a18f6329-d0f6-45d0-9f8e-96a0499440e4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.SecurityMitigationsBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A19B036E-22B2-4A97-82A2-12D283A46001}\InprocServer32" = "$homedrive\\Windows\\System32\\BingASDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A19DE2F2-2F74-4927-8436-61129D26C141}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1A2B1C4-0E3A-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1B1922F-B626-4A4F-9F2B-4A6926DF86D1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a1b4dd9f-c1d9-4e24-9b7f-c0ef7cffdb71}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1B9E04A-3226-11D2-883E-00104B2AFB46}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\servdeps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1BFB370-5A9F-4429-BB72-B13E2FEAEDEF}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1C0A095-DF97-3441-BFC1-C9F194E494DB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1DB7B5E-D0EA-4FE0-93C4-314505788272}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskFlowDataEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a1e2b86b-924a-4d43-80f6-8a820df7190f}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR\\imkrotip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1E48442-883D-491A-BE68-41214236D6A8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.SystemManagement\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1E7036D-72A1-4529-B108-0C3C9E92D424}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3gpui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1EB89D6-0A9C-4575-A0AE-654A990A454C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1EBDBD0-E4BA-4DB3-8DF6-C91534061EF4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A1FC5C0F-6A66-4858-8BA5-1E467D09695D}\InprocServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A21F5552-8D6C-4DC6-BA46-D8D3363E6BA6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A21FC522-F671-4013-9339-0828E5C70DD9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A22C4FC7-6E91-4e1d-89E9-53B2667B72BA}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A249E9F6-5B28-4ED1-8AF0-C9B9C5195486}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A25821B5-F310-41BD-806F-5864CC441B78}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A258718D-BE3E-40CC-A77F-75642516497C}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\InprocServer32" = "$homedrive\\Windows\\system32\\wmphoto\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A28798CC-730B-41EB-9CA2-74F93E27B99E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A29673B0-DE3A-458E-822B-0ECD00D4BCE0}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2A80041-8359-46BD-9B79-9C780FD998C2}\InprocServer32" = "$homedrive\\Windows\\System32\\SDDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{a2c6a94b-127a-4173-a498-8204322fa2b8}\InProcServer32" = "$homedrive\\Windows\\System32\\fwmdmcsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2CE91DB-204B-4A63-842B-3EF93694DFF1}\InProcServer32" = "$homedrive\\Windows\\System32\\EnterpriseAPNCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2D75874-6750-4931-94C1-C99D3BC9D0C7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\MsMpCom\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2DC4FCB-C32A-4E4E-A2DB-67A008913992}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2E3074E-6C3D-11D3-B653-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2E30750-6C3D-11D3-B653-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2E6DDA0-06EF-4df3-B7BD-5AA224BB06E8}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a3037d66-c043-4f54-91a0-2cdb642e7718}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imetip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A31AD6C2-FF4C-43D4-8E90-7101023096F9}\InprocServer32" = "$homedrive\\Windows\\system32\\TimeSyncTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a31c0e24-c249-4e36-a1a3-9dfdceda9bbc}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a323554a-0fe1-4e49-aee1-6722465d799f}\InProcServer32" = "$homedrive\\Windows\\system32\\timedate\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{A32552C5-BA61-457A-B59A-A2561E125E33}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3367904-52A3-4A11-BF5B-1AB36EF51D1F}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.Internal\.Management\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A33FB695-B731-4A85-AABE-656397D0E88D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A35C5B62-6032-4CAF-BB23-F0556BFF94FF}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3662812-8138-4A1E-8FAF-49D06E7AED43}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.Schema\.Shell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A36738B5-FA8F-3316-A929-68099A32B43B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A36E4EAF-EA3F-30A6-906D-374BBF7903B1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A36F9519-C183-4dca-8AFC-B8DE3F71DADA}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtBopomofoDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A373F500-7A87-11D3-B1C1-00C04F68155C}\InprocServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A37B2DFB-4204-4476-B1D9-29413836093D}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A37BBB42-E8C1-4E09-B9CA-F009CE620C08}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A38E6420-19EC-490c-B4BF-51673C360213}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a38f3677-32fc-4dac-99b3-d804b193d2c4}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A38F4597-F640-4189-982F-132ECF8202FA}\InprocServer32" = "$homedrive\\Windows\\system32\\PortableDeviceSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A394DCA9-3727-11D4-BD85-00C04F6B93A4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VISSHE\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3987437-F1B5-4296-A7DD-6CC3A8B738B9}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A39F0E28-7E9E-4C37-AF48-70839D5DE7AF}\InProcServer32" = "$homedrive\\Windows\\System32\\edpcsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3A1F076-1FA7-3A26-886D-8841CB45382F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a3b3c46c-05d8-429b-bf66-87068b4ce563}\InProcServer32" = "$homedrive\\Windows\\System32\\actioncenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3B82825-6E21-4249-B372-C2A1F8E948AA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGCapturePropPage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3B877C7-83CA-4c9b-87FB-BE0D518C2441}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3BC03A0-041D-42E3-AD22-882B7865C9C5}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a3c3d402-e56c-4033-95f7-4885e80b0111}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3C97737-76D9-4f5f-B917-4DE47FE023C8}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3CCEDF7-2DE2-11D0-86F4-00A0C913F750}\InProcServer32" = "$homedrive\\Windows\\System32\\pngfilt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3D93AB0-3079-4662-BF03-1718156E7C32}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3E41207-BE04-492A-AFF0-19E880FF7545}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipcima\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A3ECBC41-581A-4476-B693-A63340462D8B}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a405dda4-a05a-46be-b481-526ad2e0c791}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A40ECD48-32B1-46A0-9D29-3B97E1DE33CC}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\VSPerfCollectionTools\\vs2022\\x64\\VSPerfControl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4109FA5-7512-4338-8376-81F6D38ADA41}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4173A49-F373-4475-9A0F-2D615204DC20}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a41a4187-5a86-4e26-b40a-856f9035d9cb}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4256DB3-B8D8-45F1-8F14-85707DCA506C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A43139B3-BDF5-4497-9DCF-6C7AADC1A5D0}\InProcServer32" = "$homedrive\\Windows\\System32\\musdialoghandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A43C525D-EDF0-48d9-B7FB-9BABBD6DBD65}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4445657-BCB6-476E-8336-3A2ACD96E299}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A45AEC2B-549E-405F-AF3E-C6B03C4FDFBF}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32" = "$homedrive\\Windows\\System32\\smartscreenps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A470F8CF-A1E8-4f65-8335-227475AA5C46}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{a47286bf-d624-4a30-acdf-2705bd3de0c3}\InProcServer32" = "$homedrive\\Windows\\System32\\winmde\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a47401f6-a8a6-40ea-9c29-b8f6026c98b8}\InprocServer32" = "$homedrive\\Windows\\system32\\srwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a479ddb1-2166-40d0-8fb0-892687d2fa12}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A47C0430-EDBD-464E-A2AF-3B17C26AFDF5}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InProcServer32" = "($homedrive\\Windows\\System32\\ieproxy\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\ieproxy\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4A74456-67F8-4F18-B96B-0F1F05DEF65A}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4B07E49-6567-4FB8-8D39-01920E3B2357}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a4b45c90-5d38-4452-a654-1b47ae7826c4}\InProcServer32" = "$homedrive\\Windows\\System32\\CXHProvisioningServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a4c31131-ff70-4984-afd6-0609ced53ad6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4DDCA2B-E73C-40C5-83B1-9F40269D0B0D}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4E05936-2251-4634-B684-09D5122A8F72}\InprocServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A4F2A5C9-979A-4EC6-851F-341F15D3F67D}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5065670-136D-4FD6-A45F-00C85B90359C}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A508E5FE-7D8F-4006-AE92-A44E69F87DA3}\InprocServer32" = "$homedrive\\Windows\\System32\\MTFServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A530D54A-DBA0-4b17-9F99-51A7A2CC17CA}\InProcServer32" = "$homedrive\\Windows\\System32\\TetheringSettingHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A533BCB1-6D33-41FC-8C3B-63223FCCE9D2}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a542e116-8088-4146-a352-b0d06e7f6af6}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5448B7A-AA07-3C56-B42B-7D881FA10934}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{a558c6a5-b42b-4c98-b610-bf9559143139}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A56A841F-E974-45C1-8001-7E3F8A085917}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A571F412-E3D2-4A32-BF42-1D3B2203FF17}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a587dd8b-466f-4b66-a8d2-dc47272bebcb}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A58845F3-BC16-4689-883F-68A15916B660}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5890610-900C-4115-BAFF-767E05E10F1F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a5a3563a-5755-4a6f-854e-afa3230b199f}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5B020FD-E04B-4e67-B65A-E7DEED25B2CF}\InProcServer32" = "$homedrive\\Windows\\System32\\wisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5EAE54D-9886-4B8D-AA78-EAFF38D011CA}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5EBA07A-DAE8-4d15-B12F-728EFD8A9866}\InProcServer32" = "$homedrive\\Windows\\system32\\mssprxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5EFE073-B16F-474f-9F3E-9F8B497A3E08}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5F89494-76C3-4A05-8BB4-8EA500A3208A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A5FA505C-DB54-403c-A744-9B3919EF096F}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Streaming\.ps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A608A731-B6F2-4d08-AC1E-C22A65B64ACF}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6098E79-9C50-4F87-8973-5FB4532C93D8}\InProcServer32" = "$homedrive\\Windows\\system32\\btpanui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A61DDE94-66CE-4AC1-881B-71680588895E}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\InProcServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a62b9bb1-54cd-44b1-9f55-5a5914c37672}\InProcServer32" = "$homedrive\\Windows\\System32\\CredentialEnrollmentManagerForUser\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A63E13D5-5263-44A6-8A18-381EB6F181A2}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6439333-78D2-4FFD-A20D-53B0EDC704BA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a6482830-08eb-41e2-84c1-73920c2badb9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A64CAF32-08CD-4054-BFD5-983BEDA9264A}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\InprocServer32" = "$homedrive\\Windows\\System32\\dxdiagn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A666634D-333F-4CC9-AF78-65ED7DB1D6C3}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6673C32-3943-3BBB-B476-C09A0EC0BCD6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{a671c915-d95d-4135-b2c3-089356ca694f}\InprocServer32" = "$homedrive\\Windows\\system32\\nlahc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A680CE8D-9CA7-43BF-B41E-5066973215AB}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostUser\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a682edd0-726b-4599-9f38-f0fda58b9714}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a6914418-134b-4bb8-8e3d-7fef7f456caf}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6B222AB-A5EA-4899-B230-084657EDDC7D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a6b5fe63-153c-4031-96db-79677ca10a9b}\InprocServer32" = "$homedrive\\Windows\\System32\\srmscan\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6BFEA43-501F-456F-A845-983D3AD7B8F0}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a6e02196-c1bf-4989-8a94-144eee4a9bb2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6EE35C6-87EC-47DF-9F22-1D5AAD840C82}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32" = "$homedrive\\Windows\\System32\\OneCoreCommonProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A70C977A-BF00-412C-90B7-034C51DA2439}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7136BDF-B141-3913-9D1C-9BC5AFF21470}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7248EC6-A8A5-3D07-890E-6107F8C247E5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A73BEEB2-B0B7-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a76de978-f3eb-4a4f-9f99-304ad619e2ab}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A79020BC-1F7E-4D20-AC2A-51D73012DDD5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7A63E5C-3877-4840-8727-C1EA9D7A4D50}\InProcServer32" = "$homedrive\\Windows\\System32\\fveui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7AA4814-7479-4047-BC99-32E757C8B850}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7B9649E-FECE-4AE3-958C-C36B133E937F}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7C06739-500F-4E8C-99A8-2BD6955899EB}\InprocServer32" = "$homedrive\\Windows\\System32\\wksprtPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7C452EF-8E9F-42EB-9F2B-245613CA0DC9}\InprocServer32" = "`"$env:homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\ProtectionManagement\.dll`"" | |
| "HKEY_CLASSES_ROOT\CLSID\{a7c922a0-a197-4ae4-8fcd-2236bb4cf515}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a7ec30bd-4c22-4ca7-85dd-a7267dee78a4}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7EDDCB5-6043-3988-921C-25E3DEE6322B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A7EE7F34-3BD1-427f-9231-F941E9B7E1FE}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8040703-2640-48B7-96CD-BC8108A4E8F1}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8159411-398E-4471-9521-A84B0BF2BE54}\InProcServer32" = "$homedrive\\Windows\\System32\\dsui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8159420-398E-4471-9521-A84B0BF2BE54}\InProcServer32" = "$homedrive\\Windows\\System32\\Dsui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8159421-398E-4471-9521-A84B0BF2BE54}\InProcServer32" = "$homedrive\\Windows\\System32\\Dsui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A82536D7-C8E6-4CEF-AA66-11E97EDDFC6D}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A82E50BA-8E92-41eb-9DF2-433F50EC2993}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A83EF168-CA8D-11D2-B33D-00104BCC4B4A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A860CE50-3910-11d0-86FC-00A0C913F750}\InProcServer32" = "$homedrive\\Windows\\System32\\imgutil\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8616FB9-1D84-4F32-B46B-5D7B80214B8A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8679087-E64A-413A-9CBF-F38BE510C46C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvgames\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a8679153-843f-467f-ad7e-f429328f7568}\InprocServer32" = "$homedrive\\Windows\\System32\\vmflexio\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a86ca2f1-af74-4a74-980b-e185d4ca01b0}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8792A31-F385-493C-A893-40F64EB45F6E}\InProcServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A879E3C4-AF77-44fb-8F37-EBD1487CF920}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A87FA4A8-339A-48f3-A9B5-44CB8CFEF3F7}\InProcServer32" = "$homedrive\\Windows\\System32\\ActiveSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A888DF60-1E90-11CF-AC98-00AA004C0FA9}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A89003D7-25F1-47fd-B504-6B35E7A63A27}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a893aa73-054f-4dbc-9e53-f4ee5fe07fd3}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A894CA92-2E31-4AF2-BC7E-41079A8E5BE9}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A896FD50-87BE-449A-9149-D10BA1FAAEE2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8976A00-1FDE-4B5F-A6F0-FBF459DD32ED}\InProcServer32" = "$homedrive\\Windows\\System32\\ACPBackgroundManagerPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8B25C0E-0894-4531-B668-AB1599FAF7F6}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a8c3476d-20e1-4d56-96e7-84e24952228b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrudt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8C680EB-3D32-11D2-9EE7-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8CA4495-65AB-4333-9FF9-4FEB6FBF5169}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8D058C4-D923-3859-9490-D3888FC90439}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{a8d93b39-2113-492e-b014-801d01c95eca}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8DCF3D5-0780-4EF4-8A83-2CFFAACB8ACE}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8DFB9A0-8A20-479F-B538-9387C5EEBA2B}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8E52322-8734-481D-A7E2-27B309EF8D56}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8E64375-B645-4314-9EFC-C085981786FA}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8F03BE3-EDB7-4972-821F-AF6F8EA34884}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A8F9F740-70C9-30A7-937C-59785A9BB5A4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{A907657F-6FDF-11D0-8EFB-00C04FD912B2}\InProcServer32" = "$homedrive\\Windows\\system32\\tcpipcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A910187F-0C7A-45AC-92CC-59EDAFB77B53}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A919EA73-490E-4D5C-9BA7-97CBC73119FE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A91DEAA6-9773-42B7-86A4-5AD24CFF440A}\InprocServer32" = "$homedrive\\Windows\\System32\\witnesswmiv2provider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9224722-48E4-4A66-8068-F90FA13A6D74}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9249952-F4C6-4BCD-9B44-6A5BA9B5209E}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A929C4CE-FD36-4270-B4F5-34ECAC5BD63C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nv3dappshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9397D66-3ED3-11D1-8D99-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A961F842-FC8E-4D53-8074-4AB67E8854B4}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9710FB5-1840-4224-BD42-86831E28E43A}\InProcServer32" = "$homedrive\\Windows\\System32\\UICOM\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A973E7B2-131B-428E-8B2B-EAE73D731E98}\InProcServer32" = "$homedrive\\Windows\\system32\\ActionCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A97AA8AA-C8A0-491A-B931-2F4D068B0E6C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9927F85-A304-4390-8B23-A75F1C668600}\InprocServer32" = "$homedrive\\Windows\\System32\\MicrosoftAccountTokenProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9A33436-678B-4c9c-A211-7CC38785E79D}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a9ae6c91-1d1b-11d2-b21a-00c04fa357fa}\InProcServer32" = "$homedrive\\Windows\\system32\\msident\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9B005E5-AB63-4C1D-AE9E-AA120A50BB0F}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenContent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9B48EAC-3ED8-11d2-8216-00C04FB687DA}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9B5C10F-1FAC-422A-AE3F-875E09B8F64A}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxRanker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{a9bdbb2f-8b01-455a-917f-0acf7b4a4a24}\InprocServer32" = "$homedrive\\Windows\\System32\\dmwmicsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9C3BF62-4524-4989-8AA9-DE019D2E551F}\InprocServer32" = "$homedrive\\Windows\\System32\\Geolocation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9CF0EAE-901A-4739-A481-E35B73E47F6D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{a9d7038d-b5ed-472e-9c47-94bea90a5910}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{A9F738C8-6B96-41FA-A155-15ECD67275D0}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA000926-FFBE-11CF-8800-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA04CA0B-7597-4F3E-99A8-36712D13D676}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA0EB6FC-A8EB-4FD9-A861-0014B374076E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aa1b0e54-7593-40a0-8135-ed0b6cbc0154}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aa28fbc7-59f1-4c42-9fd8-ba2be27ea319}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA2E2C5B-0B0C-4ECC-B32B-3935269E0588}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA453FDC-5D6C-4C33-AD14-67680BF6F1DD}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aa509086-5ca9-4c25-8f95-589d3c07b48a}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA527A40-4D9A-11D2-93AD-00805F853771}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\dsprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA544D41-28CB-11D3-BD22-0000F80849BD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA558FA2-A340-4a23-B765-614BA827CE1D}\InprocServer32" = "$homedrive\\Windows\\system32\\sppinst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA65DD7C-83AC-48C0-A6FD-9B61FEBF8800}\InProcServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA67AF38-4AE0-4B49-BA56-ADF78DBED45A}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA70DDF4-E11C-11D1-ABB0-00C04FD9159E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\viewprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aa7313a4-03d8-44bb-b60d-0dcb7bdabf8c}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA7E3C50-864C-4604-BC04-8B0B76E637F6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA87D6C0-777A-4483-B5BF-07B8668B2225}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastInputMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA94DCC2-B8B0-4898-B835-000AABD74393}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AA9D2C93-523E-4787-919D-4F698ADE2925}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aaa0d501-ec92-4c17-a930-90dd0d2f6c95}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Editing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAA27100-EFAD-11E3-AC10-0800200C9A66}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxInputRouter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}\InProcServer32" = "$homedrive\\Windows\\system32\\wpdshserviceobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAAE762B-A6A2-4c45-B5D8-9A83AFB6BB70}\InprocServer32" = "$homedrive\\Windows\\system32\\DRIVERS\\UMDF\\wpdmtpdr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAB8F985-EADA-428B-8636-270F58E1F1EF}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAB9C730-3C6C-4faa-A87E-77198D9E2A57}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AABE54D4-6E88-4c46-A6B3-1DF790DD6E0D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AABFB2FA-3E1E-4A8f-8977-5556FB94EA23}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAC2B978-266D-48ae-AA28-60A3EBB872D0}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAC46A37-9229-4fc0-8CCE-4497569BF4D1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAC85F70-3395-4F9B-A609-D625A2F07CEF}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAD4BDD3-81AA-3ABC-B53B-D904D25BC01E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AADFA891-4F4D-46E6-BF6B-E9A260931A01}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAEAE72F-0328-4763-8ECB-23422EDE2DB5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\policman\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAF322D7-795E-4485-A92F-3D3F39269EDE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Perception\.Stub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AAFB92B5-B5FE-4DCE-B943-9CC1FFAF58C5}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ab0b37ec-56f6-4a0e-a8fd-7a8bf7c2da96}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB0D8B78-D7F8-4249-AC86-3A3E3D7BFBC4}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHT\\ChtChangjieDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB1890A0-E91F-11D2-BB91-00C04F8EE6C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB2A519B-03B0-43CE-940A-A73DF850B49A}\InProcServer32" = "$homedrive\\Windows\\system32\\StorageUsage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB2ECE69-56D9-4F28-B525-DE1B0EE44237}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB300F71-01AB-46D2-AB6C-64906CB03258}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB40A5C1-804B-40BD-9DFE-A640691C6956}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\\\WMIPJOBJ\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB517586-73CF-489c-8D8C-5AE0EAD0613A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB558A90-77EC-3C9A-A7E3-7B2260890A84}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB790AA1-CDC1-478a-9351-B2E05CFCAD09}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB7BC55E-4BD8-430E-ADB2-D29A5DA20624}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB824EEF-7CF4-4c55-B415-B2D9CD30FE9E}\InProcServer32" = "$homedrive\\Windows\\System32\\prauthproviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB944620-79C6-11D1-88F9-0080C7D771BF}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AB968F1E-E20B-403A-9EB8-72EB0EB6797E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoxev\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABB27087-4CE0-4E58-A0CB-E24DF96814BE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABBA0005-3075-11D6-88A4-00B0D0200F88}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABBA0006-3075-11D6-88A4-00B0D0200F88}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABBA001B-3075-11D6-88A4-00B0D0200F88}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABBB0332-21FC-4F9A-BBF0-C329B38611D9}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABCA6774-29B5-4aff-A776-C2551AE0FFE6}\InProcServer32" = "$homedrive\\Windows\\system32\\windows\.ui\.immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{abd2ad24-f1ff-47ad-82de-3a1edf38e7a1}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABDBD0B1-7D54-49fb-AB5C-BFF4130004CD}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABE40035-27C3-4A2F-8153-6624471608AF}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{abeb77d3-f67a-4e33-a412-86b310bc274e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Protection\.PlayReady\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ABF3F496-FB11-4C47-A3A2-0B97911ADAA9}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC14BBFA-7475-4E47-87A2-F36C170A7F66}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC3315C9-F481-45D7-826C-0B406C1F64B8}\InprocServer32" = "$homedrive\\Windows\\System32\\msac3enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC3AC249-E820-4343-A65B-377AC634DC09}\InProcServer32" = "$homedrive\\Windows\\System32\\BioCredProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC48FFE0-F8C4-11d1-A030-00C04FB6809F}\InprocServer32" = "$homedrive\\Windows\\System32\\tapi3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC4CE3CB-E1C1-44CD-8215-5A1665509EC2}\InprocServer32" = "$homedrive\\Windows\\system32\\wmphoto\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC59432D-8659-48C4-A584-AFEBC920256F}\InprocServer32" = "$homedrive\\Windows\\System32\\WpnClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC6B8DC1-3257-4a70-B1B2-A9C9215659AD}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC75D454-9F37-48f8-B972-4E19BC856011}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ac7d68a4-c4e5-450f-a89b-d630b25bb996}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC7ED533-3E39-4350-A0E3-CCB7D8043825}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl" | |
| "HKEY_CLASSES_ROOT\CLSID\{AC82FF6D-E524-4c0f-8D0B-0C74C1ECAAEA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aca502b5-75d0-45ef-8c18-cb84c4b48ee5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACA965C4-D406-4531-B6D9-C099D5D8EDEA}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACA97E00-0C7D-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACAA48D5-5C1E-45EB-8AC4-6D84B9F3A58E}\InProcServer32" = "$homedrive\\Windows\\System32\\AzureSettingSyncProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACC56A05-E277-4B1E-A43E-7A73E3CD6E6C}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACD453BC-C58A-44D1-BBF5-BFB325BE2D78}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACD71912-705E-4C3E-90BD-14F31595D361}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ACE52D03-E5CD-4b20-82FF-E71B11BEAE1D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ace575fd-1fcf-4074-9401-ebab990fa9de}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{acfd176d-fea8-4afc-a4a1-c97def2baf71}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ad08dcc2-4e35-4486-9d49-547cbd30942d}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD08DFE3-6C43-4CCD-A0E6-97EDE7B195BD}\InprocServer32" = "$homedrive\\Windows\\System32\\hascsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ad0f2733-6602-4c43-8f9a-df04977de988}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD1841CF-0EC5-4b59-ACC4-8329EED299F9}\InProcServer32" = "$homedrive\\Windows\\system32\\ndfhcdiscovery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD181A86-8540-4EAA-A3D5-68FD744F9A89}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD325995-B74D-41E4-A240-C472A50D41C2}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD326409-BF80-3E0C-BA6F-EE2C33B675A5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD374A9E-D7FC-453A-A146-16535FE9ECC1}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvxdplcy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD4C1B00-4BF7-422F-9175-756693D9130D}\InProcServer32" = "$homedrive\\Windows\\System32\\mfps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD581B00-7B64-4E59-A38D-D2C5BF51DDB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPMediaSharing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD5FBC96-ACFE-46bd-A2E2-623FD110C74C}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD664904-FE8A-3217-BBF5-E6AB1D998F5F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD6B3B23-C74A-4B2C-839F-C1149CB42E7F}\InProcServer32" = "$homedrive\\Windows\\System32\\pwlauncher\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD6C8934-F31B-4F43-B5E4-0541C1452F6F}\InprocServer32" = "$homedrive\\Windows\\System32\\WSTPager\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD7572AD-86A5-4211-BC54-A438E550A740}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ad763fa6-3b90-41ab-bd44-4f832beee55f}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD76E74F-F730-4813-BF9F-BD139C13E9BF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AD8E510D-217F-409B-8076-29C5E73B98E8}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ad974ae2-e292-4083-a280-0342d68daf55}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADAB9B51-4CDD-4af0-892C-AB7FA7B3293F}\InProcServer32" = "$homedrive\\Windows\\System32\\gpsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{adacedf4-9c34-430e-a65f-488f0ab491da}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADB880A4-D8FF-11CF-9377-00AA003B7A11}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADB9F5A4-E73E-49b8-99B6-2FA317EF9DBC}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADBDEF00-9A50-4DC6-B945-CB95B4233E3C}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADC6CB82-424C-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADC6CB86-424C-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADC6CB88-424C-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{add36aa8-751a-4579-a266-d66f5202ccbb}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADE27590-4C84-4ABB-AE56-8233CC73D80F}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADE6444B-C91F-4E37-92A4-5BB430A33340}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ADF95821-DED7-11D2-ACBE-0080C75E246E}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE03A0A5-DE98-45ff-8016-DDEFF70BCF61}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE0DB8A9-8183-4FA1-AFDA-C3506921D7E3}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE17FC35-F74E-45DB-9CCF-35193D4F7622}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE1E00AA-3FD5-403C-8A27-2BBDC30CD0E1}\InprocServer32" = "$homedrive\\Windows\\system32\\hnetcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ae2079d8-d764-4d79-ab4d-3543847a1a2c}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE24FDAE-03C6-11D1-8B76-0080C744F389}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ae31b729-d5fd-401e-af42-784074835afe}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceDirectoryClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ae4bbad2-f56a-4dfd-af17-79c03af451d0}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE53ED01-CAB4-39CE-854A-8BF544EEEC35}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{ae5c828c-66a3-46e5-83f0-5ba1d7aa7752}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Sockets\.PushEnabledApplication\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE62C05D-0A02-30E7-9B51-E9D4DD157207}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\InProcServer32" = "$homedrive\\Windows\\system32\\msctfui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE6C819B-3A9B-4261-B4E5-14285EC46705}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE8AFD54-5B57-4961-8A9B-12ADF23B696A}\InprocServer32" = "$homedrive\\Windows\\System32\\cmstplua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AE9472BF-B0C3-11D2-8D24-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AEB16279-B750-48f1-8586-97956060175A}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfasfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AEB2BF55-0B96-456C-A57F-B742ACD4775B}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsLexiconUpdateDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aeb6c755-2546-4881-82cc-e15ae5ebff3d}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVPXENC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AEB84C83-95DC-11D0-B7FC-B61140119C4A}\InProcServer32" = "$homedrive\\Windows\\System32\\dmview\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{AEC17CE3-A514-11D1-AFA6-00AA0024D8B6}\InProcServer32" = "$homedrive\\Windows\\System32\\dmsynth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AED5B1AA-CB76-41A7-B534-F99D4D6976F2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Shell\.ServiceHostBuilder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AED6483E-3304-11d2-86F1-006008B0E5D2}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AED6483F-3304-11d2-86F1-006008B0E5D2}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AEE2420F-D50E-405C-8784-363C582BF45A}\InProcServer32" = "$homedrive\\Windows\\system32\\DevicePairingFolder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{aef771da-f489-423e-bb0f-634ba8b0c56d}\InProcServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF02484C-A0A9-4669-9051-058AB12B9195}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{af076a15-2ece-4ad4-bb21-29f040e176d8}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{af13dff0-e40f-4e6b-b4cd-009b81be6f6d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF2440F6-8AFC-47d0-9A7F-396A0ACFB43D}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF279B30-86EB-11D1-81BF-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF2AC6EE-2B16-4756-9475-F319E543EFAA}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF4B1274-B78A-4979-AEF5-20E78FEE102E}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF4F6510-F982-11d0-8595-00AA004CD6D8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF56838E-3362-472E-997E-C3370B486802}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{af5c828c-66a3-35d4-9401-5ba1d7aa7752}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Vpn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF60343F-6C7B-3761-839F-0C44E3CA06DA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF604EFE-8897-11D1-B944-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF65E2EA-3739-4e57-9C5F-7F43C949CE5E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF679D58-078E-48D4-A1E3-474F10DF76B8}\InProcServer32" = "$homedrive\\Windows\\system32\\cfmifsproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF75D6AD-E307-4052-8CB1-BF2052E734F0}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF8C5F8A-9999-3E92-BB41-C5F4955174CD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF8FA762-6286-46F6-9FA7-7D63B655C22F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF95DC76-16B2-47F4-B3EA-3C31796693E7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{af9d2278-060f-4a17-99a9-5044f7f843a8}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AF9F2C0D-6B9F-4e32-A94D-A3E235A31BF7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFA470FE-371D-4F98-9592-39E3C7227E5C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFAEF10F-1BC4-351F-886A-878A265C1862}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFB40FFD-B609-40A3-9828-F88BBE11E4E3}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFB6C280-2C41-11D3-8A60-0000F81E0E4A}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFBA6B42-5692-48EA-8141-DC517DCF0EF1}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFC00D5E-BE1D-44A2-B875-7F7BDFAB1A18}\InProcServer32" = "$homedrive\\Windows\\System32\\CfgSPPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFC681CF-E82F-361A-8280-CF4E1F844C3E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFC7B6DE-D642-41B7-AB0C-A01019510741}\InProcServer32" = "$homedrive\\Windows\\System32\\vp9fs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{afd198ac-5f30-4e89-a789-5ddf60a69366}\InprocServer32" = "$homedrive\\Windows\\system32\\BthRadioMedia\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFD7F94B-1627-436c-80C8-B464AA21CAD3}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{afe7d3f2-6d6d-4c15-838f-f38c19065629}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFE9E2F0-5BBA-4169-A33B-EE3727AC3482}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFEE8F8B-2FE6-4382-A0DE-8D713258B95E}\InProcServer32" = "$homedrive\\Windows\\System32\\LicensingCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFEF65AD-4577-447A-A148-83ACADD3D4B9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{AFFA1DA9-C637-4e6b-A0F3-276889D09F14}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B01106AD-25A5-4E11-A68A-BB880287DF53}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b020b123-89b9-46c6-8509-a8bf70447fea}\InProcServer32" = "$homedrive\\Windows\\system32\\tapilua\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0210780-89CD-11d0-AF08-00A0C925CD16}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B021FF57-A928-459c-9D6C-14DED0C9BED2}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0271158-70D2-4C5B-9F94-76F549D90FDF}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBSink\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b02a85bd-7898-4435-8e54-b300b866c385}\InprocServer32" = "$homedrive\\Windows\\System32\\advancedemojids\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B02E0336-9E13-4E74-8A0A-7F04A273ADE8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Connectivity\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B039282F-BE70-44BC-9862-966F4E95072F}\InProcServer32" = "$homedrive\\Windows\\System32\\Family\.Cache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0395DA5-6A15-4E44-9F36-9A9DC7A2F341}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B03B16C7-35A7-4A55-BEF1-8876E1CE2F45}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32" = "$homedrive\\Windows\\system32\\execmodelproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B03C7B74-40A6-4ED9-A900-A5873C15E8F1}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b040ea9e-3f5e-48c9-bcdc-304e9d02851f}\InprocServer32" = "$homedrive\\Windows\\System32\\sdengin2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B05DABD9-56E5-4FDC-AFA4-8A47E91F1C9C}\InprocServer32" = "$homedrive\\Windows\\System32\\encapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b07a5d8d-67f8-438f-b69d-4372fbe1dbb7}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B07CAC5C-9786-4F8A-8DC7-902A6386F3E7}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.Devices\.SerialCommunication\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B084785C-DDE0-4d30-8CA8-05A373E185BE}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetsrc|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B091E540-83E3-11CF-A713-0020AFD79762}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0A2AB46-F612-4469-BEC4-7AB038BC476C}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmicookr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b0a38a0c-0437-4e02-9b96-27f998020f46}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSoftwareInstallationClient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0A8F3CF-4333-4bab-8873-1CCB1CADA48B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{b0c43320-2315-44a2-b70a-0943a140a8ee}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsServices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0D17FC2-7BC4-11d1-BDFA-00C04FA31009}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0D2B535-12E1-439F-86B3-BADA289510F0}\InProcServer32" = "$homedrive\\Windows\\System32\\WiFiCloudStore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0D2C6E7-BF19-4360-9137-D951C9C7CA42}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ServiceDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0DC057D-FA13-4CB3-B54D-4CC05E125781}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0DDD260-9E44-4bf2-8602-6D9CE1D0B94F}\InprocServer32" = "$homedrive\\Windows\\system32\\ucmhc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0EDF163-910A-11D2-B632-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0F1B174-AC86-452D-BAE7-C105F0F98C5A}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B0F64827-79BB-3163-B1AB-A2EA0E1FDA23}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B115690A-EA02-48D5-A231-E3578D2FDF80}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC\\IMTCTIP\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{B11CD547-573E-4D53-8719-D55634E3F458}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b11d16d0-e195-4ca6-bbd5-1254ec098953}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B12AE898-D056-4378-A844-6D393FE37956}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b1325ef5-dd4d-4988-a2b3-c776ad45d0d6}\InProcServer32" = "$homedrive\\Windows\\system32\\shutdownux\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B138E92F-F502-4adc-89D9-134C8E580409}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B15B8DC0-C7E1-11d0-8680-00AA00BDCB71}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b15c0e47-c391-45b9-95c8-eb596c853f3a}\InprocServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B164BCEE-41B3-4F70-A53C-2ACA322DCCCB}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1840AE4-5D39-4B8E-BEDD-82F251A5FF70}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1853640-8B46-446C-A262-C04A45486885}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b1aebb5d-ead9-4476-b375-9c3ed9f32afc}\InprocServer32" = "$homedrive\\Windows\\System32\\sppcext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1AEC16F-2383-4852-B0E9-8F0B1DC66B4D}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1B77C00-C3E4-11CF-AF79-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1E29D59-A675-11D2-8302-00C04F8EE6C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1EBFC28-C9BD-47A2-8D33-B948769777A7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B1F250C3-B7F8-4DA3-9C8D-382602F02424}\InprocServer32" = "ole32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B20D5479-88CB-418e-A2F6-B4343B7680FE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B210D694-C8DF-490d-9576-9E20CDBC20BD}\InprocServer32" = "$homedrive\\Windows\\System32\\mscms\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b21858c6-9711-4257-99c8-5c0084bebce1}\InProcServer32" = "$homedrive\\Windows\\System32\\dafDockingProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2215BF3-A946-416A-8854-DD4FB40982B2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.SmartCards\.Phone\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2236232-14ED-49C6-AB56-C1CF2E2D0C5D}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxInputRouter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B22C3339-87F3-4059-A0C5-037AA9707EAF}\InProcServer32" = "$homedrive\\Windows\\system32\\MFMediaEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2420E45-60BC-4466-AD5C-369EB092BEF8}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2445657-090D-11e4-AEDA-B4B52FE06611}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b27b520e-46db-4720-b9c5-5f80acab23a4}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b289af55-2833-44e0-a46f-96e5ebbd5c1b}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{b2952b16-0e07-4e5a-b993-58c52cb94cae}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Notepad\+\+\\NppShell_06\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B29D466A-857D-35BA-8712-A758861BFEA1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2A7FD52-301F-4348-B93A-638C6DE49229}\InprocServer32" = "$homedrive\\Windows\\system32\\wmpshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2B4A4D1-2754-4140-A2EB-9A76D9D7CDC6}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b2b4fb61-d2dd-4ddd-8001-20f98c6577ef}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{b2bcff59-a757-4b0b-a1bc-ea69981da69e}\InprocServer32" = "$homedrive\\Windows\\system32\\azroles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b2cabfe4-fe04-42b1-a5df-08d483d4d100}\InprocServer32" = "$homedrive\\Windows\\system32\\amsiproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2D7135C-01DB-4EE1-AA28-87AC790C5D1E}\InProcServer32" = "$homedrive\\Windows\\system32\\lockcontroller\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2E8D89A-7A99-4b43-9638-DF4FF83EAC11}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2F2E083-84FE-4a7e-80C3-4B50D10D646E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2F3A67C-29DA-4C78-8831-091ED509A475}\InprocServer32" = "$homedrive\\Windows\\System32\\MSNP\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{B2F586D4-5558-49D1-A07B-3249DBBB33C2}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b3179149-2b99-48b2-b44b-11aa2034c1a3}\InprocServer32" = "$homedrive\\Windows\\system32\\cngprovider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B31C5FAE-961F-415b-BAF0-E697A5178B94}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B31C6004-7EFE-4893-BD6F-B30F85F6D445}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Display\.BrightnessOverride\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B323F8E0-2E68-11D0-90EA-00AA0060F86C}\InProcServer32" = "$homedrive\\Windows\\System32\\sti\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B32D3949-ED98-4DBB-B347-17A144969BBA}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B32F4002-BB27-45FF-AF4F-06631C1E8DAD}\InProcServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B33F0D7A-1571-4022-B710-D26E9B87DEB8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3408A2F-8DDA-1197-FBD5-2CE69A2DEFC0}\InprocServer32" = "$homedrive\\Windows\\system32\\eqossnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3408A2F-8DDA-1197-FBD5-2CE69A2DEFC1}\InprocServer32" = "$homedrive\\Windows\\system32\\eqossnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3584E15-EB81-4A06-AEE4-38B4DAE71C54}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B35913A2-BE2E-4FA6-978C-3B130A7EFB98}\InprocServer32" = "$homedrive\\Windows\\System32\\QuickActionsPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B359B02E-55E2-4B7D-B582-01089BAAA6AE}\InProcServer32" = "$homedrive\\Windows\\System32\\XblGameSaveProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B35EA47E-FA71-34FD-B7E2-EBC050A4FB5A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B37BF7D7-B78E-4465-98DE-71732453B03D}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3AADFEA-8404-4CBE-A62E-B0B715412C9E}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcRefreshTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3B76E11-BD89-492C-A174-136D65742E96}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3CE8400-5847-41CA-BA98-428676007696}\InprocServer32" = "$homedrive\\Windows\\System32\\FsNVSDeviceSource\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3E82D1C-E5A9-49a5-A189-2A38ACC1B2D7}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3EE7802-8224-4787-A1EA-F0DE16DEABD3}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3FB2931-D1BC-44C8-96A7-A5401DFBD4E3}\InProcServer32" = "$homedrive\\Windows\\system32\\MFMediaEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3FD5602-EB0F-415E-9F32-75DA391D6BF9}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3FE7F3F-B175-4159-A2DC-0F7F6606A878}\InProcServer32" = "$homedrive\\Windows\\System32\\ClipboardServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B3FF88A4-96EC-4CC1-983F-72BE0EBB368B}\InprocServer32" = "$homedrive\\Windows\\System32\\gpsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B401C5EB-8457-427F-84EA-A4D2363364B0}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B406AC70-4D7E-3D24-B241-AEAEAC343BD9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4077BA8-776F-4695-9D26-D786A03C4364}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B41DB860-64E4-11D2-9906-E49FADC173CA}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\WinRAR\\rarext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B43C4EEC-8C32-4791-9102-508ADA5EE8E7}\InprocServer32" = "$homedrive\\Windows\\System32\\encapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B43D0B31-3495-40B5-8416-8AB30BC37E3C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\appxman\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b4414d52-69c9-4666-b62a-d82620bed434}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B44392DA-499B-446b-A4CB-005FEAD0E6D5}\InProcServer32" = "$homedrive\\Windows\\System32\\MFMediaEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4463941-6512-4B2D-A54E-107DD721B4E1}\InprocServer32" = "$homedrive\\Windows\\system32\\Win32AppInventoryCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4601B57-1905-40E0-A33C-804B3AD24F2E}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagnosticLogCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B488CB7E-98BC-4FA9-9FCA-E461728EFDCE}\InProcServer32" = "$homedrive\\Windows\\System32\\SystemSettings\.DataModel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B490264C-8D8F-40FD-B1BE-CD69AD779EC1}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B49FE003-49CC-4f36-BD61-9E6AE9C2175C}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4A02D72-2A34-41DB-B37F-05DFDB27E933}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4A6821D-4D2E-40DD-9EE0-89C2CD07BF69}\InprocServer32" = "$homedrive\\Windows\\System32\\storagewmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4B3AECB-DFD6-11d1-9DAA-00805F85CFE3}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4BBC560-45F3-46F6-A253-AB6A13C4CE75}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{b52ab030-8ef5-4621-b480-4d20975d1d26}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B532B342-0E34-448B-9EDF-1D55C04041F8}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B53EBC0C-2251-4AE2-9818-FD6AAF843EC2}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b545fb2e-878f-4400-8a6b-ed42a63a8b14}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B54BE40D-6E32-461A-8187-C1D35FD46580}\InProcServer32" = "$homedrive\\Windows\\system32\\mmgaproxystub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B54E38F8-17FF-3D0A-9FF3-5E662DE2055F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B54E85D9-FE23-499F-8B88-6ACEA713752B}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B54F3742-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B54F3743-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5607793-24AC-44c7-82E2-831726AA6CB7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5730A90-1A2C-11CF-8C23-00AA006B6814}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{b5866878-bd99-11d0-b04b-00c04fd91550}\InprocServer32" = "($homedrive\\Windows\\system32\\rpcrt4\.dll|rpcrt4\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B591A192-A405-4FC3-8323-4C5C542578FC}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5965ACC-842D-4ABE-A618-9292BB3EE666}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5A123C0-3893-4F1C-8599-00F4B82F2C99}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchph\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b5a60a9e-a4c7-4a93-ac6e-0b76d1d87dc4}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5C8B898-0074-459F-B700-860D4651EA14}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b5cdee74-7392-4954-9aca-8a1338ec04c1}\InprocServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5CFEB0E-9C01-4942-A5CB-F62EB09D808F}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5EBAFB9-253E-4A72-A744-0762D2685683}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b5f8350b-0548-48b1-a6ee-88bd00b4a5e7}\InprocServer32" = "$homedrive\\Windows\\System32\\oleacc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B5F8FB3B-393F-4F7C-84CB-504924C2705A}\InProcServer32" = "$homedrive\\Windows\\system32\\msctfp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B60D6653-FDE4-4045-B5FD-F47B1BD45CA0}\InProcServer32" = "$homedrive\\Windows\\System32\\WinRtTracing\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B62A910C-9FDD-4F19-9993-16DA9009A61C}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6390DB1-4C44-4BA4-BA51-BBF4BED47C37}\InProcServer32" = "$homedrive\\Windows\\System32\\XblAuthManagerProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B64016F3-C9A2-4066-96F0-BD9563314726}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B65449EC-4319-4C96-9ABD-E9257D00DB84}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetAdapterCim\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b67c0b5e-c0ff-41c6-885d-5bdcd71837aa}\InProcServer32" = "$homedrive\\Windows\\system32\\ustprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B68DE4BD-6824-42CD-9581-CD571249411D}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetNat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B699E5E8-67FF-4177-88B0-3684A3388BFB}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6AFFB50-6F46-49B1-B912-C3F7A876CCCA}\InProcServer32" = "$homedrive\\Windows\\System32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b6baabcf-8c41-4ccc-82e7-bc867662b833}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6D83264-AC99-4C7B-B230-5A15CE7A1F72}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b6dc98b1-0bec-45e1-b2e4-3a2d943f0be4}\InprocServer32" = "$homedrive\\Windows\\system32\\dpapiprovider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6EB52D5-BB1C-3380-8BCA-345FF43F4B04}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533}\InprocServer32" = "$homedrive\\Windows\\system32\\WinOpcIrmProtector\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B7041BBE-2E0D-4337-A896-3CDA33A8A0F9}\InProcServer32" = "$homedrive\\Windows\\System32\\provisioningcommandscsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B71E484D-93ED-4B56-BFB9-CEED5134822B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B727ED66-3CF2-42fa-A5DA-C08121B33443}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B72F8FD8-0FAB-4dd9-BDBF-245A6CE1485B}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b7373566-8ff2-45d8-af1f-da39f289bcf9}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B742E827-EDE6-400F-8312-CD522198BE86}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B744304E-083F-42d0-B969-A9F4EFC67610}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b75ac000-9bdd-11d0-852c-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b77b1cbf-e827-44a9-a33a-6ccfeeaa142a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B786ECB7-8942-4FE1-9DCD-230E30DE5AFF}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B79848C3-4F26-4D9D-BF1D-81FDF2704CF8}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B7B4F949-65EE-47C0-A6FA-586844E15B68}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B7BBD408-F09C-4aa8-B65E-A00B8FE0F0B9}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B7BFFB5A-EFA8-4D8C-BBDE-C8D5FAAF54A1}\InprocServer32" = "$homedrive\\Windows\\system32\\WofTasks\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b7f5540c-5012-4acd-a4c6-b4b7efdcd851}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.internal\.shell\.broker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8069D2E-4A49-475A-8FD2-533992303C2C}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B80AB0A0-7416-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B81CB5ED-E654-399F-9698-C83C50665786}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B81FF171-20F3-11d2-8DCC-00A0C9B00525}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B832674A-F36F-4780-AE4C-1566AAE3A4F4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8445657-C149-4F95-8CFF-49D39B615F27}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b855b632-7dfb-4826-a172-3600ebd86948}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b85ea052-9bdd-11d0-852c-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B862BC49-E7E7-427E-868A-DE0F7A75BC07}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B86BB667-9FEC-4285-A03A-10BC98C1CA1C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B86F86AF-AA5D-47C2-AB44-17AB64F907B4}\InprocServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B87BEB7B-8D29-423F-AE4D-6582C10175AC}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B890AF56-AC8C-11D1-8CB7-00C04FC3261D}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b8967f85-58ae-4f46-9fb2-5d7904798f4b}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8A27942-ADE7-4085-AA6E-4FADC7ADA1EF}\InprocServer32" = "$homedrive\\Windows\\System32\\PNPXAssoc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8A3CFD8-6F13-4B39-8FE9-0CA01EF372E0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\TecProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b8a97152-cda0-4d4d-9526-49d044faf1fa}\InProcServer32" = "$homedrive\\Windows\\System32\\MicrosoftAccountWAMExtension\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8B3F797-E237-4D1C-998A-1411D95B8C82}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8BE1E19-B9E4-4ebb-B7F6-A8FE1B3871E0}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8C54ECD-6BCE-4664-8DFD-016B751870D0}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B8EFFCEF-7AFA-4C39-8E96-211D1846B9E9}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.ui\.storage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9033E87-33CF-4D77-BC9B-895AFBBA72E4}\InprocServer32" = "$homedrive\\Windows\\System32\\mapsupdatetask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9162A23-45F9-47CC-80F5-FE0FE9B9E1A2}\InprocServer32" = "$homedrive\\Windows\\System32\\bidispl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b918dbc4-162c-43e5-85bf-19059a776e9e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b91a4db4-3630-11dc-9eaa-00161718cf63}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{B91D5831-B1BD-4608-8198-D72E155020F7}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B927879C-95D3-44BE-81C5-D76FC25ED221}\InprocServer32" = "$homedrive\\Windows\\System32\\ActiveSyncCsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B92E345D-F52D-41F3-B562-081BC772E3B9}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B932D772-B787-4FBD-B82F-B2499A8269A4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B957A89F-1F2C-4D0F-ABEE-E61E5F698B22}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGSpeakerPropPage\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b958f73c-9bdd-11d0-852c-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B96F67A2-30C2-47E8-BD85-70A2C948B50F}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B977CB2D-EC6E-4A8F-BFFE-D18682BB0D52}\InProcServer32" = "$homedrive\\Windows\\system32\\sharemediacpl\.(dll|cpl)" | |
| "HKEY_CLASSES_ROOT\CLSID\{b9815375-5d7f-4ce2-9245-c9d4da436930}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B98D13E7-55DB-4385-A33D-09FD1BA26338}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9931692-A2B3-4FAB-BF33-9EC6F9FB96AC}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9A160BE-0EB0-46A4-9942-30EB90BD792D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{b9b61a03-caa7-43bb-b859-acd26d73b3f7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9BC2A50-43C3-41AA-A086-5DB14E184BAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputSwitch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9BC2A50-43C3-41AA-A087-5DB14E184BAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputSwitch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9BC2A50-43C3-41AA-A092-5DB14E184BAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputSwitch\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9E84FFD-AD3C-40A4-B835-0882EBCBAAA8}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9F8535E-BF74-41C2-A6A6-7124442450DC}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{B9F8AC3E-0F71-11D2-B72C-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA0F250B-EBED-4A99-B386-E0260524FA54}\InProcServer32" = "$homedrive\\Windows\\System32\\HoloSI\.PCShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA126AD8-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA126AE0-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA126AE1-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA126AE2-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA126E01-2166-11D1-B1D0-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\system32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA126F01-2166-11D1-B1D0-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\system32\\netshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA441419-0B3F-4FB6-A903-D16CC14CCA44}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA4EAC04-AFCE-441A-A4F0-C4A97545425A}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA5BDA58-9D0A-47BB-93D1-6655AEDA6517}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA69F7E1-C6D8-4fb1-924A-A5308B99391C}\InprocServer32" = "$homedrive\\Windows\\System32\\ihds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA75691E-9FF3-492C-9053-4A91A40C556E}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA7C0D29-81CA-4901-B450-634E20BB8C34}\InprocServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ba818ce5-b55f-443f-ad39-2fe89be6191f}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA8735EF-E3A9-4F1B-BADD-DBF3A5909915}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA9BB214-D930-4206-8F8F-BF0F1EAA4A6B}\InProcServer32" = "$homedrive\\Windows\\system32\\wsmplpxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BA9FCBAC-3AE4-46BF-B7BA-669498CCC8DE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BAB56818-0360-4D47-BD5F-8F0683737DA8}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentApis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BABC0FE1-E9B9-49A3-BBE6-3F16B71DC052}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BADCC35D-8542-4A5C-A457-0ECCCF62508A}\InprocServer32" = "$homedrive\\Windows\\system32\\DscCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BAE3E62C-37D4-49AC-A6F1-0E485ECD6757}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BAE86DDD-DC11-421C-B7AB-CC55D1D65C44}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BAEA8DC9-45F5-4DF8-A27F-2A277D524B15}\InprocServer32" = "$homedrive\\Windows\\System32\\WiaExtensionHost64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{baffdff4-240b-4c36-8173-70c8301d7753}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB002029-DC5F-45FC-A8D9-A6BE23A748AB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB0D7187-3C44-11D2-BB98-3078302C2030}\InprocServer32" = "$homedrive\\Windows\\system32\\cfgbkend\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB0DB60E-FFA0-4756-9F04-A0FCE6A97809}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB2D41DF-7E34-4F06-8F51-007C9CAD36BE}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB2FEB41-0FF4-4BE9-A9A8-DAD0FAE602AA}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHT\\ChtQuickDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bb32d5df-dbe0-4776-82b3-0dc0d48afc81}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB331DDE-CA08-4436-9C2F-4A84964703F4}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.ApplicationData\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB44391D-6ABD-422f-9E2E-385C9DFF51FC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB49EAD1-0DC5-41FA-AFE0-8EFBDEAA4AF6}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB530C63-D9DF-4B49-9439-63453962E598}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB5331F1-D8FF-4DDB-8A8F-2DF901123B33}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB68A765-9FB7-4D2C-A423-7AE4CD4B006C}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcWebFilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB847B8A-054A-11d2-A894-0000F8084F96}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB89EB37-081E-4F5D-BA35-8D636BB47440}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BB918E32-2A5C-4986-AB40-1686A034390A}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bba13638-b802-497a-8403-a5fe8689f814}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBA922ED-0AB7-40A7-9E69-495984866A23}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAudDecMFT\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bbb5d0e2-6f4b-4c31-8744-22d0029c4b40}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBB7D605-8639-49D0-849E-32C4A5DBB9C3}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvgames\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBB9389D-CB46-4855-ADA6-4570E7342B3C}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBC035D1-E5A1-44F5-A166-E70DAED1CB02}\InProcServer32" = "$homedrive\\Windows\\System32\\(RADCUI|tsworkspace)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBC29D47-09E4-453E-9A08-B0AE77CAD120}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Background\.SystemEventsBroker\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBC40082-8ABB-4DDD-B1C6-4EE0A9A5DB52}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBCD9053-4392-41cf-BA00-5CB5DA2CEF71}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBD5AFE4-1417-40f7-94B3-A10719535CB4}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcat\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBD8C065-5E6C-4e88-BFD7-BE3E6D1C063B}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBEC4F81-C2BC-43a7-BD95-9738EE9B6CCA}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBEE8848-8591-468B-BB04-10E9BF479CDB}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv110p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bbeea841-0a63-4f52-a7ab-a9b3a84ed38a}\InprocServer32" = "$homedrive\\Windows\\System32\\mp3dmod\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BBFCD054-8AAC-45DE-A1EB-7B246C9028AF}\InProcServer32" = "$homedrive\\Windows\\System32\\fcon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC065925-E8EF-4EF7-B8C5-006C8DB832D5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC08386A-9952-40CD-BA50-9541D64A4B4E}\InProcServer32" = "$homedrive\\Windows\\System32\\portabledeviceclassextension\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bc13e0f8-164a-47f9-ae4b-21947643a06e}\InProcServer32" = "$homedrive\\Windows\\System32\\provisioningcsp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC197CD3-A9C8-44ED-80FB-A8229777C3C0}\InProcServer32" = "$homedrive\\Windows\\System32\\edgemanager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC271022-28CD-468A-BBB0-EF7091D8625E}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC29A660-30E3-11D0-9E69-00C04FD7C15B}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_4\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bc47fcfe-98a0-4f27-bb07-698af24f2b38}\InprocServer32" = "$homedrive\\Windows\\System32\\mfh263enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC48B32F-5910-47F5-8570-5074A8A5636A}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC5062B6-79E8-3F19-A87E-F9DAF826960C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{bc65fb43-1958-4349-971a-210290480130}\InprocServer32" = "$homedrive\\Windows\\System32\\NcdProp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BC94D813-4D7F-11d2-A8C9-00AA00A71DCA}\InprocServer32" = "$homedrive\\Windows\\system32\\iassdo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCA7305F-56F7-43A4-BF2C-BFD674E7BBE8}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatializerApo\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{bcb6a0cb-8d0a-4b14-9942-d9df601db5ea}\InProcServer32" = "$homedrive\\Windows\\System32\\BTAGService\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_7\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCC9FF78-A268-4907-97AB-109C5C62C45B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCDA6B1B-5C8A-4D3C-9053-3DCF6A6E3F01}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCDE0395-E52F-467C-8E3D-C4579291692E}\InprocServer32" = "$homedrive\\Windows\\System32\\MMDevApi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCE288DB-2EFF-4C5E-8046-7E84C71B67DE}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedPCCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bce9c4d2-0bd2-4ff7-8f94-d69225bb2c7f}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCEA735B-4DAC-4B71-9C47-1D560AFD2A9B}\InprocServer32" = "$homedrive\\Windows\\System32\\DfsShlEx\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BCED617B-EC03-420b-8508-977DC7A686BD}\InprocServer32" = "$homedrive\\Windows\\System32\\WSMAUTO\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD0D38E4-74C8-4904-9B5A-269F8E9994E9}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD24FF86-6723-47B6-9C73-DA362CA6418F}\InProcServer32" = "$homedrive\\Windows\\System32\\BackgroundMediaPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bd3739e8-3cf5-45fb-9cc3-28163c2e9ffd}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD472F60-27FA-11cf-B8B4-444553540000}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD4F77B3-70B0-4464-83A5-785F205B823B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD5EB95F-1F8A-4D34-8F1E-C90BC772E64E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bd69ecaa-ae5c-40d0-b968-7848f3778f56}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD6EDFCA-2890-482F-B233-8D7339A1CF8D}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD72668E-6BFF-4CD1-8480-D465708B336B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\InprocServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD7BDFFF-FCF5-439C-ABE7-01D244849BFB}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD84B380-8CA2-1069-AB1D-08000948F534}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD84B381-8CA2-1069-AB1D-08000948F534}\InProcServer32" = "$homedrive\\Windows\\system32\\panmap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\servdeps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD96C556-65A3-11D0-983A-00C04FC29E33}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadco\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BD96C556-65A3-11D0-983A-00C04FC29E36}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadco\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDA7BEE5-85F1-3B66-B610-DDF1D5898006}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDCD51FB-55A0-4486-908C-5240F23698AC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDE24877-01D7-4103-9704-F0EC82FA7CE9}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDE5D4D6-E450-46D2-B925-976CA3E989B4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsynthstor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDE5D4D7-E450-46D2-B925-976CA3E989B4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsynthstor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bde9ee7c-329f-4fcf-ba7a-f8c6e9b4579d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDEADEF5-C265-11D0-BCED-00A0C90AB50F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDF23680-C1E5-11D2-9EF7-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDF9E8B8-6C66-4E45-BA15-E050393DD079}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDFDB94D-C788-4AD5-A113-6169B8B774F2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDFEE05A-4418-11DD-90ED-001C257CCFF1}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDFEE05B-4418-11DD-90ED-001C257CCFF1}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BDFEE05C-4418-11DD-90ED-001C257CCFF1}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BE0A9830-2B8B-11D1-A949-0060181EBBAD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\msiprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{be318a3f-3ef0-4635-b97d-3be120dd088f}\InProcServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{be382474-a1dd-4dc9-aa9b-2a934d67bd10}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{BE43CF28-943E-4BA2-9B74-00CC57E7B1FC}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BE5C1432-6A36-47c6-9C07-9BF8ED15B9C1}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BE8E0170-72DC-11D2-952A-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BE90B672-7D6F-4318-B953-B43544A80207}\InProcServer32" = "$homedrive\\Windows\\System32\\CfgSPCellular\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BE9B3133-250B-44A5-A278-C532B7B7FF76}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32" = "$homedrive\\Windows\\pyshellext\.amd64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{beb5488b-9954-402d-89df-1aedfe18ca1c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BEB579D7-29C7-43B2-8D9C-53FC410AE9F3}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncUtil\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BEC09223-B018-416D-A0AC-523971B639F5}\InProcServer32" = "$homedrive\\Windows\\System32\\BioCredProv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{becab11e-6629-4237-a9a4-5684579392a2}\InProcServer32" = "$homedrive\\Windows\\System32\\msvproc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BED4D415-7971-4310-AA07-6AC15EA06ACC}\InprocServer32" = "$homedrive\\Windows\\system32\\winethc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BEDAA0DF-7127-402D-9617-B26DB4AF2382}\InProcServer32" = "$homedrive\\Windows\\System32\\dialclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BEF723E2-01AD-438B-A441-D0112DF5142A}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF0AC53F-D51C-419F-92E3-2298E125F004}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF3408BB-E44D-43CE-9267-03E2BD9EA52D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF426F7E-7A5E-44D6-830C-A390EA9462A3}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bf50b68e-29b8-4386-ae9c-9734d5117cd5}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF583E12-3C8B-4767-B732-CC8B34D1D65F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bf5c828c-66a3-35d4-9401-5ba1d7aa7752}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Vpn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF5CB148-7C77-4d8a-A53E-D81C70CF743C}\InprocServer32" = "$homedrive\\Windows\\system32\\msdrm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bf641d1c-29fd-4721-b3b8-48d92d35f7df}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF6E2DC4-960B-49C4-BE73-A2334AAB6D69}\InprocServer32" = "$homedrive\\Windows\\system32\\ddpchunk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF71DF7C-D121-47D9-AB50-D960D0FB223D}\InprocServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bf734930-7763-494e-a6c6-5b8a6aa37d77}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF73A0FD-9772-45A8-AA69-26D6866667DD}\InProcServer32" = "$homedrive\\Windows\\System32\\WinBioExt\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bf75430d-51dd-483f-bc3a-4542e6c9dce4}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF77196E-24EF-4A02-BD52-A626D7AE837E}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{bf78a650-d489-4360-a0b7-c32471e07692}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF85540E-0DF3-47bc-AC5D-305442704708}\InProcServer32" = "$homedrive\\Windows\\System32\\powercpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF87B6E0-8C27-11D0-B3F0-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF87B6E1-8C27-11D0-B3F0-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BF981FDD-B743-11D1-A69A-00C04FB9988E}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrvut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFC26EED-19D0-4567-801D-0DB77E84B3EF}\InProcServer32" = "$homedrive\\Windows\\System32\\ApplicationControlCSP\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFC7DC7B-8F11-4A40-8DB2-207302E2D61B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFC880F1-7484-11d0-8309-00AA00B6015C}\InProcServer32" = "$homedrive\\Windows\\System32\\inseng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFCD4A0C-06B6-4384-B768-0DAA792C380E}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFD468D2-D0A0-4bdc-878C-E69C2F5B435D}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFD55B0B-D784-47ED-8359-878DB8F23271}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFD6E7B9-2FDE-413E-9AC9-52FC8656908C}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFDE0400-02ED-40A6-BC30-C7AF99D2D588}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\LGJoyDriverAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFDE0402-02ED-40A6-BC30-C7AF99D2D588}\InProcServer32" = "$homedrive\\(Program Files\\Logitech\\Direct Input Force Feedback\\1_1_5\\jerry_forcefeedback_x64\.dll|Program Files\\Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFE18E9C-6D87-4450-B37C-E02F0B373803}\InProcServer32" = "$homedrive\\Windows\\System32\\(usoapi|wuapi)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFEC0C93-0B7D-4F2C-B09C-AFFFC4BDAE78}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{BFFECCA7-4069-49F9-B5AB-7CCBB078ED91}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c00d8ee5-7325-49b5-b83d-e4f42ba7e073}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C016A313-9606-36D3-A823-33EBF5006189}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C01B9BA0-BEA7-41BA-B604-D0A36F469133}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C02C9230-46BD-4F89-BDFD-81A2539E2A01}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03880A5-0B5E-39AD-954A-CE0DCBD5EF7D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03A0FA8-76AC-4e62-B42A-1F8D8186B0F6}\InProcServer32" = "$homedrive\\Windows\\System32\\prauthproviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8500-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8511-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8512-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8513-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8521-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8522-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8523-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8524-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8531-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8532-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8533-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8534-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8541-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8542-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8551-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8552-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8553-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8554-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8555-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8556-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8557-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8561-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8565-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8566-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8568-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8569-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8571-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8572-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8581-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8582-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8583-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8584-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8585-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\(rasgcw|xwizards)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8586-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8588-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8591-781E-49A1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C03E8592-781E-49A1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c047c5a9-c407-4a1e-ad7f-11d0861344b7}\InprocServer32" = "$homedrive\\Windows\\System32\\L2SecHC\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c04b329e-5823-4415-9c93-ba44688947b0}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C04D65CF-B70D-11D0-B188-00AA0038C969}\InProcServer32" = "$homedrive\\Windows\\system32\\mlang\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C05D20C2-15E5-4567-95C7-1546EF9C52F3}\InprocServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.conversationalagent\.proxystub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0932C62-38E5-11d0-97AB-00C04FC2AD98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqloledb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c0aa878e-97a5-44df-b7ef-2e732f7b2fec}\InprocServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC\\applets\\imtccac\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0AA9D93-2EF5-47FB-960C-F90FC644B48E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPJOBJ\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0AB2A0D-F2D2-46E2-9DF9-8885A424C29A}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0B19DEF-9E2A-48cd-B438-26663E22B025}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0B35746-EBF5-11D8-BBE9-505054503030}\InProcServer32" = "$homedrive\\Windows\\system32\\ndproxystub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0B4E2F3-BA21-4773-8DBA-335EC946EB8B}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c0b9675c-a5e1-408c-b5df-f3bba520827c}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imefiles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0BC4B4A-A406-4EFC-932F-B8546B8100CC}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c0c56f46-29b1-44e9-9939-a32ce86867e2}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_0\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c0cabfe8-6860-435b-a8a0-44b20718a737}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0CD7D12-31FC-4BBC-B363-7322EE3E1879}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAlacDecoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0DCC3A6-BE26-4bad-9833-61DFACE1A8DB}\InprocServer32" = "$homedrive\\Windows\\system32\\netcenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0E13E61-0CC6-11d1-BBB6-0060978B2AE6}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0E2E55A-5222-4810-BEA0-6AEF8092A000}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C0EFA91A-EEB7-41C7-97FA-F0ED645EFB24}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BE9A-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\System32\\wcnapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEA3-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\System32\\wcnapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEBB-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\system32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEBC-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\system32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BED0-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BED3-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BED4-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BED7-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEDA-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEDB-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEDC-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEDD-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEDE-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEE1-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEE2-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEE3-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEE5-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEE9-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEEA-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEEB-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEEC-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEED-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C100BEEE-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\xwizards\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C10B4771-4DA0-11D2-A2F5-00C04F86FB7D}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C10E23A2-BFF0-4113-BCE8-C91BE754E281}\InProcServer32" = "$homedrive\\Windows\\System32\\msflacdecoder\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C120DE80-FDE4-49f5-A713-E902EF062B8A}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c1243ca0-bf96-11cd-b579-08002b30bfeb}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1282A7B-9455-48dc-BBBB-46C2EB525AF5}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c12a0aa6-acf8-4947-acf3-81bdce609353}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Background\.PS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C12EC999-9D91-425E-84AF-DC15443A6B81}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1373050-E8C9-4AE4-A0C5-1DCF07274587}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C139C040-532D-451b-80CA-44D1F0839D2A}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c153e702-afcc-4f45-9a75-a70217f72db8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c15e6bf0-6351-4588-ac4f-ef7d5ec8c16e}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C168CDC0-6292-46DF-B34D-29D7580D2CE5}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C17CABB2-D4A3-47D7-A557-339B2EFBD4F1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C185ECE5-0720-472c-B407-9BB4E8DD5E72}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C196B2BE-BA06-4049-8518-322E1E04282B}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C19CBBED-8E33-4B9B-8F00-B044415E8764}\InProcServer32" = "$homedrive\\Windows\\system32\\settingsync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c19f162c-c5aa-478e-9013-52b0a9be48b6}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C19FBD0E-7663-44ea-8265-74130671A1D6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1A7EA66-D490-4DF5-A159-9557C5AF56D2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1ABB475-F198-39D5-BF8D-330BC7189661}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1B22BC2-5EE5-4A3E-BA37-A188922BC827}\InProcServer32" = "$homedrive\\Windows\\system32\\cellulardatacapabilityhandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_1\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1E565E2-F2DE-4537-9612-2F30A160EB5C}\InProcServer32" = "$homedrive\\Windows\\System32\\MSPhotography\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\InProcServer32" = "$homedrive\\Windows\\system32\\msimtf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1F400A0-3F08-11D3-9F0B-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C1F400A4-3F08-11D3-9F0B-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c1f85ef8-bcc2-4606-bb39-70c523715eb3}\InprocServer32" = "$homedrive\\Windows\\System32\\sdiagschd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C20447FC-EC60-475E-813F-D2B0A6DECEFE}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c206f324-bb45-4765-93ff-3bca7306ff2e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C20CE506-5DA9-4B9C-9662-D88BD30E10A1}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C20ED5C4-0A2E-4F66-9BE2-86A1C823DD68}\InProcServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C21B45B8-5D76-4575-BA27-54823098C491}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C22020C6-EEAB-455E-BEC2-A2CC8FDFF976}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C228A457-53F5-4a76-8035-DF2DA33E76C8}\InProcServer32" = "$homedrive\\Windows\\system32\\DxpTaskSync\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2303761-3D88-4BA0-9D05-D2C03AE8FC02}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C23FC28D-C55F-4720-8B32-91F73C2BD5D1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c2467d33-71c5-4057-977c-e847c2286882}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2566514-DD44-4c6c-AAAD-FBD2F18D8DEE}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2745EC3-CF23-4601-92EF-D189B711F933}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C274CC5B-44A9-4093-A686-71F88079C450}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c278aba7-cc1c-4717-bdfb-db2bca78246e}\InprocServer32" = "$homedrive\\Windows\\system32\\Groupinghc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2796011-81BA-4148-8FCA-C6643245113F}\InProcServer32" = "$homedrive\\Windows\\System32\\pnidui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c27f6b1d-fe0b-45e4-9257-38799fa69bc8}\InprocServer32" = "$homedrive\\Windows\\System32\\usbceip\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C28C7795-22F8-467F-BD15-183453C27491}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2B136E2-D50E-405C-8784-363C582BF43E}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c2b94e6d-6ebd-44ee-aac1-eb809c984699}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c2d2c3a4-9a7e-11da-8bf7-0007e95ead8d}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2D67532-D0FA-4022-89F7-8C1DF8A0C412}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2D6D98F-09CA-4524-AF64-1049B5665C9C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2DAE44D-C850-425c-B466-D8CBC1469F5D}\InProcServer32" = "$homedrive\\Windows\\system32\\PortableDeviceStatus\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2E88C2F-6F5B-4AAA-894B-55C847AD3A2D}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2EA74E0-0ED2-11CF-A9BB-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2FBB630-2971-11d1-A18C-00C04FD75D13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2FBB631-2971-11d1-A18C-00C04FD75D13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C2FEEEAC-CFCD-11D1-8B05-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C30ABD41-7B5A-3D10-A6EF-56862E2979B6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c3278e90-bea7-11cd-b579-08002b30bfeb}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c350f6ad-f45f-45c9-9e62-1f50bb3fc25f}\InProcServer32" = "$homedrive\\Windows\\system32\\frprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3701884-B39B-11D1-9D68-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c39b7f77-976c-4983-b888-dbdc948d5364}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c39ee728-d419-4bd4-a3ef-eda059dbd935}\InprocServer32" = "$homedrive\\Windows\\System32\\wininet\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3A43F75-FE02-47d8-B3EE-0B568C0C5043}\InProcServer32" = "$homedrive\\Windows\\System32\\werconcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3BDF740-0B58-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3C39131-B182-4801-B437-6D1E65B72F57}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c3d48774-5f69-4580-b51b-5020c2b4aec2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3E5D3D2-1A03-11CF-942D-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3E5D3D3-1A03-11CF-942D-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{C3EA5C5C-31DF-437F-95E2-BCE4B2E83EE9}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4050BC4-29E1-4c8f-BF6E-6EBAD21E0673}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c40935a0-cc79-4f4d-98d1-adc6762e7172}\InProcServer32" = "$homedrive\\Windows\\System32\\lxss\\LxssManagerProxyStub\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C40D66A0-E90C-46C6-AA3B-473E38C72BF2}\InprocServer32" = "$homedrive\\Windows\\System32\\fde\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C40FBD00-88B9-11d2-84AD-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C41D0B30-A518-3093-A18F-364AF9E71EB7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C41FA05C-8A7A-3157-8166-4104BB4925BA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C41FF872-07B1-4926-819B-8C94E6B1FBB9}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C424F25A-6774-48BC-9F1E-02CCA8C1BE62}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagCpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4270827-4F39-45DF-9288-12FF6B85A921}\InProcServer32" = "$homedrive\\Windows\\System32\\EditionUpgradeHelper\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C437AB2E-865B-321D-BA15-0C8EC4CA119B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C439A42A-583F-4609-8C30-E3681E2A0E78}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4457F51-993A-4b98-A19B-EC2B4F0DA087}\InprocServer32" = "$homedrive\\Windows\\system32\\SrpUxNativeSnapIn\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C45268A2-FA81-4E19-B1E3-72EDBD60AEDA}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4567821-B687-427C-A1D0-E820B7D704ED}\InProcServer32" = "$homedrive\\Windows\\System32\\WinBioDataModel\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C459DF76-7545-4671-A85D-A42903991174}\InProcServer32" = "$homedrive\\Windows\\System32\\PinEnrollmentHelper\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c463a0fc-794f-4fdf-9201-01938ceacafa}\InProcServer32" = "$homedrive\\Windows\\system32\\rasmbmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C47195EC-CD7A-11D1-8EA3-00C04F9900D7}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c472004d-44fb-41e9-ac0a-7b920384a850}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C47A07F6-E6B4-4300-B512-6A95325D6EF8}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C47A41B7-B729-424f-9AF9-5CB3934F2DFA}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4819C8D-9AB8-4B2F-B8AE-C77DABF553D5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmitimep\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C489A4B4-D8D1-4A74-924A-D01A6DF7DF51}\InProcServer32" = "$homedrive\\Windows\\system32\\StorSvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C498F2D9-A77C-3D4B-A1A5-12CC7B99115D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4A29158-1A7E-425f-B25E-80FA382AAA14}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvsvs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c4b741f5-5582-4c98-8f8b-2e082933c396}\InprocServer32" = "$homedrive\\Windows\\System32\\vmserial\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c4bbedb4-e9b9-4e41-8fe1-0786480a2173}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4BF2784-AE00-41BA-9828-9C953BD3C54A}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4C4C4F2-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4D2D8E0-D1DD-11CE-940F-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4D77430-755D-4E19-A6E1-AA8CA5E0E7BC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4D81942-0607-11D2-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4D81943-0607-11D2-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4EC38BD-4E9E-4b5e-935A-D1BFF237D980}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C4F088E1-63B3-4070-80F6-2BD4FB7C29F3}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c51b83e5-9edd-4250-b45a-da672ee3c70e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C51F0A6B-2A63-4cf4-8938-24404EAEF422}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C529C7EF-A3AF-45F2-8A47-767B33AA5CC0}\InprocServer32" = "$homedrive\\Windows\\system32\\ndfapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C52FF1FD-EB6C-42CF-9140-83DEFECA7E29}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C531D9FD-9685-4028-8B68-6E1232079F1E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5388469-F816-40D2-9E6B-D6C68986996E}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.StateRepositoryPS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5599E1B-FC7B-4883-9FF4-581BBAEF8DBA}\InprocServer32" = "$homedrive\\Windows\\System32\\fdBthProxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C55E0038-9B1B-45DA-BB96-C8B4A4490A72}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C561816C-14D8-4090-830C-98D994B21C7B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\micaut\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5621364-87CC-4731-8947-929CAE75323E}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\msdbg2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5624CEB-47EF-4637-9AE4-1354A156E5E6}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c56f065e-de49-4e42-be7c-305c45609d25}\InProcServer32" = "$homedrive\\Windows\\System32\\PrinterCleanupTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5702CCC-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5702CCD-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5702CCE-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5702CCF-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5702CD0-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5702CD6-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C578375F-8441-4733-BF71-027683AF538B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c57a6066-66a3-4d91-9eb9-41532179f0a5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c585dc93-540e-4f56-b0dc-69f58f813e04}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c5872cfd-52d1-4494-aa0d-22d42bbb2e30}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C58BD103-E87F-4B78-A0FA-7A5C95970EE2}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C591F150-4106-4141-B5C1-30B2101453BD}\InProcServer32" = "$homedrive\\Windows\\System32\\mfmkvsrcsnk\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c5aec3ec-e812-4677-a9a7-4fee1f9aa000}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Icaros\\64-bit\\IcarosThumbnailProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5B0F5F4-726F-49B8-B63E-42CC2D069BED}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5B19592-145E-11d3-9F04-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c5b3bb9c-ed93-41c2-b340-e62b0d07652a}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.UserProfile\.DiagnosticsSettings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5B454CD-3CA1-4b3a-A1D0-2CB5CD6BD985}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5B6E376-979F-4175-92E1-1F0C2D8BAF7D}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5C5C5F0-3ABC-11D6-B25B-00C04FA0C026}\InprocServer32" = "$homedrive\\Windows\\System32\\tvratings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5C5C5F1-3ABC-11D6-B25B-00C04FA0C026}\InprocServer32" = "$homedrive\\Windows\\System32\\tvratings\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5D708DB-8FB0-40E3-9855-275C1D087DE3}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5D7540A-CD51-453B-B22B-05305BA03F07}\InProcServer32" = "$homedrive\\Windows\\System32\\cxcredprov\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5E2E36E-0D2D-4FAC-A9F4-DDAD14633222}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetEventPacketCapture\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c5efd803-50f8-43cd-9ab8-aafc1394c9e0}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C5FF080D-D761-4996-B7C4-D6A93FB05A09}\InProcServer32" = "$homedrive\\Windows\\System32\\mdmpostprocessevaluator\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C605507B-9613-4756-9C07-E0D74321CB1E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C608E099-892D-4628-B6A2-97257B014E2E}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C60F637A-07F3-411D-B577-22E519F8B63B}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_2\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C624BA95-FBCB-4409-8C03-8CCEEC533EF1}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{c63382be-7933-48d0-9ac8-85fb46be2fdd}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6365470-F667-11d1-9067-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6445657-1FB6-11e3-A6E4-18A905C16311}\InprocServer32" = "$homedrive\\Windows\\System32\\trie\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C64501F6-E6E6-451f-A150-25D0839BC510}\InprocServer32" = "$homedrive\\Windows\\System32\\speech\\engines\\tts\\MSTTSEngine\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6465C2C-7943-452a-9A57-F61DB6B452E9}\InProcServer32" = "$homedrive\\Windows\\System32\\msTextPrediction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C647B5C0-157C-11D0-BD23-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C64B9B66-E53D-4c56-B9AE-FEDE4EE95DB1}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c662d912-e4d6-44a3-89a0-20550514951d}\InProcServer32" = "$homedrive\\Windows\\System32\\dsregtask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C666E115-BB62-4027-A113-82D643FE2D99}\InprocServer32" = "$homedrive\\Windows\\System32\\Mpeg2Data\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{C68411EA-1396-48f3-AF98-B7F657E35C20}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c6887882-a444-4b32-960d-e40d0af7851e}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6A4CF44-5069-4CD0-BD40-4437E4BE57EC}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c6a50e1e-d34c-45e9-9b0c-1d92eb71e49c}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6B14B32-76AA-4A86-A7AC-5C79AAF58DA7}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6B400E2-20A7-4E58-A2FE-24619682CE6C}\InprocServer32" = "$homedrive\\Windows\\System32\\msac3enc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6B5F214-0743-3868-B1EA-C4C23CE2AF52}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c6cc0d21-895d-49cc-98f1-d208cd71e047}\InProcServer32" = "$homedrive\\Windows\\System32\\IERtUtil\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6CC49B0-CE17-11D0-8833-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6E13343-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6E13344-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6E13350-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6E13360-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6E13370-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{c6edf23e-75e7-4809-b44f-dd807dae52ae}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6FABB24-E332-46FB-BC91-FF331B2D51F0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C6FCE351-A02B-466A-9235-D03134892D25}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C707F6A6-A1F3-45d7-99AA-A2B9491E84AD}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C70D0E90-6FF8-40CC-B679-6CCFF0B2E673}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C71566F2-561E-11D1-AD87-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c71c41f1-ddad-42dc-a8fc-f5bfc61df957}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C72BE2EC-8E90-452c-B29A-AB8FF1C071FC}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_4\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c73f6f30-97a0-4ad1-a08f-540d4e9bc7b9}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7468EC6-2D19-4349-A30F-68A10B329B68}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\Aac_AIOFan\\AacAIOFanHal_x64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c7643375-1eb5-44de-a062-623547d933bc}\InprocServer32" = "$homedrive\\Windows\\System32\\srmscan\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7657C4A-9F68-40fa-A4DF-96BC08EB3551}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C76B435D-86C2-30FD-9329-E2603246095C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c77a3c40-03fd-47f9-a279-356b38f36e26}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C789449C-48C9-4E5A-93F8-D6EFFA4A6AD2}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulation\\SixDofControllerManager\.ProxyStubs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C79A574C-63BE-44b9-801F-283F87F898BE}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c79d1575-b8c6-4862-a284-788836518b97}\InProcServer32" = "$homedrive\\Windows\\system32\\(display|themeui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c79f8f33-e5dc-4b89-8ea9-51dd1f5828f2}\InProcServer32" = "$homedrive\\Windows\\System32\\DaOtpCredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7A3A54B-0250-11D3-9CD1-00105A1F4801}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\smtpcons\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7B9C313-2FD4-4384-8571-7ABC08BD17E5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7BCD216-4A04-4EF4-A9EE-21EFD6948C9B}\InProcServer32" = "$homedrive\\Windows\\System32\\usermgrproxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7CA6167-2F46-4C4C-98B2-C92591368971}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7D83DDF-EAD2-4536-86F5-6E88B89213AC}\InProcServer32" = "$homedrive\\Windows\\System32\\ClipboardServer\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7DFFDF1-BD1F-450A-B98D-96B6D30BA4C1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONFILTER\.DLL" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7E9D3B9-E62B-4A90-8CC5-A3C5F662DA7B}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7EA3783-77E7-47B7-A68D-A298CC902126}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7F2775F-FC5C-44F9-858A-CAA061604440}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C7F2FB0F-ACC2-4ddf-9D8A-5E6E80D61024}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C8059EB6-D2FC-4ecf-A15F-AF427F5E4DB6}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeedsbs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c827f149-55c1-4d28-935e-57e47caed973}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c82fa008-bce8-4ebc-89f4-5b0061861c6e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8367320-6f85-11e0-a1f0-0800200c9a66}\InprocServer32" = "$homedrive\\Windows\\System32\\BthTelemetry\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C84471EC-FD16-4832-AA65-7DD197DA6F2F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C844C79D-AED8-4DCE-AB25-4D359BED84F8}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcRefreshTask\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C86D6E59-E9E6-489B-A6C3-37ED73ADBF5A}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C87CCFB7-8D32-45B8-A532-FFA533F44150}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C885AA15-1764-4293-B82A-0586ADD46B35}\InprocServer32" = "$homedrive\\Windows\\System32\\FaceCredentialProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C88A4279-5ADC-4465-927F-6B19777AA5F9}\InprocServer32" = "$homedrive\\Windows\\System32\\srmshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C89AC250-E18A-4FC7-ABD5-B8897B6A78A5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{c89e334c-e65f-4156-842e-ea89cec71dea}\InprocServer32" = "$homedrive\\Windows\\system32\\fphc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C89FC33C-E60A-4C97-BEF4-ACC5762B6404}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8b522cb-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdasql\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8b522cc-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdasql\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8b522cd-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdasql\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C8B522CF-5CF3-11CE-ADE5-00AA0044773D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8b522d0-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8b522d1-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8c97725-c948-4720-bf0f-e3c2273bfb7d}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C8DFF91D-B243-4797-BAE6-C461B65EDED3}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c8e6f269-b90a-4053-a3be-499afcec98c4}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C8F113AE-A2C9-47CB-8DAE-9376C64665AD}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvgames\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32" = "$homedrive\\Windows\\System32\\ActXPrxy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C907F3EA-0EB4-40BD-AAC0-D3D8C32B1840}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c9298eef-69dd-4cdd-b153-bdbc38486781}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C93CF9D5-031B-4AAA-AB0B-EF802347B381}\InProcServer32" = "$homedrive\\Windows\\System32\\MBMediaManager\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C96401CC-0E17-11D3-885B-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C96401CF-0E17-11D3-885B-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C96401D1-0E17-11D3-885B-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C96C4A08-12E9-4f87-8E6C-3DCF98518E11}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C973DA94-CBDF-4E77-81D1-E5B794FBD146}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C97AC1B3-8698-4BF6-8DBB-60F6064FA320}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.FaceAnalysis\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C985DF59-A91B-446B-93C3-FB2705D529BC}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C98F3822-3658-4D75-8A25-6621665ECD56}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c99217e2-951d-40b6-b4e4-6af203dadf89}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C992C58D-313B-469c-8202-456FF574FF4E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C9A14CDA-C339-460B-9078-D4DEBCFABE91}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C9E37C15-DF92-4727-85D6-72E5EEB6995A}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{c9ea5d14-cef7-4e37-851a-8043f0fb74e9}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C9F0A842-3CE1-338F-A1D4-6D7BB397BDAA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{C9F5FE02-F851-4EB5-99EE-AD602AF1E619}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{C9F61CBD-287F-3D24-9FEB-2C3F347CF570}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA0AC604-8EF2-448A-AE97-62A2C2CC3C46}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA0F511A-FAF2-4942-B9A8-17D5E46514E8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA116708-1727-4E71-93F5-CA43081DC62A}\InProcServer32" = "$homedrive\\Windows\\system32\\PlayToStatusProvider\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca1575f8-bf1e-4c2f-a1f9-b3aa45c92794}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\applets\\imjpskey\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA236752-2E77-4386-B63B-0E34774A413D}\InProcServer32" = "$homedrive\\Windows\\System32\\werconcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca24c16a-24e8-4d7c-80e8-c546d9fb2abe}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA2AF3B4-C15E-412b-B453-557746675FB7}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WmiPerfInst\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca34fe0a-5722-43ad-af23-05f7650257dd}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA35CB3D-0357-11D3-8729-00C04F79ED0D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA38D8DA-C75D-11D1-8F99-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA38D8DB-C75D-11D1-8F99-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA3FDCA2-BFBE-4eed-90D7-0CAEF0A1BDA1}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca47b0ae-6f7b-4aeb-8d57-24b3f2aa3d44}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA5171D0-95CB-3DA8-A095-A70B39FD6EE0}\InprocServer32" = "mscoree\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca52a260-24fa-457a-8a17-119f4f505874}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA554A15-4410-45C9-B5C1-20DE052D9CD3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca767aa8-9157-4604-b64b-40747123d5f2}\InprocServer32" = "$homedrive\\Windows\\System32\\regidle\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA805B13-468C-3A22-BF9A-818E97EFA6B7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA80BE9F-02DB-4B14-9B52-A72D27B5FBF5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{ca8c87c1-929d-45ba-94db-ef8e6cb346ad}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CA8EB365-E97F-4cfa-965C-B3E8986ABD8F}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CAA1B979-07A6-439C-A38C-2BE2B99C3B4A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CAA817CC-0C04-4D22-A05C-2B7E162F4E8F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CAAFDD83-CEFC-4E3D-BA03-175F17A24F91}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_7\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CAC59BFB-5547-456C-80D8-F6428C8F5456}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{cac5c8a7-b4fe-4bf7-a3fc-ccd1dcf04d65}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Data\.Activities\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CACA7238-3C7E-4a25-AD73-DE1A4F8C7214}\InProcServer32" = "$homedrive\\Windows\\System32\\werconcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CACEB1A2-F424-489B-8ED5-3614926A8512}\InProcServer32" = "$homedrive\\Windows\\System32\\ACPBackgroundManagerPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CAEC7D4F-0B02-3579-943F-821738EE78CC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{cb0255a6-3cfd-4f5c-b027-326b0c136d81}\InProcServer32" = "$homedrive\\Windows\\System32\\HoloShellRuntime\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{cb0eed72-a1ee-4df3-94c8-b1022bf900b4}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB0FC8E5-686A-478B-A252-FDECF8E167B7}\InprocServer32" = "$homedrive\\Windows\\System32\\wiascanprofiles\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB17E772-E1CC-4633-8450-5617AF577905}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmjpegdec\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB18B8D1-12E4-4AFD-886E-94AEFE1C70D5}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB1DFE3A-EDFF-4d1f-867D-8ADB02926F4B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{cb25220c-76c7-4fee-842b-f3383cd022bc}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB2F6723-AB3A-11d2-9C40-00C04FA30A3E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB35832D-0C2C-41A9-84E1-A7CD1E0C6254}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB39A782-E5E4-11D1-8CC0-00C04FC3261D}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrv\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB46E850-FC2F-11D2-B126-00805FC73204}\InProcServer32" = "$homedrive\\Windows\\system32\\stclient\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB6E2B90-25FA-4F08-B46C-696F5A2B6CA5}\InprocServer32" = "$homedrive\\Windows\\System32\\sppwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{cb82ea12-9f71-446d-89e1-8d0924e1256e}\InProcServer32" = "$homedrive\\Windows\\system32\\((credprovs|authui)legacy|authui)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB8555CC-9128-11D1-AD9B-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{cba9e78b-49a3-49ea-93d4-6bcba8c4de07}\InprocServer32" = "$homedrive\\Windows\\System32\\mp43decd\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CBD51D89-C22E-4388-A553-FFE638C76E36}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CBD600D7-2256-4ADB-8E3A-185F56EA9353}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvGameS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CBE0FED3-4B91-4E90-8354-8A8C84EC6872}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CBEAA915-4D2C-3F77-98E8-A258B0FD3CEF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC0648AE-7E85-483C-B1DB-9335C9D6F8C7}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei)\.inf_amd64_.*\\nvdisps\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC1101F2-79DC-11D2-8CE6-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC19079B-8272-4D73-BB70-CDB533527B61}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC20C6DF-A054-3F09-A5F5-A3B5A25F4CE6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC23F537-18D4-4ECE-93BD-207A84726979}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC2EB4A6-2558-43E2-860A-552196F58157}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC3FA696-93B8-4745-B935-0599ACB97747}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC48A47F-EFD6-4925-A515-28C40C5A78B6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC55EE92-FE67-43C9-95E7-E646918A4A04}\InProcServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC58989A-EB4A-41B6-9654-163C73CF6B11}\InProcServer32" = "$homedrive\\Windows\\System32\\MSAProfileNotificationHandler\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC58E280-8AA1-11D1-B3F1-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC58E281-8AA1-11D1-B3F1-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{cc5bbec3-db4a-4bed-828d-08d78ee3e1ed}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC6EEFFB-43F6-46c5-9619-51D571967F7D}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC6F1005-CAE0-4892-B602-65A5FD7EC2D6}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC776E57-E6C5-43D5-AE94-534923129147}\InprocServer32" = "$homedrive\\Windows\\System32\\RuleBasedDS\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC77F5F3-222D-3586-88C3-410477A3B65D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC785860-B2CA-11CE-8D2B-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC7BFB42-F175-11d1-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC7BFB43-F175-11d1-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC829A2F-3365-463F-AF13-81DBB6F3A555}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC89BA65-661C-494a-85C0-5D697DFEB30C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CC9072AB-C000-49D8-A5AA-00266C8DBB9B}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCAA63AC-1057-4778-AE92-1206AB9ACEE6}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCAE9D9B-E430-4454-8949-666D9F739994}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCAEAA6D-3A50-488F-A664-5FACF424BC46}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{ccb1d8cb-d39f-41c9-b793-0196214bdc4e}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imecfm\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCB38336-0B46-4153-BF74-6EA9A8C07EDF}\InProcServer32" = "$homedrive\\Windows\\System32\\prauthproviders\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCB4EC60-B9DC-11D1-AC80-00A0C9034873}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCBA37FC-982B-433B-8AC2-455E616A8559}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCBB2B20-2C99-4B08-AB27-64A29AF5F467}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv141p\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCC8D08D-DD79-4550-8F3E-C57D4F8A5F40}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostUser\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCDEDADE-AE23-47f3-A588-B09A05CA1A00}\InProcServer32" = "$homedrive\\Windows\\System32\\diagcpl\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCEC11F2-00C4-4266-9932-B9E49442711E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCF306AE-33BD-3003-9CCE-DAF5BEFEF611}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)" | |
| "HKEY_CLASSES_ROOT\CLSID\{CCF75159-F7DA-4763-B10C-7A13F92DF226}\InprocServer32" = "$homedrive\\Windows\\system32\\SmartCardBackgroundPolicy\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000001-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000002-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000004-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000005-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000006-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000007-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000008-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000009-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000010-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000011-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD000012-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll" | |
| "HKEY_CLASSES_ROOT\CLSID\{CD061333-3AEF-4887- |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment