What is bs_player_controlbar_b.exe?
bs_player_controlbar_b.exe is developed by ClientConnect Ltd. according to the bs_player_controlbar_b.exe version information.
bs_player_controlbar_b.exe's description is "1.11.0.11"
bs_player_controlbar_b.exe is digitally signed by ClientConnect LTD.
bs_player_controlbar_b.exe is usually located in the 'c:\downloads\' folder.
Some of the anti-virus scanners at VirusTotal detected bs_player_controlbar_b.exe.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
Vendor and version information [?]
The following is the available information on bs_player_controlbar_b.exe:
| Property | Value |
|---|---|
| Company name | ClientConnect Ltd. |
| File description | 1.11.0.11 |
| Legal copyright | © 2014 ClientConnect Ltd. |
| File version | 10.33.0.5 |
Here's a screenshot of the file properties when displayed by Windows Explorer:
| Company name | ClientConnect Ltd. |
| File description | 1.11.0.11 |
| Legal copyright | © 2014 ClientConnect Ltd. |
| File version | 10.33.0.5 |
Digital signatures [?]
bs_player_controlbar_b.exe has a valid digital signature.
| Property | Value |
|---|---|
| Signer name | ClientConnect LTD |
| Certificate issuer name | VeriSign Class 3 Code Signing 2010 CA |
| Certificate serial number | 43e7738e282f77369a5a4c0ed31a3c9f |
VirusTotal report
40 of the 64 anti-virus programs at VirusTotal detected the bs_player_controlbar_b.exe file. That's a 63% detection rate.
| Scanner | Detection Name |
|---|---|
| Antiy-AVL | GrayWare[WebToolbar:not-a-virus]/Win32.Agent.axf |
| Arcabit | Application.SearchProtect.DJ |
| Avast | Win32:SearchProtect-CC [Adw] |
| AVG | Win32:SearchProtect-CC [Adw] |
| Avira | PUA/SearchProtect.ME.135 |
| BitDefender | Application.SearchProtect.FC |
| CAT-QuickHeal | PUA.Clientconn.Gen |
| Comodo | ApplicUnwnt@#3chti9a2ckqvc |
| CrowdStrike | win/malicious_confidence_60% (D) |
| Cybereason | malicious.965ef4 |
| Cyren | W32/Application.TLVY-7382 |
| DrWeb | Adware.Conduit.557 |
| Emsisoft | Application.AdConnect (A) |
| Endgame | malicious (high confidence) |
| ESET-NOD32 | a variant of Win32/ClientConnect.A potentially unwanted |
| F-Secure | PotentialRisk.PUA/SearchProtect.ME |
| Fortinet | Adware/Conduit |
| GData | Win32.Adware.Conduit.B |
| Invincea | heuristic |
| Jiangmin | AdWare/SearchProtect.aj |
| K7AntiVirus | Unwanted-Program ( 004a9c8c1 ) |
| K7GW | Unwanted-Program ( 004a9c8c1 ) |
| Kaspersky | not-a-virus:AdWare.Win32.SearchProtect.vxr |
| Kingsoft | Win32.Troj.Generic.a.(kcloud) |
| Malwarebytes | PUP.Optional.ClientConnect |
| MAX | malware (ai score=97) |
| McAfee | Artemis!E351A5F965EF |
| McAfee-GW-Edition | Artemis!PUP |
| Microsoft | PUA:Win32/Conduit |
| MicroWorld-eScan | Application.SearchProtect.FC |
| NANO-Antivirus | Riskware.Win32.Conduit.dwtfve |
| Qihoo-360 | Trojan.Generic |
| Rising | Trojan.ClientConnect!1.A49D (CLASSIC) |
| Sophos | Generic PUA EM (PUA) |
| SUPERAntiSpyware | PUP.ClientConnect/Variant |
| VBA32 | Adware.SearchProtect |
| VIPRE | Conduit (fs) |
| ViRobot | Adware.Searchprotect.2936088 |
| Yandex | Riskware.SearchProtect! |
| ZoneAlarm | not-a-virus:AdWare.Win32.SearchProtect.vxr |
Sandbox Report
The following information was gathered by executing the file inside Cuckoo Sandbox.
Summary
Successfully executed process in sandbox.
Summary
{
"file_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\popup2.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\options.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascript.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\contentManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-LTR.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\navigationTests.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\priceGongMigration.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\html5shiv.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\information.popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\settings.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\information.popup.html",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\setup.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\inbox.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.sf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\background.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\sdk.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\chrome.manifest",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\dd-arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\higlighter_script.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\emailNotifier.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\historyProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\warning.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\RetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-LTR.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4moz.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\corelibs.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\RetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\important.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Providers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\MozillaRetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerBack.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_onclick_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\PIE.htc",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\main.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\npFirefoxPlugin.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\information.popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\ie_fix.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Image.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\buttonSprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\AccountManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\SearchApp_Ant.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\scroller.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\autoComplete.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\POP3Executer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.tmpl.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_up.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\Settings.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\resize.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\mp_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\FirefoxCtype.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-on.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApiFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\yoxscroll.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\showHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\html5SupportIe.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\embedded.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide-click.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\radioCommon.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailDecoder.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\BrowserContextMenuManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\NotificationPopup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\popups.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Inboxer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\options.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\weather.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\IMAPExecuter.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\menu_arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\Main.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menus.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\badges.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\Thumbs.db",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\lgf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\BackStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\renderHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tooltips.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\new_chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\menu.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\selectionListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-mouseover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\LAB.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\bgPage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-off.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\toolbarapi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.textshadow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.6.2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.ellipsis.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\options.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.5.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\toolbar.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\manifest.mf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\generalDialogStyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\suggestProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\view.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\title.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embeddedEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\EN.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\stations.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\webAppUtils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.controller.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\defaultEngineImage.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\NotificationSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\general.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\help.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\facebook.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\Commons.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\MozillaRetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\scrollers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectEmbedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\info.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\default.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\SettingsManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectPopup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\fallback24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.rsa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\app-store-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\OK_Btn.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\serviceLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\BrowserDetect.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\Settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\layoutManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_down.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsw5930.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\date-functions.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\gadget.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Timer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\ToolbarAndAppsSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\aboutBox.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\settingsIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\browserAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\frontstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\RetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\downArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\version.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\FrontStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\settings.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\uus.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\jquery.ezmark.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\localstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\bgPage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notificationUIManger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\gf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\stepper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\autoCompleteManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Invoker.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.autocomplete.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\providerHelper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\information.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\AppName.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\aboutBox.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\menu.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\DialogsAPI.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\ie_back.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\player.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en_rtl.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\logic.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\truste_welcome.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\np-mswmp.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery-ui-1.8.10.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4conduit.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Translation.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\closeIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ajax-loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\ok-button.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.4.1.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\searchProtectorManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\sspv.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\xPath.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.viewPerformanceLog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\system.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\mamModule.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\ui.stepper.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.text-overflow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\al.view.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf_ie.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Topbg.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popupTransparent.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\radio.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailMerger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\separation-line.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\divider.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\upArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascriptStub4Release.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\menu.icon.apps.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\sprite-ok-button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notification.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\newMain.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\settings.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\searchListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\SearchProtector.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\MozillaRetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\ie8.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\loader-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_mouseover_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\commons.js"
],
"file_recreated": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp"
],
"regkey_written": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecision",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\smartbar.machineId",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableFileTracing",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\\DefaultConnectionSettings",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.searchUninstallUserMode",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:FMTID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\IconSize",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.searchUserMode",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\FFlags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableConsoleTracing",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Sort",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\IconStreams",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadNetworkName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ColInfo",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.UserID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByDirection",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\defaultKeys",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\LastAdvertisement",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileTracingMask",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.dum",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PastIconsStream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\ConsoleTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileDirectory",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\UserStartTime",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.fullUserID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:PID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecisionReason",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\LogicalViewMode",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Mode",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\MaxFileSize",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecisionTime",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\WpadLastNetwork",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Streams\\Desktop\\TaskbarWinXP",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\UninstallerData\\CT3329621\\FF\\ServiceMapURL"
],
"dll_loaded": [
"PROPSYS.dll",
"C:\\Windows\\system32\\pnrpnsp.dll",
"C:\\Windows\\System32\\mswsock.dll",
"apphelp.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"DNSAPI.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"kernel32.dll",
"C:\\Windows\\system32\\ole32.dll",
"dwmapi.dll",
"C:\\Windows\\system32\\napinsp.dll",
"ntmarta.dll",
"API-MS-WIN-Service-Management-L1-1-0.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
"DHCPCSVC.DLL",
"OLEAUT32.DLL",
"RASMAN.DLL",
"ole32.dll",
"CRYPTSP.dll",
"API-MS-Win-Security-SDDL-L1-1-0.dll",
"SHFOLDER",
"rtutils.dll",
"IPHLPAPI.DLL",
"API-MS-WIN-Service-winsvc-L1-1-0.dll",
"wininet.dll",
"C:\\Windows\\SysWOW64\\oleaut32.dll",
"OLEAUT32.dll",
"profapi.dll",
"SHELL32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Windows\\System32\\winrnr.dll",
"comctl32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"RichEd20",
"ADVAPI32.dll",
"rpcrt4.dll",
"SETUPAPI.dll",
"WS2_32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll"
],
"file_opened": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Windows\\AppPatch\\sysmain.sdb",
"C:\\",
"C:\\Users\\cuck\\AppData",
"C:\\Windows\\System32\\",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini",
"C:\\Windows\\System32\\en-US\\shdocvw.dll.mui",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\Users\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\Downloads\\desktop.ini"
],
"connects_host": [
"setupapi.toolbar.tbccint.com"
],
"regkey_opened": [
"HKEY_CURRENT_USER\\Software\\Conduit\\AppPaths",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\DnsClient",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\KnownFolderSettings",
"HKEY_CLASSES_ROOT\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rdf\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\AccessProviders",
"HKEY_CLASSES_ROOT\\.js",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\CurVer",
"HKEY_CLASSES_ROOT\\*",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\{2F711B17-773C-41D4-93FA-7F23EDCECB66}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.js",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\ShellEx\\IconHandler",
"HKEY_CLASSES_ROOT\\inifile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\ShellEx\\IconHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tmp\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Rpc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"HKEY_CLASSES_ROOT\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Objects\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}",
"HKEY_CURRENT_USER\\Interface\\{2A1C9EB2-DF62-4154-B800-63278FCB8037}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\SmartBar\\UninstallerData\\CT3329621\\FF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{55272A00-42CB-11CE-8135-00AA004BB851}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.rdf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Folder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rdf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\PropertyHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_CLASSES_ROOT\\.js\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_CLASSES_ROOT\\.ini\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\text",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_CURRENT_USER\\Interface\\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
"HKEY_CLASSES_ROOT\\.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32",
"HKEY_CURRENT_USER\\${_REG_ISM_VALUES_KEY_PATH_}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocHandler32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini\\UserChoice",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
"HKEY_CURRENT_USER\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\DocObject",
"HKEY_CLASSES_ROOT\\JSFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.js\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\*\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\PropertyBag",
"HKEY_CURRENT_USER\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\OleAut",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\{2F711B17-773C-41D4-93FA-7F23EDCECB66}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_CLASSES_ROOT\\.rdf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.ini",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}",
"HKEY_CLASSES_ROOT\\.tmp\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\ShellEx\\PropertyHandler",
"HKEY_CLASSES_ROOT\\Unknown",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\SmartBar\\FF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Wpad",
"HKEY_CLASSES_ROOT\\.rdf\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\System\\DNSClient",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}",
"HKEY_CURRENT_USER\\Interface\\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}",
"HKEY_CURRENT_USER\\Interface\\{55272A00-42CB-11CE-8135-00AA004BB851}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\TreatAs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}",
"HKEY_CURRENT_USER\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\{2F711B17-773C-41D4-93FA-7F23EDCECB66}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASMANCS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\Progid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\ShellEx\\PropertyHandler",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ini",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rdf",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.tmp",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\SmartBar\\AppPaths",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}",
"HKEY_CLASSES_ROOT\\AllFilesystemObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\MS Shell Dlg 2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
"HKEY_CLASSES_ROOT\\.ini",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\UsersFiles\\NameSpace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\System",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.js",
"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\Progid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.tmp",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
"HKEY_CLASSES_ROOT\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\Mozilla Firefox",
"HKEY_CURRENT_USER\\Interface\\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\crypt32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}",
"HKEY_CLASSES_ROOT\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.js",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
],
"resolves_host": [
"wpad",
"cuckpc"
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\popup2.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\options.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascript.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\contentManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-LTR.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\navigationTests.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\priceGongMigration.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\html5shiv.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\information.popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\settings.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\information.popup.html",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\inbox.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.sf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\background.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\sdk.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\chrome.manifest",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\dd-arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\higlighter_script.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\emailNotifier.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\historyProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\warning.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\RetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.autocomplete.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4moz.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\corelibs.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\RetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\important.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Providers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\MozillaRetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerBack.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_onclick_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\PIE.htc",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\main.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\npFirefoxPlugin.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\information.popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\ie_fix.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Image.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\buttonSprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\AccountManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\SearchApp_Ant.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\scroller.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\autoComplete.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\POP3Executer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.tmpl.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_up.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\Settings.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\resize.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\mp_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\FirefoxCtype.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-on.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApiFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\yoxscroll.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\showHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\html5SupportIe.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\embedded.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide-click.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\radioCommon.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailDecoder.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\BrowserContextMenuManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\NotificationPopup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\popups.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Inboxer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\options.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\weather.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\IMAPExecuter.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\menu_arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\Main.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menus.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\badges.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\Thumbs.db",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\lgf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\BackStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\renderHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tooltips.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\new_chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\menu.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\selectionListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-mouseover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\LAB.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\bgPage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-off.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\toolbarapi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.textshadow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.6.2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.ellipsis.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\options.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.5.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\toolbar.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\manifest.mf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\generalDialogStyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\suggestProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\view.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\title.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embeddedEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\EN.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\stations.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\webAppUtils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.controller.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\defaultEngineImage.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\NotificationSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\general.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\help.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\facebook.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\Commons.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\MozillaRetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\scrollers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectEmbedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\info.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\default.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\SettingsManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectPopup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\fallback24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.rsa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\app-store-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\OK_Btn.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\serviceLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\BrowserDetect.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\Settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\layoutManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_down.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\date-functions.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\gadget.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Timer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\ToolbarAndAppsSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\aboutBox.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\settingsIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\browserAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\frontstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\RetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\downArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\version.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\FrontStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\settings.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\uus.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\jquery.ezmark.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\bgPage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notificationUIManger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\gf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\stepper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\autoCompleteManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Invoker.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-LTR.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\providerHelper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\information.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\AppName.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\aboutBox.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\menu.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\DialogsAPI.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\ie_back.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\player.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en_rtl.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\logic.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\truste_welcome.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\np-mswmp.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery-ui-1.8.10.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4conduit.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Translation.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\closeIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ajax-loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\ok-button.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.4.1.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\searchProtectorManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\sspv.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\xPath.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.viewPerformanceLog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\system.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\mamModule.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\ui.stepper.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.text-overflow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\al.view.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf_ie.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Topbg.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popupTransparent.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\radio.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailMerger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\separation-line.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\divider.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\upArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascriptStub4Release.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\menu.icon.apps.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\sprite-ok-button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notification.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\newMain.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\settings.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\searchListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\SearchProtector.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\MozillaRetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\ie8.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\loader-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_mouseover_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\commons.js"
],
"regkey_deleted": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupCollapseState",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemOrder",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.installUsageEarly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemPos800x600x96(1)",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.installUsage"
],
"file_deleted": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsw5930.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp"
],
"file_exists": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\",
"C:\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\setup.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\",
"C:\\Windows\\SysWOW64\\propsys.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\localstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic",
"C:\\Windows\\System32\\propsys.dll",
"C:\\cuckoo_1788.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\Desktop",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\"
],
"mutex": [
"Local\\Shell.CMruPidlList",
"IESQMMUTEX_0_208"
],
"file_failed": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\localstore.rdf",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\cuckoo_1788.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll"
],
"wmi_query": [
"SELECT MacAddress FROM Win32_NetworkAdapter WHERE Manufacturer != 'Microsoft' AND MacAddress IS NOT NULL AND MacAddress != '' AND (ConfigManagerErrorCode = 0 OR (ConfigManagerErrorCode = 22 AND NetConnectionStatus = 0)) AND NOT PNPDeviceID LIKE 'ROOT\\\\%'",
"SELECT ProcessorId FROM Win32_Processor WHERE DeviceID = 'CPU0'"
],
"guid": [
"{44aca674-e8fc-11d0-a07c-00c04fb68820}",
"{8bc3f05e-d86b-11d0-a075-00c04fb68820}",
"{660b90c8-73a9-4b58-8cae-355b7f55341b}",
"{add8ba80-002b-11d0-8f0f-00c04fd7d062}",
"{dcb00c01-570f-4a9b-8d69-199fdba5723b}",
"{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
"{42aedc87-2188-41fd-b9a3-0c966feabec1}",
"{00000000-0000-0000-c000-000000000046}",
"{4590f811-1d3a-11d0-891f-00aa004b2e24}",
"{9e175b6d-f52a-11d8-b9a5-505054503030}",
"{d0074ffd-570f-4a9b-8d69-199fdba5723b}",
"{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
"{674b6698-ee92-11d0-ad71-00c04fd8fdff}",
"{dffacdc5-679f-4156-8947-c5c76bc0b67f}",
"{d5f569d0-593b-101a-b569-08002b2dbf7a}",
"{dc12a687-737f-11cf-884d-00aa004b2e24}",
"{2fb499a3-cfce-480f-a5f3-2453db7a2b7a}",
"{f309ad18-d86a-11d0-a075-00c04fb68820}",
"{dcb00000-570f-4a9b-8d69-199fdba5723b}",
"{a47979d2-c419-11d9-a5b4-001185ad2b89}",
"{46a6eeff-908e-4dc6-92a6-64be9177b41c}",
"{7c857801-7381-11cf-884d-00aa004b2e24}",
"{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}",
"{b056521a-9b10-425e-b616-1fcd828db3b1}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\Users\\desktop.ini",
"C:\\Users\\cuck\\Downloads\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileTracingMask",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU Size",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Attributes",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\defaultKeys",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\CopyFileChunkSize",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\\DefaultConnectionSettings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\crypt32\\DebugHeapFlags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableFileTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\MaxRpcSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\AutoProxyDetectType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableImprovedZoneCheck",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Icon",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Stream",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Mozilla\\Mozilla Firefox\\CURRENTVERSION",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Security_HKLM_only",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\StreamResource",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PromotedIconCache",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\ConsoleTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProgramData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\ComputerName\\ActiveComputerName\\ComputerName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Domain",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Shell Folders\\Common AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\MS Shell Dlg 2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\NoFileFolderConnection",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableConsoleTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\WpadLastNetwork",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\FileDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.UserID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\LoadWithoutCOM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\MaxFileSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F} {ADD8BA80-002B-11D0-8F0F-00C04FD7D062} 0xFFFF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HideFolderVerbs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MaxUndoItems",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClearRecentDocsOnExit",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Hostname",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\CopyFileBufferedSynchronousIo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlot",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\CopyFileOverlappedCount",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Name",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OOBEInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Name",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{55272A00-42CB-11CE-8135-00AA004BB851}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Advanced\\MaxUndoItems",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath"
],
"directory_enumerated": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Windows\\System32\\*.*",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\rasphone.pbk",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\*.*",
"C:\\Windows\\System32\\ras\\*.pbk",
"C:\\Windows\\System32",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.installUsageEarly.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\rasphone.pbk",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.installUsage.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*.pbk",
"C:\\Users\\cuck",
"C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\*.pbk",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621",
"C:\\Windows",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js"
],
"directory_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts"
]
}Dropped
[
{
"yara": [],
"sha1": "bde67d7ceb735e7a0a254b354cd19c548974a996",
"name": "e8a52a59d6f53f74_embedded.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\embedded.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "e8a52a59d6f53f740d2668c03efc6b431a2ac43158c2160b60bed75be163d0a7",
"urls": [],
"crc32": "0FE2821C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e8a52a59d6f53f74_embedded.html",
"ssdeep": null,
"size": 798,
"sha512": "96cec7dde2c2b244b4febc1f65d3bdc3f8b1e063cc731a7a4f0551efd532344a3afe8ee4cba5bb3ff107d27f0d7c9eb77c8670b1623f11615e82c9a09e013511",
"pids": [
2816
],
"md5": "b0e02a8475aacc8049900975f9c082d2"
},
{
"yara": [],
"sha1": "433aa54c7fef22ea3d7154fbcd8a513e1cb149fc",
"name": "df5afa29aa0a22de_trusted.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.js",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "df5afa29aa0a22de9d03c9c4439de45b1d43f6dddda63ea7a256ce3b50323bf2",
"urls": [],
"crc32": "7AD1DC08",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/df5afa29aa0a22de_trusted.js",
"ssdeep": null,
"size": 3862,
"sha512": "c7e38b1383e2f58cf0642f56e4cb4d1bc93cd683f0a4e82164d2e2bacdbb05fb5d4860b5123a08e9edd2aabb74e0e1cb0cfc7029a0a7adfccf11e20b13a86ab6",
"pids": [
2816
],
"md5": "d7e3dd56e9127e7180ff813b9cb9216e"
},
{
"yara": [],
"sha1": "91ec0d763101dccc19e5f795a54ddd2feea06ecf",
"name": "05ad49069429c50f_checkbox-check-off.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-off.png",
"type": "PNG image data, 12 x 12, 8-bit\/color RGBA, non-interlaced",
"sha256": "05ad49069429c50fa1189cfcf26ecfec60b8911fbe794a0a82ce1241985eca0c",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "6349AC86",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/05ad49069429c50f_checkbox-check-off.png",
"ssdeep": null,
"size": 1019,
"sha512": "8cd0abe5f583cd8deaa8d7ee5071692e3b6f3207d73e17662b92b2e2b614cc59b318fc7245a494e18a3582438c3ec080bd6ec1f7232c6fbc32790f05a0451043",
"pids": [
2816
],
"md5": "466c4ef5e22c7b9334dc7a5cda622e5c"
},
{
"yara": [],
"sha1": "cde10b96d1e7a7dd74c18f75bf63d177c9bc4535",
"name": "12cb504375352b9c_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\bgPage.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "12cb504375352b9cf2bd85b3bbaa0198cb999417b607b18da95376325708624f",
"urls": [],
"crc32": "6385D420",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/12cb504375352b9c_bgpage.html",
"ssdeep": null,
"size": 1435,
"sha512": "56ea4d2a4e82b4a5386402dc5024012265cdadd8484e804399fd37a99a72fd0cad65b4f01b90e36a023e874df0694787b5aa22ae8c5b6cd697b4a9cd06b3fab4",
"pids": [
2816
],
"md5": "8adcd4c3147c8c7e781b1daa3a3476a4"
},
{
"yara": [],
"sha1": "2394a4cae1914167fcf8c5a8d11153cd7291c66c",
"name": "663b03c0d41dfe6b_jquery.autocomplete.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.autocomplete.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "663b03c0d41dfe6b170fbcb8dfd90292d89850668fe3d9882b0b2f9dc2643732",
"urls": [
"http:\/\/www.devbridge.com\/projects\/autocomplete\/jquery\/"
],
"crc32": "8D77BB8F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/663b03c0d41dfe6b_jquery.autocomplete.js",
"ssdeep": null,
"size": 27779,
"sha512": "20154737544a0844a0ca704ad6ead22b2d6d5606a9bc5c51235ccbb45336e049fe0ad43b05bab63644780ee6dbd9c097274070f5c39fdc0cdbab8059246ed500",
"pids": [
2816
],
"md5": "0f20b2111d9e4eab20322097964bfb7b"
},
{
"yara": [],
"sha1": "001ecb633de6a66ef245105e00bd0c915a345915",
"name": "05d1ee6959714ae3_navigationtests.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\navigationTests.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "05d1ee6959714ae30e649b5db3a02d16fb915a4a1438f0ffe852a42398f3dd40",
"urls": [
"http:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.4\/jquery.min.js"
],
"crc32": "B3843FCC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/05d1ee6959714ae3_navigationtests.html",
"ssdeep": null,
"size": 2131,
"sha512": "2b583567ff181f738b658897b65f21c05db2eb8520dafc2143f982646b9938ad9afbec0826151a79c8bd6f7375ae0314d0d0ae724c87ccab11597c8f65a2e954",
"pids": [
2816
],
"md5": "6fdcafd4250093e654dc8aa7281727de"
},
{
"yara": [],
"sha1": "3a81fdc179ad0a59825ec35696a62886f7edf836",
"name": "01f1b8c5a4e360b1_popup.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\popup.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "01f1b8c5a4e360b10f7d66b6e1a0a99b5cd74e08e1cbec0514a62cdf32790d3a",
"urls": [],
"crc32": "360FD764",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/01f1b8c5a4e360b1_popup.css",
"ssdeep": null,
"size": 5274,
"sha512": "e05677b7cfe2f1f56f664ae6885b6f0d389bf68e88dc13ea7b68f38ef898ebac03f92be290727940bdd91146f142b35fafb5fc888eaf280d5ef579cdd3795306",
"pids": [
2816
],
"md5": "131754e6bde9f426aafefd6eb02f01c8"
},
{
"yara": [],
"sha1": "958049c1cbfefcb837413023775f1fc8014f60cf",
"name": "d94cdbd8fbf3396b_closeicon.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\closeIcon.png",
"type": "PNG image data, 10 x 9, 8-bit colormap, non-interlaced",
"sha256": "d94cdbd8fbf3396b05e9991dd51d4bf3671df4762f2c900a17d406fdaafb5298",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "488E1AB8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d94cdbd8fbf3396b_closeicon.png",
"ssdeep": null,
"size": 1107,
"sha512": "138d16def96418d386bfc0eff53e2b752d2c823a33af61f30c500255a87f51a31a21d2cb72d73e39119f93e0559c5b59f81f169f4fe42fa4c2f62ce6692dab12",
"pids": [
2816
],
"md5": "23ce317931926803f0b5978e49bf7fe8"
},
{
"yara": [],
"sha1": "8d978d79c90e07b27d1d4552d82f2588967640fd",
"name": "e54b1d02d6b66d42_x-default-rtl.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-RTL.png",
"type": "PNG image data, 30 x 17, 8-bit\/color RGBA, non-interlaced",
"sha256": "e54b1d02d6b66d42ab9d58ae8c4a27f6bfc888009ce404fe6177d866ca251a5b",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "FE9D9075",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e54b1d02d6b66d42_x-default-rtl.png",
"ssdeep": null,
"size": 1308,
"sha512": "9c15219545de2b8a0fa1406cf5a5bc5cd10d6c9466dcfe4c21471ab55340e0527ec4177696aaa7995f3208190b02d827b2146ee9d4c6992135d1aaaa2b3cf4b5",
"pids": [
2816
],
"md5": "ff4f6b41dfab60fde151847af6afdb4f"
},
{
"yara": [],
"sha1": "e74bfc93da606c8b2ee375235d5f24927109dfb0",
"name": "6249ded47008edf7_scrollers.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\scrollers.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "6249ded47008edf73f225a0d9a648f7d761bfd5cbe158f76eadb8cdcce444e74",
"urls": [],
"crc32": "CF5685FC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6249ded47008edf7_scrollers.js",
"ssdeep": null,
"size": 5256,
"sha512": "57d04314407100fd374cbeca498c32e97dd39cd0299a3c5fb1fd8e4334fa553b7bb78bb3a0419e59993e165a9316696a5504c2348f11db6221e6e998d8c98657",
"pids": [
2816
],
"md5": "ca0dfdb7890f31b77628d07072adc7ae"
},
{
"yara": [],
"sha1": "f28f40395d6a2fef9c6c325318618db1a6d0af89",
"name": "95719edfbfc384ae_toolbarfirsttimedialog.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "95719edfbfc384ae4e14c3c125bb23463d3a4b66f77ef5f7f2d6148d5942a4a9",
"urls": [
"http:\/\/www.facebook.com\/plugins\/like.php?href=",
"http:\/\/connect.facebook.net\/en_US\/all.js"
],
"crc32": "4D6BE7D4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/95719edfbfc384ae_toolbarfirsttimedialog.js",
"ssdeep": null,
"size": 63950,
"sha512": "413e81b6adcdbcb6289115f85a9ae7a1fba1b3401eb3f883ae15da4da17775fac09222e09698c4b90e22a3751eac5eb96091005fa14420bb61191fe8a1003f6c",
"pids": [
2816
],
"md5": "0d61110eaf3cf38be652abbfa242384f"
},
{
"yara": [],
"sha1": "bdfb781094f64d00d754fdae5e8edd554ca93a1a",
"name": "0ba4a5da7022ffdc_truste.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\truste.gif",
"type": "GIF image data, version 89a, 35 x 36",
"sha256": "0ba4a5da7022ffdc622a4284aeee8e0c79d5c3e83a6defaffc1b013a7dcbbe5d",
"urls": [],
"crc32": "A142E0E1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0ba4a5da7022ffdc_truste.gif",
"ssdeep": null,
"size": 1673,
"sha512": "14952f5d0395faaaa04dc3576049f3608d1a9fecc99aab02baf3422284a8fb859aae45b7347e46d6f414d9226a55e353f56f2bce1e8171838b4593b1d4a7663b",
"pids": [
2816
],
"md5": "bda46a250dd95718815f29d1d9b74e4f"
},
{
"yara": [],
"sha1": "9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f",
"name": "88171413fc76dda2_jquery.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.min.js",
"type": "HTML document, UTF-8 Unicode text, with very long lines",
"sha256": "88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd",
"urls": [],
"crc32": "F12D4554",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/88171413fc76dda2_jquery.min.js",
"ssdeep": null,
"size": 93868,
"sha512": "0640605a22f437f10521b2d96064e06e4b0a1b96d2e8fb709d6bd593781c72ff8a86d2bfe3090bc4244687e91e94a897c7b132e237d369b2e0dc01083c2ec434",
"pids": [
2816
],
"md5": "ddb84c1587287b2df08966081ef063bf"
},
{
"yara": [],
"sha1": "9224175c13b4dcae1409c3495fcf5ef3181a0484",
"name": "97fd6ee59da5ab04_notificationuimanger.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notificationUIManger.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "97fd6ee59da5ab04f140987adf5871eb1a371562ae1e14795e4819565fea70fc",
"urls": [],
"crc32": "0636CB22",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/97fd6ee59da5ab04_notificationuimanger.js",
"ssdeep": null,
"size": 14308,
"sha512": "efd046427f1b02f51a64422125c86ec337565e9133ae4ba6793e43c0166fcf62da705fd7264224dc5a4f8934ed7bf054a1095fbff0d8811151f066669f166dcf",
"pids": [
2816
],
"md5": "b27bc8c8d378d74e4fd01a4e696c7420"
},
{
"yara": [],
"sha1": "23195483e9e5393dbcc0bfcede16d13f21619c47",
"name": "67583aafb9b4d523_ok_btn.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\OK_Btn.png",
"type": "PNG image data, 54 x 22, 8-bit\/color RGB, non-interlaced",
"sha256": "67583aafb9b4d523a50afb88ada03c7ec34d0ae6e86d26b66afbe5e5ce80361c",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "F7D12BA2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/67583aafb9b4d523_ok_btn.png",
"ssdeep": null,
"size": 1469,
"sha512": "24b534b1c32c771aade6b4b6c64d9c5446643bb54a65df055b6cb5c8d69e49937fc0b18d4f5c1750f6c8c2741e9a5b9dcde5f7bd1628eb1fd4df1e6e4187afb8",
"pids": [
2816
],
"md5": "4aea6e4ec055122ce3606a37bffbc705"
},
{
"yara": [],
"sha1": "6c0db1a17b30a6028362fe8fcb5741bb5a1d65d2",
"name": "7857a12f33493f3b_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "7857a12f33493f3b3a89ed85687e2e753dc30b406e02a2de7fdbb1fc115e5872",
"urls": [],
"crc32": "E6DFE9FA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7857a12f33493f3b_bgpage.html",
"ssdeep": null,
"size": 1036,
"sha512": "79a551332aa55bf645abe7a975266947ef7b0c2f731fc7e8aa8d1c2ef9ff3832b4a9303572b3952b004ed08cc740895743ed1c98e2a4c1e5581503e64ce41971",
"pids": [
2816
],
"md5": "67b38103c3efb30fb782aa455c4624f6"
},
{
"yara": [],
"sha1": "84ed8f766965ebe11388997cb8feaf68b9327708",
"name": "4a956ab3092bfd6a_rounded_corners_right_white.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white.png",
"type": "PNG image data, 5 x 29, 8-bit\/color RGBA, non-interlaced",
"sha256": "4a956ab3092bfd6a799156820ea032965f516000c36bc72bfdf4c2d94a561c3c",
"urls": [],
"crc32": "3D73026E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4a956ab3092bfd6a_rounded_corners_right_white.png",
"ssdeep": null,
"size": 186,
"sha512": "d88cff825b5d0be9ccd5e13d880e81ff8aac575963a739bb8a97d2f6e630abc55b0a2ed0e41a1b8e904ec49586ec0d4fdea2e9140ae82a68b6ca36872d07dd81",
"pids": [
2816
],
"md5": "b2bf3e4f7c08d07243163d073fa625ac"
},
{
"yara": [],
"sha1": "1f5fe5804def5a96d8ea606c03c653f051343f9b",
"name": "dae2b77bf2fd1721_preferences.xul",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.xul",
"type": "XML 1.0 document, ASCII text",
"sha256": "dae2b77bf2fd17217e82998a31dcedaa72474f60d7820d2508f186c6b5d1e1df",
"urls": [
"http:\/\/www.mozilla.org\/keymaster\/gatekeeper\/there.is.only.xul"
],
"crc32": "1AD9A247",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/dae2b77bf2fd1721_preferences.xul",
"ssdeep": null,
"size": 390,
"sha512": "2da19e59593c81ce19debbcd893aa386fd05afeb06a1a8050bdf30a323b302ac1339e9301a73343e7f699d8b0cd5d9fd67c62a300fd1024fef835a306ee9544e",
"pids": [
2816
],
"md5": "6e3c1dbdffacb61b7d2c019c7612b763"
},
{
"yara": [],
"sha1": "d955654b1f9db86418d42a0aac9589033d6261c9",
"name": "aaae9da6a005ee21_ct3329621.xpi",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"type": "Java archive data (JAR)",
"sha256": "aaae9da6a005ee216852a3abbac827d8fbdf35254793b7f9e7e905c13eb39506",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/logo.verisign.com\/vslogo.gif0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0"
],
"crc32": "49C71C9B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/aaae9da6a005ee21_ct3329621.xpi",
"ssdeep": null,
"size": 1876990,
"sha512": "fd77244643a96c0216ff0edc390795607fe781b2dc7fb1d24378da291d01420f96e63802584cfd97e5c22ed78a7d9aa7df691865342862adc3c7967dc6596e74",
"pids": [
2816
],
"md5": "f0013e4d3889f8679cebafc56d9b3c7a"
},
{
"yara": [],
"sha1": "83067b6f4c98b4255ea6d2f14ff07d7d948385c3",
"name": "68b7bcef6617dd6a_ie8.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\ie8.png",
"type": "PNG image data, 32 x 32, 8-bit\/color RGBA, non-interlaced",
"sha256": "68b7bcef6617dd6ae88772be89411864d99a01bfda2466e549add143f9cc830f",
"urls": [],
"crc32": "8C176912",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/68b7bcef6617dd6a_ie8.png",
"ssdeep": null,
"size": 196,
"sha512": "fbb49f729d89593295c3aa78b8f10a64b3cd6cbe11f7cd89febb97a95b7f1ba198c707014890e8e9b54d828a3915defe20004a22f7283855b38fae32d5df8d9b",
"pids": [
2816
],
"md5": "62c14929e2fe366ea0da5c4bf7cb3d63"
},
{
"yara": [],
"sha1": "40d76ef18e457868d3e3695b8901f41db517c09d",
"name": "8b688cc16cb9c64f_np-mswmp.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\np-mswmp.dll",
"type": "PE32 executable (DLL) (console) Intel 80386, for MS Windows",
"sha256": "8b688cc16cb9c64f30c42a844a92b49d76b9601cfb99b533da96f91aa0844fdf",
"urls": [
"http:\/\/www.microsoft.com\/pki\/certs\/CodeSignPCA2.crt0",
"http:\/\/www.microsoft.com\/windows\/windowsmedia",
"http:\/\/www.microsoft.com\/pki\/certs\/tspca.crt0"
],
"crc32": "655E9954",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8b688cc16cb9c64f_np-mswmp.dll",
"ssdeep": null,
"size": 163256,
"sha512": "e4b0b173a9d4783ec8d05a03e515abcf3b40d39b32bc23953a93827cac71244ab098ce0ff4c481ed29b21b259ab3c54b91c181704c65314d404c0bc4fdee2ecd",
"pids": [
2816
],
"md5": "99f97c9fe748c37528c338a423577fcb"
},
{
"yara": [],
"sha1": "bccc4a04f0812fc53cd83599528e185c2bf54507",
"name": "cc839710782e4d60_gadget.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\gadget.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "cc839710782e4d6009761973074a32b0b981f6597a98ba5e5bb39a266a60cf93",
"urls": [
"http:\/\/radio.webapps.tbccint.com\/gadget\/tooltip.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/rewind_rollover2.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume-scale_middle.png)",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share_Favorite.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/pause_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/pause_click.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share_hover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/facebook_hover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/rewind_normal2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search-music_rollover2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/panel-station-screen-bg.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/small-play_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/panel-main-screen-bg.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share-menu_right.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/small-play_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search-music_normal2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/scroll-handle.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/forward_rollover2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/pause_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/back_RTL.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume-scale_right.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Volume-button_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/arrow-down_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search-music_click2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/favorite_-next-to-share_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/Play_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/bottom-CHROME.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/rewind_click2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share-menu_left.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/welcome",
"http:\/\/radio.webapps.tbccint.com\/gadget\/twitter_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/arrow-left_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/arrow-right_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/full-welcome-screen.png",
"http:\/\/radio.webapps.tbccint.com\/volume\/volumeIndicator2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/favorite-on-stations-screen.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/Station",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search_rollover.png)",
"http:\/\/radio.webapps.tbccint.com\/gadget\/Play_click.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/mail_hover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/pattern.png)",
"http:\/\/radio.webapps.tbccint.com\/gadget\/bottom-without-all.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/twitter_hover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/favorite_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Volume-button_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/Play_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/RadioTimePlayer_TuneInLogo.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/forward_normal2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/favorite_nextToShare-on.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share_normal.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume-scale_left.png)",
"http:\/\/radio.webapps.tbccint.com\/gadget\/facebook_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/favorite_",
"http:\/\/radio.webapps.tbccint.com\/gadget\/mail_normal.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share-menu_center.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search_normal.png)",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search_middle.gif)",
"http:\/\/radio.webapps.tbccint.com\/gadget\/scrollbar.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/forward_click2.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/share_Share.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/back.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/favorite_normal.png"
],
"crc32": "1394F921",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cc839710782e4d60_gadget.css",
"ssdeep": null,
"size": 21104,
"sha512": "d99dce7acd4f382dce2280d167d3a4b73b8034191ae4bda2d2c6c522f69c67208301b4d29d6349f1fe869811ec6a96778e80fd12e4b631b8fde2656457d1c0dd",
"pids": [
2816
],
"md5": "1ed6eccbcfd38c43a67848dca9e4db4b"
},
{
"yara": [],
"sha1": "25373fa5cf5852a9f66b794a8aeec79cd1f68b6d",
"name": "322346451055f346_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\popup.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "322346451055f3467b05ba600fe7c32dfee5ba7827eccfa033bba868949d70e3",
"urls": [
"http:\/\/www.conduit.com\/"
],
"crc32": "3FC652C9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/322346451055f346_popup.html",
"ssdeep": null,
"size": 1929,
"sha512": "ee33d4860a5caabc6dc149ce5c6219a3aab02c300b0bdc801e251b0f36219640caa17cbfc6543b0223ef5685871be4fe44e8af6d673259cdd9faa788878f8dbb",
"pids": [
2816
],
"md5": "ad103bc189844b903f24cf449eaa3998"
},
{
"yara": [],
"sha1": "4435b60321d9cf61114b7ad11c493b2b68d519c1",
"name": "e7465c5c55f07a4f_utils.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Utils.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "e7465c5c55f07a4fe84dc01bc09ee7b40578cf52b1a14c8db330b30a357a4812",
"urls": [],
"crc32": "2D42BF19",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e7465c5c55f07a4f_utils.js",
"ssdeep": null,
"size": 2072,
"sha512": "59340876c8e23df8d10a2f7e3e8b6240ccae1ed65fbc0db3b7f3cdcf4453bb72e600130f233d5d33ea3ab0505b0b13d4c1606b5f184345decf49f6c51d3db015",
"pids": [
2816
],
"md5": "edeabeb745bcb2cbf6bbc926468808da"
},
{
"yara": [],
"sha1": "94f4a638007b339ed9e8b384fba49ae81f0728b6",
"name": "a9c7a06c5414a579_settings.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\settings.png",
"type": "PNG image data, 11 x 12, 8-bit\/color RGBA, non-interlaced",
"sha256": "a9c7a06c5414a579269c8f936058d0b05dad8b4fd43589fd2851a8dff377f9ee",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "503FFBD4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a9c7a06c5414a579_settings.png",
"ssdeep": null,
"size": 1081,
"sha512": "c9568e581fd7cda726345f225a370fef180e5f451d037b36aca062ab79f4abfc4f74f89d76b87a9257f126e78c3a64a4c3bfbea801d7f05e466ebdb23a5a0b0c",
"pids": [
2816
],
"md5": "c424feaead550187b3576ded8aaa3a73"
},
{
"yara": [],
"sha1": "f814ab0c11ae1883cbbf1879b4174a14251fa6aa",
"name": "a03a809051618b85_rounded_corners_right_white_34.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white_34.png",
"type": "PNG image data, 5 x 34, 8-bit\/color RGBA, non-interlaced",
"sha256": "a03a809051618b85f7f56fa1547ddfffefbfebac27f1185114e8513b44b55698",
"urls": [],
"crc32": "63AF70BA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a03a809051618b85_rounded_corners_right_white_34.png",
"ssdeep": null,
"size": 189,
"sha512": "0baea300fd43d6caffc513eaea94ae3b38a8691a5ec2a9f5b755d82036498f829d468706cdba40f70b4489a3f35510774cceb10637622916312e6b387b98a18e",
"pids": [
2816
],
"md5": "0fec4ebf9800b99f7e4425cff72abc8a"
},
{
"yara": [],
"sha1": "236d826386a7514fc2b9651fdf2907f4f7111623",
"name": "2d9f7bad35442f35_settings.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\settings.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "2d9f7bad35442f35f3b35fda05d978fc2205dabdd1242a46c439f188f17e8ae8",
"urls": [],
"crc32": "CD4CB8D6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2d9f7bad35442f35_settings.css",
"ssdeep": null,
"size": 2471,
"sha512": "ff583bb044ce338727c7d50edd53b3fd62ea61e3055c6fd3195adf9c759587f1d6d7350057788a21bb4c50549dc9677a5463e78a8d7101bc33487f16d08924c0",
"pids": [
2816
],
"md5": "7dcd79d3dfca3834b65113bc14a4b189"
},
{
"yara": [],
"sha1": "a1d782943acc66f1107b841f409ae4b9b38c7020",
"name": "f8ae2a8558080fa2_jquery-ui-1.8.10.custom.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "f8ae2a8558080fa28fe074ae4a325afaa9c2cb3149ac7b8e7c76df7be55919f4",
"urls": [
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_highlight-hard_55_555555_1x100.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_highlight-soft_35_3e3e3e_1x100.png)",
"http:\/\/jqueryui.com\/themeroller\/?ffDefault=Helvetica",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_666666_256x240.png)",
"http:\/\/jquery.org\/license",
"http:\/\/docs.jquery.com\/UI\/Menu",
"http:\/\/jqueryui.com\/about)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_aaaaaa_256x240.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_bbbbbb_256x240.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_cd0a0a_256x240.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_c98000_256x240.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_highlight-soft_60_565656_1x100.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_flat_0_aaaaaa_40x100.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_f29a00_256x240.png)",
"http:\/\/docs.jquery.com\/UI\/Autocomplete",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_highlight-hard_15_888888_1x100.png)",
"http:\/\/docs.jquery.com\/UI\/Theming\/API",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_glass_95_fef1ec_1x400.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-icons_cccccc_256x240.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_gloss-wave_16_3e3e3e_500x100.png)",
"http:\/\/radio.webapps.conduitapps.com\/custom-theme\/ui-bg_inset-soft_15_121212_1x100.png)"
],
"crc32": "5F875362",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f8ae2a8558080fa2_jquery-ui-1.8.10.custom.css",
"ssdeep": null,
"size": 21840,
"sha512": "eb86a624bf939b0d55cc3b83ca74d0ab7233daf46807dfcaac0e595f35973b59dff18e689c98e4fe8b88f71cf1870c63831b85e136371d200f141eda76700b7e",
"pids": [
2816
],
"md5": "e069e1bfec324a18e593cd8a25a655d6"
},
{
"yara": [],
"sha1": "718fce75aa2cb9314fb290b5ec68fffdc46b1f9e",
"name": "5d87d393c0ac9815_jquery-ui-1.8.10.custom.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "5d87d393c0ac981599ac2f331aae362a5e2f7f48b9350815740d4be9ce965cc8",
"urls": [
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_c98000_256x240.png)",
"http:\/\/jqueryui.com\/themeroller\/?ffDefault=Helvetica",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_cd0a0a_256x240.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_cccccc_256x240.png)",
"http:\/\/jquery.org\/license",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_inset-soft_15_121212_1x100.png)",
"http:\/\/jqueryui.com\/about)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_highlight-hard_55_555555_1x100.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_f29a00_256x240.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_highlight-hard_15_888888_1x100.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_flat_0_aaaaaa_40x100.png)",
"http:\/\/docs.jquery.com\/UI\/Menu",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_666666_256x240.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_bbbbbb_256x240.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_highlight-soft_35_3e3e3e_1x100.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_glass_95_fef1ec_1x400.png)",
"http:\/\/docs.jquery.com\/UI\/Autocomplete",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_highlight-soft_60_565656_1x100.png)",
"http:\/\/docs.jquery.com\/UI\/Theming\/API",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-bg_gloss-wave_16_3e3e3e_500x100.png)",
"http:\/\/radio.webapps.tbccint.com\/custom-theme\/ui-icons_aaaaaa_256x240.png)"
],
"crc32": "0BEEF527",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5d87d393c0ac9815_jquery-ui-1.8.10.custom.css",
"ssdeep": null,
"size": 21772,
"sha512": "8d2b78774b8ef42f492582a4f55135f499fd4816ff0cda77782b565afb2aba3cc59bef709039e3de169acf69d620db5327d19954585145d9b013b5b89e567798",
"pids": [
2816
],
"md5": "cd331eeec31cb64afd6c0e683e2c5196"
},
{
"yara": [],
"sha1": "0fbb93bd44b06f7753d2c7eb053cf489f15681cb",
"name": "c6236f44de5143e1_main.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\main.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "c6236f44de5143e1b7f557a72bd6f0a8ad6bc8aac401393ebf49ded7dd051e33",
"urls": [],
"crc32": "48255CC4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c6236f44de5143e1_main.html",
"ssdeep": null,
"size": 1286,
"sha512": "eebf5356fbd5b80800498e3294f383a685c276302ef5e2953313517b09882712707e935e4ced1507d7180435b8014e9427bd4e28d8ae30b1a4f42c7117c5d6ff",
"pids": [
2816
],
"md5": "2e3152258d0fabc1784691b51fa53749"
},
{
"yara": [],
"sha1": "c9c1846541ba79a498539bcc7f89d2b44ee00add",
"name": "f54f8ceedb36830b_jquery.tmpl.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.tmpl.min.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "f54f8ceedb36830bbf9bbb605ad45aac41a0ec95c5fd402104367989d08b6fc9",
"urls": [
"http:\/\/github.com\/jquery\/jquery-tmpl",
"http:\/\/jquery.org\/license"
],
"crc32": "15FBEE96",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f54f8ceedb36830b_jquery.tmpl.min.js",
"ssdeep": null,
"size": 7416,
"sha512": "66e7ae03e5e0f3639f959d80abe47e22d332800f96034e199c9dfe97076f5099c73628c6839ca07e6b6b1234cb9208afbe059170b9e2c5d61969ff3f3f3b434b",
"pids": [
2816
],
"md5": "c1dd548003970249969e5fa62595b99d"
},
{
"yara": [],
"sha1": "36317c8bc977898f7628b9b79c966ded9291263b",
"name": "4dba60964725b1e3_prev.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "4dba60964725b1e399224acb98474cfd7af5c7ce9d1b1c329a4a05597c7713ac",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "6A91EE59",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4dba60964725b1e3_prev.png",
"ssdeep": null,
"size": 1605,
"sha512": "bdab9ea3b10078b6abf14e075265ffa27aaeea938253da47cd45187b617912a3f292b8e58e0a759a8d4c280ce891943717dce98d0ff304f6f3fcd67072442bd6",
"pids": [
2816
],
"md5": "1f46c58aa8b414830ac86572d8ce3638"
},
{
"yara": [],
"sha1": "d91caf7634d23a33cc2d870afaaa7eb8154eea5e",
"name": "e2563d13b71001a2_separator.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator.png",
"type": "PNG image data, 10 x 16, 8-bit\/color RGBA, non-interlaced",
"sha256": "e2563d13b71001a2b4f86882ad8e28dd2d3b1a6d74ab70e935b70e5a905961bc",
"urls": [],
"crc32": "0ABD9E15",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e2563d13b71001a2_separator.png",
"ssdeep": null,
"size": 149,
"sha512": "11ce7d5dac54c4697b3a18e09928940b88a00f5c83586cfed026fa4cccbd964a4a4be767fac25b7a3e7510b51eb41989eeb62fb4435c24a71d3898b06c7191b4",
"pids": [
2816
],
"md5": "47e5c4fcb68bdb57e38801138b5e3172"
},
{
"yara": [],
"sha1": "638095cc1c63f9eb799981d1f235f642768b55c5",
"name": "dd112fd197700583_scroller.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\scroller.png",
"type": "PNG image data, 5 x 50, 8-bit\/color RGBA, non-interlaced",
"sha256": "dd112fd197700583e52bf6f8cd168af053031dd532b5efcdc4558dcbd013e2ed",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "861151C2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/dd112fd197700583_scroller.png",
"ssdeep": null,
"size": 978,
"sha512": "d9088841b20a16fbf9323e306586b0ea2fa450529f821b5e2137561a3507ed8833707cdb6498a266ba3e5edfb5e29e6d4293bfdccc36b249d26b36fe7cbf3e50",
"pids": [
2816
],
"md5": "1a6497f3292a247d9085fe6fa651720d"
},
{
"yara": [],
"sha1": "7255fc7f31e65680a30bef950b3750cf03573878",
"name": "979ebf3a20cca9b9_separator_hover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator_hover.png",
"type": "PNG image data, 10 x 16, 8-bit\/color RGBA, non-interlaced",
"sha256": "979ebf3a20cca9b9085ece6c3874b0c818058b50b2e0bb49077fc1e330bcbc2a",
"urls": [],
"crc32": "966494D4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/979ebf3a20cca9b9_separator_hover.png",
"ssdeep": null,
"size": 264,
"sha512": "30879fe36fc27d7571a42b580569f7dab2197796b0bf106cae8cc6b69cdd2cd05f4ffc9dec52ee0d7ce5309fbc41aa4c6193aeffc5f5f13bda39b11afb307200",
"pids": [
2816
],
"md5": "27a9c6abc6e80ce13806c7f6bfb84bc0"
},
{
"yara": [],
"sha1": "d545c0202dd7feb24635c43647477e6370ff0f0e",
"name": "1fc140f9d649a79a_radiocommon.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\radioCommon.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1fc140f9d649a79ac31085ac6b114566a862b1f152aba156edd308130191bc67",
"urls": [
"http:\/\/radio.webapps.tbccint.com\/"
],
"crc32": "4E75289B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1fc140f9d649a79a_radiocommon.js",
"ssdeep": null,
"size": 6392,
"sha512": "3a3c91643cbc794d175d46fef2cfeb189f95763e256ffac19ff995f32dc8f15382ddcb3ac2eef8f727e255f36e99afb0b176134b6da590241b17d1e01a502a77",
"pids": [
2816
],
"md5": "6a75e214738634c597a4a725dd6ca3ce"
},
{
"yara": [],
"sha1": "9d897bb5a66482a4bcc2b1dddce7bd2d4dea7acf",
"name": "133dbcbb362ebd3a_dd-arrow.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\dd-arrow.png",
"type": "PNG image data, 5 x 5, 8-bit\/color RGBA, non-interlaced",
"sha256": "133dbcbb362ebd3a4fa5ac1ff4fa75bdf270fcf9e8a2b1e174982bca87f2b0f3",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "5F0FE3E3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/133dbcbb362ebd3a_dd-arrow.png",
"ssdeep": null,
"size": 987,
"sha512": "f963b9a2b945c23b62dd37fa92f722140cff0153d50aa58832b5853760bcb189f7988836425a44825fbca1572d958c7ef05fe563e9532b844c3f1c670e621e7c",
"pids": [
2816
],
"md5": "e1bb572d78c161c43bd4f814662dcec2"
},
{
"yara": [],
"sha1": "365b213d2738581d05e4793b5011c7968689a4d2",
"name": "015136964ec145c0_logo.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Logo.png",
"type": "PNG image data, 110 x 41, 8-bit\/color RGB, non-interlaced",
"sha256": "015136964ec145c05d8342be33e97f9432a66aacde8e923d581f78d3b68c3e80",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "627D300B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/015136964ec145c0_logo.png",
"ssdeep": null,
"size": 6477,
"sha512": "68305f3fabe3c9e14739aa65c8d4486b1a17b114fd259caa429513b0f34657ba3a595933c2ee37a4d09e1f6ea97305c806c242808ab83fd4006c525047a23857",
"pids": [
2816
],
"md5": "c92b9de7527b6c86353cac5fa7d40fd0"
},
{
"yara": [],
"sha1": "c0f635f36e14c7208cef0f24dffd7d1bf3a2284f",
"name": "1159d7392d5cfdc6_jquery-ui-1.8.10.custom.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery-ui-1.8.10.custom.min.js",
"type": "ASCII text, with very long lines",
"sha256": "1159d7392d5cfdc668b4ba64d68e73fc1dad7cdc0414cc91ba8e510e30fb5c37",
"urls": [
"http:\/\/docs.jquery.com\/UI\/Effects\/Transfer",
"http:\/\/docs.jquery.com\/UI\/Slider",
"http:\/\/docs.jquery.com\/UI\/Effects\/Explode",
"http:\/\/docs.jquery.com\/UI\/Effects\/",
"http:\/\/docs.jquery.com\/UI\/Effects\/Highlight",
"http:\/\/docs.jquery.com\/UI\/Effects\/Bounce",
"http:\/\/docs.jquery.com\/UI\/Mouse",
"http:\/\/docs.jquery.com\/UI\/Autocomplete",
"http:\/\/docs.jquery.com\/UI\/Effects\/Clip",
"http:\/\/docs.jquery.com\/UI\/Effects\/Fade",
"http:\/\/docs.jquery.com\/UI\/Effects\/Fold",
"http:\/\/docs.jquery.com\/UI\/Position",
"http:\/\/jqueryui.com\/about)",
"http:\/\/docs.jquery.com\/UI\/Effects\/Blind",
"http:\/\/docs.jquery.com\/UI\/Effects\/Shake",
"http:\/\/docs.jquery.com\/UI\/Effects\/Drop",
"http:\/\/docs.jquery.com\/UI\/Effects\/Slide",
"http:\/\/docs.jquery.com\/UI",
"http:\/\/docs.jquery.com\/UI\/Widget",
"http:\/\/docs.jquery.com\/UI\/Effects\/Pulsate",
"http:\/\/jquery.org\/license",
"http:\/\/docs.jquery.com\/UI\/Effects\/Scale"
],
"crc32": "71A65E16",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1159d7392d5cfdc6_jquery-ui-1.8.10.custom.min.js",
"ssdeep": null,
"size": 61024,
"sha512": "bbbc492b3152982886e40484c8f3db009c8ae3b2f5ad3eed3fc9fda97ba448d89dab75a15407fa79dd5595157e0b0d7ed914ed3c4c8cdf5c778801bfa62dfbe0",
"pids": [
2816
],
"md5": "c27554842a6d9bab37f0411299543f8d"
},
{
"yara": [],
"sha1": "b2591e52a9e643357ed498afab109abac0b99306",
"name": "3d3535862ab1b01f_jquery.jscrollpane.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\jquery.jscrollpane.css",
"type": "ASCII text, with CRLF, LF line terminators",
"sha256": "3d3535862ab1b01fd717862fcc368efc2a6e378028cad9f81e6b0b5177692abf",
"urls": [],
"crc32": "9D811AE7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3d3535862ab1b01f_jquery.jscrollpane.css",
"ssdeep": null,
"size": 1499,
"sha512": "945f55b86908b52237bf7b2f88b8115e8a17f1483013f7d4f0b6dd4252bababe527555392cdff2f914c60e9bd299135301a174a0ad51b2e276c43c420cccb866",
"pids": [
2816
],
"md5": "73c2e99e0cc478a068e048d1efbdcf15"
},
{
"yara": [],
"sha1": "6c3b1bb372e8b4b670d92db016edc4ff5125b494",
"name": "c7ed847f44acec35_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "c7ed847f44acec356a9bd03eaf0253d06bb061563848c6d586cad9410a41a313",
"urls": [],
"crc32": "E1A548E7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c7ed847f44acec35_newPrefs1.js",
"ssdeep": null,
"size": 7577,
"sha512": "dd8928cbab31b2ce3f229dfce99905550ea07c745732155ff98e35cbe7b722421e1b437b4167f85e51d1df3da470dcd83ca1fbcc085c6dff56507ff973617c3b",
"pids": [
2816
],
"md5": "f142284b5d3aeb8e33298ddb8dd49ce5"
},
{
"yara": [],
"sha1": "da78157a5ea410a26ef1efccc6b3782f2923458e",
"name": "877d305614300eab_gf.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\gf.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "877d305614300eab994ade0a10bcc3bb00fc87d9ad7a1ac72d239ed837c3a28a",
"urls": [],
"crc32": "AC37EF3A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/877d305614300eab_gf.html",
"ssdeep": null,
"size": 2177,
"sha512": "a0e847870c725b2d2ee8cbce93a12721d0b110b467efaab9daf1bb1fbc76f1426daecb17279a119ca6aa97e646b1dc6179c05d25a9882ba36b03b5c9c36df1ca",
"pids": [
2816
],
"md5": "15a4012c5d2925438ae89a494c90152c"
},
{
"yara": [],
"sha1": "5cacd7fbee455221fa79dc80b5cd4d74f87aa076",
"name": "337244ecb9e3d3fa_jquery.ezmark.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\jquery.ezmark.min.js",
"type": "ASCII text, with very long lines",
"sha256": "337244ecb9e3d3fa4a83af2195d9cb23a9c09adfe7b6f753f6112dc372a86ff4",
"urls": [
"http:\/\/www.itsalif.info\/"
],
"crc32": "7A03FA5B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/337244ecb9e3d3fa_jquery.ezmark.min.js",
"ssdeep": null,
"size": 1529,
"sha512": "5e34d72ecdac518ba682330814b8af5ab37a30a88568faf68084d94cdd2f3930c6030d5e6be7fe1d9ec70fb125595e634b7de5e71f62125fd8e19767f864a740",
"pids": [
2816
],
"md5": "ee156d1a6c1e965523dbb336849eed38"
},
{
"yara": [],
"sha1": "e9ade2e0f8d626b760f82e6bbfe36af5104e57e3",
"name": "29250d33e0195887_appmanager.model.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.model.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "29250d33e0195887aaf37f1623c0f3a44b2e2835c2c66929893da05d43e3e6c0",
"urls": [
"http:\/\/trovigo.com",
"http:\/\/suggest.search.conduit.com\/Suggest.ashx?l=he",
"http:\/\/appstrm.com\/",
"http:\/\/www.trovigo.com",
"http:\/\/www.trovi.com",
"http:\/\/trovi.com",
"http:\/\/search.conduit.com"
],
"crc32": "57ADC8C7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/29250d33e0195887_appmanager.model.js",
"ssdeep": null,
"size": 243109,
"sha512": "9d3118f29a24d19886184a9a96367a1f47a450772c8878f304c5b4c28148a8e9541742524dc9eb06987e1a999fa581fb3da84de3e7d9b7a330b71298edbb7e5d",
"pids": [
2816
],
"md5": "151e75fd2b80c005e83427a73887171c"
},
{
"yara": [],
"sha1": "c507ce47e396a14504a932bd2acadb6ffb33162c",
"name": "4627bef50dcf0e13_higlighter_script.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\higlighter_script.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "4627bef50dcf0e13f5be6126cc3966a57aedf733c7286fe9c4a68989f15942f4",
"urls": [],
"crc32": "603A9B3E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4627bef50dcf0e13_higlighter_script.js",
"ssdeep": null,
"size": 7035,
"sha512": "902961e2e89c1c4032d64d2dabe36c4de7a245a7ee3a41dff1cf5c3ba9267a43247e27fce0437006b4aad6c4b78f98ccda584e1160c2aa7cb393f8ec214979e5",
"pids": [
2816
],
"md5": "cdee166a74ac8d96ff5dc1a32bf32d55"
},
{
"yara": [],
"sha1": "1642728ae087db71154e60f49d429c34bfc651ad",
"name": "3507a52ae63239ea_settingsmanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\SettingsManager.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "3507a52ae63239ea8f3a7a89dc65d2dcae0c07495c667b9a5de6201800927057",
"urls": [],
"crc32": "3E62F3E3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3507a52ae63239ea_settingsmanager.js",
"ssdeep": null,
"size": 4272,
"sha512": "85faaecf809196f5851f5018d0ee0ea32543cc0af1879606c67b3c49a49ac1ff6b008373efa16077a5f9ff29be2222d0b905df6547f349f8946359b945c523d1",
"pids": [
2816
],
"md5": "9feb3050af9f7b8b28d317328cccbde5"
},
{
"yara": [],
"sha1": "ef77dcfa7d6d6f68953d2d907aa132848d279748",
"name": "6496c9f1089e1342_ic_closer_hover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer_hover.png",
"type": "PNG image data, 10 x 10, 8-bit\/color RGBA, non-interlaced",
"sha256": "6496c9f1089e13422a9ce9c57075777fe8d29943cb1080a17edac5bd661f1bdd",
"urls": [],
"crc32": "1A681813",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6496c9f1089e1342_ic_closer_hover.png",
"ssdeep": null,
"size": 263,
"sha512": "d8020f7e280e2e235432d69b575eca6173ea986828480948d93797f5a4f5ee6d76a85d2b85d5ab0ee05340b88266ae86717d34a729d461b8c3ce8f096d8b7159",
"pids": [
2816
],
"md5": "c4e9ccbd887c3d0c0d1067ec25c36e5b"
},
{
"yara": [],
"sha1": "8626858998507cda1d4cab737e5b550d150c15fb",
"name": "fe211834debe196c_providerhelper.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\providerHelper.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "fe211834debe196ca95e4a92eb6af92f6a922b6e3d978cf8d284d56227d0d949",
"urls": [],
"crc32": "93264510",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/fe211834debe196c_providerhelper.js",
"ssdeep": null,
"size": 2275,
"sha512": "0eb3331baad4487d596a576be354c6040319b4f2ea3a37a7a794676d6a20ca84dfdc269f71eb23554a47862a3bc5385ba3d35a7ea9532210d7e2081a0aa5dbd4",
"pids": [
2816
],
"md5": "5b459e03f5bcea692dc978752e9853e0"
},
{
"yara": [],
"sha1": "fb9a8b765ac08d117e50f34404a97a7dadad2a17",
"name": "06e7c9e51b9f1ea8_rounded_corners_left_white.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white.png",
"type": "PNG image data, 315 x 29, 8-bit\/color RGBA, non-interlaced",
"sha256": "06e7c9e51b9f1ea863146a7dc636640130027e0a25fa16172b9411c077e2760d",
"urls": [],
"crc32": "552FF26D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/06e7c9e51b9f1ea8_rounded_corners_left_white.png",
"ssdeep": null,
"size": 484,
"sha512": "1b639f8c75461435c5ec56468222dbb8bf455dfa461c2ee85fa4320d7ead1b414b1ba6d02341a011232c2466855b41d934f31e40862ccce38c2c9d7706ad03b8",
"pids": [
2816
],
"md5": "854ca7f9a8853ae8161372bed227c8f3"
},
{
"yara": [],
"sha1": "33ce5199c7e55f9bd52ead88126abba1e32fe119",
"name": "13d99ff7ff26d09f_popup.xul",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.xul",
"type": "XML 1.0 document, ASCII text",
"sha256": "13d99ff7ff26d09f6a5778e2615b63a5f5c12eb9027b8995c3344adf1906aae3",
"urls": [
"http:\/\/www.mozilla.org\/keymaster\/gatekeeper\/there.is.only.xul"
],
"crc32": "7E577D1E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/13d99ff7ff26d09f_popup.xul",
"ssdeep": null,
"size": 687,
"sha512": "01a7aa00a287d67a16c52bf683f4e3f5566e67cc2ea52a8dbed43c77a0ee0038e1c1b334c521293d63b542dfcb851a8f77e2195217a38cca8c8bbb53912a21c6",
"pids": [
2816
],
"md5": "33b2b0373d0b13b5124975a6391ede6d"
},
{
"yara": [],
"sha1": "73fbf28f755f0a3e3d9727d14a663f2ae837b79a",
"name": "d4303e99f1a5eb69_jquery.xml2json.custom.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.custom.min.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "d4303e99f1a5eb6923b107a7cd4b23ac883ef726a6d5c78e8c734b911947523b",
"urls": [
"http:\/\/www.fyneworks.com\/",
"http:\/\/www.terracoder.com\/",
"http:\/\/www.thomasfrank.se\/xml_to_json.html",
"http:\/\/www.opensource.org\/licenses\/mit-license.php",
"http:\/\/www.gnu.org\/licenses\/gpl.html",
"http:\/\/www.kawa.net\/works\/js\/xml\/objtree-e.html",
"http:\/\/www.fyneworks.com\/jquery\/xml-to-json\/"
],
"crc32": "89E0BFA8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d4303e99f1a5eb69_jquery.xml2json.custom.min.js",
"ssdeep": null,
"size": 2432,
"sha512": "e83e9301e87631768e86aaa2a01e8b4e92892019c6ee6b080fce125e4311c6c45ef564efa0937463767f659d268a231c19f3ff2bd06cc2de97ef0380eb8cacc8",
"pids": [
2816
],
"md5": "83cfe35ba1a7e73f2bb76410ad8ba412"
},
{
"yara": [],
"sha1": "d7c455c1c40fd220b172a7b53205502391d32109",
"name": "957d595afebb6a17_en.model.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\EN.model.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "957d595afebb6a17c79340b84781aa1c9939a0c717670de2128764a2ec21ae69",
"urls": [
"http:\/\/emailnotifier.services.qasite.com\/MailProvider\/MailProvidersServices.asmx\/GetMailProvidersInfo",
"http:\/\/emailnotifier.qatbccint.com\/MailProvider\/MailProvidersServices.asmx\/GetMailProvidersInfo",
"http:\/\/emailnotifier.qatbccint.com\/MailProvider\/MailProvidersServices.asmx\/ReportError",
"http:\/\/emailnotifier.services.qasite.com\/MailProvider\/MailProvidersServices.asmx\/ReportError"
],
"crc32": "445A0FD8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/957d595afebb6a17_en.model.js",
"ssdeep": null,
"size": 5745,
"sha512": "2499277d454f12b64fe2eb536402088b2445b4e24972c2ae8be7d2e8eda3e21a3145ddadcf246b9c9da5bfbf7284583fa3ead2005e77ecab8310531f7bb433ee",
"pids": [
2816
],
"md5": "4be115ca232630db17445588b85b8fa1"
},
{
"yara": [],
"sha1": "1609e0f2173b17b53937bb76068b0d6aabfd4124",
"name": "65176138326ac8a1_information.popup.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\information.popup.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "65176138326ac8a1c252597e91eb78524f08559450287c190b340abaf46bd32c",
"urls": [],
"crc32": "1F6B5318",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/65176138326ac8a1_information.popup.css",
"ssdeep": null,
"size": 3912,
"sha512": "5b2158b73de7c064eb9890554fa83c8e11d8a72e56bb73e9388cc13878b9147a2b35b715a65a866c957313e46d69b1862664ae4c371eb7da80bbbf3371b54e16",
"pids": [
2816
],
"md5": "b1b80dc9fdcb01192ce3d6b5ef952bac"
},
{
"yara": [],
"sha1": "ed27514b11e1dd1096ed4e4b3116439a99821497",
"name": "863c4efb71a764a1_jquery.jscrollpane.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\jquery.jscrollpane.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "863c4efb71a764a1543bcda3f0d98b53a9b6ba94952d52a088d95fadfe8051b8",
"urls": [
"http:\/\/emailnotifier.webapps.tbccint.com\/track_default.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/drag_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/default.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/drag_default.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/track_hover.png"
],
"crc32": "6900CFDF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/863c4efb71a764a1_jquery.jscrollpane.css",
"ssdeep": null,
"size": 1273,
"sha512": "fbaa21b4f7e39eadc48f922225060f24c0577b6817aaf7e6fbb844f1100929bbec06e571564c0804cab82eb5974d781488ac57a75f359917387ef9409af6cb37",
"pids": [
2816
],
"md5": "f052aef786782720e8dfe7f37c7214bd"
},
{
"yara": [],
"sha1": "2f72b3c44905e5e49ec2dd9a3451ccfea0c6965e",
"name": "47c4175426b27043_translation.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Translation.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "47c4175426b27043f4f30e3d466ff51cc5c835c3e7d49f868aa0593786576b0b",
"urls": [],
"crc32": "C5EAB682",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/47c4175426b27043_translation.js",
"ssdeep": null,
"size": 7008,
"sha512": "c98fc7f441cf1a31e0dc6435d30a10e6daf748a1be67894eaf8cf756dfa51ebb7d1ec6433725263a9f1cf9b6f5219b62d5a68cc2c47cf720ae4ee0e62a336f21",
"pids": [
2816
],
"md5": "47e9551ac5b567d6b36feb877a602f93"
},
{
"yara": [],
"sha1": "dcd7fd33935fe94efe2b7d1172be5d71ce8d5c56",
"name": "092c5eda02fd5db1_arrows.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\arrows.png",
"type": "PNG image data, 36 x 20, 8-bit\/color RGBA, non-interlaced",
"sha256": "092c5eda02fd5db1b0b27cabdb2a1eadc0653ea910c4680fb3f970a0469608ba",
"urls": [],
"crc32": "00F91BF5",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/092c5eda02fd5db1_arrows.png",
"ssdeep": null,
"size": 3404,
"sha512": "ebd2e5dad3ccc5567734b54584c51c05d32f5bd84727f14c60a1c52c48fffb135d5706c0e588a2db775bdc56dc008eaa838b05f858645683af911ce53d83a4f5",
"pids": [
2816
],
"md5": "03bf5184a023f671b807eafbd1cdcbbb"
},
{
"yara": [],
"sha1": "72ee2f71cef8eb415f287f9d99dc08e0a19254fc",
"name": "b6a31a29ecfc420e_options.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\options.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "b6a31a29ecfc420ef4940b6b50494b8c6ea3017ab40af791fffe03510d372c07",
"urls": [],
"crc32": "E844734B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b6a31a29ecfc420e_options.css",
"ssdeep": null,
"size": 20783,
"sha512": "1bf6488b5d5e5c8bfd7f227f4c99a15b3134ff9ce5750ad7572ba18d39173d6cbf1d365c0e711f96d9944bef47a4020aff0df12259da83ace635350245d55a6a",
"pids": [
2816
],
"md5": "971502473c4c0d7bf4316c5f02dff1df"
},
{
"yara": [],
"sha1": "8001f49144508bfe976f92e10ee1666bad8e6f1f",
"name": "5e1d332f968a40c9_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "5e1d332f968a40c9b6169793efc84d9397bfc97f1f7ecccde90cfcb8ec3a4e7e",
"urls": [],
"crc32": "311AD81B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5e1d332f968a40c9_bgpage.html",
"ssdeep": null,
"size": 1298,
"sha512": "505bf994185571265a8d08a06f2f8241c0f895719e11f8ecd5bdd560470227b08c39293e16b25f220d9aa557e8bf1000d691baa7574724e1bcda157e87563464",
"pids": [
2816
],
"md5": "5a5d2f4c2833ddf28611e0b92a58b3a7"
},
{
"yara": [],
"sha1": "7b796039fbc63a6734e584108e2dbb5864a9064b",
"name": "ca8c50071e01b08e_script2injectpopup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectPopup.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "ca8c50071e01b08e2990b6ebf2b6c806a68d269628051cda1971d5e88fb74e64",
"urls": [],
"crc32": "C3371668",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ca8c50071e01b08e_script2injectpopup.js",
"ssdeep": null,
"size": 7362,
"sha512": "be6edf93d938608f778b33cef1b0780aa746c6e7db7ab530152c97da02e2652ff398dbd74c43b5f9607ccb6c33c691bde861a56519356bfe472e82f3bd99f080",
"pids": [
2816
],
"md5": "3e8db1f93c626b37363dd5f4616909fb"
},
{
"yara": [],
"sha1": "e55ae219a35de14d02c35a10ba3cfc0583bbb256",
"name": "b7f5e501488f8ad6_player.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\player.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "b7f5e501488f8ad6cee13df47b1ef91b8ec45e93ad42699beac673217f80f45d",
"urls": [],
"crc32": "1BBEDB27",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b7f5e501488f8ad6_player.js",
"ssdeep": null,
"size": 17949,
"sha512": "081b2c963dae58dce9f20c64ecd073f397be444f8be8e29c98bc84511311bd4c76bbe428d52662fdf123340cca0196398091d2323b2223f27458ab02b171c6f2",
"pids": [
2816
],
"md5": "32c450a2707a202c80baf03332d8a627"
},
{
"yara": [],
"sha1": "ef399180548e740c72a28d0028bfb64f412c51fc",
"name": "9d15815d3e45db15_loader.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\loader.gif",
"type": "GIF image data, version 89a, 32 x 32",
"sha256": "9d15815d3e45db15411515c9381669db1a00efc8451b9d6040842291c72615eb",
"urls": [],
"crc32": "FB53AD8B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9d15815d3e45db15_loader.gif",
"ssdeep": null,
"size": 3208,
"sha512": "3f7aefd6d32c2d2212981ebd22e4edad43cfe811f02e5c5239954e483aac1d0ed5417d055a362fab79f6e7e4d6f4073310df447c7087b4ea32dfa2e6bf3759c6",
"pids": [
2816
],
"md5": "37c1e4a052006e4536e9cf84f0068c42"
},
{
"yara": [],
"sha1": "64922accbde40ae75aade8330276cca253e9f0fa",
"name": "c79327c94509fcda_jquery.mousewheel.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.mousewheel.js",
"type": "ASCII text, with CRLF, LF line terminators",
"sha256": "c79327c94509fcdadf14b3998f01c105639931104ca7ace32600980f47fe9480",
"urls": [
"http:\/\/adomas.org\/javascript-mouse-wheel\/",
"http:\/\/www.mathias-bank.de",
"http:\/\/brandonaaron.net"
],
"crc32": "29235B8A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c79327c94509fcda_jquery.mousewheel.js",
"ssdeep": null,
"size": 2646,
"sha512": "9728b33d66c7fc96eeaaba3ff3704db11c22fb366c2c6a11364550c824664f1712d8b4c113fa3cad63915ab1a3225fd30ada327e0a5f4ffdc55f177cd020f982",
"pids": [
2816
],
"md5": "0206ade73f59afed926c14c20b04e08a"
},
{
"yara": [],
"sha1": "20724c31fdfd039acb4c6fd415233f7023a6afb5",
"name": "fef6e279ffb5d1e7_maildecoder.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailDecoder.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "fef6e279ffb5d1e7ca1eba133c1abdf6bae25ed3cbd4d809e380e2dc77b0c28f",
"urls": [
"http:\/\/en.wikipedia.org\/wiki\/MIME"
],
"crc32": "8DB85E84",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/fef6e279ffb5d1e7_maildecoder.js",
"ssdeep": null,
"size": 11830,
"sha512": "79366c1de24989326f2e9baced06d0eca5ebe20e291e3562eefd20b8839a6bfffd44223d3f82a235aee1ce165540b9758d3c70d6e283e9c2eb3f62b3172ec0d4",
"pids": [
2816
],
"md5": "afe11bcdb9cebe96fce57158ce5820b1"
},
{
"yara": [],
"sha1": "3fc8ef8020fa8cc1b8760418ad808ae627f3ea0f",
"name": "67ae55b1c718dc2e_jquery.textshadow.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.textshadow.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "67ae55b1c718dc2e93180cefad356cde6698937341977678c57a33b433a9c14f",
"urls": [
"http:\/\/www.opensource.org\/licenses\/mit-license.php)",
"http:\/\/plugins.jquery.com\/project\/textshadow"
],
"crc32": "0F2E71F4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/67ae55b1c718dc2e_jquery.textshadow.js",
"ssdeep": null,
"size": 3505,
"sha512": "15dde0c64aaefc673d248c3972b45162b34ab5fe312e6d0277a31c78baea74b2daaca8f4533cad97708abf5285420137b14f3f467b4fc89fe2e2950079c0b573",
"pids": [
2816
],
"md5": "740c6b6586918453bb7ad3e8fa9b1f81"
},
{
"yara": [],
"sha1": "f2b2bc60550017ca341db5e956c14c1fdb6c88a1",
"name": "cffebaf2de2801f2_settingsicon.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\settingsIcon.png",
"type": "PNG image data, 11 x 12, 8-bit colormap, non-interlaced",
"sha256": "cffebaf2de2801f2abded0164b6f4bb823c87a6956f0302e332a493b1b79b368",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "6B1BD995",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cffebaf2de2801f2_settingsicon.png",
"ssdeep": null,
"size": 1075,
"sha512": "07cb04802b615705236a254464334e516fa5990c27071d13a165e1fc9b07d3456e5607f8824bd77dbc9cba54c2c3d8da0513c3c1d5ea571908e018cee0b8db7a",
"pids": [
2816
],
"md5": "b587d9e052210f8b002570640848208c"
},
{
"yara": [],
"sha1": "6a5c2ecca92ee43cb524f5ebb99abc61690ed0a2",
"name": "5ee2625e10b002f2_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\bgpage.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "5ee2625e10b002f27c4d298719e0a44228991d24ec0da57e9c1c2831433b9830",
"urls": [],
"crc32": "216DE53D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5ee2625e10b002f2_bgpage.js",
"ssdeep": null,
"size": 7778,
"sha512": "bd9cfa2ab74cd23ed7f3018366dfbec1e7c54fcd03ea3e8dc52700ae1f70b0b50ca019c1fa6201bd58139a9a40c546094bd8aa30f6672c7b83908abffb435912",
"pids": [
2816
],
"md5": "44b8f7861a4dc8d0c9374541124f237f"
},
{
"yara": [],
"sha1": "c77484ed9cc6e64618b9eac02889f1c6cd305316",
"name": "79fb869069854701_retentiondialog.view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\RetentionDialog.view.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "79fb869069854701ef894338743e4c88f988f0ebda4f05811c23d49355c9a954",
"urls": [],
"crc32": "13F33741",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/79fb869069854701_retentiondialog.view.js",
"ssdeep": null,
"size": 9897,
"sha512": "36c97fe98521379b9b7c2ed759ca4e99c3bc2710d72c55d8c0bb054bfc8e9d8704fcab390f85e5c11d2db7d1a6037811420e0e450c2e21cb900440965dc520c6",
"pids": [
2816
],
"md5": "080fa8bfdb903452a7477c153442aa85"
},
{
"yara": [],
"sha1": "14614c8fd087a8da9da6d2fb76b1018d99cb3bcc",
"name": "e181914ce83f8a24_restartdialog.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "e181914ce83f8a248dc559ba0595f77413a5a0cb68293e8f1ca80eb4838ea9d9",
"urls": [],
"crc32": "8799BA39",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e181914ce83f8a24_restartdialog.js",
"ssdeep": null,
"size": 3559,
"sha512": "4dfd1d15fb54ad317b57ad5230cbb356fa1797b6e08de018238c640757b020110aa8fc613655c69e34ed4bb3497bd8fb77c6e366066bcfc3308fbc0beaa0eb21",
"pids": [
2816
],
"md5": "54790d16be48c0741cea5cd2c5a7ff8b"
},
{
"yara": [],
"sha1": "21682b7bb0fda06b8e4557bcf7b8f8aed1b43c37",
"name": "08a25838b47f07ad_popups.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\popups.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "08a25838b47f07ad38f4115aa53fb2da664a9c45f9d5f7f15bb52c7f09a91fc6",
"urls": [],
"crc32": "A3457EDD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/08a25838b47f07ad_popups.js",
"ssdeep": null,
"size": 71991,
"sha512": "fdfc3533af236f99611f408e7b9b07082ba8551ac45b034081c14a9b5508b724d62b699668b751d3786119046bc8168b77f7b17d4c8c6550db4622cdef45199e",
"pids": [
2816
],
"md5": "440bae76b326458138c50bb415026b95"
},
{
"yara": [],
"sha1": "4734533e8022ce6fcdd3135745ca9fa43e7d4481",
"name": "6eeba62f40cbb91e_retentiondialog.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\RetentionDialog.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "6eeba62f40cbb91e072dad1fa9e49bf427b1dc570556640525d0f6f797b64114",
"urls": [],
"crc32": "B5B3978A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6eeba62f40cbb91e_retentiondialog.css",
"ssdeep": null,
"size": 5540,
"sha512": "24531c658866b78cc2e90dbe125540de863c8125f3e388dbb8f298c34c45c2c9576e3b8335c94cc36737cc896865da43dccc8852fb89b19f4771605a96b8cbe5",
"pids": [
2816
],
"md5": "9aab45415cb9c1362e608691c640cc8e"
},
{
"yara": [],
"sha1": "cfde2020f493d1ac680168228cad9e845d5857a5",
"name": "5874bf0e0c57d9d1_inbox.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\inbox.png",
"type": "PNG image data, 32 x 32, 8-bit\/color RGB, non-interlaced",
"sha256": "5874bf0e0c57d9d140c9476347ef5f9c9943d78d7856a864ac07f6f2630312fe",
"urls": [],
"crc32": "6304F141",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5874bf0e0c57d9d1_inbox.png",
"ssdeep": null,
"size": 1365,
"sha512": "4acd11e1461381d124deddc52e466bc7a27622acd84238c7b47a7e07ffc8ac351c95015ce9cc140c21daa91d0897e3a8644d08eba43613ce0b36549d585c93af",
"pids": [
2816
],
"md5": "6b5fe6f1f39dbfdffcf2396c48ea4970"
},
{
"yara": [],
"sha1": "61cb722fa8e6534980655d4b2a2f03c4816fcf59",
"name": "824f07906c4ff17f_rounded_corners_left_transparent.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_transparent.png",
"type": "PNG image data, 315 x 29, 8-bit\/color RGBA, non-interlaced",
"sha256": "824f07906c4ff17ff465522349d322c637f1676b233401005c67100dee213a4f",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "D1A5A97D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/824f07906c4ff17f_rounded_corners_left_transparent.png",
"ssdeep": null,
"size": 1064,
"sha512": "659961b539ff68509526c87f11410551634ef18022140e6305bfac093202ab23ee240f35f112ba807d7fb691c94934ef12dc23720e5e1471e1b678b9a494ac92",
"pids": [
2816
],
"md5": "1baa856f0bee7d68c99c16f5d0d3086c"
},
{
"yara": [],
"sha1": "237b8edcc906ca6e9f6fed0a14ca7d9e8608dc08",
"name": "5499c0559e673c80_jquery.alerts.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "5499c0559e673c800d401ab0e3ff8a392de78bbedf1c8db008801541414ef5a1",
"urls": [
"http:\/\/abeautifulsite.net\/notebook\/87",
"http:\/\/abeautifulsite.net\/)"
],
"crc32": "A292AC8F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5499c0559e673c80_jquery.alerts.js",
"ssdeep": null,
"size": 7789,
"sha512": "d69a6f067a728f4f64c979fd791d026eb59f703e33aba4c6638a8dbb237361a9861cfda3e11963118bd9cba8e955de83a1af001d013b124932e5cf0248ff5452",
"pids": [
2816
],
"md5": "e1f86f4341fa5b226a96ab0288cc6152"
},
{
"yara": [],
"sha1": "8ab7aee3a87639fdc3575b4c2e8615e1979bfde4",
"name": "960b2d36ad3f8dac_warning.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\warning.png",
"type": "PNG image data, 36 x 33, 8-bit\/color RGBA, non-interlaced",
"sha256": "960b2d36ad3f8dac9aa90810563d75524b02c0c8555f9cb9ac1fc84076a9e6c3",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "C2130B23",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/960b2d36ad3f8dac_warning.png",
"ssdeep": null,
"size": 2757,
"sha512": "182e0c341226fa27db26c3f4826a5cd15164b5902564fedecadd724d897daa5fdb667c1b2449e159107578bb8bacf9a0000a77e7a0c2f1437be3e4f5624253ff",
"pids": [
2816
],
"md5": "92a7fc466575cfc32532eae392711035"
},
{
"yara": [],
"sha1": "894dabe8bd79a7875969f8f03141af734364a6cb",
"name": "4a708e441ae66688_untrusted.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "4a708e441ae66688cd543d58b144ad2c2f9bda3ab01c910258a5b021b925e965",
"urls": [],
"crc32": "3EAA9A88",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4a708e441ae66688_untrusted.css",
"ssdeep": null,
"size": 11703,
"sha512": "aadf28e2298b2065cd93f1cd7089e7dfbb149f9ca42ea0740e2598206244746508420eaf808c3e0c9fc7b3bb2af518cbe8a081f8c9a7cb065296e1c894090529",
"pids": [
2816
],
"md5": "86b46b031acb1d2b4e24351edf539a4e"
},
{
"yara": [],
"sha1": "249ded181db3f3bfc574fc5d0bef9d75336136ac",
"name": "d26b88f016ef17d7_prev_hover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev_hover.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "d26b88f016ef17d76b77649b1c0890e530b40c2bbe2e803b0acac6b0d1ad718f",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "E0B9BD41",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d26b88f016ef17d7_prev_hover.png",
"ssdeep": null,
"size": 1828,
"sha512": "c41a08b24e6e92fbcc63c3700960a0ae64e3c183123cc1f30df800d58d3f7dd6a83200128dddf757f8da9e407b2b95e2c3df5edb95884fb7a83269351e07cbac",
"pids": [
2816
],
"md5": "61cff2fb0e47222e3e9f2d3b8b018894"
},
{
"yara": [],
"sha1": "06a80027c99525be5155afcedb7016fbe5fa2677",
"name": "91b45e368605f6a1_app-store-icon.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\app-store-icon.png",
"type": "PNG image data, 21 x 20, 8-bit\/color RGBA, non-interlaced",
"sha256": "91b45e368605f6a114995169d4d6e296f10eb423eae68137fd28e944556828a9",
"urls": [],
"crc32": "F31E6FF6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/91b45e368605f6a1_app-store-icon.png",
"ssdeep": null,
"size": 942,
"sha512": "54687030721f65942c50ec22230b305953d6fff1e75494c7cac8445e3102c83ec7b5235e87ad29ff51dd19bee8186f2ecd4a7731dcd6bbec5d0e438c437eee3f",
"pids": [
2816
],
"md5": "849f1eafd2164c46fd73a143ad206b66"
},
{
"yara": [],
"sha1": "67a0ddd2991d50d897b899da6fa9ea8ea17c0830",
"name": "1d049c106594c333_main.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\main.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "1d049c106594c333f2fe6d83dfc033afdbc7dc5e90524946d2de7748ebf01db5",
"urls": [],
"crc32": "175F44BB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1d049c106594c333_main.html",
"ssdeep": null,
"size": 2777,
"sha512": "01300d3b9ea33a8d273b790685096f57db628d243520da2465e46b2ad586e7da94801ca85faabb8530bca373e482bbe87299911980ffea70494178da77db0b6f",
"pids": [
2816
],
"md5": "011092863a46e0110988c1ba85df8323"
},
{
"yara": [],
"sha1": "8219e7c1721354b0b4d6ed05cf0a7fe4f9abe3bb",
"name": "d6b3c51ada6314dc_jquery.text-overflow.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.text-overflow.js",
"type": "ASCII text",
"sha256": "d6b3c51ada6314dca25177849b7b1d9890749cdd7a4eb8e8b926d6ee448d1c5d",
"urls": [],
"crc32": "EB04EB7F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d6b3c51ada6314dc_jquery.text-overflow.js",
"ssdeep": null,
"size": 1101,
"sha512": "654856a82b5d1d9ad84cd72f9253efca900d18ff2658fa052d2fb206df37c6ead9a725aada2b657aa375e13e2727db92208023f62e11e2e190ce6ae863c50399",
"pids": [
2816
],
"md5": "d56a4de7b5d29f55c5dc8c7efb812f49"
},
{
"yara": [],
"sha1": "38972a07238f64ac7f82c72aa4c9f3e6962439f1",
"name": "f8dc803116a9e71e_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "f8dc803116a9e71e5c2816ca27a20c752a81705b4c1d14724efdb989a66b0327",
"urls": [],
"crc32": "7654B42E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f8dc803116a9e71e_bgpage.html",
"ssdeep": null,
"size": 499,
"sha512": "3503403306b2f4dfd72ee73197a7990c348a7d2b2ba77de7c48acb91b849ce77e484fd057af832b2f6897f18c20e2d4984945277788c28038f9da7085bf4e288",
"pids": [
2816
],
"md5": "c053fac175acc52196ae86612b097ab9"
},
{
"yara": [],
"sha1": "cc4c6a4b2b1200b752ef421882f7cd1b1f409c5e",
"name": "d1242b8059a47438_jquery.jscrollpane.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.jscrollpane.min.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "d1242b8059a474384194c8295a611e0098f14442a4b41ae50927f7e7754dc53a",
"urls": [
"http:\/\/jscrollpane.kelvinluck.com\/"
],
"crc32": "BA09A522",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d1242b8059a47438_jquery.jscrollpane.min.js",
"ssdeep": null,
"size": 18021,
"sha512": "86b2611868ce3961b463f25224fc4553395fbf4ce516221f5372b977fe34228558a8e0add5d3496852c56fa432bda85891fd1c7f18da6382dd6f99aae20586ed",
"pids": [
2816
],
"md5": "31dec39181ff8dd936808fb944c66bf3"
},
{
"yara": [],
"sha1": "754fe67fb963673b35da5ff5f252521ce2f5d0c5",
"name": "626653be3dca5d5b_mozillaretentiondialog.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\MozillaRetentionDialog.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "626653be3dca5d5bc763e895923b917bf046c13627d362e1f68b89933cf40e28",
"urls": [],
"crc32": "3C7030E4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/626653be3dca5d5b_mozillaretentiondialog.css",
"ssdeep": null,
"size": 5100,
"sha512": "8c9339970722752ad114a6611c50ee66e015c1d625d21198134b72baf7936e88a65b683ae55a32edf8ed54c845ba003283c4d83cd42890e012c49fdd928e28e4",
"pids": [
2816
],
"md5": "9017c79a11f39007873d50c60caffc49"
},
{
"yara": [],
"sha1": "13ecb57e1bbefc08c37edd53e6be1466d577a009",
"name": "c928fc99cbc72610_ic_closer.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer.png",
"type": "PNG image data, 10 x 10, 8-bit\/color RGBA, non-interlaced",
"sha256": "c928fc99cbc72610b3fd6e7ed9c126e1c71f9026825fae4c3bc22e02f6adeb1c",
"urls": [],
"crc32": "65226A7C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c928fc99cbc72610_ic_closer.png",
"ssdeep": null,
"size": 263,
"sha512": "d489a0f8c79a798a73cedfda99277fdcf2813055e39dc58f2da39f5ac40db718eca94d9a8bf75bc18d276a2870b6187db2dd5a584f66d53d2455e1453ee01a79",
"pids": [
2816
],
"md5": "2edf91c3a2835ac7b475792f9a2a2fa3"
},
{
"yara": [],
"sha1": "7f6d25e8398379b35c9970dc93e83b61fedf27b7",
"name": "7186136e016b0d73_new_chevron_sprites.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\new_chevron_sprites.png",
"type": "PNG image data, 20 x 232, 8-bit\/color RGBA, non-interlaced",
"sha256": "7186136e016b0d736a8fbee52c9eda5cce4fbf581a8a85b69f33e87a94635c1b",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "FFF445F2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7186136e016b0d73_new_chevron_sprites.png",
"ssdeep": null,
"size": 3177,
"sha512": "3e4625863c0e030229fbb35e7b267dc396cd2c59a993dc72a7e82970447bdf09357bf6941c282c39a2a5896e2b1ac8921705dc2a8a433632ce34c781ed17bdb2",
"pids": [
2816
],
"md5": "907fbbd3f6810912725e46a978d0577d"
},
{
"yara": [],
"sha1": "9d498e8bc6ded128b61bfc10ed2ec9e566e21ff5",
"name": "3607b02e726a0faf_popuptransparent.xul",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popupTransparent.xul",
"type": "XML 1.0 document, ASCII text",
"sha256": "3607b02e726a0faf9fb708cacacedbf83976710cc912f1966ff2be809d06b8ef",
"urls": [
"http:\/\/www.mozilla.org\/keymaster\/gatekeeper\/there.is.only.xul"
],
"crc32": "556E5254",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3607b02e726a0faf_popuptransparent.xul",
"ssdeep": null,
"size": 683,
"sha512": "9702448e4becbce6f6641e98c31d8906349212c18259ca6b28598fe8e00047b277cb91e3f0eaae54ee84b1ddfdb51a1e2244090cebcfb3516bfa592783262db8",
"pids": [
2816
],
"md5": "30c62d0948dff3c272a5c6046d896d88"
},
{
"yara": [],
"sha1": "eb5749dc1908f5e41172014b73e94ce50b1c47de",
"name": "5e7956d21b298f16_checkbox-check-on.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-on.png",
"type": "PNG image data, 12 x 12, 8-bit\/color RGBA, non-interlaced",
"sha256": "5e7956d21b298f16695ffda6fb0711e8cecaef4207396833869dd95278fb5e25",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "C57A05BA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5e7956d21b298f16_checkbox-check-on.png",
"ssdeep": null,
"size": 1145,
"sha512": "a94abc78856fab3636a70a29e7bc9923df4898ba5d7e6908fa46757f7b9f759ea1fca231022d2f914d96e4c5c0ca2a2af2751fc4ce5606881e8d0bce63f564d7",
"pids": [
2816
],
"md5": "c49c600b3233282cc3bdee1619726e0e"
},
{
"yara": [],
"sha1": "de10a55232cd715d0f55f7de499faae4f279dd23",
"name": "23db54d09be7f2b9_loader-icon.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\loader-icon.png",
"type": "PNG image data, 24 x 24, 8-bit\/color RGBA, non-interlaced",
"sha256": "23db54d09be7f2b97d4d86e4f302f91b44e2204865625a15991d941c3d2f8f28",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "B9305C54",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/23db54d09be7f2b9_loader-icon.png",
"ssdeep": null,
"size": 1135,
"sha512": "c2eda005066b0e32e946e21cfdf917b94b9327804af4ed122b9d9a329b634ad5c4d0d6213518acae171169919714eef9b7b4b7b72bfdd0136a31d39bcba0bcc0",
"pids": [
2816
],
"md5": "e56d32cd2a507684864ff5f01d67d1dc"
},
{
"yara": [],
"sha1": "050b46eaf6c9845a459d4a44ae16a5aa6679d7e4",
"name": "9b96b6b6bff40796_history--x-mouseover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-mouseover.png",
"type": "PNG image data, 8 x 8, 8-bit\/color RGB, non-interlaced",
"sha256": "9b96b6b6bff40796f4930767772bf06d9e88dcbef23e83e6f41b386506231b8a",
"urls": [],
"crc32": "ADFF51C6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9b96b6b6bff40796_history--x-mouseover.png",
"ssdeep": null,
"size": 284,
"sha512": "23668bf75ccb38f6ff9c3fdbd2c0e9db9582c6aec6410a610ee565b3495461604a34751a5d05f9dccb88b73e4801d5f90aa531359d0683d779ad3dae3957876c",
"pids": [
2816
],
"md5": "903e35abefa023489af1f01fee3d094c"
},
{
"yara": [],
"sha1": "f5b4d893e4ef2f62735e8271e07be7e7189002cc",
"name": "281306d4794d99a8_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\popup.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "281306d4794d99a8c575108cb3050bed6cfc834746cfc4b3489fad77d6f7a031",
"urls": [
"http:\/\/emailnotifier.webapps.tbccint.com\/Error.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/icon-loader.gif",
"http:\/\/emailnotifier.webapps.tbccint.com\/success.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/lock.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/refresh.png"
],
"crc32": "56BB789B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/281306d4794d99a8_popup.html",
"ssdeep": null,
"size": 18851,
"sha512": "76395294192dec889e7cab1a64e10b793a8ae555f9f937020e92801be1e8908d9b7feaa51d2f1471853d5b1b5c27c1ff488785cc9a12865dcb92ebf36865c16a",
"pids": [
2816
],
"md5": "047df05919483308621e173943553c84"
},
{
"yara": [],
"sha1": "dfb361ce40255f172b85c6bfb1d116e381406296",
"name": "c19577ebcc0ce795_gf.view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\gf.view.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "c19577ebcc0ce795b6c94b7b62723cfbbfbf180aad1f533ecea152b9d4fc379c",
"urls": [],
"crc32": "CEFCF4E8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c19577ebcc0ce795_gf.view.js",
"ssdeep": null,
"size": 7381,
"sha512": "f0de7aa7d28b1cdff8487bc42ec4f803d92eff47d303d25ee9f35e54e344cd2bdb39d6e6b56ed3429dd247c010721ac2c75ca0a2b5646c5ed1dfab34906bf060",
"pids": [
2816
],
"md5": "5d1a0bf18a64ff2598c014ec2f67eeec"
},
{
"yara": [],
"sha1": "183270ecab2df20d9f8f7939d02e416504580eee",
"name": "cc69193eb0c96990_history--x-default.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-default.png",
"type": "PNG image data, 8 x 8, 8-bit\/color RGB, non-interlaced",
"sha256": "cc69193eb0c969902babe78d7478a1f133282fee0b6b00de1394d336d17131b7",
"urls": [],
"crc32": "8CA0A98E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cc69193eb0c96990_history--x-default.png",
"ssdeep": null,
"size": 264,
"sha512": "e517ed0db1b57f4ae3b5bb1a5a924e7338be3f8a5dca7b9bad9dfd3db8b06453e2f97bba75a1e488ea44613f183126e22f79207e859a441be5bcc0d6969197b0",
"pids": [
2816
],
"md5": "22765bc4c681f62078b8bc30ec2262f0"
},
{
"yara": [],
"sha1": "4edb9082cda4834f3b08a501e75e21a430197dca",
"name": "23e4665fa2ac4434_nsprefsjs.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "23e4665fa2ac4434aa623b8818d478fd7e30b3a9fcb7ee43027b4c1771082ef1",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "AB2912FC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/23e4665fa2ac4434_nsprefsjs.dll",
"ssdeep": null,
"size": 173376,
"sha512": "6fad92247cbfdf623446f2b06671888d71f1cb23521e6de0fffb9fb56663d51e38946eb2958c2b5462f5bbb5ec999a6ab5ce5b0d46005b82f065863b187d8239",
"pids": [
2816
],
"md5": "947cf03bd51a4644cb8e59221485343e"
},
{
"yara": [],
"sha1": "0bf25fcd7803d7b2445bb0a391262f1337fb4523",
"name": "1c0ffc660f37029a_important.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\important.gif",
"type": "GIF image data, version 89a, 32 x 32",
"sha256": "1c0ffc660f37029a50e9dc9a89fceccd7071e080822781d6182208712b4cc79e",
"urls": [],
"crc32": "D6C9914C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1c0ffc660f37029a_important.gif",
"ssdeep": null,
"size": 1492,
"sha512": "f9a35d1fc53072cd142c59f5726774ac75b83ee9ba4821f8b8a96c7d90b9816a95b50795ae25153a4a5b0f3aa6b96b403b69a85152eba88257f1cfdad9f10be9",
"pids": [
2816
],
"md5": "4d5a6b3d4e76c3c043a78c5c9d1776b7"
},
{
"yara": [],
"sha1": "13cd9944386e906b216d099a18ef2db63cf20d7b",
"name": "3ec75a158b90fb89_script2injectembedded.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectEmbedded.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3ec75a158b90fb896bfe7f6251d1af1d56b6d1692a2de76565af91f7f1667093",
"urls": [],
"crc32": "1B3B912B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3ec75a158b90fb89_script2injectembedded.js",
"ssdeep": null,
"size": 9062,
"sha512": "b2b795f946bfaf2c75fe29282cea9ef346d4f440c6279f295826f93d739da32eb19f1e25c7edc22b769751e5410b17a2fa2a2213ed5a713f4e731f13a02567aa",
"pids": [
2816
],
"md5": "bc3e7a46abbd302fd925d52d59543487"
},
{
"yara": [],
"sha1": "9517120cdbd2256a24a8a6f71a90cb6f46c99ff3",
"name": "24cc83d27199f618_bgpageearly.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpageEarly.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "24cc83d27199f6183f3ff97cffca92806b1b0f5b5fec0cc62f6f536cb0bac95e",
"urls": [],
"crc32": "E23FDF8B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/24cc83d27199f618_bgpageearly.js",
"ssdeep": null,
"size": 187,
"sha512": "d4c29ff71716ba84ef98bd10bbf892e09fd86333cbe4b38c113cc8b972bd87419b8bd5b9721009eba8db36130394ac5b71f7b52bb4f699db529f01182ebe15cb",
"pids": [
2816
],
"md5": "e40812b61a7ffa80c54bb662f954195b"
},
{
"yara": [],
"sha1": "00989f579b361b5b3c2e4486d093db4afe79d203",
"name": "4f66463e5b2324b2_setup.ini",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\setup.ini",
"type": "ASCII text, with CRLF line terminators",
"sha256": "4f66463e5b2324b27f4ab9ebcfb12642bf93da09a64898c942b9a7e7961debab",
"urls": [],
"crc32": "4D3D70BF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4f66463e5b2324b2_setup.ini",
"ssdeep": null,
"size": 307,
"sha512": "dd2ce26ecf079a68acf4f7df217b1566478d9661d84eb79da07034868cf997ea7fc7c129e5eebf13718a1ee3fa6820b23eafb7a849df5a8b79eab529a3942bd8",
"pids": [
2816
],
"md5": "571ac6052902d3f4b7a74f155dbf062c"
},
{
"yara": [],
"sha1": "8b141427b72c73ba4ef67ad0953896a47d38a847",
"name": "31e359e5f5cb426a_mammodule.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\mamModule.js",
"type": "ASCII text",
"sha256": "31e359e5f5cb426a335ca3723caa38c8be74a8fa926059180d0a89f2b05ad584",
"urls": [
"https:\/\/gist.github.com\/982883",
"http:\/\/app.mam.vaccint.com\/getapp\/sa\/CT3329621\/mam.html?ctid=CT3329621",
"http:\/\/mam-usage.databssint.com\/"
],
"crc32": "29DB9B4F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/31e359e5f5cb426a_mammodule.js",
"ssdeep": null,
"size": 119944,
"sha512": "7d1430afb7fcf7e649bb75ee3f078e005470e42ef33820eae35ac74511a33789dff00ee7323f246c5bf61378daa0376f39696e7b5035750a09c9738c4c92dc42",
"pids": [
2816
],
"md5": "d5863fe81ca407c45e791232aeef44a0"
},
{
"yara": [],
"sha1": "c0432b297dd0f4fb31afdb3ebf1f74bafdc69903",
"name": "95a02518943bdfe3_x-mouseover-ltr.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-LTR.png",
"type": "PNG image data, 30 x 17, 8-bit\/color RGBA, non-interlaced",
"sha256": "95a02518943bdfe314655cde87b7c7a7b46d09933646424ff42c7f354deaf58e",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "032404DB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/95a02518943bdfe3_x-mouseover-ltr.png",
"ssdeep": null,
"size": 1315,
"sha512": "1851618a11dedba313b22b906e672a08c012429ca808dcf97614ba2e2992eeb9be768471e01215be26536b1ae100c977ce01f3f0ecf5cadcc2ad1517e5abf14e",
"pids": [
2816
],
"md5": "45ca78fcdc4faed43ea9f8536286d017"
},
{
"yara": [],
"sha1": "6753bb02a26b72903139a507cf4139a0c65b351f",
"name": "962539e118211812_log4moz.jsm",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4moz.jsm",
"type": "ASCII text, with CRLF line terminators",
"sha256": "962539e1182118121a4fabe264881c415316fc80477a420d1489b824ced0afcc",
"urls": [
"http:\/\/www.mozilla.org\/MPL\/"
],
"crc32": "62B6A339",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/962539e118211812_log4moz.jsm",
"ssdeep": null,
"size": 15351,
"sha512": "1a3352978aaca4ab9fd03cde7ee6ae413a7d600a4e337ea6864e253eb89a9152e40d38a25e79e4744e2ba0fd2d6fd111ba4e29927fb5af98f6e8ac281fc96c92",
"pids": [
2816
],
"md5": "276793d2e5ee8b31d1db3c7b4ea05f98"
},
{
"yara": [],
"sha1": "775ab27f92982ce967f8000c0ceb84d0a98b936b",
"name": "9a9d84f6e04c49be_information.popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\information.popup.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "9a9d84f6e04c49beefd61e7de83a4760b9b6d5e43be059a7f5c75edbde4a2470",
"urls": [],
"crc32": "B02EB8D2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9a9d84f6e04c49be_information.popup.js",
"ssdeep": null,
"size": 25254,
"sha512": "ee7ff0fd4766d1d63f457621831451ad261581a8de1a7b7649627a0aa4e3269aa4c81b3f517cf408f78070c7d007f6afb08e9c545529560193182674f4b1c7ce",
"pids": [
2816
],
"md5": "fc2d75dc57474feac731ab94b43a8bbd"
},
{
"yara": [],
"sha1": "c39135d9e04014ea4089053c183e20159e3c1739",
"name": "164369bcb482d6d2_background.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\background.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "164369bcb482d6d238817021b8cdf8234790a35ad54fb7cbdc6d008af4f86618",
"urls": [],
"crc32": "9FCF51E0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/164369bcb482d6d2_background.js",
"ssdeep": null,
"size": 1186,
"sha512": "67aa689fb340484a7dbeaf3fa1bc4b4169c85def331fa620b9836c5f22505ad15ce03c3d10b4f3c2d3feef8eae7d30df8302316e0675971bdd0c7bcf0da539b8",
"pids": [
2816
],
"md5": "a0fc623657c74006b502e67da60a8f63"
},
{
"yara": [],
"sha1": "55752cf3230fade9a4400a6f06e677422ca40340",
"name": "1cd29ddf9eb694fe_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "1cd29ddf9eb694fe466f9b18ca618dc0fa4eab6e54c6ba936df803e5137de00c",
"urls": [],
"crc32": "23E59E0F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1cd29ddf9eb694fe_newPrefs1.js",
"ssdeep": null,
"size": 7173,
"sha512": "757dd81cc2bdc6858dfd05ef9f035aae56d14414918879c25dc6d9e7a35207d397438f0ce6ef65e073e7661ab3584645fc703d96a389587119058ed96e6ab9ad",
"pids": [
2816
],
"md5": "7b25493ff64511abf4d683e942d8ea6f"
},
{
"yara": [],
"sha1": "0ab3698b5eccb1c98b10da63f82ea55ce4047383",
"name": "6549776809bcbbc6_ie8_mouseover_button.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_mouseover_button.png",
"type": "PNG image data, 1 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "6549776809bcbbc624ecdcd0d40917ef74076951cfd3b9577ea817fe75e27bdf",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "029A06EB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6549776809bcbbc6_ie8_mouseover_button.png",
"ssdeep": null,
"size": 947,
"sha512": "f2dfbf5b92b01322a5066e89101e8227edcdea350ab7f2682cd412c5ec2af8bbf8f08b0c8b23f483cd6ea3304f7f1f9c06675015b14cd0387eebb0e7b5c75760",
"pids": [
2816
],
"md5": "8595e5d1d7bce2a1fb19b14183025f29"
},
{
"yara": [],
"sha1": "634105dc3a50746b12536c795dda4da01f6d5789",
"name": "e14f68f15f4bb0d3_version.xul",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\version.xul",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "e14f68f15f4bb0d3ce777401724b7f8b2592485206a927edfa9de83d03abab14",
"urls": [],
"crc32": "A363AB9E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e14f68f15f4bb0d3_version.xul",
"ssdeep": null,
"size": 204,
"sha512": "f7cdff88bd1fb773525688a5cc4af6e1825eda8ba5a3dae1e3985559f5e181253710b3491992082b6746d5e1056607e2bdbaec145cabbd4b5dc41ef4e7391556",
"pids": [
2816
],
"md5": "06bad96843be707e81d79e826a82e8a5"
},
{
"yara": [],
"sha1": "62d1e6c2d01b8462a484940a023a35657a0df221",
"name": "746777a3aca1a6d0_popup.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\popup.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "746777a3aca1a6d0a06b3eddb99c6494c6ef588c3d1127ae21650721f5f052dc",
"urls": [],
"crc32": "E60D23A0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/746777a3aca1a6d0_popup.css",
"ssdeep": null,
"size": 503,
"sha512": "1f545211d51223f9680a3b9da6486d9673ba08aa32f46715f90330c8f59514b6c2389fc6b7f318654990098bf8ad55caaf3b8d9935afa77df8dc143074014de0",
"pids": [
2816
],
"md5": "6fb37e2f479c45b42ceb02555ba1cc43"
},
{
"yara": [],
"sha1": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
"name": "e3b0c44298fc1c14_nsw5930.tmp",
"type": "empty",
"sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"urls": [],
"crc32": "00000000",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e3b0c44298fc1c14_nsw5930.tmp",
"ssdeep": null,
"size": 0,
"sha512": "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e",
"md5": "d41d8cd98f00b204e9800998ecf8427e"
},
{
"yara": [],
"sha1": "036cbc123297c447af07ee0d164b9682fec4a542",
"name": "888bfeddaf3f8e6c_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\popup.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "888bfeddaf3f8e6c314d0466bbc7577a07c592528ce9e22ba7ecd6c3c29e13af",
"urls": [],
"crc32": "9B52FC3E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/888bfeddaf3f8e6c_popup.html",
"ssdeep": null,
"size": 5312,
"sha512": "3b318d702074908df8770a0467f1f8702ca185c4fc4a11d0472d95c53e5c47b07d839b74c767dfe6bfdea961a723679421b7a55b325883b79f8fb49e7f3c89e6",
"pids": [
2816
],
"md5": "5b71432831eec134da8c862a1217b508"
},
{
"yara": [],
"sha1": "3cac56ce3baa4b6fab89ab1afe00ce4ee9901604",
"name": "916388c3a1495338_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\bgPage.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "916388c3a149533888f0808d6560dc7faadc48a3238dae33ac57a7d91ee6ba20",
"urls": [
"http:\/\/emailnotifier.webapps.tbccint.com\/icn\/app_button_icon.png"
],
"crc32": "7B7334BE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/916388c3a1495338_bgpage.js",
"ssdeep": null,
"size": 19180,
"sha512": "4a0c3bb3a0496ecf014bf5f338aadf004b81a1cc5968ffd1cc8c3966a0589588bc8db94393ce50c56484485366ee58f40496c6f53472c086c51bb03ac5ebdd73",
"pids": [
2816
],
"md5": "275460683c3f1518da7362da8418f1e7"
},
{
"yara": [],
"sha1": "b4ea731559ecd770cbb4ee648dc6121c897aaafd",
"name": "48938640995fda41_next.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "48938640995fda4163c1d17c6981827b4a0459c9315d01db0196c4714235ffe4",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "09F83ACB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/48938640995fda41_next.png",
"ssdeep": null,
"size": 1678,
"sha512": "a3d5adce995c720df059844b56d0b4e430fa821cc013cbcc2ff9dd71c7a60f63992e3e9a196f42cdd7ce6d543822938de9e65c1d7f10256f8d4f8d68b0e1300e",
"pids": [
2816
],
"md5": "64c8c9abe695ad2b1010678a50b07d6a"
},
{
"yara": [],
"sha1": "9592c9941b9af36f66d45f832f79ed58e6de21a4",
"name": "ac3ca3a231dc9c95_dialog_tip_right.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_right.png",
"type": "PNG image data, 73 x 40, 8-bit\/color RGBA, non-interlaced",
"sha256": "ac3ca3a231dc9c954fb0cce25a5b6ce639797dcb2bd07a62008068cf54ff4855",
"urls": [],
"crc32": "38C6C9B0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ac3ca3a231dc9c95_dialog_tip_right.png",
"ssdeep": null,
"size": 3675,
"sha512": "1fa2f74fb7dc59d16c38cb3223f4deb5d1e87cb79c2c41242fc7ad9f9b0b688e8693668830ac4eb7f8214fedf4b3282501aa41dddef16f1a0d493da74fd716c7",
"pids": [
2816
],
"md5": "a459bf4f30eab58bc74d0d99bd7e412d"
},
{
"yara": [],
"sha1": "ab9e0a5348d79f728bcfb370494807f3c3785298",
"name": "a66ee395358c9683_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\popup.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "a66ee395358c9683a924f7297f83a4ca10dace6be0c784ba12518ab918d0677f",
"urls": [],
"crc32": "EF440207",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a66ee395358c9683_popup.html",
"ssdeep": null,
"size": 3381,
"sha512": "bca4e6673d3f9eaee5013f10eb31e0b1c51010bf192d8c0db7d355c7eef0b6b39ae9e85c7721ecc6486e48a053dba94b52aed0ea1c8d095c789aa6363b95527f",
"pids": [
2816
],
"md5": "02d0cc1e5d793ccb1776b9e38954ff82"
},
{
"yara": [],
"sha1": "f4c144dcc86e8bfc70e320bde076fb71b298e7e9",
"name": "09b81c3a2ed7d09d_manifest.mf",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\manifest.mf",
"type": "ASCII text",
"sha256": "09b81c3a2ed7d09d891ee09e80bff069aea6cfa05d4d4382cf87f1a814d039af",
"urls": [
"http:\/\/o-regan.org"
],
"crc32": "101D6C8A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/09b81c3a2ed7d09d_manifest.mf",
"ssdeep": null,
"size": 67643,
"sha512": "40a15712324205102926bca3935312273c3886c08e9ef5aa6be3876aa1c78f8e1e8402d596fd35c002f8e59c87efbc1dae440bb4c98c1ff32a2b537088d99029",
"pids": [
2816
],
"md5": "0f0beb597d3781979b382dadf042a1c6"
},
{
"yara": [],
"sha1": "851d76444b5dc10f534030f7d29c0bc67627d64b",
"name": "0e89c3c42fbd6c9d_webappapifront.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApiFront.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "0e89c3c42fbd6c9d9c2bae03a0e8af555d4c007d3393ac99d238d21462b1e338",
"urls": [
"http:\/\/hosting.conduit.com\/EULA\/)."
],
"crc32": "A805D7D0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0e89c3c42fbd6c9d_webappapifront.js",
"ssdeep": null,
"size": 26450,
"sha512": "08d0683ae9638403fc1a0bc5894b44b9ffc683d9c0cb7fc65431082143ec907c11957bb717110ee4f4c4ece5faf7ce4acae6baaf8efdd60b834fa9a420f2e554",
"pids": [
2816
],
"md5": "4a90c65b68b082bdc4f7cfbde3e79501"
},
{
"yara": [],
"sha1": "83e43a0b8962a932935624448698dbbad7940fc6",
"name": "9c06b53584a96d2b_imapexecuter.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\IMAPExecuter.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "9c06b53584a96d2b678e6f680ee20f63a697a7dfb511a2665395e96e7c116d58",
"urls": [],
"crc32": "7F419BD9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9c06b53584a96d2b_imapexecuter.js",
"ssdeep": null,
"size": 23804,
"sha512": "ff09b18dcdeb9f5c3ee2cfb9389c87e7edddd2a7c5c16a0b51dff96b1d54da90b417efabe3a50d47c1d0196c68cff234aa5834c19d5c59dca7b0efbc8552ac34",
"pids": [
2816
],
"md5": "85970b6cca4e149251f4a127e6777298"
},
{
"yara": [],
"sha1": "75ac4dc4808ac148ddd78f6b89a51afbd4091c2e",
"name": "7851cb12fa4131f1_system.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af",
"urls": [],
"crc32": "81CA71BF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7851cb12fa4131f1_system.dll",
"ssdeep": null,
"size": 11264,
"sha512": "13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4",
"pids": [
2816
],
"md5": "bf712f32249029466fa86756f5546950"
},
{
"yara": [],
"sha1": "0da9cad495398cc3c82c0e4f6fbaf20370c6fefe",
"name": "5fd190a10ba23059_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "5fd190a10ba2305919e1af755326a5c64a8c68799073c7852b72a4cd3a68ca2e",
"urls": [],
"crc32": "44CEC2CB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5fd190a10ba23059_bgpage.html",
"ssdeep": null,
"size": 452,
"sha512": "830a5c9e65c54398d06173bef42c083cc5812fe064ef7cb609eda96662f571bea587d67bafbcc7327e5df0e520becb0bcb9f90e9544210b5bcbb93f273b91181",
"pids": [
2816
],
"md5": "d27d6effa08cca66b2e915b86173da6f"
},
{
"yara": [],
"sha1": "8ad31d83e516a24c08da14c622b37032216214bf",
"name": "51b31eda99928671_frontstage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\frontstage.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "51b31eda9992867121536d9fcb20fb40d55e5cb3ca526718a6bec69ebed242da",
"urls": [
"http:\/\/search.conduit.com\/ResultsExt.aspx?q=",
"http:\/\/www.msbitsoftware.com",
"http:\/\/www.w3schools.com\/images\/w3html.gif",
"http:\/\/www.conduit.com\/"
],
"crc32": "D8466D3A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/51b31eda99928671_frontstage.html",
"ssdeep": null,
"size": 226460,
"sha512": "2922a9ef1b46524be4a7e89d0bd3958bddab8ff46536f5c5fdee023909f7db5e14d74ae92fce844b0a4ebac07acba6c8f8577e12ee4dc8d8630731cb56daa2ba",
"pids": [
2816
],
"md5": "7f3318d928147faf13f8eb2da08183b4"
},
{
"yara": [],
"sha1": "34a9a4039b8976df86af841e2372c0033136457d",
"name": "a62d33241846bb44_uparrow.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\upArrow.png",
"type": "PNG image data, 11 x 7, 8-bit colormap, non-interlaced",
"sha256": "a62d33241846bb441b9b516f540403110d3a2496b8c4ce729ef46652474464c3",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "5249275F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a62d33241846bb44_uparrow.png",
"ssdeep": null,
"size": 959,
"sha512": "4da510ad3fed4784db6021f347262390f5363956ba5611878346ec06a796c35ca23a5cf4aa41b9461ea68f6f42a5e6857ca916e73a4b40f6257af9edb91add5c",
"pids": [
2816
],
"md5": "4942b72dc46c2ea527d94ead16dbc3f1"
},
{
"yara": [],
"sha1": "f0e4d90b4b7b5ce7a48c24f1252a06a35a3bcc84",
"name": "eb83b648be468f90_excanvas.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\excanvas.js",
"type": "ASCII text",
"sha256": "eb83b648be468f90407bdd8e210aac8c167b9167a7770287ca771428a6986997",
"urls": [
"http:\/\/www.whatwg.org\/specs\/web-apps\/current-work\/",
"http:\/\/webfx.eae.net\/dhtml\/boxsizing\/boxsizing.html)",
"http:\/\/www.apache.org\/licenses\/LICENSE-2.0",
"http:\/\/developer.mozilla.org\/en\/docs\/Canvas_tutorial:Drawing_shapes"
],
"crc32": "382544C0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/eb83b648be468f90_excanvas.js",
"ssdeep": null,
"size": 27045,
"sha512": "4f5a057946760025c4b190e8800d4b0bc2ea8854a12cff233ec76cb72fa288649f570198467102e9c765c96f7b596beaab6a299ead943b3b6613026896c8d5c4",
"pids": [
2816
],
"md5": "c0cad58f958c967912d024bbd714323e"
},
{
"yara": [],
"sha1": "9b3afa843f5908bff409325dfd7bc923f289108d",
"name": "5292a68036eddc9c_ok-button-onclick.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-OnClick.png",
"type": "PNG image data, 98 x 39, 8-bit\/color RGBA, non-interlaced",
"sha256": "5292a68036eddc9c7666332ae1099bda6889d41f1f324483ac2162982461c760",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "E3E502FE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5292a68036eddc9c_ok-button-onclick.png",
"ssdeep": null,
"size": 1370,
"sha512": "89782a6ec2177c95ed5559d30cf50ec7ef8fff4d911c9b130c3c140494e1e76ebdb7d74c7e09406a2b6c908fe163595ebebedb7bc81df1bfb4e042ef18a631b3",
"pids": [
2816
],
"md5": "885653f80fbd5f97e09fff3fe96fea4a"
},
{
"yara": [],
"sha1": "20697060eebb97b5cd33dde1d2eea057472fe1f2",
"name": "e5a3ac766a0f004c_autocomplete.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\autoComplete.js",
"type": "ASCII text",
"sha256": "e5a3ac766a0f004c25fad6b314ae0beec04b4df9274c48667979e31342af9415",
"urls": [],
"crc32": "B66DA26B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e5a3ac766a0f004c_autocomplete.js",
"ssdeep": null,
"size": 7994,
"sha512": "6f9c1448e09412d7da1673a9043685ed46f70ae9b7a700a299b05e577699e48f38093a94ef45e3797e3b4343bd02d511607135866a57f1fe33ed990d8fe6f2e1",
"pids": [
2816
],
"md5": "01d74d0a2f476e4ba3b9fd2177381ea4"
},
{
"yara": [],
"sha1": "e4221651c7a34a7140b1a1862e8337e37c586082",
"name": "fceb08169ac5a79c_jquery-1.6.2.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.6.2.js",
"type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
"sha256": "fceb08169ac5a79c22a4222965fc88647191f9b91176ee90659bd197dc32239b",
"urls": [
"http:\/\/jquery.com\/",
"http:\/\/sizzlejs.com\/",
"http:\/\/jquery.org\/license"
],
"crc32": "13BB3B33",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/fceb08169ac5a79c_jquery-1.6.2.js",
"ssdeep": null,
"size": 91590,
"sha512": "d344d64fce29b90fd19d8b1cd227cd66e619c4fd016954876be3d4261c6a8a7ae15b00739e4174d464bae417daf15b53d5f5a3fb73544f78953a564359d0d70e",
"pids": [
2816
],
"md5": "9af24cd3be67b72d3447560814cf874b"
},
{
"yara": [],
"sha1": "990279cbecd6a8ec2635cc04a06774f9abd06015",
"name": "a936ad0f338ce3a1_providers.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Providers.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "a936ad0f338ce3a1e3f6fa6f013c97dc3f28da67ecfb61bddb3841cfb77bfaf2",
"urls": [],
"crc32": "0652A2EF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a936ad0f338ce3a1_providers.js",
"ssdeep": null,
"size": 19966,
"sha512": "86e2b47f15326616c2194f099045f2e1c248e85079badaa42504ea9a9db901e2235463fb7dc0bc87512d589bac362ab496f02b67d24579c5402e1599de9b21a0",
"pids": [
2816
],
"md5": "6100c88e58868e2a8469d9684467eea5"
},
{
"yara": [],
"sha1": "290f497e3b8270f5789ba59a77e56b6943c8fec8",
"name": "0b6a40ab01c296a5_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\bgpage.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "0b6a40ab01c296a5a6fb73dfea95dbc5f323cb1ed7d3ece0f2366d1958cdb82c",
"urls": [],
"crc32": "AF9BA753",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0b6a40ab01c296a5_bgpage.js",
"ssdeep": null,
"size": 937,
"sha512": "5c4d425de671c4d189c65c170a5a4fd562027b2f6be97407795f18319b93a21d75760c263ac118b55f1f0c66f8f1f3ce220609f9078e394107955085c16c8f35",
"pids": [
2816
],
"md5": "28cab33f4749dfe07ae3ab4dff92ded9"
},
{
"yara": [],
"sha1": "474e402e6d63c119047bf2cfc9498a141eb37768",
"name": "a118cfb5544341e9_x.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\x.png",
"type": "PNG image data, 10 x 11, 8-bit\/color RGBA, non-interlaced",
"sha256": "a118cfb5544341e9f175fa0911ddd381cf4085f211f3fcd93ba19bd5800a64b0",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "A2CD3B84",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a118cfb5544341e9_x.png",
"ssdeep": null,
"size": 1031,
"sha512": "11ed240229fcb8f530653bb5728905b0645824e817218f6049b64a159601421c8ed15ee5a70b685141d166631853c99b091e76638bf0186e06ac1483df73a5d8",
"pids": [
2816
],
"md5": "121604d0f556d71b09cbe9e42923716d"
},
{
"yara": [],
"sha1": "bb118bbd1ec814126c7ebfe10d1c0db024da964c",
"name": "99cadafea0134e5a_zigbert.rsa",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.rsa",
"type": "data",
"sha256": "99cadafea0134e5accf233e217b37a1a6ba74df39047393269430519dffd0967",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/logo.verisign.com\/vslogo.gif0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0"
],
"crc32": "0D7DC1D2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/99cadafea0134e5a_zigbert.rsa",
"ssdeep": null,
"size": 4850,
"sha512": "4586111258dbe6627016f8812f08c6dda08eac98442aaf4f5e90fb6a3ab4c8fb436b3fc1246e5bf893e6fab4b0e5937be09a7f290909bf4c69263037f1f4aa45",
"pids": [
2816
],
"md5": "e9047b40ba2b00ba90854f938ccc7912"
},
{
"yara": [],
"sha1": "6d81a8cad03988b2a70c21106a06f70aa856fc0a",
"name": "b25a08c38bc7268c_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "b25a08c38bc7268cdd62b9d970af19b36d415904594df8e742fbbcec8d41c796",
"urls": [],
"crc32": "E5640BF2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b25a08c38bc7268c_newPrefs1.js",
"ssdeep": null,
"size": 7486,
"sha512": "b0ebb1deb800b04f223724c87f7b0a55e5f3e8e67d961cdbb7061e8b97127433fbba84e98b6357f3209e1ecfec52e1d4d90d5a0ef347066ce37fc77743596658",
"pids": [
2816
],
"md5": "1f49000e445eda8c8738e53312803f6e"
},
{
"yara": [],
"sha1": "700240d2d0ddd41f735c12801fcca29a4ed94f71",
"name": "e5167ebeb17e6cb1_content-sep.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-sep.png",
"type": "PNG image data, 461 x 2, 8-bit\/color RGBA, non-interlaced",
"sha256": "e5167ebeb17e6cb1a68772b18c89487571ff05648d213000d88f5e284fdf9db4",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "B3C8A7F4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e5167ebeb17e6cb1_content-sep.png",
"ssdeep": null,
"size": 962,
"sha512": "dd99fb16173fc33b2ab976cf75d3a9b1761b2653873d0df02495330e506c3305fc0090beea9bed6200b475ee5073ec3d21ac2f5e179bb7eb3be2a03f90625fc8",
"pids": [
2816
],
"md5": "6735b2f240c5ef7ec942a7a70b20fbd7"
},
{
"yara": [],
"sha1": "70be652f77fe704f90e74272d9e6cc6ffc50d3eb",
"name": "565307bba76d6051_minibrowser.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\minibrowser.png",
"type": "PNG image data, 16 x 16, 8-bit\/color RGBA, non-interlaced",
"sha256": "565307bba76d60510bc34368993c657127239cc97e7688e3658d4d458efa93be",
"urls": [],
"crc32": "94A145E0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/565307bba76d6051_minibrowser.png",
"ssdeep": null,
"size": 683,
"sha512": "dae6dbc8c9984f8f57268b2a54ff29c646449c95622d4e3a7d427915a795ed0dffcfc26c9f8ec3cc159ce5af2de07dacee52bcbc0cf09191476083390979c26f",
"pids": [
2816
],
"md5": "05f6e290b80e2b1be4ae9ada1af04b25"
},
{
"yara": [],
"sha1": "b537a3c4f62fa7090231b29d2a0911f9dbf114d0",
"name": "57fb78e789dcf611_ie7styles.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\ie7styles.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "57fb78e789dcf6110c2449e5c14fa80d8797336e6db23cf063c94958859ac1da",
"urls": [],
"crc32": "EAED0A30",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/57fb78e789dcf611_ie7styles.css",
"ssdeep": null,
"size": 40,
"sha512": "dcb4a58a4d15f2b70059a0a46de3483bdae690d3d4e1aabb91c461635c87ec859a31831352d772d0db0c874df924ac05b3116bd6b1bb4c6405e54a0428b5fc24",
"pids": [
2816
],
"md5": "4fba0aca6aab2c8c37cc6f21078b81cc"
},
{
"yara": [],
"sha1": "ba6c07bd42099bab8069c9cf3676008a5b7c68f3",
"name": "f77521e8d40cbc01_gadget.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\gadget.css",
"type": "ASCII text",
"sha256": "f77521e8d40cbc01611892aab7dd1a420726197b1d0a006170d3d54630fb2fdc",
"urls": [
"http:\/\/weather.webapps.tbccint.com\/day\/rollover.png",
"http:\/\/weather.webapps.tbccint.com\/night\/rollover.png",
"http:\/\/weather.webapps.tbccint.com\/back-arrow_RTL.png",
"http:\/\/weather.webapps.tbccint.com\/back-arrow.png",
"http:\/\/weather.webapps.tbccint.com\/logo_footer.png)",
"http:\/\/weather.webapps.tbccint.com\/shadow.png)",
"http:\/\/weather.webapps.tbccint.com\/save-center.png"
],
"crc32": "E7444B08",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f77521e8d40cbc01_gadget.css",
"ssdeep": null,
"size": 12755,
"sha512": "2004bc16d736b4d9a19235da4f329e94776e9e5163bf7c3f94014d1c2ec53b1b43771dc43cf9ff107565a6649d50f0bc223e24fe08da957baaf45d29c1d5ab08",
"pids": [
2816
],
"md5": "f962929ff41ac22d70a745dced45cd69"
},
{
"yara": [],
"sha1": "7369a00b1fa268be0115c77dd87490410949ee9f",
"name": "ad544e99250076d7_ok-button.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\ok-button.png",
"type": "PNG image data, 93 x 33, 8-bit\/color RGBA, non-interlaced",
"sha256": "ad544e99250076d74cfcec2c91c9ccaa64592e1b678c7f11e79c2681446bf784",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "F316B2AF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ad544e99250076d7_ok-button.png",
"ssdeep": null,
"size": 1917,
"sha512": "41f970b5e87d1feb759eab563d77bf72c1a71ba52539e82ea178c81e70eab79e247bb7832869a247729aa6236b5585d060b52eaa4af14508af2dd596c9c7e148",
"pids": [
2816
],
"md5": "33cc18d8138802fd7d7a259ae439fd96"
},
{
"yara": [],
"sha1": "401ea7157583ebc3d4342012e5cc29c1c0551a29",
"name": "75917b74349c1b89_close.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\close.png",
"type": "PNG image data, 8 x 8, 8-bit\/color RGBA, non-interlaced",
"sha256": "75917b74349c1b8909c2f9b33e548020f04eeda6e1c3b70e1164dc7644c95cf8",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "2A274F60",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/75917b74349c1b89_close.png",
"ssdeep": null,
"size": 1070,
"sha512": "b74c03fb8c28f80dd273fedce708e77d077cee2fe7cc3874629958a65249a07f6edc37301d5d381039bd92da138e0c7bf1c6480652978be00984975c81f186e3",
"pids": [
2816
],
"md5": "9154a121829bb39ec17a1a3854b4bad5"
},
{
"yara": [],
"sha1": "9a4dbc6a15418d753b7234d9d4d390505f29ee0f",
"name": "3ad02846443d3b36_iestyle.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\iestyle.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3ad02846443d3b36fcf9b0a072801ac16272cfc1adf8bad62d90a93a6d147741",
"urls": [],
"crc32": "8EF51785",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3ad02846443d3b36_iestyle.css",
"ssdeep": null,
"size": 44,
"sha512": "f6074b87fbf5cf625daf345ae8868396a923cd9dd8cb926c809cad1ad97fae8f412c20147b310ccc372d9694e882b0835b801635915bcf5c9ff92da9244f6653",
"pids": [
2816
],
"md5": "efb9d5b70828d24431a1ae51b5cc6a75"
},
{
"yara": [],
"sha1": "49d18c3694f105135884b0863859605cb914b6f3",
"name": "a5edc99208f75f06_minibrowser24.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser24.png",
"type": "PNG image data, 24 x 24, 8-bit\/color RGBA, non-interlaced",
"sha256": "a5edc99208f75f0602d87f8d50b7b11eccf34ffe69f893c5aad56b29a5b85219",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "87DE3061",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a5edc99208f75f06_minibrowser24.png",
"ssdeep": null,
"size": 1770,
"sha512": "f4482fceb40a2903b512d694c454f1634e96fc5c4ba05806adfc2fb41f6d1a23dafb0443a971130a36e14299d5be74f9e783c25845542641bda3fc2b66b5fb4d",
"pids": [
2816
],
"md5": "4d7f9cb54d2f0f9f6dfdc611b53ee15e"
},
{
"yara": [],
"sha1": "d9355a413c4ede0547e45c0670cb07798ae093c1",
"name": "13eeb49be1fa977e_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "13eeb49be1fa977eefa6ba57d85a00534a8845ee88d66a7b61054d855dd074f1",
"urls": [
"http:\/\/smartbar.pricegong.com",
"http:\/\/settings.pricegong.com\/settings.ashx",
"http:\/\/www.pricegong.com\/?ConduitDebug",
"http:\/\/service.pricegong.com\/default.aspx"
],
"crc32": "7BAD03BD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/13eeb49be1fa977e_bgpage.js",
"ssdeep": null,
"size": 98421,
"sha512": "1a2352c523deca2197ecfb63f9796ccc544f09a3d9297463d5ea5998b4e096a8489b46a694fa441619715a38a0a03617ed277e18ae08e9cbb8ae3126ef34158e",
"pids": [
2816
],
"md5": "8af115809285eeffeaa108733a00de38"
},
{
"yara": [],
"sha1": "1de3da1b8855e64c4b541c7c03628dc489ed8b1e",
"name": "af4c0fd715e71c22_layoutmanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\layoutManager.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "af4c0fd715e71c220c4f50400ea61e7c8b8abd8f5dfec4ef74894768cbd5c714",
"urls": [],
"crc32": "6B0899F7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/af4c0fd715e71c22_layoutmanager.js",
"ssdeep": null,
"size": 2698,
"sha512": "f44f6d2635246addb4444402abc24f303eb2fd5d800f6459a19a496fbc4c20663e15c1f8e76e8bd06d2c8fad04580fca6644f2712aede07fe588f7ce66646659",
"pids": [
2816
],
"md5": "b3fc22ecbd0f5db2436cb6062800b68f"
},
{
"yara": [],
"sha1": "e6f42424c0e368fe496d621ddcba0e6cf44cd764",
"name": "56210772ff1501d1_showhandler.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\showHandler.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "56210772ff1501d16ebcbaa1d78eaf07f6fa19d436405b25273c69f3c0bbb878",
"urls": [],
"crc32": "04EF2CD7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/56210772ff1501d1_showhandler.js",
"ssdeep": null,
"size": 5353,
"sha512": "db69e6a46c4d0458bdcc86d7708fcfcbaf81147d9cee0a9df995230d4be8470e143df2396fdd730c30ad0bbf422107fb5ab2d5d93c9d1ff5f7686e075d108729",
"pids": [
2816
],
"md5": "adedd003ecb091611c96c1aaeb50ac71"
},
{
"yara": [],
"sha1": "04d058cdcb750b01db49b3fdaeb8639aca188be9",
"name": "8070ba60f9c609d1_scroll_up.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_up.png",
"type": "PNG image data, 32 x 14, 8-bit\/color RGB, non-interlaced",
"sha256": "8070ba60f9c609d1a56b885304faa6a8634ed311de8bca86aa477a02cd6562f1",
"urls": [],
"crc32": "067C5C9C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8070ba60f9c609d1_scroll_up.png",
"ssdeep": null,
"size": 802,
"sha512": "95769522c948c941005c489e91899d0be8ad7009a73b14215c4fde8e59e875e33227b80c2fe6ecb65f81ece8afdd48fcd82bb79c33588628ea7867de7bb1c8a8",
"pids": [
2816
],
"md5": "3fe08a4e86097bfe362cf5082d38712c"
},
{
"yara": [],
"sha1": "dc6f5dca64e12c3481be3b4143d54e4f7567c91b",
"name": "66a5dbdac9749350_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "66a5dbdac97493508c8ff49c54db87198bcd5646b9b398690b25987c64040b35",
"urls": [],
"crc32": "630CF5AA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/66a5dbdac9749350_newPrefs1.js",
"ssdeep": null,
"size": 7041,
"sha512": "e7a6204f78e58773ae459c8957af322f218ba10762d8d82e83567054725f4610064d736efd3bcd6565dccec84bd2d81853870c4aa5334d0cd5cc429b3753234c",
"pids": [
2816
],
"md5": "46f2685c3d11b7cef84482a9e933b8e3"
},
{
"yara": [],
"sha1": "e6b89203ce9240fab988047c4bcc88c92d6147d8",
"name": "5498867b7023a1f6_popup.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "5498867b7023a1f6905096eb81eb3827092a5675fe4d3883fbcba23b3b1a3063",
"urls": [],
"crc32": "6DAFE4AF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5498867b7023a1f6_popup.css",
"ssdeep": null,
"size": 5133,
"sha512": "e1f6e4f179c0f3ade6f4e82daf892b96d330537754e53ade70e56fe2faf8697856a0c82556f2cf2d1e135b68d86dac434373d17fd132961d3870a149744ffadb",
"pids": [
2816
],
"md5": "0ff751d4df56f6498257a66268ef5527"
},
{
"yara": [],
"sha1": "99b7a6ecd023a00fdb104f2da21859e6bb9d49fa",
"name": "229278f6a9c1c27f_jquery-1.5.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.5.min.js",
"type": "UTF-8 Unicode text, with very long lines",
"sha256": "229278f6a9c1c27fc55bec50f06548fe64c2629f59f462d50cac28e65bb93a83",
"urls": [
"http:\/\/jquery.com\/",
"http:\/\/sizzlejs.com\/",
"http:\/\/jquery.org\/license"
],
"crc32": "276E55E3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/229278f6a9c1c27f_jquery-1.5.min.js",
"ssdeep": null,
"size": 84362,
"sha512": "dc2c3d350a20a25400b7d6083b1fe3d6aa708a49ef9482edbc7b734b071df515dbe8a82a9707f9430f32df92bab7908d8c2861a5ca1b35fd9f0186cfc9d33710",
"pids": [
2816
],
"md5": "63c1bc2eb898f68b943e1b0fdd98c746"
},
{
"yara": [],
"sha1": "58f9f3bc5b34f9448fbbe5d86dcd9089d0528a9e",
"name": "2e7d31583aaff338_log4conduit.jsm",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4conduit.jsm",
"type": "ASCII text, with CRLF line terminators",
"sha256": "2e7d31583aaff3387189c8d0e9893179156255ff4f0916a55c1b2030949fe34c",
"urls": [],
"crc32": "DED4238F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2e7d31583aaff338_log4conduit.jsm",
"ssdeep": null,
"size": 760,
"sha512": "a40e0e5f9c5fc9efc05c3e43428931bde176432630071977b0c26d95cedb156e7d2449f5209db0b5b16ea400d43996a6236d244abd62bf664b321536f7ee70f6",
"pids": [
2816
],
"md5": "93898fe6a232c5fcd838d8168f65d802"
},
{
"yara": [],
"sha1": "56fb89d09ed45645d73da2674520d7f884f023f6",
"name": "f335066138a9df73_icons.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\icons.png",
"type": "PNG image data, 68 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "f335066138a9df73990a7adcd7c9ae2f462bf595c0761c1a107252ca238314e6",
"urls": [],
"crc32": "5496222B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f335066138a9df73_icons.png",
"ssdeep": null,
"size": 4396,
"sha512": "fb7dcfadd6963cf11ba370e2dafe3bd64655e231a65810a3ba0fcb676b1995222debcd20d126b4c692031e1c8462172466f6c10cbd2840cb2555d7a8e3999604",
"pids": [
2816
],
"md5": "81516b5d140b553db15f3edbfe65185f"
},
{
"yara": [],
"sha1": "afe66394d4dba301d8d1b53b586d370b8d19cfd4",
"name": "680a44da07878da9_embedded.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\embedded.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "680a44da07878da9599d740e1e4d35c30b5d2d7c79d5d96cbc791ff647aacc34",
"urls": [],
"crc32": "FD4806E5",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/680a44da07878da9_embedded.js",
"ssdeep": null,
"size": 6468,
"sha512": "248191ebf7cf5fd6025fb18f512e2e0493a4474681bc6f634090d429a5a4e09755e922d5d0c53f4f5b73c11805bd95c28ea49b4ca068a4540c56e39e59bb2c4c",
"pids": [
2816
],
"md5": "5e96d1162b4c24ebb96845a618d50f3a"
},
{
"yara": [],
"sha1": "a8657ab09ed8b619ff450303b0485e2b1d98732f",
"name": "5ac72ba9701069db_reset.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\reset.css",
"type": "UTF-8 Unicode text, with CRLF line terminators",
"sha256": "5ac72ba9701069dbe8be1534432e92321cafa45eb65d633843b69339e4c9d773",
"urls": [],
"crc32": "9EE34890",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5ac72ba9701069db_reset.css",
"ssdeep": null,
"size": 2965,
"sha512": "19216649d0c229d24621dc7a76d09c912778e024ecef48960c9020513ee6eb34bc523f130a3adbb35415c1d64f8f9bf5005d79ce12453f07ba0207fe1e72588a",
"pids": [
2816
],
"md5": "31196e74c33494949ab880e21307e746"
},
{
"yara": [],
"sha1": "3ce6f07c3c06bb89d6b422062cff9dc66f13f856",
"name": "ffd585c14f96f869_nsutils.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "ffd585c14f96f869f3c3ce6d0a2d47bc0a2575c02bde9d4057bf7fa5fa81c6aa",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "1B9E64FB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ffd585c14f96f869_nsutils.dll",
"ssdeep": null,
"size": 348480,
"sha512": "dcac041914f7ebaa96ced5672752726709155bb8f8709f2ec215e66de7163e2496f3d73a5c9ef431668f814b633182012f728f099771462a8558e34acc3498c4",
"pids": [
2816
],
"md5": "e34567b8e1dccb066ccd0173d5818498"
},
{
"yara": [],
"sha1": "8dc4d64bfce57683a0c185f752fac2a7439627fe",
"name": "2b5ef75d46b884ee_historyprovider.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\historyProvider.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "2b5ef75d46b884ee6dff9397edfb8f6267ccbda15ef9843b5a0080574cab119d",
"urls": [],
"crc32": "8E958CD9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2b5ef75d46b884ee_historyprovider.js",
"ssdeep": null,
"size": 15571,
"sha512": "d31d2651cdcdebd655150ea5b759893b80c39be2af838a332628ac68077b0f7878faf5a9e0af968f84525032a8ef9f9e1604224d1b7ec768c9d87522313589de",
"pids": [
2816
],
"md5": "aa05fe1838b90c0975c9102418fec534"
},
{
"yara": [],
"sha1": "1d46b7d054c6f63e6d60baeeca16f774dadae5d6",
"name": "b9513905302fb6ce_sprite-ok-button.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\sprite-ok-button.png",
"type": "PNG image data, 98 x 137, 16-bit\/color RGBA, non-interlaced",
"sha256": "b9513905302fb6ce53449b46ebe8a5f9501a9310eb450afe9f047e91305f9ebb",
"urls": [],
"crc32": "C9909D08",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b9513905302fb6ce_sprite-ok-button.png",
"ssdeep": null,
"size": 2238,
"sha512": "d14bbf5a19a3dccab7388f3bc711705129054071c9b2262dadc03ea95d71590b0fdff736f49ee499be32e63a30c8ac138555a04f638bda48fe8ee03e1fc30ab0",
"pids": [
2816
],
"md5": "72163d6eadd60e252201d4a7cd74a36d"
},
{
"yara": [],
"sha1": "a4712748ce28d7b751c78f2228858f576a4e8a31",
"name": "544b356334e6becb_backstage.jsm",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\BackStage.jsm",
"type": "UTF-8 Unicode text, with very long lines",
"sha256": "544b356334e6becb56bead067f21a3bc3da9202bf320afea1c7f2b2ba198cd98",
"urls": [
"http:\/\/qatrovi.com",
"http:\/\/search.conduit.com\/ResultsExt.aspx?ctid=",
"http:\/\/suggest.seccint.com",
"http:\/\/www.movable-type.co.uk\/scripts\/TEAblock.html",
"https:\/\/developer.mozilla.org\/en\/nsINavHistoryQuery",
"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=624903",
"http:\/\/www.mozilla.org\/2006\/browser\/search\/",
"http:\/\/search.qasite.com",
"http:\/\/suggest.search.conduit.com",
"http:\/\/hosting.conduit.com\/EULA\/).",
"https:\/\/developer.mozilla.org\/en\/nsINavHistoryService",
"http:\/\/www.myplayyard.com\/gadgets\/games.php?cat=girlsxxgames",
"https:\/\/developer.mozilla.org\/en\/nsINavHistoryQueryOptions",
"https:\/\/developer.mozilla.org\/en\/nsINavHistoryResultNode",
"https:\/\/developer.mozilla.org\/en\/nsINavHistoryContainerResultNode",
"http:\/\/search.conduit.com\/?ctid=",
"https:\/\/developer.mozilla.org\/en\/XPCOM_Interface_Reference\/nsIWebProgressListener"
],
"crc32": "6337F299",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/544b356334e6becb_backstage.jsm",
"ssdeep": null,
"size": 346041,
"sha512": "df81285182b44a4a3dc17dca9fa4699a71170b1badc1757155d9cc9af4f266754991da571b01dfde6a1bcc1e3f53852da8a44aa897a6ba89221b90e1fdc76ff3",
"pids": [
2816
],
"md5": "8f7f6632f8105acfd92e6422f3b47813"
},
{
"yara": [],
"sha1": "cc5a98ea3aa582de5428c819731e1faeccfcf33a",
"name": "5233110ed8e95a4a_inetc.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079",
"urls": [],
"crc32": "50FBC969",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5233110ed8e95a4a_inetc.dll",
"ssdeep": null,
"size": 24064,
"sha512": "d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5",
"pids": [
2816
],
"md5": "7760daf1b6a7f13f06b25b5a09137ca1"
},
{
"yara": [],
"sha1": "8f0adaa15988db484bad0b33edd338b58c0a3ce6",
"name": "40a4bd837ae98f6b_x-mouseover-rtl.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-RTL.png",
"type": "PNG image data, 30 x 17, 8-bit\/color RGBA, non-interlaced",
"sha256": "40a4bd837ae98f6b621ad51edf185cda1656f32bc9c3d88492875b0203523304",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "FE0A0D87",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/40a4bd837ae98f6b_x-mouseover-rtl.png",
"ssdeep": null,
"size": 1308,
"sha512": "f4672409ebf1bb29d5af4f752b5f2c3157f0e4ec6ebf0aa629a1ecd92b178b5c025afaad64eb0edc33177a973ba873bee17b0b5244b98b19a1d3b139c762eae2",
"pids": [
2816
],
"md5": "1eb77884d8e761843ac9c2796804021a"
},
{
"yara": [],
"sha1": "ab7e43e3e8895e7bf7f9f5b44e9233565b7a77a8",
"name": "b0ca68a3c4fb120b_backstage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\backstage.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "b0ca68a3c4fb120b4b229df19ebcd7db576465c87c130036a75544ae9154727c",
"urls": [
"http:\/\/storage.conduit.com\/88\/252\/CT2523688\/Images\/634007856276952500.gif",
"http:\/\/www.msbitsoftware.com",
"http:\/\/search.conduit.com\/ResultsExt.aspx?q=",
"http:\/\/www.conduit.com",
"http:\/\/gospelink.com\/library\/search",
"http:\/\/www.conduit.com\/",
"http:\/\/www.w3schools.com\/images\/w3html.gif",
"http:\/\/www.ynet.co.il"
],
"crc32": "3EFE98BD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b0ca68a3c4fb120b_backstage.html",
"ssdeep": null,
"size": 314759,
"sha512": "2e6811f0931c44ca6e2ba3b880a4945db9d068163e5a49547acd0684a4b57c718b5eb6ff8b12e6ea801268ca24cd46a87d7406899dfa6e57b3c928e2933b4340",
"pids": [
2816
],
"md5": "fd2a36a21037f3cd13775aa15185c224"
},
{
"yara": [],
"sha1": "fcf969e98e074c56308c2655ea2941571bc3c8d6",
"name": "69b6abc001c69f22_notificationpopup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\NotificationPopup.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "69b6abc001c69f22342882851660c8a85ad132c54a4b5d074ff32a0859cfc76d",
"urls": [],
"crc32": "1CC01F44",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/69b6abc001c69f22_notificationpopup.html",
"ssdeep": null,
"size": 1333,
"sha512": "d41aa931333afd5d76b792b73d63f5a3e986282efd2ac1335d38d087a6c09d8ca13e5cb7c061178a799d6ce10284d13205b7b56e020df329e3eb174e8058c634",
"pids": [
2816
],
"md5": "42124f94084bfb58bd4beacb41c0128c"
},
{
"yara": [],
"sha1": "effed6152bc37e515196b11b37ba6bd1e8e5e5e0",
"name": "ad4d4b72f2486066_popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\popup.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "ad4d4b72f24860669114fe7bf1fbe11ac23de906b07758d558a40c08436bf56d",
"urls": [],
"crc32": "9C695A29",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ad4d4b72f2486066_popup.js",
"ssdeep": null,
"size": 1363,
"sha512": "e7b0246cb438c853522b2cc8628ca8ffb6a4b31003a9f65a723b5461c0d480a66da8e4c990997aa1b5e8d6e4320333cd3b59b3e8e6bb39e1d3e3e39c49e7025d",
"pids": [
2816
],
"md5": "0b296624120c11de15b5ea8cc896ff38"
},
{
"yara": [],
"sha1": "9e29360087386404a96766222e9d289a99a55e75",
"name": "9bebac87ca66a642_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "9bebac87ca66a642fe171d483aed79ad90f387c6acf6ab6a27b2e2c7eb77a20b",
"urls": [],
"crc32": "7DA066A7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9bebac87ca66a642_bgpage.html",
"ssdeep": null,
"size": 500,
"sha512": "99c0c0c263aadf33818d832325e99ffb3898ab6cff159934536ba410f2674f9254d8a8072d3f53bcb70aa8523ff63707aafd627f9a5f7856e501776410372df2",
"pids": [
2816
],
"md5": "28936a4753693f67ffb28729bceee6b3"
},
{
"yara": [],
"sha1": "b701c8d23fac5582eab6ae057ab7b5206938950d",
"name": "bf24b9bb0663ef64_options.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\options.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "bf24b9bb0663ef6407ad215a74d12604875c1048922b6c76dd7bdec3f14a7063",
"urls": [
"http:\/\/emailnotifier.webapps.conduitapps.com\/icn\/app_button_icon.png",
"http:\/\/weather.webapps.conduitapps.com\/24x24\/33.png"
],
"crc32": "3E49006A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bf24b9bb0663ef64_options.js",
"ssdeep": null,
"size": 75893,
"sha512": "ecbfc0f4e28373a328398a3716d5bde9e3cb82c9752af78aef6ab4fd169ce4483d99071a64b358e4b1aee8b1de825493d851cd3634e7347699d06a8829ca4b2d",
"pids": [
2816
],
"md5": "812eb7cfa17144ec807dc06923782730"
},
{
"yara": [],
"sha1": "25c08936fde8670f5c3f51fe2368a5bcd936cebd",
"name": "ef367dea663e0204_dialog_tip_left.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_left.png",
"type": "PNG image data, 73 x 40, 8-bit\/color RGBA, non-interlaced",
"sha256": "ef367dea663e020488f9af864b792bf74f974355600da738d6fa4a3e79aafdb2",
"urls": [],
"crc32": "A01947BD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ef367dea663e0204_dialog_tip_left.png",
"ssdeep": null,
"size": 3930,
"sha512": "8a8e02d99b5e030d81c8e3a539376ab1b671a1a4be6b51ec48c99a4e580cab050ef6cbc5842ec1a700262535e640ee9d31d00822124e6bbb0069a83231ea03f9",
"pids": [
2816
],
"md5": "5e99ab5ea1837fc1ded070372a966d01"
},
{
"yara": [],
"sha1": "945ce8eae6413970772d5f0fef35ab3e9781cb0a",
"name": "a1267b2b998802a0_image.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Image.png",
"type": "PNG image data, 356 x 133, 8-bit\/color RGB, non-interlaced",
"sha256": "a1267b2b998802a0991d00fc6bb906c523e2714417e503de5520c81d7071198f",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "F69C6163",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a1267b2b998802a0_image.png",
"ssdeep": null,
"size": 53890,
"sha512": "864ad07d9816a95e57f3062affa3f005c2f594df974f54f318848efe0daafc6930952f59d737c692dc7a2c93cf31aa257f9368b8a83e753fbe2e4030b84d1806",
"pids": [
2816
],
"md5": "d000440fb20dc02b1aeb07a2c0c2cf14"
},
{
"yara": [],
"sha1": "f39262fbef7d2db1e058de648a7b83b6c9d55e40",
"name": "9850b8c4a789e3b1_appname.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\AppName.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "9850b8c4a789e3b1d413cb5dc964504821c7f9bcbe87f8e0dd49299f4d6a3f54",
"urls": [
"http:\/\/client.conduit-storage.com\/analytics\/dialogs\/ToolbarNotifications.html",
"http:\/\/info.trovi.com"
],
"crc32": "10B64FD2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9850b8c4a789e3b1_appname.js",
"ssdeep": null,
"size": 34665,
"sha512": "538b1715bc5bee5155038378738c6f0616893c8267ed53999f362e2c8d47b5c8df14d1eecb1020f49e9afce1df03f7d8145df3cba75f80cdf9f31771e132fc03",
"pids": [
2816
],
"md5": "7ecfc2c5973fd5518f32a80b347a9013"
},
{
"yara": [],
"sha1": "03976fd69a972ed0225957994947937d2231e54e",
"name": "5183682f72006858_embedded.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\embedded.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "5183682f72006858fb2a06119650884bc70966fb531ef6b885dd71854e24e27d",
"urls": [],
"crc32": "FB75013F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5183682f72006858_embedded.css",
"ssdeep": null,
"size": 851,
"sha512": "ca4adcf99be85f062e6f5fb5746fb35ef69d00421d00c92d2d34ae4d04f2f194eac29d1584f73686cb595ecaf43a8707028094d92b80d52f6ba25158f2749841",
"pids": [
2816
],
"md5": "3ed28be7da53af0bd93287151a3bca52"
},
{
"yara": [],
"sha1": "008327d82e34d945fe193bbf4666e7940f4bf049",
"name": "109ddd5189f1adfa_uus.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\uus.png",
"type": "PNG image data, 38 x 38, 8-bit\/color RGBA, non-interlaced",
"sha256": "109ddd5189f1adfaf8d0c2cb18b939f205b8ccd313386f76162d1a865fef793d",
"urls": [],
"crc32": "819FBD44",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/109ddd5189f1adfa_uus.png",
"ssdeep": null,
"size": 1662,
"sha512": "8ddb18b8dd5cad3536f72ef3dde9a028f0b6840a80690d52658ff79697a7b42864c8577a10f6fab55faa19a2331f069794f27f28140b9e227499cb84bc6135c1",
"pids": [
2816
],
"md5": "fb1d0df43de80b942d6309d86327bda7"
},
{
"yara": [],
"sha1": "bd143588e04619adbca752254f63a0b517356109",
"name": "126e487d7d84b02d_rounded_corners_right_transparent.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_transparent.png",
"type": "PNG image data, 5 x 29, 8-bit\/color RGBA, non-interlaced",
"sha256": "126e487d7d84b02da85f399c0ee9a88af43812f9d714a7ee8245d885185e39f9",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "0A052133",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/126e487d7d84b02d_rounded_corners_right_transparent.png",
"ssdeep": null,
"size": 984,
"sha512": "f57c45f70e91272e9805c49fc1f61e5f0b696f7f03386e9035beb1bbdc2da3d58ab844475417e704ba322a561e19ee6db3008bb728cf9e3cd241907458ab9892",
"pids": [
2816
],
"md5": "2e23b2dc8abab1290b5119d7e8b3106d"
},
{
"yara": [],
"sha1": "1d91b1f177291e3a9aab450bde5a41d2ca1af98b",
"name": "2413692d84343f96_webapputils.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\webAppUtils.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "2413692d84343f96ff339cfb3daa9ea2836f4bb5ab0655fe91b9b454c9719efa",
"urls": [],
"crc32": "454F47EE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2413692d84343f96_webapputils.js",
"ssdeep": null,
"size": 2693,
"sha512": "99ba2247c86f95576d3c511d388f0f78390975109ba426a45f4968cd923a2df34ec3b3c77c1251edb3aac0149e3b7e039ab3be15125814f02eb9f4dfc96107e6",
"pids": [
2816
],
"md5": "ead0127b0a1ff439f834c67227cc2b78"
},
{
"yara": [],
"sha1": "ad3eb5c38e33919317f46331e93e669105497f07",
"name": "82120659614ba45a_firefoxctype.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\FirefoxCtype.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "82120659614ba45abc41b5512a9add0839c77369f24859787ba87af20b6891b6",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "D42C8180",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/82120659614ba45a_firefoxctype.dll",
"ssdeep": null,
"size": 372000,
"sha512": "a0f4a3c0cd9b9e4bdbf01eccfa85ff485a22ae787ad98af016b06dc12a82b47ed4d9482a56d226ca0001d8b1484ad5594a6e581d593dbf068106e32a8a92947e",
"pids": [
2816
],
"md5": "829303abb02c7af3103b474904b53209"
},
{
"yara": [],
"sha1": "66231269a98e9209984347112cb8fc02364b2705",
"name": "d3eae4ee393f4e54_next.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "d3eae4ee393f4e5469ff672a808963dc1be70e06babc8d7120dfb6cad1041273",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "FE55C702",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d3eae4ee393f4e54_next.png",
"ssdeep": null,
"size": 1643,
"sha512": "653bc1111d8a9f738d5b8c3c9084a8be2a254e772738c503dd2217b2dee548c8d4a9645a8c14c5f7e89413f0bdecf91c48b6d5f8bbfa67885bb540e74935223d",
"pids": [
2816
],
"md5": "2b2fe0047d42562afe55ae77af4478df"
},
{
"yara": [],
"sha1": "fe89af9dcc9481d15948501741487734b430acdc",
"name": "648eaf8a0ccfff7d_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\bgpage.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "648eaf8a0ccfff7d9f492fecbbdca821011d661751a07bbe2616bec5d20a2c38",
"urls": [],
"crc32": "3BD11E02",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/648eaf8a0ccfff7d_bgpage.html",
"ssdeep": null,
"size": 1076,
"sha512": "b7bafaddc219c56ab2230325bd980b42b70fdb19c750f4fa956651131dde4cc2469a6ff4c4a2e28c367caa1cf2098fe609938f45176b9b54d72012033185b850",
"pids": [
2816
],
"md5": "31b7100b010af43f7f4822c500bdac7c"
},
{
"yara": [],
"sha1": "924d83fdafa6b4c5b4e9d2af1b31494cc6f9ace2",
"name": "fd2c5d482d2f1117_mailmerger.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailMerger.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "fd2c5d482d2f111799b32a6b726a23f002812a27673d65a9ff0e50cdd64618a1",
"urls": [],
"crc32": "86FD8840",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/fd2c5d482d2f1117_mailmerger.js",
"ssdeep": null,
"size": 3430,
"sha512": "78aac99fe85bd389b4b87fcbf85913115fc264e7a7610594707a7df15ed83267311aae5ea234bbba5262d3deb3bc545de23155fcdb35017a77b51252bc7c70cd",
"pids": [
2816
],
"md5": "a58c9f5fd0c02f0bbee8c7f02bbfe0c2"
},
{
"yara": [],
"sha1": "ed8ebb04fb14db5353ed95f110d1c1e33912888c",
"name": "62ac8c3f6d30f175_toolbar.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\toolbar.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "62ac8c3f6d30f175f7766b5018b4986e22d26d3605ac994e11f0c565e2cece24",
"urls": [],
"crc32": "C1553332",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/62ac8c3f6d30f175_toolbar.css",
"ssdeep": null,
"size": 13759,
"sha512": "17d769bbb282d5dc8feaf6afa092f2f86e9e02ef9a5995a05a518c0220ace1455d0bb7785f33aa2dfb0b1f812b3534f2f7371406750227714a223b47f8a65391",
"pids": [
2816
],
"md5": "9a05dda86cb7185d157296b38a841136"
},
{
"yara": [],
"sha1": "e3c0738a6b76b3766fcfd85679684e2edd397bbe",
"name": "55b1703cce200503_contentmanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\contentManager.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "55b1703cce2005037c3fc0c9f0e129f1fff6d2d2bb18b6d66335139e086e2a32",
"urls": [
"http:\/\/suggest.search.conduit.com\/suggest.ashx?n=10",
"http:\/\/search.conduit.com\/Results.aspx?q=UCM_SEARCH_TERM",
"http:\/\/search.conduit.com\/?ctid=EB_CTID"
],
"crc32": "0CFFA609",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/55b1703cce200503_contentmanager.js",
"ssdeep": null,
"size": 9202,
"sha512": "83a226cd0cc80e1acbf7f3d716767ac56c02caca5a474778ca3dd33b2815eb981cd6c1c9b1d11310b88a1aa9edbfeadb5bdd5d2032b37fd3418116a8a0b1d450",
"pids": [
2816
],
"md5": "7d9f3efcfcfcb3459ac551812604d7d7"
},
{
"yara": [],
"sha1": "6211d7a6b84f81b8caffe0f5ac6157773e286bed",
"name": "b835e907d8dfb185_aboutbox.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\aboutBox.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "b835e907d8dfb185d84891d2c6d22c985ac56af6291b42e0c4db7df65bbd0f04",
"urls": [],
"crc32": "7A5B0A26",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b835e907d8dfb185_aboutbox.html",
"ssdeep": null,
"size": 9011,
"sha512": "81c84981f7fd2850dae1b155495ce1b336a220d740d84e8e36092a5a0f55e11fface48342fb2dcc443622542fc265784bb918121bc2eec019a5f6f26719de5e7",
"pids": [
2816
],
"md5": "426f1a45e4d0409c9213930aba9bcbe8"
},
{
"yara": [],
"sha1": "5881f2e342e0c6f4f0e46ab4a53adf9bf9f515d4",
"name": "eed74b67e79819bc_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "eed74b67e79819bc50b3afe0d3ab80945a585ba339479de567f78ecab5db01e4",
"urls": [],
"crc32": "ADFF3C4F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/eed74b67e79819bc_newPrefs1.js",
"ssdeep": null,
"size": 7819,
"sha512": "a6959785faeaec066fb56c6d8e8942e4f7aafc02dce1207446fd8eac7139c5a17a3541c4e8773a00eee132e5f5d69eb974ba29283a20921a706d5b0592014e9e",
"pids": [
2816
],
"md5": "d5f4f601479121765c727892893f24dd"
},
{
"yara": [],
"sha1": "7e0508fbd74e1b2540634f40b261f9bc7b287cfb",
"name": "f0eefce4d960bd55_sprites.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\sprites.png",
"type": "PNG image data, 56 x 29, 8-bit\/color RGBA, non-interlaced",
"sha256": "f0eefce4d960bd55ea396eb4762f6a1146ad3de5013c71bd15368ec9be652200",
"urls": [],
"crc32": "021A842B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f0eefce4d960bd55_sprites.png",
"ssdeep": null,
"size": 3791,
"sha512": "c4a300966786136b3cf12fbc056256db28e1fd7c667ca695dbd07eff4032b2ac1a08143e30c9789e5b5b5b46d91869e6cd8f22ad1e4f510c994cf10b3fe85fa6",
"pids": [
2816
],
"md5": "30f1220095cc2a30c9d6d2ec6a5820d4"
},
{
"yara": [],
"sha1": "f9b8a39d015bd0f3f3791546e5855c21de079270",
"name": "d11ece2ecb412ed0_frontstage.jsm",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\FrontStage.jsm",
"type": "UTF-8 Unicode text",
"sha256": "d11ece2ecb412ed043d2f126346673e37786a26f633cba307b79871ed190ac0e",
"urls": [
"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=624903",
"http:\/\/hosting.conduit.com\/EULA\/).",
"https:\/\/developer.mozilla.org\/en\/XPCOM_Interface_Reference\/nsIWebProgressListener"
],
"crc32": "3EC06CBE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d11ece2ecb412ed0_frontstage.jsm",
"ssdeep": null,
"size": 57037,
"sha512": "4cc7e06678c8cf2f286cf087533e7cf2544e7f46bc0f932872227f04665cf0571deed040738c0d543e996f24b2fd57c67553b8748a95d28721883cd120b4bf72",
"pids": [
2816
],
"md5": "82fbfbdbce48313ae9c6de55b7daa46a"
},
{
"yara": [],
"sha1": "c8b979d96c06a845cdf8e20e1f08c5e178a0a5d5",
"name": "cac73755cdb1ed2f_localization.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\localization.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "cac73755cdb1ed2f86d3765b1db7867c75ffdaa938224f66e6b913d91695b45e",
"urls": [],
"crc32": "D084EB26",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cac73755cdb1ed2f_localization.js",
"ssdeep": null,
"size": 1363,
"sha512": "fe981f4e3143be47aec14555e34d52d7b05e6ec63b8e4cef961e2f35faa0f178cfc55b1865c51c9600dd22c4ab7c8ad0fe0ee34dd771487126817bae24350e4f",
"pids": [
2816
],
"md5": "34124a915b5af1b12db5486c04880b5d"
},
{
"yara": [],
"sha1": "4cc451f8d84913cfbaca0286f4b415c841221d4b",
"name": "50094ae30fd6c741_nsjson.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "50094ae30fd6c741ae051c2d6d09a0af957caf5d48fa96f232f9279e7ded2103",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "C4434B79",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/50094ae30fd6c741_nsjson.dll",
"ssdeep": null,
"size": 89408,
"sha512": "8394b57aa401767f259f2ba14ddc17e4ac022f7e6f392d790e3466b0a2801a210a71182abaf6cc5fc8d160ef79ba20b27930dc33763b9db497293e52ca52f38d",
"pids": [
2816
],
"md5": "bedcf010d3e92c6cbc30fb8ea67abe1f"
},
{
"yara": [],
"sha1": "ed06a9bd0192349766dcf20320a7ff0674919ef8",
"name": "29cf3e31c02afd2b_accountmanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\AccountManager.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "29cf3e31c02afd2bcd5d319053b7906c9e761039e154f3a18437bf97c8234deb",
"urls": [],
"crc32": "0E7962D3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/29cf3e31c02afd2b_accountmanager.js",
"ssdeep": null,
"size": 19784,
"sha512": "07f12a278498ae383a6b546e841098b78800e3e82dd6ab877b25efef150bff8938d6a61616aa2f25724c300756c421981eebb50643a9b568e5f15325b512934d",
"pids": [
2816
],
"md5": "4fbecce86dce931d025133c57deba9b3"
},
{
"yara": [],
"sha1": "bcf7dff3e5155b71f1629cf6d4ef3f9f26f23afd",
"name": "f0f991753c504251_defaults.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\defaults.js",
"type": "ASCII text",
"sha256": "f0f991753c5042519a071de36f0c65093a678da5df215f2a9ba537e2c8b19eca",
"urls": [
"http:\/\/trust.cpccint.com\/CT3329621",
"http:\/\/trovi.com\/ResultsExt.aspx?q=",
"http:\/\/trovi.com\/ResultsExt.aspx?ctid=CT3329621",
"http:\/\/trovi.com\/?ctid=CT3329621",
"http:\/\/BSPlayerControlBarB.OurToolbar.com\/"
],
"crc32": "EF85C894",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f0f991753c504251_defaults.js",
"ssdeep": null,
"size": 1531,
"sha512": "5cce2f0d1f73e51709195701b1221676f57954dcd6350e46d8a48e5a271d2a4f3a197b3a95e9f93aafe30acdf94a2d9ad5a5861cdb634475dc34dcd5c80a7401",
"pids": [
2816
],
"md5": "85e6085a81ee803e1c6f46c3b88b19eb"
},
{
"yara": [],
"sha1": "26ed2baeecf1c8172f09a548e3219103b693d7ce",
"name": "8b42d1d863d5c0e3_al.viewperformancelog.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.viewPerformanceLog.js",
"type": "UTF-8 Unicode (with BOM) text, with no line terminators",
"sha256": "8b42d1d863d5c0e311acd65994a392faee1a62118b6451f5fca79ea081a8ad23",
"urls": [],
"crc32": "9D152133",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8b42d1d863d5c0e3_al.viewperformancelog.js",
"ssdeep": null,
"size": 163,
"sha512": "ecc91684ba5b57e154959d2b25c9efbe61a483dcd10a7025eab19c395c84ef392434fac015ff982c4df5ba0e32799f2decfe42125c105935624299d1d2422d89",
"pids": [
2816
],
"md5": "d37a5eb9b854c3d83b6f3ef5d11b207a"
},
{
"yara": [],
"sha1": "b7ea4c3a9a60b2587a3b3bc54ad594cff8f15cbe",
"name": "833713996a346f53_bg-hide.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide.png",
"type": "PNG image data, 477 x 43, 8-bit\/color RGBA, non-interlaced",
"sha256": "833713996a346f533fcb3b64fe599b271758a41f1ba9835040b9247a5e47ecf9",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "E95C3B8B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/833713996a346f53_bg-hide.png",
"ssdeep": null,
"size": 1245,
"sha512": "f592ba4fe214e1213b4493152e1d616f536421a47aae25e6344b8f0c9bcaefea3630e39240f1817fd36c92f7f3c52a7eb29f762198a4a441f47535bdadfbaeff",
"pids": [
2816
],
"md5": "3cfca7477aca3ee37b854473034a3be3"
},
{
"yara": [],
"sha1": "8b5cc9b9d430594e4155b9b99ded08c1cc3d0109",
"name": "28bfb1d126a71f5d_browsercontextmenumanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\BrowserContextMenuManager.js",
"type": "ASCII text",
"sha256": "28bfb1d126a71f5de6644e9f66385504c9e114eb99e4921a62301128f552bad9",
"urls": [],
"crc32": "9AA34B40",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/28bfb1d126a71f5d_browsercontextmenumanager.js",
"ssdeep": null,
"size": 2791,
"sha512": "ccbec31826b40e10a9e7b5cd1d07441c0a6c8226941650354e7d153b562ef77e52d4710f89c30a5a0f7750830d62af8728a1bb6f3cf89f92f91ca2590193eeeb",
"pids": [
2816
],
"md5": "f61db8496414d02161d9f90fe54da3c5"
},
{
"yara": [],
"sha1": "330b8a2ec8dfc008d9c438102b47b2207376fb1a",
"name": "98b5c500fc3dfd56_arrow-down-strong.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down-strong.png",
"type": "PNG image data, 7 x 7, 8-bit\/color RGBA, non-interlaced",
"sha256": "98b5c500fc3dfd56210333e26e70e93e5a44616993ab7fa0960e357b96960afb",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "5E3D649B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/98b5c500fc3dfd56_arrow-down-strong.png",
"ssdeep": null,
"size": 984,
"sha512": "d1c86f5beb4e8a2ca1b2cd058f6c5c6f4ab4c5760d5a461977e1c64dad1e0bca702fa9efd37ea4cad4fcc54bef14fb24ddfc0a223845b1c92fe7a5f6bbdd1b1a",
"pids": [
2816
],
"md5": "3269a26aa5127f120e039cf363db10e4"
},
{
"yara": [],
"sha1": "b4b9a1677d71236d2bbe8f190b53ae5d058f8e7a",
"name": "34446a3be3c5f310_toolbarandappssettings.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\ToolbarAndAppsSettings.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "34446a3be3c5f310d1230b356921175e98a5f7ccbae1da7f913e3fcc9943dab4",
"urls": [],
"crc32": "176D3848",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/34446a3be3c5f310_toolbarandappssettings.js",
"ssdeep": null,
"size": 3622,
"sha512": "a0651377eb629903102c1bd6edf0f18ce21b3d834ccaf757adf5ac4a25f6fd2f6aa8185110500011877d958ce8d436e55c13b493ea38cdec2eeaba0fd9a7dd6f",
"pids": [
2816
],
"md5": "1ba62cc73e377ef2287440b2993111de"
},
{
"yara": [],
"sha1": "4d0224bd30c6961948f7aaab0de3e128d81c453a",
"name": "e43c5bc90318a0d8_ie_back.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\ie_back.gif",
"type": "GIF image data, version 89a, 1 x 57",
"sha256": "e43c5bc90318a0d8849fa85daa1308201a26e766377c40e9d559657150602446",
"urls": [],
"crc32": "930733BC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e43c5bc90318a0d8_ie_back.gif",
"ssdeep": null,
"size": 160,
"sha512": "bee0f14d96313f989bf24f8cef7d027cf272ed10864198fdff81d4f326cb3a67bbb977cb32ed002ed89bda4bfca0c929ed0d13fc7b5c570441c531cad36ab41a",
"pids": [
2816
],
"md5": "dd14f1509beef9389345c24bdcbe25bf"
},
{
"yara": [],
"sha1": "fb3a9783588a45284923c7c958c7493ebf189906",
"name": "04f4249eceb3c07f_pg_offers.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "04f4249eceb3c07f2d6a406fba2e265290a386c735b228281ed0912b0807a0f9",
"urls": [
"http:\/\/smartbar.pricegong.com"
],
"crc32": "577F1957",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/04f4249eceb3c07f_pg_offers.js",
"ssdeep": null,
"size": 10266,
"sha512": "3d5be2e576e9dd116d6e78c0274bc560605253e2e36d4177454e29afcaee904bd34dddf0e4b669f40c3af142ee120a4e233ab57b79a027527d17bccf0ba465dd",
"pids": [
2816
],
"md5": "cb535d3d9e285f0f2946b52a304be6f1"
},
{
"yara": [],
"sha1": "84f491222279227e00581d1c053686834eb504ca",
"name": "432d8b65a43bf041_generaldialogstyle.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\generalDialogStyle.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "432d8b65a43bf0418b05387502e4764c75a6768a38db63853b8c625d917977ff",
"urls": [],
"crc32": "81EA1FED",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/432d8b65a43bf041_generaldialogstyle.css",
"ssdeep": null,
"size": 10669,
"sha512": "a37109129f1940701f46963545aa3a728e46ca97c257d07a3bec300f43bc73c0bf111fb5da7211ccaf0699e30b2cf29c6c0c16abd9ffba2f9b39ffa10e0ffffb",
"pids": [
2816
],
"md5": "5d643abf1d3b7e0025c4ae05843779c0"
},
{
"yara": [],
"sha1": "26099d78b3c93ba3c4a36ac12ad9af333c09e422",
"name": "0a5871d34e19bccb_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\bgpage.js",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "0a5871d34e19bccb2af995a21328165e01802259a7b5b0634508a27ba7403582",
"urls": [
"http:\/\/twitter.com\/",
"https:\/\/api.twitter.com\/1\/users\/lookup.json?screen_name=",
"http:\/\/search.twitter.com\/search.json?q=from:",
"http:\/\/a1.twimg.com\/sticky\/default_profile_images\/default_profile_6_normal.png"
],
"crc32": "CD3C110B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0a5871d34e19bccb_bgpage.js",
"ssdeep": null,
"size": 27887,
"sha512": "8798a1f041aded45c4706879e0034665a0bee7fcc1a43c63d8f9f2f2e8e6a31f89b795a31d34d39f15dab681fecab43ad9f41f72839cf48ee595bbb4a2c9c653",
"pids": [
2816
],
"md5": "622c9ee90e1454d1dddb84d5c2535711"
},
{
"yara": [],
"sha1": "b15ac785b8210485556af73b06ec910c74fd5f77",
"name": "7a68343b01241b07_popup2.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\popup2.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "7a68343b01241b07725759f62d6914fdc9788f42fb1f9a39dea44e858948627c",
"urls": [
"http:\/\/radio.webapps.tbccint.com\/gadget\/share-menu-divider.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/app-equalizer_playing.gif",
"http:\/\/radio.webapps.tbccint.com\/gadget\/top-of-app_line.png",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search_right.gif",
"http:\/\/radio.webapps.tbccint.com\/gadget\/search_left.gif",
"http:\/\/radio.webapps.tbccint.com\/gadget\/app-equalizer_stopped.gif"
],
"crc32": "73142844",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7a68343b01241b07_popup2.html",
"ssdeep": null,
"size": 11005,
"sha512": "ced2286414acb703b83e689509b4e0607d9deb4e2cf043c87947d5520bc613835ee5c644ebd62c9d338891469772c48c2ead768e242908f2485fef27e7c00c71",
"pids": [
2816
],
"md5": "c83788fc4206d2789198f4ec7aefa176"
},
{
"yara": [],
"sha1": "32301c36c1e2136da8ac4892ca1276e85e9bc746",
"name": "7566520a971a08d5_bubble.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "7566520a971a08d51745fd24a25e085e848baebfa0466bfc1d494ac004688a44",
"urls": [],
"crc32": "34D0C8AD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7566520a971a08d5_bubble.js",
"ssdeep": null,
"size": 6469,
"sha512": "4c43b32ff2714995e2634d299bb79e201fe403eee3cd91567d871dca34c8c2822bca7f921238ec03cbfa3575af8dde660068b5431f57bd654e05489c0f0ac7a0",
"pids": [
2816
],
"md5": "4346e1a023b6c326d096b2df85c1a6dd"
},
{
"yara": [],
"sha1": "663b007859a666c722125bbfc6778c202e4387d4",
"name": "118952e6ab9a5c42_information.popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\information.popup.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "118952e6ab9a5c425d36a8264e87b151d32449f6763522ce01f756b8115af6ae",
"urls": [],
"crc32": "B29B93E0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/118952e6ab9a5c42_information.popup.html",
"ssdeep": null,
"size": 1309,
"sha512": "cbaa395ecfa23644ebabed4d7ff608e0904edc4c6ae4617a3742daf1ceb25d710f64c6219985ddedc901b02f49c67d3051adf680dbb20768a4872a1905096efe",
"pids": [
2816
],
"md5": "a5ac111b613e8f621b013a137720335f"
},
{
"yara": [],
"sha1": "8c7c29220fa43c5e90a14825ae993de108634933",
"name": "89877cee069be0ef_main.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\Main.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "89877cee069be0ef413011c0d138bd8e8d4119afa48d9bf5d28c57e4a4605f0e",
"urls": [],
"crc32": "64A6F71C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/89877cee069be0ef_main.css",
"ssdeep": null,
"size": 2482,
"sha512": "ffa34aa20bbc85fa44e3de2713bd5a031cb5d069877f03c39cbc382baa6d0748c2d6b112104e839f59efb19f42a6d3ccc3233eb6bcbb228791d44660530b1a23",
"pids": [
2816
],
"md5": "dbeb7f2b08c8cb9649436cf320510807"
},
{
"yara": [],
"sha1": "00d2255199d56ca18e563e9ef4b06f2b06732723",
"name": "4e9f77e2e7f96c11_content-pattern.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-pattern.png",
"type": "PNG image data, 8 x 8, 8-bit\/color RGBA, non-interlaced",
"sha256": "4e9f77e2e7f96c11c97fa8f3b5124e9fbfe2294a266651fffc2344d27f08a227",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "44D486A8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4e9f77e2e7f96c11_content-pattern.png",
"ssdeep": null,
"size": 963,
"sha512": "a01f639e436768c0e9f2c7151e2985b098af1c4322414f119a65b77ed6657653e3c303a11e5ae002e75fbee3dc3eec313c66d26ebfa7d1c534e61c6f2491ca70",
"pids": [
2816
],
"md5": "55dbb98697cecaa756009c8e59139e1b"
},
{
"yara": [],
"sha1": "5f4fd8be8ec6e00baad43572a645c54af8780efe",
"name": "25ed8ad273a7578d_defaultengineimage.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\defaultEngineImage.gif",
"type": "GIF image data, version 89a, 16 x 16",
"sha256": "25ed8ad273a7578d6108479582e6998ffdd0248584552317ff8f59954a36a735",
"urls": [],
"crc32": "DADAD991",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/25ed8ad273a7578d_defaultengineimage.gif",
"ssdeep": null,
"size": 117,
"sha512": "381d2b25bd034f680b634799e28dd2264a283dda3f6c6fdc81029ded1b2835290bdc249aa8c0c828d2b313401bd61f2e21aa08bfa21aa9af807b6a1f9f0d61d2",
"pids": [
2816
],
"md5": "b29d7c9a9a051a31b3c3674b5d49625a"
},
{
"yara": [],
"sha1": "5a4a22970cc5cbca7ed84de423665d19da148c05",
"name": "becb122743760ea6_iestyle.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\iestyle.css",
"type": "ASCII text",
"sha256": "becb122743760ea66e38264ffd9392f289be92bb622a3e9473266a3398da28d2",
"urls": [],
"crc32": "FC043F6F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/becb122743760ea6_iestyle.css",
"ssdeep": null,
"size": 41,
"sha512": "23ff8a3a8fc316274fbbb2aceaee714aed32192bd1d12dc551ec8726e075a96eb130bccaa408cfc6a8d54440164796eaf58a931483abb6195f15d6e9336ffd2c",
"pids": [
2816
],
"md5": "eae40484c5b417462817d0ca062a6fd3"
},
{
"yara": [],
"sha1": "e671969c4b990dac0c827bce593fb7b436bdd67e",
"name": "a6894468c054796b_install.rdf",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\install.rdf",
"type": "XML 1.0 document, ASCII text, with very long lines",
"sha256": "a6894468c054796bd14e358499d0bc609a27f2986d8151e3ed92db775b1896ec",
"urls": [
"http:\/\/www.mozilla.org\/2004\/em-rdf",
"https:\/\/ffupdate.tbccint.com\/SB.ashx?ctid=CT3329621",
"http:\/\/www.ourtoolbar.com"
],
"crc32": "F21F89EF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a6894468c054796b_install.rdf",
"ssdeep": null,
"size": 1512,
"sha512": "2ca8eb92d8900d524857a4b4806d826a8e5e35056e2e779805ff7d301ff588538f78138bbe821b507a0a5bd532475ab2af3dcb0a20b04036b189377e6649a04e",
"pids": [
2816
],
"md5": "0047b43156ccd5f6c5bfd056ca9aafca"
},
{
"yara": [],
"sha1": "bb208d2be674cf5cf65453d4915f5db736e34636",
"name": "b1b97a0a5e22446c_buttonsprites.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\buttonSprites.png",
"type": "PNG image data, 105 x 106, 8-bit\/color RGBA, non-interlaced",
"sha256": "b1b97a0a5e22446c3c3fc4b15bb779b1d2c4f57df381a34bf6fe63221c3aef0f",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef"
],
"crc32": "C440C3F2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b1b97a0a5e22446c_buttonsprites.png",
"ssdeep": null,
"size": 6636,
"sha512": "8a73b2db3fe73d00a8d6bd1c90cb54f789d0749deb93a858d37f2fa020e749a92a595b43d61b207cb16e7dacc2f750506a836aa37721725fbd536b069ed5cae9",
"pids": [
2816
],
"md5": "d2c6be520c17035ec40e105f18fb9992"
},
{
"yara": [],
"sha1": "d9c2b56b287c29ac6e061afc33b4e52d156a8e80",
"name": "d2e909e54b5bb92e_tbccint.xml",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"type": "ASCII text, with CRLF line terminators",
"sha256": "d2e909e54b5bb92e69ddea86a50d7882cfc85fda4355f37418c5704578d7c16f",
"urls": [
"http:\/\/www.mozilla.org\/2006\/browser\/search\/",
"http:\/\/suggest."
],
"crc32": "5775B6F1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d2e909e54b5bb92e_tbccint.xml",
"ssdeep": null,
"size": 791,
"sha512": "1daec6a5028ce759429fb2e04c7bac27d4235b1aa85d786b6a1f35195d3b5ff0c93b2c60088661020f36ee5e24881f13218bba8706af69db993a4a38e3211c84",
"pids": [
2816
],
"md5": "f6ad5c784cf5377752cd71b5af70b78b"
},
{
"yara": [],
"sha1": "27e3669dc01e8e06e7d181abd01fe2a05343cf28",
"name": "e05ac19a725e82e3_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "e05ac19a725e82e3a7217db39bf26bb59ca73758ad306c7d271da116c9e7b488",
"urls": [],
"crc32": "343A6F73",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e05ac19a725e82e3_newPrefs1.js",
"ssdeep": null,
"size": 7359,
"sha512": "090b0505cf5830bdad32d2e5aba714f1d1ae119091f6e1011178b16423c8625758af39cb66f8f79fe631d3486cd4be466e5c95699ef55d8f127dadeb7c59c8af",
"pids": [
2816
],
"md5": "c79b162e3851ad1441b21f0d9d260f0b"
},
{
"yara": [],
"sha1": "553c176ed97def8c9479f6ac7427941dbe1cd17e",
"name": "ea350f24bcf717c9_agree.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "ea350f24bcf717c981d9bc39fd8b55680eca82afa34952a1c6c60d7b17edd8df",
"urls": [
"http:\/\/www.pricegong.com\/TermsofUse.aspx",
"http:\/\/www.pricegong.com\/PrivacyPolicy.aspx"
],
"crc32": "3801813D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ea350f24bcf717c9_agree.html",
"ssdeep": null,
"size": 2329,
"sha512": "2e94890b051f2bc9ed7bdd8b9ea9ec47add54eeb78f1cdd1682f22bc44e588c8b26f993a6270f98fdb97ed9afe49392dc05b86caccec69db69a2f3fd8e39bd78",
"pids": [
2816
],
"md5": "0c9cbabfdc9460bfedddf9105d64b14b"
},
{
"yara": [],
"sha1": "a99dcf427b75857f3538ecadbda02c51d2eeb69e",
"name": "6364f57ad9bebfff_utils.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\utils.js",
"type": "ASCII text",
"sha256": "6364f57ad9bebfff270374bfea434fbbd4b4bd8d99b93dc249fa3939dd5adaf2",
"urls": [],
"crc32": "6D463516",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6364f57ad9bebfff_utils.js",
"ssdeep": null,
"size": 557,
"sha512": "9afb21a2b627189334dc1cebe87daa197dc368a339e554ec4a80c6dad75206e36709f7b7409e9bf010022eca80f2cde5535968705c21947fec0603f33a964750",
"pids": [
2816
],
"md5": "955e741ee9c56f6c419bfbf0202648af"
},
{
"yara": [],
"sha1": "62fb8703732755c0a585144e6c41c02bdf53d997",
"name": "7270298562f9181e_mozillaretentiondialog.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\MozillaRetentionDialog.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "7270298562f9181e8614df6e5b66c39ce41b3e4330ab1257490b8fa13b8d08f6",
"urls": [],
"crc32": "8728D1A9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7270298562f9181e_mozillaretentiondialog.html",
"ssdeep": null,
"size": 2095,
"sha512": "04ac54d33843964556897262528eb6147d0e2bc654aa9e90c9adba9a553034f52a8cc1da79a1215dc47b5e4ebc4d7578d7c79099d04794df8505df3fa878732d",
"pids": [
2816
],
"md5": "a7d99efbf1a3666f0e3dbefec24b6efb"
},
{
"yara": [],
"sha1": "df9fd920823d1d9009894e6c8c16f127389c8e2d",
"name": "2d74cf770a672d43_abstractionlayer.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayer.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "2d74cf770a672d436ea6fe87c8f88f8fc4baa9a7c64f5577ed7547566b03aa4b",
"urls": [],
"crc32": "57C9161B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2d74cf770a672d43_abstractionlayer.js",
"ssdeep": null,
"size": 42759,
"sha512": "5a8b08e468bdb5652cf0677a98fc4829034ae26822f8417cde2e60bbaa4a0ecdceecbb49984d8a3a9b3f229d6fcddcdfd512cee11d81fe5adda18258ffec2a04",
"pids": [
2816
],
"md5": "b62c124011a3322104e6bd3868ce0c52"
},
{
"yara": [],
"sha1": "13d5b3c485a37d97f80e2fa03f3a7efe4d442c8d",
"name": "4e41cbf0bd3d6f8a_localization.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\localization.js",
"type": "Non-ISO extended-ASCII text, with CRLF line terminators",
"sha256": "4e41cbf0bd3d6f8a84b489b976f8451da5468141d4995f5605262e18c37e3010",
"urls": [],
"crc32": "428A5E2A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4e41cbf0bd3d6f8a_localization.js",
"ssdeep": null,
"size": 9467,
"sha512": "83cd6e879e53c3908c8a5f5092b97cd07124ef19ec59a773172421c731ed8090a884246306ac5de166aff6895966acc22e8eac7a9d0eb956f71bc4fd6d7bc861",
"pids": [
2816
],
"md5": "79ed67affc720acf218c6f578756ee10"
},
{
"yara": [],
"sha1": "1f7de811d075743c8a6ef1270e66198fba7e580b",
"name": "e37f92f88c7aefb1_ie8_onclick_button.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_onclick_button.png",
"type": "PNG image data, 1 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "e37f92f88c7aefb13a0ef8b6f0a5c50c8e4ca2806e9bd965ffa981d07a184c69",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "91AFCE1F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e37f92f88c7aefb1_ie8_onclick_button.png",
"ssdeep": null,
"size": 950,
"sha512": "d1f0edc4c5dbfb3087c05dfc5c916cc65a0cd7e7ccf2ef5e2986073a4db2e1c33af9253276aad21ae1ac6018c8419e4e09d54192f5e9c9c91fbe6bfb59e5ad0e",
"pids": [
2816
],
"md5": "b737949eccfc98d9c729546da423c4c8"
},
{
"yara": [],
"sha1": "18443aecbbcee655a795442df9a9f6606f73caa9",
"name": "ee56941a73c9b827_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "ee56941a73c9b82747d119be9e5aa885d3c9b151a03cf8ec327ac10146347ad1",
"urls": [],
"crc32": "8EC08933",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ee56941a73c9b827_newPrefs1.js",
"ssdeep": null,
"size": 7724,
"sha512": "ce283dcb6b3e6e8b0e91d941c1a826f79d84c1c7903ab98d8e1ec6319fab11a387a0a46b27cca7b90602d71ee909840cb4d6343c64de9aad6bab0de1c3eb9e93",
"pids": [
2816
],
"md5": "b66b2cd4b7795f6e6fb8310df2034e04"
},
{
"yara": [],
"sha1": "1ab627ebd6682a64dd60bd35c881b0325d143fa7",
"name": "9339442ef40636a4_popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\popup.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "9339442ef40636a459a19e19b09a9409dfd585c112e969783abc63abb3563c44",
"urls": [
"http:\/\/twitter.com\/"
],
"crc32": "78BA888A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9339442ef40636a4_popup.js",
"ssdeep": null,
"size": 9213,
"sha512": "040d0cfaf12de75537b6248fe61695244e925c5f2203a35aded74a4b3848886e6498c668bdba8a3b22c0934b0e532f3a31ed6ee9cfaa41d8a0dc82723d311076",
"pids": [
2816
],
"md5": "39473559681043895fc483d7fe66ace9"
},
{
"yara": [],
"sha1": "5b06e9b0325ffd9111970b721f8c3dc08ea4ec84",
"name": "a43d4c9779f0b6c4_jquery.ellipsis.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.ellipsis.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "a43d4c9779f0b6c4e0869c2528e949b1d7b603a2e61638ee9760f3b90b49297e",
"urls": [
"http:\/\/devongovett.wordpress.com\/2009\/04\/06\/text-overflow-ellipsis-for-firefox-via-jquery\/"
],
"crc32": "36C5A9DD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a43d4c9779f0b6c4_jquery.ellipsis.js",
"ssdeep": null,
"size": 2210,
"sha512": "14f581c942309b842bf41eb50d74e753732413c4d6249ab1aa1cd1429c7d4bfb930ff42c97e7b47b7bfa60b441e4b4c8a6961152e664579086678bf60e80a916",
"pids": [
2816
],
"md5": "b1711a4fc15675b43e4eb7849efe768a"
},
{
"yara": [],
"sha1": "082e3de8f5ba8e3bad1a467ac1aa1a314dce1f65",
"name": "df585640e97df84f_main.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\main.js",
"type": "ASCII text",
"sha256": "df585640e97df84fbd33f178d18abcc24db591913e30aad758e29aaf2faba82d",
"urls": [],
"crc32": "B61AD6FA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/df585640e97df84f_main.js",
"ssdeep": null,
"size": 5674,
"sha512": "2ddb520c6a6bf79f07036ec01f4341d6040c819d971d40c115e6686341bcb7ad31fbe94ab951fdb48f3b10f81fff1172db509259d155aa600cb2cb321d254530",
"pids": [
2816
],
"md5": "9a73affeeb8a6a27ef17f5c2fe8c2c84"
},
{
"yara": [],
"sha1": "18ce76eeeeca6a5722537cc4e88675053a4d5b9a",
"name": "2b5a7e1dfd716742_x.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\x.png",
"type": "PNG image data, 14 x 13, 8-bit\/color RGBA, non-interlaced",
"sha256": "2b5a7e1dfd716742926d599dcb2783e33a0f5c7eaa329cf162f77bfb38f94ec7",
"urls": [],
"crc32": "36D29926",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2b5a7e1dfd716742_x.png",
"ssdeep": null,
"size": 359,
"sha512": "99ca49facf92004f7aefda3565e340da9a9dcdc5ff353cec9b36704d3df5fa3bd129a128318c672b2542004fae6060c4650b3e8016811f0442eaeeb5084a60ac",
"pids": [
2816
],
"md5": "6523818314973fc2b2b083f3f187d97b"
},
{
"yara": [],
"sha1": "da4b9237bacccdf19c0760cab7aec4a8359010b0",
"name": "d4735e3a265e16ee_ct3329621.dum",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"type": "very short file (no magic)",
"sha256": "d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35",
"urls": [],
"crc32": "1AD5BE0D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d4735e3a265e16ee_ct3329621.dum",
"ssdeep": null,
"size": 1,
"sha512": "40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114",
"pids": [
2816
],
"md5": "c81e728d9d4c2f636f067f89cc14862c"
},
{
"yara": [],
"sha1": "ecb591b755a5b9dc2bfab7eb9ed21cf9fb3944a2",
"name": "35fae0c04ebdb14c_agree.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "35fae0c04ebdb14c70eb07e6223576563ec9b49eae4b2f3a38a1773aea55a9fa",
"urls": [
"https:\/\/ssl",
"http:\/\/www"
],
"crc32": "2877C827",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/35fae0c04ebdb14c_agree.js",
"ssdeep": null,
"size": 3320,
"sha512": "a58c6ae77b2df5a9564ffb052b602967c77bbc87fa7a1b16d82d041274816265c20c8a1206811d6db8e04e6d5c7375296678bef551f6d25e1eb29ddd528ce75a",
"pids": [
2816
],
"md5": "f9ded8a4695745896dabcb5f662fde42"
},
{
"yara": [],
"sha1": "37767e4d958ce80ef1c1a99f712b59a409c23447",
"name": "6e8651394725f8b6_resize.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\resize.gif",
"type": "GIF image data, version 89a, 11 x 11",
"sha256": "6e8651394725f8b680ffea2a6c3b0746d042b774f48f114899a365bef8a92dee",
"urls": [],
"crc32": "28E72288",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6e8651394725f8b6_resize.gif",
"ssdeep": null,
"size": 74,
"sha512": "dbea6c31b8cafd0b19a028fb79bd5ffdc71b2879bf5c3fed917bcae6b2001062c78de9d904b01d06929fcaae1b1ed53151da74136201b6f25a65cdb57bf2e684",
"pids": [
2816
],
"md5": "2134a2122ec4a3168ecf83d6136d9876"
},
{
"yara": [],
"sha1": "9b49a32e465d1e96823f762e2777a7e0016a2d6e",
"name": "4830ee83add06936_options.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\options.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "4830ee83add06936f3e01da2b3186f4576d5074cc13d65ee54caa93bd675e7a9",
"urls": [
"http:\/\/appstrm.com\/"
],
"crc32": "BACF2B75",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4830ee83add06936_options.html",
"ssdeep": null,
"size": 16977,
"sha512": "ec73c306d38a3a471088468f9db79e988adcf5dd5e32b288d08a962fcf47bfa3a90991a5c1d01998ae172d7e1dadec1f84873b6539de35359827550871a8465a",
"pids": [
2816
],
"md5": "c7344d7e0f18a6dc1f6d47867ab6ebed"
},
{
"yara": [],
"sha1": "81a0b989c32d36e7c316e2ced10594f3a5e92784",
"name": "e599df10fb46768d_settings.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\settings.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "e599df10fb46768d3dcd070d0eda0cecdcd4baf4874c84f959edfc9232416ecf",
"urls": [],
"crc32": "A0A64752",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e599df10fb46768d_settings.js",
"ssdeep": null,
"size": 13228,
"sha512": "58bf6f37ffaae0f9e27317385a270c0d4c6f9d339acfd78bd33456306e8c6e9591f78f96bdae373ab05cb2ead81d8ff1491ea79f38b4c3bc17755360dc4183ab",
"pids": [
2816
],
"md5": "09a345d1841ba6a71835602fa7b63929"
},
{
"yara": [],
"sha1": "2c731db5e3eebbc6cfa284b3864acb4b9848ba65",
"name": "79134882d42bb543_al.view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.view.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "79134882d42bb543ed80124bfdca46584fd7f68c52a853d278eb3a3d2371517a",
"urls": [],
"crc32": "05B85CE3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/79134882d42bb543_al.view.js",
"ssdeep": null,
"size": 10394,
"sha512": "122f13d84c61d0e19e240bc1e6a1631ab6177982ba57395ddad50e72c2b84b14e9d16f669962138fda99e3c97447cbc923de365cdc5be3fb0a97bb5f0d6769b4",
"pids": [
2816
],
"md5": "11946d59463856b69ccc168eea702ba9"
},
{
"yara": [],
"sha1": "4157dbdd5563d20c1cfffadeb6267661d9ed9591",
"name": "bef76f9034de4d3d_divider.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\divider.png",
"type": "PNG image data, 453 x 2, 8-bit\/color RGB, non-interlaced",
"sha256": "bef76f9034de4d3de7000d884945444b6244cfd43208b7f21dacc8a6376a7e93",
"urls": [],
"crc32": "414C07DC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bef76f9034de4d3d_divider.png",
"ssdeep": null,
"size": 171,
"sha512": "f59ee6355af631e2fb155aab22b22abd94863ebe0962536c285b0056b3fb240ec9d24b14d1ad739f7245f786e8c6dc9d404aa7acd25069c983684ec870d27247",
"pids": [
2816
],
"md5": "e0cbd8e658f678497c7e9ec0fcaa367d"
},
{
"yara": [],
"sha1": "a1158f6c5b9483ee9710412e02fa704464364351",
"name": "be4e1be45685fcba_close.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\close.png",
"type": "PNG image data, 8 x 8, 8-bit\/color RGBA, non-interlaced",
"sha256": "be4e1be45685fcba6ab01914a0a869623157a03e5f1d44a56abbaaea5d801d4e",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "CBE6E265",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/be4e1be45685fcba_close.png",
"ssdeep": null,
"size": 1068,
"sha512": "cef08189d05da166c061edc79d0546af419967607b0e0fd1edf7690e4987311319eeaa8205c66a51ed7f02705c32c046180e9896e0bbb255fae9a280925b2803",
"pids": [
2816
],
"md5": "197914bad88db8ed06cd19e554e470a8"
},
{
"yara": [],
"sha1": "c8b1e8796d05672b3ed88809e3e195ca746b89bf",
"name": "c7703323703fda2d_popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\popup.js",
"type": "UTF-8 Unicode text, with CRLF line terminators",
"sha256": "c7703323703fda2db19676540ba1007d71a5d2161756ad3d7e9c13c70afeed7e",
"urls": [
"http:\/\/mediaplayer.webapps.conduitapps.com",
"http:\/\/mediaplayer.webapps.tbccint.com",
"http:\/\/social.conduit.com\/FacebookLogin.aspx?sendaccesstoken=true",
"http:\/\/www.facebook.com\/sharer.php?u=",
"http:\/\/twitter.com\/share?text="
],
"crc32": "981B76CC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c7703323703fda2d_popup.js",
"ssdeep": null,
"size": 68240,
"sha512": "82ac43bc365423bf54eea51d5a505758bb921103591e54e143211b40a1761f7de1ef233257ed3941e4c3394655ba83571780dc651a6f02ab4d5b08094ea0172f",
"pids": [
2816
],
"md5": "3760c6196774bdfe26472caa2b0a6502"
},
{
"yara": [],
"sha1": "97fa9d701780acfed9cd5842f189d6c7f866c41a",
"name": "1a89619e0d40e2f1_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpage.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1a89619e0d40e2f104ea8bd56c3a475c71d03fb289b21b23f15014f5d23d7138",
"urls": [],
"crc32": "7A69E09C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1a89619e0d40e2f1_bgpage.js",
"ssdeep": null,
"size": 5208,
"sha512": "89b2788203a6f313545532002f805207e4343af03bf171c23dc1f2833be49d429ed2d2e08589ae56b643598288a4749b18825f5f124987ec15a0981d27ab7cce",
"pids": [
2816
],
"md5": "aea1dec0db99b22d82aaf16d31185583"
},
{
"yara": [],
"sha1": "fbf312d46390e8833f27b75a7a49b40b07842b60",
"name": "ed0fccb2f8c761bb_lab.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\LAB.min.js",
"type": "C source, ASCII text, with CRLF, LF line terminators",
"sha256": "ed0fccb2f8c761bbd1bf335fce8b7663057d0c2b00da6b511569b0e5a478304b",
"urls": [
"http:\/\/webreflection.blogspot.com\/2009\/11\/195-chars-to-help-lazy-loading.html",
"http:\/\/wiki.whatwg.org\/wiki\/Dynamic_Script_Execution_Order"
],
"crc32": "55494163",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ed0fccb2f8c761bb_lab.min.js",
"ssdeep": null,
"size": 20537,
"sha512": "78f980f4cd570e4f8426e4e2dc3591d5938a14d5bba0cfd7a23e0b36126b43b500e9ac2105b963872d9a70caec99c47484f03e15153f7543a3df79cf9931427d",
"pids": [
2816
],
"md5": "f4802180df7d15ec16688a31fbfd53aa"
},
{
"yara": [],
"sha1": "a7b723b85672c527015c0502dc8490d87dd8ee97",
"name": "78bb3a3ba05e7d6a_info.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\info.gif",
"type": "GIF image data, version 89a, 32 x 32",
"sha256": "78bb3a3ba05e7d6a2949d674ee0968e98a2c83402d5cf7d973c1e8f8a013eb7c",
"urls": [],
"crc32": "37D4B140",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/78bb3a3ba05e7d6a_info.gif",
"ssdeep": null,
"size": 1487,
"sha512": "2aad228adeddfffc2b078d8a592ca8b843d533221d1a59c674a29606d198169dd945ae3fc0adf29b5e5afe511c64322ab71045dc74afb8c5a5d28e408e6fc885",
"pids": [
2816
],
"md5": "75e09cf31d0df20b5253860914f9d324"
},
{
"yara": [],
"sha1": "4ec90f51a9976d4386637ee85509eb2e47aca969",
"name": "510b750befe227d5_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "510b750befe227d5c88bd6067c5a765a7b87078b5d05ccae228785f9a2f0bc38",
"urls": [],
"crc32": "7B8A070F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/510b750befe227d5_newPrefs1.js",
"ssdeep": null,
"size": 7670,
"sha512": "c650da2e1aa4c133e6b26983c8418b44cf1b0c8138aa3cfc88b97829fe109faa587b9616d5a6296ba78c2f62c148a0e2702a383318ea25e572f7eab94276e583",
"pids": [
2816
],
"md5": "05580918d82f4c90c1c1369c219ee1b7"
},
{
"yara": [],
"sha1": "0b54d7319753276eac460d3f95ff224bcb2d2f1c",
"name": "da318b8613759478_json2.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.min.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "da318b8613759478140a1a4b9cdc8ad30558eb8205cf68703f725a85991518ba",
"urls": [],
"crc32": "74557A2A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/da318b8613759478_json2.min.js",
"ssdeep": null,
"size": 2791,
"sha512": "c56ea194a49df59986d6447024de7fa6a1c79eafaf0117ea6b13de539ff442a969ec339fe2f8fb8f3a98a0814f6b324340973f0bf9f8ed481dec622e44891727",
"pids": [
2816
],
"md5": "5f28d58dff39cdf676f7c67eaf15214e"
},
{
"yara": [],
"sha1": "6809b6eea5aafff1ccd2e8c1c345b6dd0f1a270b",
"name": "e93b4e74e2d42aa6_next_hover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next_hover.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "e93b4e74e2d42aa66045d72ed66b97e198bbbbe32324c9a389cecb4f52770c8b",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "BADBD34B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e93b4e74e2d42aa6_next_hover.png",
"ssdeep": null,
"size": 1853,
"sha512": "ce22db8c4f5afaab338646eb03ff16c1cbc2c698020b705bc66eb47a25a1c97374134d4ea6077582911a4529d65e05552be81e7e7498c4b69fea319fffbb29da",
"pids": [
2816
],
"md5": "67ad5b21b9128c473198ca866a9306d3"
},
{
"yara": [],
"sha1": "3742f39bdea03d8fc0eba74e1bd92bbf1a6fb58a",
"name": "2febbdebe2697c95_icon.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\icon.png",
"type": "PNG image data, 24 x 24, 8-bit\/color RGBA, non-interlaced",
"sha256": "2febbdebe2697c956a62219ad434bd00e8fb0c98b89415b87162ce9b10437460",
"urls": [],
"crc32": "42D6F571",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2febbdebe2697c95_icon.png",
"ssdeep": null,
"size": 1396,
"sha512": "8b7716b8886541d7784f69699d9d91e48337cf046ebd299894de00211e3346cd3b7fab48068c937731c64f6198eb02b149089c5f625ddc5a75c9bd939e591873",
"pids": [
2816
],
"md5": "67e07fc251f601adc89d6c732957ba34"
},
{
"yara": [],
"sha1": "7178624b268d3f211b89aae6e144ada95c2181ab",
"name": "4d5ca24f60e98d9e_appmanager.view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.view.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "4d5ca24f60e98d9eea449f9460daf9bc72b170354b2da54dc30379518e770c41",
"urls": [],
"crc32": "F7475894",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4d5ca24f60e98d9e_appmanager.view.js",
"ssdeep": null,
"size": 129546,
"sha512": "173408d162b83eabac1a49065dbd3b9efade9bd6586f47c7c07b7245704e4034d765f45355686f7a8a6530cd23f3f9fb7f1e27e7aeedc13dd9eec25428650c96",
"pids": [
2816
],
"md5": "93ce6e47e563c19270249dc6d3458f50"
},
{
"yara": [],
"sha1": "70787b572735e314f4452ce70b845f8a67d1a1e7",
"name": "4ca3a286addda924_utils.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\utils.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "4ca3a286addda92464e3a8bb71de1ab3675293d3f19922fe24c42b5288bc510c",
"urls": [
"http:\/\/www.test.com",
"http:\/\/hosting.conduit.com\/EULA\/).",
"http:\/\/www.yahooo.com"
],
"crc32": "6C9AE067",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4ca3a286addda924_utils.js",
"ssdeep": null,
"size": 22943,
"sha512": "39bac2c54a1e1b61108a73634fb80d9bf52e574d129fe0a42ba652690245c18c8d48714bcf4f44002c689baf7ce550874027d6388b4667694ed701e67adb8c7d",
"pids": [
2816
],
"md5": "ba42ca3fdda29180a88e3b84af1d9d53"
},
{
"yara": [],
"sha1": "d1b6c8963cd6525c5ea4abc57b2dbe02e287416e",
"name": "ffc655b99160e585_searchapp_ant.xml",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\SearchApp_Ant.xml",
"type": "XML 1.0 document, ASCII text, with CRLF line terminators",
"sha256": "ffc655b99160e5858752391c0c34a745747d755afec15e25753737ce8db2e285",
"urls": [],
"crc32": "53F09286",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ffc655b99160e585_searchapp_ant.xml",
"ssdeep": null,
"size": 4164,
"sha512": "7fbfcb0c5e7a6f6a038a4e44d729e0be6c629cd4202991b2a2072310216407072aa9c11a1ef85d8ef4ac1f9e0f088813e1035a51f0f08ef98deed5eed2eca559",
"pids": [
2816
],
"md5": "7e5d222a8eea3155e2ca70b458b06f06"
},
{
"yara": [],
"sha1": "203691599900350b74f69e43ad839b42884e9afb",
"name": "2f0537878a563949_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\bgpage.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "2f0537878a563949ec25952b123f902d47ab8903a84fa5dfda233b796cf25fec",
"urls": [],
"crc32": "6DBDC0BC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2f0537878a563949_bgpage.js",
"ssdeep": null,
"size": 24156,
"sha512": "da8955b0e424d2920612172230a0fd33a398cc547b925ba2b909edfd2a7add4bea57ef032c435029e713d92205d8dcb6822436008d8db6f2d0eaae8948393a8b",
"pids": [
2816
],
"md5": "3cc34ce9857cb9924c91e7f548243525"
},
{
"yara": [],
"sha1": "461d9b9cb9e63811cb37b025cfef6e5780d50da3",
"name": "5f8fba3440b28946_gf_ie.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf_ie.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "5f8fba3440b2894657bc1c67a37a881fd99cc06da34a4dd8d81fb4fa832586c7",
"urls": [],
"crc32": "D4A98968",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5f8fba3440b28946_gf_ie.css",
"ssdeep": null,
"size": 131,
"sha512": "21314d4e8fa0e32fb44fc772a3319fdc4d06510f654710a73cb720be19890ac6cf2e89ec0d8821ffc24bbbe4b164f358aae9d81551ec435e00694036ed83a15b",
"pids": [
2816
],
"md5": "c23f04d5c1ce5d256257ea02fc15c478"
},
{
"yara": [],
"sha1": "88995ff3635699e098a1f24eff357dd2243b95dd",
"name": "15c06aa6de0c0765_ct3329621.userid",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"type": "ASCII text, with no line terminators",
"sha256": "15c06aa6de0c07656c937a16c93046c36d911d4a814877d9312f4751299d8e98",
"urls": [],
"crc32": "85F75AE7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/15c06aa6de0c0765_ct3329621.userid",
"ssdeep": null,
"size": 19,
"sha512": "602d72bd492aa7d9926e55a659cbfb933b90f534bb6011e5c162a07642480127a916201c6a04b411dc8c84bc083d5ca1ccd28241352e3c6237fbefdbf74ecf5c",
"pids": [
2816
],
"md5": "7e0dcec41456ee9a86bf18d4a3f9ea03"
},
{
"yara": [],
"sha1": "6c115dddc8d7b95c48f584a02d246ba641f9c37e",
"name": "bd12c6c41223f361_main.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\main.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "bd12c6c41223f3619d9fe91ea5f8cf45d1874fab21a2306260311df92a709ede",
"urls": [
"http:\/\/www.facebook.com\/2008\/fbml",
"http:\/\/connect.facebook.net\/en_US\/all.js"
],
"crc32": "DB7DFA3A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bd12c6c41223f361_main.html",
"ssdeep": null,
"size": 7857,
"sha512": "e920f1b2eb08fd04d9a34b483c96061a0b9265d004b5ad2f5ee5adb3f7b55af83db6f8ded8ed8378e415f131c7f3340bb43edaca998e59c2c4a3e2797771c471",
"pids": [
2816
],
"md5": "ac78d16e11f638422d7607f20ba0f63f"
},
{
"yara": [],
"sha1": "9bc04a1a4d837006ec1823ae8e62369a6b76853d",
"name": "35b77244d74d4075_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "35b77244d74d4075398febd2a44a61a7b0dc024f4ccaaa6d3be4cbf600ca09c4",
"urls": [],
"crc32": "14A08801",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/35b77244d74d4075_bgpage.html",
"ssdeep": null,
"size": 838,
"sha512": "c9f8ea2747a2bf4e51056d59fce2432818b2a39415d3a6a5caeb4282abaf696f0f7e634ef8fc131fece328ad845cc1683229970f505ea0f5a38ef2986a9a2083",
"pids": [
2816
],
"md5": "6d62d9e0a660e498b42a8765eb85b0b6"
},
{
"yara": [],
"sha1": "8bf2f6d612ed6319cf5d4aa488732a33d540abb0",
"name": "9c8f07283c02fd3f_commons.jsm",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\Commons.jsm",
"type": "UTF-8 Unicode text, with very long lines",
"sha256": "9c8f07283c02fd3f838c92f91ab955214affefcf7527704c65be072f71427434",
"urls": [
"http:\/\/www.google.com\/?a=",
"http:\/\/hosting.conduit.com\/EULA\/).",
"http:\/\/usage.toolbar.conduit-services.com\/ToolbarUsage.ashx",
"http:\/\/usage.toolbar.tbccint.com\/ToolbarUsage.ashx?dum=2",
"http:\/\/BSPlayerControlBarB.OurToolbar.com\/\/xpi"
],
"crc32": "1D8EA8A2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9c8f07283c02fd3f_commons.jsm",
"ssdeep": null,
"size": 161268,
"sha512": "6249e48806d036790c83acadf48a5e5ec9ac3e725fe4b3816684836ef9bb13380fb2b0baaa51da9e46f8a829d991d7a4f9db3afd47358f2bbca5834b610a1c05",
"pids": [
2816
],
"md5": "e86d5148c1712df736b0301669c4352d"
},
{
"yara": [],
"sha1": "d662e5558f98bad4f186ef3a888a4d58fe946354",
"name": "ad766e1727d559e7_html5supportie.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\html5SupportIe.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "ad766e1727d559e79cb7054d6ceb7079b99d871d3fb0a9ae852e857fb90bead6",
"urls": [],
"crc32": "84504B2F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ad766e1727d559e7_html5supportie.js",
"ssdeep": null,
"size": 387,
"sha512": "f75b115459f45b2e7202ee3ba0643440497848e1219eeb78835693dd591948e65dfa3ce7538921a7cbdf80fa5d87b48fd6f115388dbe57fe0bde777141ed36aa",
"pids": [
2816
],
"md5": "b438811d901482753524468239403c06"
},
{
"yara": [],
"sha1": "9ebafba3d73b3a26bbd47c265eea379247e8bf0b",
"name": "8f0120f7fb2ae81a_sdk.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\sdk.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "8f0120f7fb2ae81afc6b6077c0b232a24a1ccbe147bfb5607c16acbe37c32996",
"urls": [],
"crc32": "C8FD8FD5",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8f0120f7fb2ae81a_sdk.js",
"ssdeep": null,
"size": 13996,
"sha512": "2b676361a0f22cb4e2337ec8e73c75b87a9b6d6bf908a00ebd5f7c23b0b9a18471efc3db72ba4d884c4d91d8562da49ba107ae345077432eb3d4b9328ec6ccf3",
"pids": [
2816
],
"md5": "facaed73ee1d339f9462afbb723971c6"
},
{
"yara": [],
"sha1": "0a83a248adc6f172ac010018299d69ad27b5c9a7",
"name": "8a98b15769f0a2df_searchprotector.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\SearchProtector.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "8a98b15769f0a2df6a5a7df748eb12423eb744289280fc243b66b42b73a23da7",
"urls": [],
"crc32": "B4AF4C26",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8a98b15769f0a2df_searchprotector.css",
"ssdeep": null,
"size": 3155,
"sha512": "eee5f3f394e4f6171132c25fbf1661c3810192000b296ab56e2ffd5813c0009e376891c6d4e5404e1bc8fc6d3ad1afabca1ef177b012cce306dead4dc49d8f33",
"pids": [
2816
],
"md5": "350457057794ff554057a92eba8bdd4b"
},
{
"yara": [],
"sha1": "f831b6d3f424f88d95e5733421c6ee5d913524d0",
"name": "f8415e57b2be047d_toolbaroverlay.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.js",
"type": "UTF-8 Unicode text",
"sha256": "f8415e57b2be047d6ce235f992abc3ff7f33580f1ee8b29deecff09416efb057",
"urls": [
"http:\/\/hosting.conduit.com\/EULA\/)."
],
"crc32": "49CAEA95",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f8415e57b2be047d_toolbaroverlay.js",
"ssdeep": null,
"size": 17048,
"sha512": "38716fffb11bc77322448fee73fe42976d80d70e09c349b6a511da9846bb2f83bfc3bb2630b54e8a490df6eb2a75015b3afced8e1cda8ceffbc9aa8970a5b868",
"pids": [
2816
],
"md5": "3491bb3be4fb12f4833aabbd6d3c7fa7"
},
{
"yara": [],
"sha1": "0213ad78560fee0a4e6423eb6e0f5130cf1f8fd1",
"name": "bb2969bce20eba26_ajax-loader.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ajax-loader.gif",
"type": "GIF image data, version 89a, 16 x 16",
"sha256": "bb2969bce20eba26c35ba85e645bd5de7a5e2a09d1dfc2d749e2d4649499f57e",
"urls": [],
"crc32": "7C9B5A14",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bb2969bce20eba26_ajax-loader.gif",
"ssdeep": null,
"size": 847,
"sha512": "c22a8a388b46333c661ad8cc9243904d39391dc9ea62bbf388b2c08e2a8433697e5a6d291029dc9099666eac26d18cd99ce4b723a0166e749e3221488ddf7293",
"pids": [
2816
],
"md5": "382c44054cea68f8e0b382c24ec87e2a"
},
{
"yara": [],
"sha1": "0b0697102b439013578b2aa19293befa43fa17f0",
"name": "2cc3542a94f62749_yoxscroll.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\yoxscroll.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "2cc3542a94f627497a0471af82bd04d8c47236dfdec94dd73310c6eabba6a9f9",
"urls": [],
"crc32": "CB2F02BD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2cc3542a94f62749_yoxscroll.js",
"ssdeep": null,
"size": 11050,
"sha512": "a9e0c17660754837a033a81e7578b2d275f5158e97c845b307b60ee3b0ec914a3c2bba678460de8cf999858ec84d2dceccc026d556dbc0a3f17ae98e6c9b6aa1",
"pids": [
2816
],
"md5": "5fd3ab78c33e4ee521fd88d9b95b39c4"
},
{
"yara": [],
"sha1": "03e7b305cc1891c40a3cf32bea6532e93b592303",
"name": "1e44abd387586d71_gadget.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\gadget.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1e44abd387586d71eb99e2a1d2ebac172fdd5fa1f421061a0828e47cbffbeec8",
"urls": [
"http:\/\/weather.webapps.conduitapps.com\/logo_footer.png)",
"http:\/\/weather.webapps.conduitapps.com\/shadow.png)",
"http:\/\/weather.webapps.conduitapps.com\/night\/rollover.png",
"http:\/\/weather.webapps.conduitapps.com\/back-arrow_RTL.png",
"http:\/\/weather.webapps.conduitapps.com\/day\/rollover.png",
"http:\/\/weather.webapps.conduitapps.com\/back-arrow.png",
"http:\/\/weather.webapps.conduitapps.com\/save-center.png"
],
"crc32": "3ED7C05B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1e44abd387586d71_gadget.css",
"ssdeep": null,
"size": 12979,
"sha512": "855e46cfabf2d2bcc58f3845d7e46898c3babff7dab124c73c9eff27268734d7fcf9d48eb3df57b57a2136a3f01bf0f838e2b8ccde8a19e0ee4b91d591518893",
"pids": [
2816
],
"md5": "72a2d453266f33800eb3c9faec431108"
},
{
"yara": [],
"sha1": "1f4874748477e0fe000c7fae5908b1755c89c255",
"name": "3be6fd5e4b5eea19_fallback24.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\fallback24.png",
"type": "PNG image data, 24 x 24, 8-bit\/color RGBA, non-interlaced",
"sha256": "3be6fd5e4b5eea1976c0ef533fda62d2530ea349b45392d729077d3e70a4f83f",
"urls": [],
"crc32": "161290F1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3be6fd5e4b5eea19_fallback24.png",
"ssdeep": null,
"size": 1105,
"sha512": "25a41384f6fb9c02fafe7579baaef65ff9847c3626b2d7f27856513b820d8e353daa7a62ecb9b504cdfcabde86a3565c3b2cbfadd30f9651e15f30e0afc3bf8c",
"pids": [
2816
],
"md5": "fa7de9957f9f69e36bdf3fd07c3983a0"
},
{
"yara": [],
"sha1": "2c6323c7e94175944a3a38b665ffdba1c47c3ea2",
"name": "c6dc7dc9755670dc_logic.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\logic.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "c6dc7dc9755670dcf3b8cb739ce9d03f527af6a640bed5ae1a863b9cf61f29fc",
"urls": [],
"crc32": "208776DC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c6dc7dc9755670dc_logic.js",
"ssdeep": null,
"size": 12702,
"sha512": "2e6ca9af2ac67273ffa4e6a910fca7e23a87da828244fd2e6465d9e1c71a555c69fb91a4574eff4f045c18da692f1705ff726e72a76c3cd3e56f3827b147c9d3",
"pids": [
2816
],
"md5": "977dc8631243d7a28956f1388dc47318"
},
{
"yara": [],
"sha1": "16b9ee3eee3e14f1852eea868355acf5667ac908",
"name": "f67e16a56eb31938_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\bgpage.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "f67e16a56eb319387a9937003d053e7f717cd496735a8697e1625aa6a5f26961",
"urls": [
"http:\/\/localhost\/domainsList.json",
"http:\/\/ip2location.conduit-services.com\/feature\/EB_FEATURE_NAME"
],
"crc32": "CFB506FD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f67e16a56eb31938_bgpage.js",
"ssdeep": null,
"size": 6970,
"sha512": "2097b1ca2f3ca11474f7cad239bc2cd4fcd4948e89f1e21c1827ae8cfd3c7f401a004883bf0a7766b9070f68f96e0c67234948b44cf8b4d717228bdc01f1f1ad",
"pids": [
2816
],
"md5": "08936b5741ed3fc558ac68788095ef71"
},
{
"yara": [],
"sha1": "5bc9070cb770d2f950d7a3b853467c8780ccb5c8",
"name": "9e3aeb3f1c8b9f04_en.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "9e3aeb3f1c8b9f04d5fa3df06d0b82b9ecbcdd5a63af96b55a06dec837ecb7ba",
"urls": [
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_down_disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_right_regular.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/question_icon.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_right_disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_up_regular.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_left_disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_left_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/single_digit_badge.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_right_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_left_regular.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_up_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_center_regular.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_center_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_center_disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_down_regular.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/close_app.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_down_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/double_digit_badge.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/triple_digit_badge.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_up_disabled.png"
],
"crc32": "C761490F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9e3aeb3f1c8b9f04_en.css",
"ssdeep": null,
"size": 15839,
"sha512": "ff02021ab3294796835173bb3462be1411d3fc376c758ab3d2b3e3bb37058dcd22b594c7a1f7aca7fa1732e17997e1b349af7eccfd37d1207dc8695bc478eea5",
"pids": [
2816
],
"md5": "84793d9922a6b95b87c8b9dbbd35002a"
},
{
"yara": [],
"sha1": "9f237cc13f8a358c7bfd2f9d60f97bd0ccd291ac",
"name": "6d7dab46b3defc07_ui.stepper.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\ui.stepper.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "6d7dab46b3defc07db546b47173b31c0c3b784ec372f97327eabe3f79320cbb9",
"urls": [],
"crc32": "B24C4B15",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6d7dab46b3defc07_ui.stepper.css",
"ssdeep": null,
"size": 1743,
"sha512": "60b312798f7a473d285926f660d373bfa3a9c73824da15eb52ddf86e8d281adcc078d895a40b7788c771db910a0c45015554a8a7b54e060d982f7953cc2db062",
"pids": [
2816
],
"md5": "e8d0ec041ba79b0bdc1ae60d30fe02a4"
},
{
"yara": [],
"sha1": "339b5f18a07e0e7484b7764c957ff59b4d16e025",
"name": "545b8df9c306ee89_stations.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\stations.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "545b8df9c306ee8996048c52087639067afbc7baa3a5208873044e3b5a7d88dd",
"urls": [],
"crc32": "8CAA8232",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/545b8df9c306ee89_stations.css",
"ssdeep": null,
"size": 286,
"sha512": "1605dd8ecd433548f798685ddc8a973ab06b423b04bc23b4af36e9c21b6e5630022c0c7f048a42708af3301487dbed105ed846fb5ea347d3572886684ab5e092",
"pids": [
2816
],
"md5": "989a3b35bf7c15085025849376ba313c"
},
{
"yara": [],
"sha1": "b5e1638a1312b1e43d9e527bbf2d77254aafb895",
"name": "c97eba81b44aa11c_bubble.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "c97eba81b44aa11c8940c5f5db64766f537088dba80f691ba17989892f5b42e3",
"urls": [],
"crc32": "2FCE993E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c97eba81b44aa11c_bubble.css",
"ssdeep": null,
"size": 1667,
"sha512": "68e0feaa8f23df35ac67ad449212459e7acc3989201d24d740f5ab227cea21d40bf4020db77fe638751e05a6f3396da7d50758ff5d1769d4cedca970e1edfdba",
"pids": [
2816
],
"md5": "cfc2cfc1d5abed0a016685f5046275ad"
},
{
"yara": [],
"sha1": "545537dd6df32d4adca7cd093735eb727cf3b98e",
"name": "92fa22b4dbcae5ca_npfirefoxplugin.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\npFirefoxPlugin.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "92fa22b4dbcae5cac90837bb087712343b2a6bab47100115cfabb035f0af8894",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "DC0F96F7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/92fa22b4dbcae5ca_npfirefoxplugin.dll",
"ssdeep": null,
"size": 216384,
"sha512": "4a9a1bfbb660df3b134b4637d52591a088c5996ea101d0626733eee5a214ed117eb1aa9801c4bf2edcb6da7ddcaafcae41e08310030171b6882ab1770435afe6",
"pids": [
2816
],
"md5": "efdaa4b068f75e9c678236a6de269aaa"
},
{
"yara": [],
"sha1": "07ad3910a656d5e897064f658a536c5d241b7c11",
"name": "306ce5153f4057c0_notificationsettings.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\NotificationSettings.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "306ce5153f4057c096699bc57a5cf9c2d0e4a4f7039eec7a7efe112627b08598",
"urls": [],
"crc32": "C027EFA1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/306ce5153f4057c0_notificationsettings.js",
"ssdeep": null,
"size": 7500,
"sha512": "b61c5487929c0c8d435fd9dd249afacbbc4fe9d8a29dd645b4220165cf3017ec7030db57cf18123c12d4d25dac43f1fcdcf6bacf4ad054dc4adedd36b152fa36",
"pids": [
2816
],
"md5": "a17a010a596f65a7d1ec44f08e7a6545"
},
{
"yara": [],
"sha1": "8bd82764981af4dd5a2c709c836499cf417c521b",
"name": "0fef61d76b4e1d19_embeddedearly.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embeddedEarly.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "0fef61d76b4e1d19f591ff799d694590c141d4e2d4d4defb4bb86e95bd355a16",
"urls": [],
"crc32": "9B47BCA2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0fef61d76b4e1d19_embeddedearly.js",
"ssdeep": null,
"size": 928,
"sha512": "f7ff1dfad7f425e55bf161b4d13161389e0a5410bd963f360dbaafb52e42a654a67c4b6f97cd27e09b3ccd47f65bbd4318bece78d6340c6b7684cc62c162b4f6",
"pids": [
2816
],
"md5": "34129de2aa4886e98e03006b30407b32"
},
{
"yara": [],
"sha1": "1aa12b9b2757b6a89620d33cb8555f37dc6ce11b",
"name": "63ffa18b2a601b05_embedded.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\embedded.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "63ffa18b2a601b05bcd000ccae1bf69fed30f4dabea05969c25e640dedcd72da",
"urls": [],
"crc32": "DF0C6AA8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/63ffa18b2a601b05_embedded.html",
"ssdeep": null,
"size": 600,
"sha512": "1b62cc5e5b663009d70245acef9f038b07c3facdb73155df79b798c5fda5660c5d02ed35ca50fe6f16c6e1d42202f67c7f7a047e9855fdea87fcd39cabff83da",
"pids": [
2816
],
"md5": "cc40f28a6a1c145881946ae191a1bb4e"
},
{
"yara": [],
"sha1": "f20bbf0be07dc27bbd431e60a227ea371c47aa23",
"name": "8d41c8b8bcd83b2c_truste_welcome.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\truste_welcome.GIF",
"type": "GIF image data, version 89a, 102 x 26",
"sha256": "8d41c8b8bcd83b2c45d0c91c78a0d777a91cae97741d060ccadd84232e534def",
"urls": [],
"crc32": "77C4F1CC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8d41c8b8bcd83b2c_truste_welcome.gif",
"ssdeep": null,
"size": 2337,
"sha512": "bf9878617a545fe55d2103d5d9e4dcfdc2dc109f4dd2eb44031430ecf4496dfde2dfbb3a1c2dce15c25f80f6da72fede2fdee890b58834cc8efd4153fce327e0",
"pids": [
2816
],
"md5": "4fbde15b2b96d0c5f00d1ac16fed78f4"
},
{
"yara": [],
"sha1": "7c2aec92e8a785ad44ec918dfdd0d1f0ebda8958",
"name": "e20b826cd92060c9_topbg.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Topbg.png",
"type": "PNG image data, 42 x 41, 8-bit\/color RGB, non-interlaced",
"sha256": "e20b826cd92060c9ea0ed67208cf6600673191666b8cdf5ae150796494e4a1c0",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "AF313CE9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e20b826cd92060c9_topbg.png",
"ssdeep": null,
"size": 1959,
"sha512": "a60b590c83235db9f029306a61cbdedab0914e0dcdbfaa988b5a999b081b5c1a5d724dec0912f4f65db8134466657a5b076336c48e63aaf558e0739d55e79eb6",
"pids": [
2816
],
"md5": "4c84bd57b8ca18868b5906606d333c68"
},
{
"yara": [],
"sha1": "616e658fe4d919d006b347f4a29d102bb21c3d1a",
"name": "bf08013330280e6c_menu_arrow.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\menu_arrow.png",
"type": "PNG image data, 6 x 5, 8-bit\/color RGBA, non-interlaced",
"sha256": "bf08013330280e6cc3e27cd2e7a21a3593418b4006b9bd7839baecb0929253aa",
"urls": [],
"crc32": "9727CF67",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bf08013330280e6c_menu_arrow.png",
"ssdeep": null,
"size": 2879,
"sha512": "2a0e8309a7e37b9d552f2461f647a39ccd282a8abbeceee25f966a8f569c9f3c1fef73f9c106ab53ee85087b32a5bed1c6d6c50ebc9c44d250c58a33c71fa150",
"pids": [
2816
],
"md5": "63ed02cb5bec6afe8dbf2b6ec5335c2e"
},
{
"yara": [],
"sha1": "b85f888f5fedcd6c414e828ae21db565b6b13b34",
"name": "8e3f090c54c1a75f_pg_offers.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.html",
"type": "HTML document, ASCII text, with CRLF, CR line terminators",
"sha256": "8e3f090c54c1a75f3f5770191c8b741cbf68289d98ee16485043dd155fb2c35e",
"urls": [],
"crc32": "1ABBE786",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8e3f090c54c1a75f_pg_offers.html",
"ssdeep": null,
"size": 612,
"sha512": "7b85e79b8780c4cde51ecf232f9c5fd54def6588870482cc6ccc9d4a8ce57f55b1e12f3b694aa49dfed66d7051b99e28e391993adab3f5856e381e579b28fad0",
"pids": [
2816
],
"md5": "a5febc65d267f774ff562911ee8994bb"
},
{
"yara": [],
"sha1": "1746eba0698bedcab4bc3fc106c51da6bbaa1d65",
"name": "1cd02bdd539cb152_jquery.scrollto-1.4.2-min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.scrollTo-1.4.2-min.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "1cd02bdd539cb152085e4e1583428bcb06c8128a9ec912195f8a42ed8179804f",
"urls": [
"http:\/\/flesler.blogspot.com",
"http:\/\/flesler.blogspot.com\/2007\/10\/jqueryscrollto.html"
],
"crc32": "26B93F07",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1cd02bdd539cb152_jquery.scrollto-1.4.2-min.js",
"ssdeep": null,
"size": 2262,
"sha512": "c3a040e504a3e0b9097756a253758f3c248c48d5be7941f96734bcbca2a649a3664d109ea679e8e9d9562caa6b045e6147b4f5289090376fd9dcfc8a9cc6b628",
"pids": [
2816
],
"md5": "4aa3e2dfa3123d9373c817b77456aa25"
},
{
"yara": [],
"sha1": "32a5bbf7b51c27d157eb0a0db64659b42dd51bd7",
"name": "4c40b37d25bb9bd1_settings.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\settings.png",
"type": "PNG image data, 11 x 12, 8-bit\/color RGBA, non-interlaced",
"sha256": "4c40b37d25bb9bd1bef4bac615fa8b55dff6fcd42551711eb5e8d2f837f1920c",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "A26E490F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4c40b37d25bb9bd1_settings.png",
"ssdeep": null,
"size": 1085,
"sha512": "fd0905f73e860d718f05073f2b4c489423bc7bfcf1b061aaffb10706ed535c1e39a3a23bdb48ccb875d4cb25e2d560ebc86027f93f9aac6f4fa6e61f676b2800",
"pids": [
2816
],
"md5": "cb67c0272892ffcd1a719a504744a523"
},
{
"yara": [],
"sha1": "d86c4c005ae058fde1c1d9719349dbe22b24d2e4",
"name": "d35e712b638ec76e_logo.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\logo.png",
"type": "PNG image data, 91 x 21, 8-bit\/color RGBA, non-interlaced",
"sha256": "d35e712b638ec76ebf9b90645795c9e1d43c284d4733f67c4c0d4fe0e54038a2",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "F00C8928",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d35e712b638ec76e_logo.png",
"ssdeep": null,
"size": 1643,
"sha512": "2b5efe7a7f743efb0fd9965ec61d4a44f7cab4528835036b18acfaa0acbc4f13b63c9fa1b989ff520aa4706ff447d74563fecef3745bd4184b30e1c9401d5c94",
"pids": [
2816
],
"md5": "5bf241a6120959184fc214f571d4da18"
},
{
"yara": [],
"sha1": "2ad8084699831772b148065992e05f384fbc0087",
"name": "b58abbcc0f2d0811_xpath.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\xPath.js",
"type": "ASCII text",
"sha256": "b58abbcc0f2d08119e7e75892fd493fce95816f47e7b53644c33149c8d2bb28d",
"urls": [],
"crc32": "FA675D60",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b58abbcc0f2d0811_xpath.js",
"ssdeep": null,
"size": 15835,
"sha512": "5e3cc36af93f820a3191c295b37058256b5fef6032387a823122c3d2a170176b3059f8acec8a8e5426e5dd3ead2ef3e092bc43533405d55116fdc9c776885121",
"pids": [
2816
],
"md5": "fdad30a9d28312207b87d61ca4d8a3b7"
},
{
"yara": [],
"sha1": "19e3e851cc5fed9bff45b4d3161df2058859bcb2",
"name": "bb780efae908350d_arrow-right-strong.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right-strong.png",
"type": "PNG image data, 7 x 7, 8-bit\/color RGBA, non-interlaced",
"sha256": "bb780efae908350de545fdb4252fcf0fe2b983d5f505d2337ed1b15cf18853cc",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "389D76D4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bb780efae908350d_arrow-right-strong.png",
"ssdeep": null,
"size": 975,
"sha512": "36bcc98fd86ca81f85157b3d41b6df0b90adfab65f262f651dd5d73ba57b7efcda6a8f5002d7f74ff41e21dc0ce736093d99c067a076fcfe099d4b075cb1c65e",
"pids": [
2816
],
"md5": "649c14504cc6aca2aa33391c39c01d8e"
},
{
"yara": [],
"sha1": "1b5d7ca6a8185f497a5d64a1ac84d37cf34217e1",
"name": "cea05a9e5fdc7218_ie_fix.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\ie_fix.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "cea05a9e5fdc7218bf86453c839ba9e2ac6383b44e476b62c21b812b8fe5581e",
"urls": [],
"crc32": "4B6FC295",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cea05a9e5fdc7218_ie_fix.js",
"ssdeep": null,
"size": 4082,
"sha512": "d401633676086fab57af04ccf74110d577ac8fc365e7537f93e662df5f48a6162f95b1d0403c5ec4394b40180dce6b086b07eae6605dea4a008a93f38eda324c",
"pids": [
2816
],
"md5": "da205800f802560b08ec140e3c9076df"
},
{
"yara": [],
"sha1": "81bbdcd5f983159a0eb20ca497a6d47711415aea",
"name": "6eb218538b41023f_reset.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\reset.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "6eb218538b41023fb36f2eb3afbae16653d6f3ad3e0f315c88614946aa9b5e22",
"urls": [
"http:\/\/meyerweb.com\/eric\/tools\/css\/reset\/"
],
"crc32": "C52857DB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6eb218538b41023f_reset.css",
"ssdeep": null,
"size": 1141,
"sha512": "49a5ae194c9a13d7ad3b5bfbfab0e0e8d64527dff4b947002658b6e04e8cadb8c2d7b18f1e99bfc6e27457d0e3fdefb2275463283ef122dd74c780c08f656af9",
"pids": [
2816
],
"md5": "3a17bc0effc397a1d2075ea5eae88d2b"
},
{
"yara": [],
"sha1": "92493bf0eced4054b2b9defb871ca807248f4cc6",
"name": "7d903f28ee0bddf4_separation-line.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\separation-line.png",
"type": "PNG image data, 359 x 1, 8-bit\/color RGBA, non-interlaced",
"sha256": "7d903f28ee0bddf45a9492e2843509aa6582a8d06c9e6ddc16c6f5b8c30998fe",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "25461FC6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7d903f28ee0bddf4_separation-line.png",
"ssdeep": null,
"size": 938,
"sha512": "b4ce6abf21a177d1bbe89096e35893156fa1a88dcc9ce8bc7f959a8e7c184aba5cafa9d5e47fe3360a1e5edfa5ccad321b37e9071162f1648f62dd8ac1adaabc",
"pids": [
2816
],
"md5": "f43b589a96e6ab7b171f8c66989419f4"
},
{
"yara": [],
"sha1": "dea2a57ba9263a7dc56af90f03a70aee715e6b2b",
"name": "651a1f0da69841ea_toolbarapi.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\toolbarapi.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "651a1f0da69841ea498f6d590c8b32822aecfa6dd129bbfaa3346e0de718b5b3",
"urls": [
"http:\/\/storage.conduit.com\/88\/252\/CT2523688\/Images\/634007856276952500.gif"
],
"crc32": "EA726763",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/651a1f0da69841ea_toolbarapi.js",
"ssdeep": null,
"size": 8531,
"sha512": "7ba51ff30bc41fd0eda87c2c14f95a91003c6f5b5d060b850dd95f85d580e565d11ba24ea60a93834eb2389892a85724adc36ae82ed08501d30a689dd3ef2294",
"pids": [
2816
],
"md5": "faa0620c4f96f9f46429d30950778ace"
},
{
"yara": [],
"sha1": "73230527b5d2d510f40d2c1ddabe66d6a00af4dc",
"name": "858bce7111085cda_framework.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\framework.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "858bce7111085cdaa9e5c736da5390dee8390225849fc776a356737057a0eb16",
"urls": [],
"crc32": "0DA8ED4D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/858bce7111085cda_framework.js",
"ssdeep": null,
"size": 6310,
"sha512": "63d1bfef90bbef85d4072ea057ecd498e157a00e2a5089998c5d65dd6b2193a16775e404e4237633bf2a16ed1e86ace96020201aff58632b1c7aa5efe2744676",
"pids": [
2816
],
"md5": "e9934b998c828cf93612169496bae867"
},
{
"yara": [],
"sha1": "93904e0e379279266d9fb308f257a17c66c4e157",
"name": "bac47bb64546dea5_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "bac47bb64546dea5a5ff2b9ecd746f96f50e9b53c28072b1e91f3d2454a009e6",
"urls": [],
"crc32": "F54838BB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bac47bb64546dea5_newPrefs1.js",
"ssdeep": null,
"size": 7530,
"sha512": "3ae88a9d32ae1dd7acca5679c0fbaf23b4e4d89eb7b4590f89ad4ad588440526507e1f8232e5a9cffd437b3a7a5e7bc602cd3f46c06515fadc74e5478aac642f",
"pids": [
2816
],
"md5": "581b349e481b11413d3d9426a48c1d4d"
},
{
"yara": [],
"sha1": "c786a3cb7ff21214c04299ffc37e4f9852afe6bb",
"name": "673d8ffba022c819_nscrandom.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "673d8ffba022c8196129d537973ad18049192f5cdeffd027ee743e2a6f7e1c85",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "F3FA8731",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/673d8ffba022c819_nscrandom.dll",
"ssdeep": null,
"size": 148800,
"sha512": "1a15155057cece9e5600e3a446a7f25a91c7caff8b99ac995566cff18edde956789a2c549748aa267802111137fb5fb60e2aafa077caf06df060361274745398",
"pids": [
2816
],
"md5": "9ad78702635cd2f0ed3433628454fecd"
},
{
"yara": [],
"sha1": "9a38859294c5dda8a30a27f9342f61bc0a15886e",
"name": "edfc28dafb9cb505_arrows.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrows.png",
"type": "PNG image data, 28 x 10, 8-bit colormap, non-interlaced",
"sha256": "edfc28dafb9cb505e77bc4555202b01fdc717d470698b06bf04f07ac41f4756c",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef"
],
"crc32": "CABF1CA4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/edfc28dafb9cb505_arrows.png",
"ssdeep": null,
"size": 1079,
"sha512": "75615be907fada719aea41df7450c1553725d0b26d383f60c3f24fc0ef607fe4c30e98990814311825d474fc52a30eac61e13d1e30d637e3358396acb3705991",
"pids": [
2816
],
"md5": "80c2d54a675e3e940cb2401a12589e81"
},
{
"yara": [],
"sha1": "2c867538408116490a4d3519f8aa9f884a7987c4",
"name": "3e12a153d18fe849_searchlistener.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\searchListener.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3e12a153d18fe849a21e5bb9d32feaa38a0e173d4bc802016853fdbd54703b7a",
"urls": [],
"crc32": "9B2849DB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3e12a153d18fe849_searchlistener.js",
"ssdeep": null,
"size": 13094,
"sha512": "dca5280bb98a7f01d444e93eca4f814261c37291be45ed008bdafee594464f178cf5045f927bfc0565fc4a2cfba05522db93e3562e38b15a5307dd86681f0d6d",
"pids": [
2816
],
"md5": "d645e21018042195769ca92524886864"
},
{
"yara": [],
"sha1": "b847ae0c7d69455fedb89d852acd57673877e5c3",
"name": "3cf9259dc3500f67_timer.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Timer.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "3cf9259dc3500f67c55efcb1a5f2abf6ae82a4a3324d74d8ec7d0b3895e98916",
"urls": [],
"crc32": "45544CD6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3cf9259dc3500f67_timer.js",
"ssdeep": null,
"size": 6039,
"sha512": "cdb890cd98fa8bd1a10acae127aa665796af5100d9e6bfe542a3b6d7817dcc05aaa987c96529caafb0fd4f2ea85cfdfdf55d1772dbbd4d44ebfa4e199208001b",
"pids": [
2816
],
"md5": "9a81d4cc928662033592471a97996cd2"
},
{
"yara": [],
"sha1": "cb27176b7954137ec79e5fe869e3caf6a3e6fc8c",
"name": "32fd63d8a3e8848b_powered-by.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\powered-by.png",
"type": "PNG image data, 143 x 19, 8-bit\/color RGBA, non-interlaced",
"sha256": "32fd63d8a3e8848b55f213709eb7b300fa426ea84f10598f8f86453cf052c231",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "B78EC3A2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/32fd63d8a3e8848b_powered-by.png",
"ssdeep": null,
"size": 1956,
"sha512": "0291608bb7dee28d8d79973491b6fd6322bc2e1de2dff78e8e0e63bf8498df3f689a3fd8a991da66622c79e6e65618b60bd1dca07b1d5a753182340d230b1b26",
"pids": [
2816
],
"md5": "d60f571c3b6d00cebeaf42700cc5618c"
},
{
"yara": [],
"sha1": "e81ea5d1ace836cc478c141f7015d22e23f0b395",
"name": "11d502885eaef02f_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "11d502885eaef02f32e777edcfadda522addc5946d9f1b900a4474fa787e2d21",
"urls": [],
"crc32": "C02A630F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/11d502885eaef02f_newPrefs1.js",
"ssdeep": null,
"size": 7426,
"sha512": "537b3a79750acf12b4836329b5fcf09e0849776bbf343f4b3bdf6a0bada5600247e15b1092752273e760aaf9e913d9b230c724c17e5e5ba4f2cf4087c5905dde",
"pids": [
2816
],
"md5": "2dbf7f3575595ae79906757183f68543"
},
{
"yara": [],
"sha1": "04cf94ad6d979d6e0bbcf5dd2ed789c5fb3d82f9",
"name": "f12fa09ee73292c4_settings.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\Settings.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "f12fa09ee73292c40f10481d757c6cbb8fd7b401d5cdaa00bd9d3addced11890",
"urls": [],
"crc32": "AC660E42",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f12fa09ee73292c4_settings.js",
"ssdeep": null,
"size": 4473,
"sha512": "4e431458341c7fd34bd126a4e42fec39d9ac3e59f11874ce9e5cdfc7d7aa7c22e7eeb095ad85d7ae0e9ccc4cb56b88daf3df1575195d9fd586a45e622d9c541f",
"pids": [
2816
],
"md5": "5e1921597e933745b7d100dd422eebc1"
},
{
"yara": [],
"sha1": "2f084cf47d8462865f098ea22d869c78176add13",
"name": "3f277e0d9cb470b2_trusted.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "3f277e0d9cb470b23c3de0499b263d65c4f83b5bcd9f55cb659e5b3160967449",
"urls": [],
"crc32": "7C0DF308",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3f277e0d9cb470b2_trusted.html",
"ssdeep": null,
"size": 2735,
"sha512": "d8fc28f9d046b532ae5f724fe85715e329754d79bdd7da49cede525bce41efd45abcf44a39a82057e9b1e2b2c1b7aa1586a66ea9bf6d0852b65f02acbe77f2b2",
"pids": [
2816
],
"md5": "c1f502b4b9f47f5e0e32afa2e22e7993"
},
{
"yara": [],
"sha1": "228fae9e43ee602476343ee6788bc23819893c41",
"name": "2eba03e74f2f36d0_ie7styles.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\ie7styles.css",
"type": "ASCII text",
"sha256": "2eba03e74f2f36d099babe63ef62d6c6e4bdcf80f3e5dfdfa92c0d0f29a27814",
"urls": [],
"crc32": "678F8427",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2eba03e74f2f36d0_ie7styles.css",
"ssdeep": null,
"size": 37,
"sha512": "a327fd103b6cb1eebd35bdf918c97b75059b65231b73e03094dcc42b816d62f076510649b34c8c2864e1e5cd433b8f60fca3be942d66d65bb4361906a38b0cd6",
"pids": [
2816
],
"md5": "415d34c398637afb2305429873a753cc"
},
{
"yara": [],
"sha1": "d724d4adb6e2820fe0cf298f64e753de3519ad61",
"name": "ccf6a983cfe12908_dialogsapi.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\DialogsAPI.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "ccf6a983cfe1290879a588f3d7ecca08343b7ea81738fd744cf3426483e75eeb",
"urls": [
"http:\/\/integration.conduit-download.com\/share\/dialogs\/",
"http:\/\/trust.conduit.com\/",
"http:\/\/valueapps.conduit.com\/",
"http:\/\/trust.cpccint.com\/"
],
"crc32": "24A1CD8E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ccf6a983cfe12908_dialogsapi.js",
"ssdeep": null,
"size": 10179,
"sha512": "e3b82716fd706115bc4d84e72b933b86c8ca59d466ea97ec47bcf0c2a2b281c5d1baf5258a1e853601fb2c96cde54f7e527ca18451f39c9ad9d7b463011e64ad",
"pids": [
2816
],
"md5": "a64575e1aa8a9bb6baff763e52d89d2a"
},
{
"yara": [],
"sha1": "39c4177ae601dfca17d94768cb9a15b03ad55bbe",
"name": "c7d9117407bbb40c_jquery.jscrollpane.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\jquery.jscrollpane.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "c7d9117407bbb40c19378530eb4e3b2184de341606350c2b367635d24aadc912",
"urls": [],
"crc32": "D743BDCF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c7d9117407bbb40c_jquery.jscrollpane.css",
"ssdeep": null,
"size": 86,
"sha512": "f7d33f2ea6a22eed8dd7a2e17e59615a628151fddd700bd8d34586acab7102bb3ee1b036b56eee9bb791e7db493c0f1dd3b843fa51b890329a80b3402dc0f6e2",
"pids": [
2816
],
"md5": "be9037459ec07301cb446f7f4c496541"
},
{
"yara": [],
"sha1": "13ae1141890add2873c12cb6b88af473a905c127",
"name": "0654f14a5b614e02_menu.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\menu.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "0654f14a5b614e02fbd5b5cf7a44860c599e3e52e800414d8d9997da0e68c48c",
"urls": [],
"crc32": "ECD6F0DF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0654f14a5b614e02_menu.js",
"ssdeep": null,
"size": 20538,
"sha512": "60fc7eeb3ac1d6cf54acc371929bc700112a5188f4389741af2b710b9e317d08f0ac167bdd9daf7835ee15da9dd28963e8606a3dbbb91ad2ec835a54e2ab8cb0",
"pids": [
2816
],
"md5": "ad784ac914b734b9fb3e299d6917f55b"
},
{
"yara": [],
"sha1": "3d9bbb93e96538cd0accb8d89d44bc9d51c746cf",
"name": "76d237b4b98496bf_appmanager.controller.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.controller.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "76d237b4b98496bf52af09e09a2e85b22c1d36e9299dbebb962356c5afc0a1ce",
"urls": [],
"crc32": "A7A246A7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/76d237b4b98496bf_appmanager.controller.js",
"ssdeep": null,
"size": 7203,
"sha512": "e1e6b8381d8a7245431ea76a886254ca1487bd8e5f2020639b4a60935459493986d317ac30dfc0139dbc4a39b18bfd85fe0b3332ab10a9148dbf900044795ed8",
"pids": [
2816
],
"md5": "21d40a0e93e10421d14a982097bcf6cf"
},
{
"yara": [],
"sha1": "6da2c1c2acdad2429ca86b75559095ccbc1f6225",
"name": "3c35df4ea4108601_common.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\common.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3c35df4ea41086019b4ec166aff47ffcc1a3b5b7de4a4f7b347a0f8b50ac61fc",
"urls": [],
"crc32": "0F2C640B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3c35df4ea4108601_common.js",
"ssdeep": null,
"size": 1030,
"sha512": "583d437ab54bcf7ca689ca9823be48f0baee8e29d94bd0a030749601bb330c89a33680a5da19d6fffeb579a5f9767bdf774a6066ec780a2717873086a626d5e9",
"pids": [
2816
],
"md5": "6c01d605081fa27cf91fb42e2a154900"
},
{
"yara": [],
"sha1": "3a878edefb1134eedd4002e86fd015a32996bd96",
"name": "017d29b8910881d0_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\bgpage.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "017d29b8910881d073760f1adfcb32030c1c25e23f6f3080cfe4955bb3291b81",
"urls": [],
"crc32": "2C004417",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/017d29b8910881d0_bgpage.html",
"ssdeep": null,
"size": 298,
"sha512": "dfb8ceeef91bcff784793b2b593ac86456d5c41461083646b9801a7b8ff381259380d6710c82eb37ed5abc5f063a1a5b75a43ada7245b9bcb335cf682d360902",
"pids": [
2816
],
"md5": "435ea226423cfabe0d8a9b1a5c8fae44"
},
{
"yara": [],
"sha1": "1ef8e23f083ee496daef782ed42aae609c776e1b",
"name": "e91dd7624a9d93a3_jquery.mousewheel.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.mousewheel.js",
"type": "ASCII text, with CRLF, LF line terminators",
"sha256": "e91dd7624a9d93a3df21dd438b9945d29eae0ba39cff9294c2adbe425fa9dac0",
"urls": [
"http:\/\/adomas.org\/javascript-mouse-wheel\/",
"http:\/\/www.mathias-bank.de",
"http:\/\/brandonaaron.net"
],
"crc32": "C47B7A44",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e91dd7624a9d93a3_jquery.mousewheel.js",
"ssdeep": null,
"size": 2403,
"sha512": "208406da7e1188ac79186908bd6b1fc5f5c59825a4c593a2476337a30e06bad51465f4703199cd2007cfd2de9725b7d47a068418f901eec63ef81dc90cfeb86f",
"pids": [
2816
],
"md5": "b7e5e20ae4c85a2ee9cbee4309980e2e"
},
{
"yara": [],
"sha1": "76939f4355004d2740cdcf05d6b517a6d3735e9f",
"name": "4452110455fa8ad0_untrusted.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.js",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "4452110455fa8ad09f050514eba90603171bf17608a5bfc6f388eaa0e812d3be",
"urls": [],
"crc32": "76DD6EDF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4452110455fa8ad0_untrusted.js",
"ssdeep": null,
"size": 5848,
"sha512": "125d1276a635816a18e1fee2bfdcfa103ed42798f720a545daee2a0124c83c2183894c04649a0553a9661b422efbc89e7ace18750407d9d570456c3717f51520",
"pids": [
2816
],
"md5": "23346c23c9b45803f6a82478d6264f69"
},
{
"yara": [],
"sha1": "a720c250e9672a2b018a066287ff3ac80b6b07db",
"name": "0cca7e718891b893_gf.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "0cca7e718891b8934a32b0ca0440e4d3070311626b38f9a018c858a3558beaeb",
"urls": [],
"crc32": "8CC4062F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0cca7e718891b893_gf.css",
"ssdeep": null,
"size": 3999,
"sha512": "60391e7d1ef783ce8b7910f38b163d1462fb80c345c0b9e7eada51bed11dffe8d8a4dac26268589b5da449186bcb7a05a17f7f55a098cdad427ce24080e4d107",
"pids": [
2816
],
"md5": "d21ae33ed46136ce7a0e539910297261"
},
{
"yara": [],
"sha1": "211ead910516295bc9c20d8be5eee391b8cea1c8",
"name": "fbc8e194a6a115c6_downarrow.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\downArrow.png",
"type": "PNG image data, 11 x 7, 8-bit colormap, non-interlaced",
"sha256": "fbc8e194a6a115c6e378ca85551632333abf6db625ec52081eb9adbfd5c76281",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "61091857",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/fbc8e194a6a115c6_downarrow.png",
"ssdeep": null,
"size": 959,
"sha512": "f29754b58b4067186bfdc93f60178e868250c12cb7f617104e7d036b6c74380268e05f0dc42222342fef417ff18425cfdeb7659ae34eea90ed12a4a51bf23487",
"pids": [
2816
],
"md5": "986124b6321b281f595820969d1bfb46"
},
{
"yara": [],
"sha1": "e6efcb0bedce829617338f0c0cb936405a45617c",
"name": "0a9beb2d1524a870_title.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\title.gif",
"type": "GIF image data, version 89a, 5 x 23",
"sha256": "0a9beb2d1524a87019a50b11ba11f97ce47b082014740ee435ad48897f266740",
"urls": [],
"crc32": "60D1386F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0a9beb2d1524a870_title.gif",
"ssdeep": null,
"size": 317,
"sha512": "a0f799683ce0184ec0ae54dfeec1e1a4c3962a962db90ebcf00884eb91b8f406a9b43e4059a6185df46c368041f8ebd6c512385cc8ca8b1323a9edeb8fec7754",
"pids": [
2816
],
"md5": "0f03d73bee9b94a6b21ca37df3b0aeab"
},
{
"yara": [],
"sha1": "c72c95dd07d3a3736712a1e0f7e54860323e9e0f",
"name": "843ac241c2cb5d25_webappapi.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApi.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "843ac241c2cb5d250402298bc575650c1a1337f7e8504f5cfe74edf7f3ed027a",
"urls": [
"http:\/\/hosting.conduit.com\/EULA\/).",
"http:\/\/www.conduit.com\/Developers\/ExecuteExternalApp\/ExecuteExternalApp.aspx"
],
"crc32": "FD599EC2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/843ac241c2cb5d25_webappapi.js",
"ssdeep": null,
"size": 166671,
"sha512": "b821d7024503ace0b56853dd0d4beb9ae447e7f0b9f79db49d57c5eb35aa1e713e1f6ca702697d1b5169efe387a5fc3b6d75e3d11f657ef76c0c5a5f97041503",
"pids": [
2816
],
"md5": "d69082afa0942e13c5f61704ee6ddb21"
},
{
"yara": [],
"sha1": "425695316fe51312c617c29e3f46190075261274",
"name": "497b38885773d245_zigbert.sf",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.sf",
"type": "ASCII text",
"sha256": "497b38885773d2458f183e90f61dc940a0c4ad57cbcab2cc6e978a0aa27849f9",
"urls": [
"http:\/\/o-regan.org"
],
"crc32": "F318946F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/497b38885773d245_zigbert.sf",
"ssdeep": null,
"size": 67751,
"sha512": "18469a17666057ab0c2475272a77de8fad134b13619adf68e48d1307e4aaf1b0a532451cf86433c54254d99853cc38970e2a404cb977317cadae9c5a0ce84186",
"pids": [
2816
],
"md5": "fc9ef7d439a3adc3ad7339991db2ba43"
},
{
"yara": [],
"sha1": "fd499818001ffb8fe91188df91032d9a0a04b55d",
"name": "a9f5ebb64636b460_2.0--spec--kicker.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\2.0--spec--kicker.png",
"type": "PNG image data, 461 x 71, 8-bit\/color RGBA, non-interlaced",
"sha256": "a9f5ebb64636b4600f8de2b0fcae4c90291ade6af9951d60c18ab38480b8b474",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "6993D4D5",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a9f5ebb64636b460_2.0--spec--kicker.png",
"ssdeep": null,
"size": 15875,
"sha512": "f92c227a09d8a59637b37919bd551bf1467bd1ab87462b0805e90902c33697a637c3222f4e0392e4e8f9f9e0ffe5a6eb87daa2e0a58443be14ce997db5a65f4d",
"pids": [
2816
],
"md5": "969128e50c1ee454652e358276d80d15"
},
{
"yara": [],
"sha1": "3068d6bd656722d77d9e89d3db6b22b0c700950c",
"name": "30f122c8b8e3dcb6_invoker.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Invoker.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "30f122c8b8e3dcb650456be67b1d678e488b79b111863188c5fd1820aa867169",
"urls": [],
"crc32": "D463756B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/30f122c8b8e3dcb6_invoker.js",
"ssdeep": null,
"size": 2269,
"sha512": "847d4a7f76668ede179e5d5b8bf9135857b8b9d706326adaa765b9232f363e94babdb2febf892bca647d9d24011d2cf526796b87c94515eb3936fa31aa539909",
"pids": [
2816
],
"md5": "0891a49408bb58f0fbeb297c9272cbcc"
},
{
"yara": [],
"sha1": "9a8c568e6b5bfe8fe897942385190641572989ca",
"name": "56d03e275332777c_jquery-1.4.1.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.4.1.min.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "56d03e275332777ce57ececa93220c0d46cfdf75c43133a5dfd25ef8937aa15c",
"urls": [
"http:\/\/jquery.com\/",
"http:\/\/sizzlejs.com\/"
],
"crc32": "BD14CAE1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/56d03e275332777c_jquery-1.4.1.min.js",
"ssdeep": null,
"size": 71922,
"sha512": "eac930e88f4a332fca5e5e1e26d18b95ca2811d2c753c60219871f234f0caaaba9f8642c0cb866b45495eb29734d9e5e67139632d21f40ee7131110b91b31cb8",
"pids": [
2816
],
"md5": "dea8aae0e4e672074dd02ef7dc873c0f"
},
{
"yara": [],
"sha1": "4d7917c5ea7a78e09d9230d3d857327afe17e6a2",
"name": "f91cb1232747567c_prev.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "f91cb1232747567c381eedbf5bcd18876aeeb684f51e6663e54008f19198e41a",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "56FF43E7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f91cb1232747567c_prev.png",
"ssdeep": null,
"size": 1647,
"sha512": "cc351b99a6164e02e523cdb78241886999c2e5c6f90b79f4680679f6be004ecd04f1457122bbf4f70656a8deb3cd7db16cb3b6348095e1344345d156acdf0177",
"pids": [
2816
],
"md5": "cbb39528f646054a059b72f306fc88e7"
},
{
"yara": [],
"sha1": "7b7dde280677335226c3cd6db0705f097889fc05",
"name": "12636810d9447d54_autocompletemanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\autoCompleteManager.js",
"type": "ASCII text, with very long lines",
"sha256": "12636810d9447d5438f7b4a6bf5317a340a1846358b19d4219318e8f8e8fe4ef",
"urls": [
"http:\/\/suggest.search.conduit.com",
"http:\/\/suggest.seccint.com"
],
"crc32": "7BECE5A1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/12636810d9447d54_autocompletemanager.js",
"ssdeep": null,
"size": 16777,
"sha512": "60bdb6ecb28a0a3b96dbac7a5d6c640ff777febe8a14b8ecba79fca1f88f9391235849128785076a8f60db374e3aeeb06eed59320c0b865d0aba4a3c0c3cdbaa",
"pids": [
2816
],
"md5": "6d1683755f1f95b76d3227c02021109e"
},
{
"yara": [],
"sha1": "a7e605a8a30d9536de09159aca846a15a456c87e",
"name": "38e33de8bea14184_corelibs.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\corelibs.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "38e33de8bea14184452616dab17f4e6b89fcad9f205a58cb692d4994ff85083d",
"urls": [
"http:\/\/hosting.conduit.com\/EULA\/)."
],
"crc32": "5E34EF0E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/38e33de8bea14184_corelibs.js",
"ssdeep": null,
"size": 69852,
"sha512": "f84e258840c10395b8198115635517836bc3caa0ec6bdcad50e28f8b926f76a12dee621a374b9e63578219a0d88d6477ed48591238390e76a19dc151b71b3891",
"pids": [
2816
],
"md5": "370deb383b58e344133712376639ffd0"
},
{
"yara": [],
"sha1": "306c9f65f1dfc43358fe476b3e5f6aa075abe628",
"name": "3193e1293117302d_jquery.alerts.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3193e1293117302d11b9b836ab41a29978b1758a179573370f1996560796006c",
"urls": [],
"crc32": "CA8BDCC6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3193e1293117302d_jquery.alerts.css",
"ssdeep": null,
"size": 1463,
"sha512": "9cd94b5c0d1d01fa58c112a80eb34fc685a142b21eb931d044b348564ad11a7fa139c55302665b8c5a6710bc8689f3487c02baaf859c72062fcf2a4193886acf",
"pids": [
2816
],
"md5": "22c67fb3274b72fcb0a4570e05f3d7a7"
},
{
"yara": [],
"sha1": "e0be9e74b7b07d9681385ce1b6de28a713d86020",
"name": "72c0fc585f611935_close.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Close.png",
"type": "PNG image data, 16 x 16, 8-bit\/color RGB, non-interlaced",
"sha256": "72c0fc585f611935185ee51e8871011811dbe70204fa2faf353913363cb33668",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "E5ED1624",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/72c0fc585f611935_close.png",
"ssdeep": null,
"size": 1109,
"sha512": "ed4af9da96342539afb8f3e637abff5ad57694bcde312670677e8cffa033013eb983df80b233de5dd80e55caf791ae3af4eff5250f234c2c85a6d4459e559280",
"pids": [
2816
],
"md5": "3b0593f8b8f744de0a1d6a573412445f"
},
{
"yara": [],
"sha1": "e2a2c8293b6a81a13d83c8dcd60568f7a74846dd",
"name": "112b861793078761_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "112b86179307876188fd07f1bf9383ded0ff274b98322add4e1d942e3b482626",
"urls": [],
"crc32": "FB0A5583",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/112b861793078761_newPrefs1.js",
"ssdeep": null,
"size": 7207,
"sha512": "87e7ee3ae9babba4b47063e48467fc561bc73797d25a17c37f6770b408caa8d94086b8bc9076957625186a43c48b46f63c15fa00431c157a2a1f07330144d97f",
"pids": [
2816
],
"md5": "1d0f119469b361fd4e75cd13bb8d0435"
},
{
"yara": [],
"sha1": "b553539d2854c296e121a41cafc1e8dac733d716",
"name": "df5f94c20ce87180_pricegongmigration.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\priceGongMigration.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "df5f94c20ce87180376620d75af72e09f523386fd81f99eff92aa2ed66e20899",
"urls": [],
"crc32": "0C22CD1C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/df5f94c20ce87180_pricegongmigration.js",
"ssdeep": null,
"size": 22528,
"sha512": "12ebde9dc11bfd9b6ec19a46030d2bf51dd7cd139ff0ccf38869527488c536ee1b8bfb29ed24ef4eb17ccc07394b82d92697a04a406eb3dbdeeffd688d68f19c",
"pids": [
2816
],
"md5": "25e3686e1228d27ed245f7dc0b524d40"
},
{
"yara": [],
"sha1": "dd523314fab17c7ea17184ecac8fee432000ecf1",
"name": "045b587c078051df_inboxer.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Inboxer.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "045b587c078051df26932cfd26088b94010bd799cc52b0970cc1c584d7a4136d",
"urls": [],
"crc32": "BEA17456",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/045b587c078051df_inboxer.js",
"ssdeep": null,
"size": 15101,
"sha512": "98d90ddf670f1d5691581410151f2c1cca261cd6fa5bd051456bdaed8d31a6e70beb1f2b07f37ce91a875d7f11651fa2e5cae9a399ce8a63f1fd5476b84c030c",
"pids": [
2816
],
"md5": "265536290fcef9455c9907baf97cd0c3"
},
{
"yara": [],
"sha1": "9a0cdd13aebb7706aa8c33987614c25078e2d219",
"name": "6e017e43e241a537_jquery.xml2json.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "6e017e43e241a537c17c727c2023ab2326f8de055dd961bc675be788c77cbe63",
"urls": [
"http:\/\/www.fyneworks.com\/",
"http:\/\/www.terracoder.com\/",
"http:\/\/www.thomasfrank.se\/xml_to_json.html",
"http:\/\/www.opensource.org\/licenses\/mit-license.php",
"http:\/\/www.gnu.org\/licenses\/gpl.html",
"http:\/\/www.kawa.net\/works\/js\/xml\/objtree-e.html",
"http:\/\/www.fyneworks.com\/jquery\/xml-to-json\/"
],
"crc32": "A67A3ED3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6e017e43e241a537_jquery.xml2json.js",
"ssdeep": null,
"size": 6169,
"sha512": "dc02fe2b5190f60fe2a3a3aa2ba0f14c19cc0a55c9febba8f8f631c9f2ffffdf0caa22bde7e7a43360ce7588d30e3937ab3d6e8688d83cdb222fb8818ef10e83",
"pids": [
2816
],
"md5": "41f80e729b1ee3bb9fe2038281419148"
},
{
"yara": [],
"sha1": "a171f9ef1eb96ca91225ea26468c1023939a5c14",
"name": "4274ea4a094ebb9e_nszip.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "4274ea4a094ebb9eb54046c95488460afb0097d0565b8eae4fbfce981706f0cd",
"urls": [
"https:\/\/www.verisign.com\/cps0",
"http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
"http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
"http:\/\/ocsp.verisign.com0",
"https:\/\/www.verisign.com\/rpa",
"http:\/\/csc3-2010-crl.verisign.com\/CSC3-2010.crl0q",
"http:\/\/crl.verisign.com\/pca3-g5.crl04",
"https:\/\/www.verisign.com\/rpa0",
"http:\/\/ocsp.thawte.com0",
"http:\/\/logo.verisign.com\/vslogo.gif04",
"http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
"http:\/\/csc3-2010-aia.verisign.com\/CSC3-2010.cer0",
"http:\/\/ts-ocsp.ws.symantec.com07"
],
"crc32": "8F3200D0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4274ea4a094ebb9e_nszip.dll",
"ssdeep": null,
"size": 201024,
"sha512": "4f3bef13aa1d1f57624385dfaccc4ecce201c235ba2d2d451f469d39ef5285afdd57249c7dc5a6538253ea8f7cda25964abc1eb041715730d2626694667ee4f5",
"pids": [
2816
],
"md5": "977d7686d7a04135444542fdc1e7c13a"
},
{
"yara": [],
"sha1": "651048d35a6ce3a0a311849801caec0e284b14e0",
"name": "5f098805690026ec_html5shiv.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\html5shiv.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "5f098805690026ecf7c1c468f13372e2e544324bb287d8a9fddb1441f806ee62",
"urls": [],
"crc32": "968445CF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5f098805690026ec_html5shiv.js",
"ssdeep": null,
"size": 2344,
"sha512": "367ea0893d51689956dba3ed9b168b93a48338fb7693496bd47e10927f710f52e2ccf213b0b7f3b5225dbc438a55bdf63d6f210a7fcbcb4295af7519355bb599",
"pids": [
2816
],
"md5": "96f816cfd25617e79094a96440ba80a7"
},
{
"yara": [],
"sha1": "f9a8c0bb3ea291664eedb27a8fc61dde6aaa435e",
"name": "485e87666146af29_x-default-ltr.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-LTR.png",
"type": "PNG image data, 30 x 17, 8-bit\/color RGBA, non-interlaced",
"sha256": "485e87666146af299d3a53d065027ddc36c6a1f37288f6873d77a01eedf35d63",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "A2F5C1FC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/485e87666146af29_x-default-ltr.png",
"ssdeep": null,
"size": 1298,
"sha512": "dcec65fbced1d3ad76f47a40664bb6e566667ce8de07df5cb55033c64158d76aa05bb3f821c59e9dd62c7d796710589f05db0bae3b25fcb360e108b4cbffe8bf",
"pids": [
2816
],
"md5": "5b1e5f6468cd5d48b2f8b8738c7b80e0"
},
{
"yara": [],
"sha1": "04b0bbc4db9e77ff59221dfa6738a02a758ebb59",
"name": "b7703455a14f213d_main.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\main.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "b7703455a14f213d964c038f08ffa0dd064864edc6e3ab4f463d5e68b2771a72",
"urls": [],
"crc32": "EC2D6094",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b7703455a14f213d_main.html",
"ssdeep": null,
"size": 1148,
"sha512": "936903f4b3f1b948f904d373fc8477e80b4e1c85d032ac0aef14593aae4ab9edc6444d323c3a236699f2721144fa01201eb803fa716bf3ca32e77defab7770e7",
"pids": [
2816
],
"md5": "4f0094606b9e42ac226092efb3275ae3"
},
{
"yara": [],
"sha1": "d4db8ba39db0b876da2cac918238722c71bde57a",
"name": "731bbe869b0eb96e_date-functions.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\date-functions.js",
"type": "Pascal source, ASCII text, with CRLF line terminators",
"sha256": "731bbe869b0eb96ef9e72cf51696eaa77a11b12450e4903cbc163a9de6ba9a08",
"urls": [],
"crc32": "8D629EFE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/731bbe869b0eb96e_date-functions.js",
"ssdeep": null,
"size": 14124,
"sha512": "aad2b4a0c1579a7d5115ad8d50484c9d2ef3f1407e365c9a45b5f9be2a435a42030766ff8d17218303100e5c66d3518d4f592109012b6114473221d0a3496f37",
"pids": [
2816
],
"md5": "44b737fa01cc8735c04a3834bf68507c"
},
{
"yara": [],
"sha1": "5a86492e782dbb33ec7935866988f1d43968a796",
"name": "9582419af2a0b1d2_mozillaretentiondialog.view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\MozillaRetentionDialog.view.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "9582419af2a0b1d20d48f5c0f465155f2410a4bba5476de5608acd15364ee93d",
"urls": [],
"crc32": "69D9AF47",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/9582419af2a0b1d2_mozillaretentiondialog.view.js",
"ssdeep": null,
"size": 8698,
"sha512": "def1e8b987d974a70843ff605322887eb694a81824c28941ecd099986d97b52bfb89e4c241149c851ba40e1da497df30c780ecf85011f9c8203e46a2805aeec3",
"pids": [
2816
],
"md5": "5939aa7396ff0f7df0f22479b06890a3"
},
{
"yara": [],
"sha1": "e9d67549491117fdbd26d83e3c6cedebac021a1c",
"name": "cf1370af9e967ef2_excanvas.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\excanvas.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "cf1370af9e967ef2ca69f29959e23a0c4e1a9f318f2c05fe26efa31c3d57229a",
"urls": [
"http:\/\/www.whatwg.org\/specs\/web-apps\/current-work\/",
"http:\/\/webfx.eae.net\/dhtml\/boxsizing\/boxsizing.html)",
"http:\/\/www.apache.org\/licenses\/LICENSE-2.0",
"http:\/\/developer.mozilla.org\/en\/docs\/Canvas_tutorial:Drawing_shapes"
],
"crc32": "64A6B849",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cf1370af9e967ef2_excanvas.js",
"ssdeep": null,
"size": 27971,
"sha512": "07fa66009577d14ef457f224dabde47602677db1d6a6fd79a68d464355a36466daebd146bd187e086ddc6f72c984773288c2d1e5220ff575d1a646e1026d9ac3",
"pids": [
2816
],
"md5": "c47b9a1e5dd76fec23b85fe47c99267b"
},
{
"yara": [],
"sha1": "0d43c6ade27ea3027ddffd5736f5bca9e35ae9ba",
"name": "230e0daa28a0e3e9_al.view.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\al.view.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "230e0daa28a0e3e95aac8d51cdc7e15be7dc5e2fc62fc003707cc380456acfcd",
"urls": [],
"crc32": "A64C3619",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/230e0daa28a0e3e9_al.view.html",
"ssdeep": null,
"size": 6860,
"sha512": "29b578768199eef713c089673a78fba7de5a7c7210165731aba070d5f0eceec5ec9d52d29de412862ae5e5622511627a1eaedcd92c18023c32028511c687ea8c",
"pids": [
2816
],
"md5": "dec1f63a08456806d0e3bc82809ad8bc"
},
{
"yara": [],
"sha1": "b4f37160f37353d2745afa5869c3fc23e66c2316",
"name": "8c41e022076728af_en_rtl.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en_rtl.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "8c41e022076728af027723c7190ab0ee8a90f2b4b2f408c77d81203f11aeee3f",
"urls": [
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_right_disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_left_disabled.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_left_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_right_hover.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_left_regular.png",
"http:\/\/emailnotifier.webapps.tbccint.com\/btn_right_regular.png"
],
"crc32": "8414851D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8c41e022076728af_en_rtl.css",
"ssdeep": null,
"size": 5185,
"sha512": "c5bdac6dd0ebd290e2a10b0f9a839df5445b2bfe84db8b531135dae717ad841f01170959fa7e400388f6b005b724f27759d1fe2f31af986eb4e76e7c21683ddb",
"pids": [
2816
],
"md5": "2cfddb6932220fb05f1b88b65eb71d17"
},
{
"yara": [],
"sha1": "b23f6042dd6804159e3facb2c098ebaf74dad105",
"name": "1329464647528631_emailnotifier.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\emailNotifier.gif",
"type": "GIF image data, version 89a, 21 x 21",
"sha256": "13294646475286319718d9676c00b7b423aac5016ddbf1df549497c1d4267e42",
"urls": [],
"crc32": "446A7830",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1329464647528631_emailnotifier.gif",
"ssdeep": null,
"size": 546,
"sha512": "dbe433396c18fcb7eca76c8b7e3aa1296701343b7274bfb0f26a313e0f34d36ecc637437620c3dca84781956fea618e7c3160b979844cf0f213c12596b40ea46",
"pids": [
2816
],
"md5": "f863f573944ebd1ee7115874a572ef3a"
},
{
"yara": [],
"sha1": "b51ca6e854d512d56172a0a2fc3f7a69d79c1bb3",
"name": "62bbb90487e46264_gadget.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\gadget.js",
"type": "UTF-8 Unicode text, with very long lines, with CRLF line terminators",
"sha256": "62bbb90487e462640d7184da6d6b0032830fc2f8ff1840219cc6924bb6836b9b",
"urls": [
"http:\/\/www.facebook.com\/plugins\/like.php?href=http%3A%2F%2Fapps.conduit.com%2FWeathercom-The-Weather-Channel--app%3Fappid%3D96a27762-7d9a-4703-89b9-10b2a20044c0"
],
"crc32": "33158910",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/62bbb90487e46264_gadget.js",
"ssdeep": null,
"size": 27815,
"sha512": "67afece577ec8da1c8aaf134c8046eaeb59207a818a723420a1923af42ffa3fd3903b415ceebda887e3899cc4c2174ba0cf51f04dee46cd38fbe7f9807884446",
"pids": [
2816
],
"md5": "9f7f91d0c9bd455319d9a4ff9fb09ecb"
},
{
"yara": [],
"sha1": "ea5cf2bfde6c27120491eeb1502a8232da3f22a1",
"name": "d7fb1e66a88b78e6_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\bgpage.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "d7fb1e66a88b78e69946bb36a4657f4ab000ed0b4379a1ca83701cf46d231b2e",
"urls": [
"http:\/\/www.trovi.com\/Results.aspx?ctid=EB_TOOLBAR_ID",
"http:\/\/search.conduit.com\/?ctid=EB_TOOLBAR_ID",
"http:\/\/www.trovi.com\/?ctid=EB_TOOLBAR_ID",
"http:\/\/search.conduit.com\/Results.aspx?q=UCM_SEARCH_TERM",
"http:\/\/www.trovi.com\/Results.aspx?",
"http:\/\/apps.conduit.com\/search?q=UCM_SEARCH_TERM",
"http:\/\/suggest.seccint.com\/suggest.ashx?n=10",
"http:\/\/apps.qacodefuel.com\/search?q=UCM_SEARCH_TERM",
"http:\/\/suggest.search.conduit.com\/suggest.ashx?n=10"
],
"crc32": "CA1E8A45",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d7fb1e66a88b78e6_bgpage.js",
"ssdeep": null,
"size": 54436,
"sha512": "dc6caf0ac669872b4bd14893de07bde008ee1fbda2f94497228434c619603c0894538653312440de3ca995288ad000298ed457876ee4a780c71e34b0f2ea4f54",
"pids": [
2816
],
"md5": "132e34270c64301c39c9195b17743736"
},
{
"yara": [],
"sha1": "303924f7a77cc803bcaa0f2c664bf1a5fac835ea",
"name": "6347c1cb4042f207_log4javascriptstub4release.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascriptStub4Release.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "6347c1cb4042f20755f76d9635a637d56433c86d62e0575b7c7b8d962d6c1e35",
"urls": [
"http:\/\/www.apache.org\/licenses\/LICENSE-2.0"
],
"crc32": "5705BF04",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6347c1cb4042f207_log4javascriptstub4release.js",
"ssdeep": null,
"size": 6509,
"sha512": "241555bb64a4417ed031e8efec393bc799f3ae880819eae20cb08ac9ca280999ec3597103273b911e6b9daf7a2a34b39006270095b8ac4a4fc0a734771286b1c",
"pids": [
2816
],
"md5": "cb48bb13bf360433770f3a0b6095310e"
},
{
"yara": [],
"sha1": "72ba219835132a5d4e763f75fef8f88d3246abb4",
"name": "ab6b970549a1f76a_embedded.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\embedded.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "ab6b970549a1f76a42df6081ee8542d2fcfc5691847f9b56185b14147b47b10d",
"urls": [
"http:\/\/radio.webapps.tbccint.com\/embedded\/Pause_normal3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume_normal.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume-scale_middle.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/play_rollover3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/minimize_open_rollover.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume_rollover2.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_left.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/minimize_open_normal.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/ajax-loader2.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_arrow.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/equalizer_playing3.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume-scale_right.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/bg-closed3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/play_normal3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/maximize_closed_rollover3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume_disabled.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Pause_rollover3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/equalizer_stopped3.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Volume-button_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/bg_open4.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_right.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/open-app_closed_normal3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume-scale_left.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_middle.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/maximize_closed_normal3.png)",
"http:\/\/radio.webapps.tbccint.com\/embedded\/equalizer_error2.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Volume-button_normal.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/open-app_closed_rollover3.png"
],
"crc32": "57A45F15",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ab6b970549a1f76a_embedded.html",
"ssdeep": null,
"size": 10959,
"sha512": "98516883e3056d3ebccd4005933fdedd6d02de616ca64f04d23f52b5b5ed1b94c8c7131501e8efa6bd2f4ed1a4313a2af499dc76945023e8ce25358f6c9eeb4c",
"pids": [
2816
],
"md5": "067f2aa98def888a043f2390127f141f"
},
{
"yara": [],
"sha1": "ad67ecde5e7ab7551511132d781edf575c32982e",
"name": "3f51e4cf0bc9d99c_view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\view.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3f51e4cf0bc9d99cfc52f28015fb2e6311e23648710bd317ec6f522dcd3a63e4",
"urls": [
"http:\/\/stackoverflow.com\/questions\/4194163\/detect-printable-keys",
"http:\/\/storage.conduit.com\/images\/searchengines\/go_btn_new.gif",
"http:\/\/apps.conduit.com\/search?q=UCM_SEARCH_TERM"
],
"crc32": "AD4070F8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/3f51e4cf0bc9d99c_view.js",
"ssdeep": null,
"size": 75696,
"sha512": "359edec6a49245c381d657cbe8990d3b97e39f3bb0268a77c951aab630d297dd080907d780fc67b122da496decae104d3daadc923f5d6d4e2e92a1b8c947b136",
"pids": [
2816
],
"md5": "9bf05a25b1c968f06d0660643bafd692"
},
{
"yara": [],
"sha1": "d8cc817481d4ccedb510089547ff570d04852cbc",
"name": "2ec9e6de27edd1f6_jquery.jscrollpane.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "2ec9e6de27edd1f6f780f677582918f6a9ea23a4a4fe3e773c205f6efa684c03",
"urls": [],
"crc32": "A0E59C14",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2ec9e6de27edd1f6_jquery.jscrollpane.css",
"ssdeep": null,
"size": 1504,
"sha512": "88075a765a13762ce515f0b0fae07298cdde212d0f40460cc7f13cfbb6e9b8f797f3263a85fc55d8566d30e30c798433a9c14c8ab927f78a9be1f036808c9ac3",
"pids": [
2816
],
"md5": "e1e546b8ab43cb7d4c6ef6922a34bc78"
},
{
"yara": [],
"sha1": "a03030d597c196b967598e7e5322a5f78896d491",
"name": "a4d139ebc4cb6b5d_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\popup.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "a4d139ebc4cb6b5d0543707dc2494610ba49adb9c10b3d924e2f1e77796edba1",
"urls": [
"http:\/\/weather.webapps.tbccint.com\/night\/divider.gif",
"http:\/\/weather.webapps.tbccint.com\/save_left.png",
"http:\/\/weather.webapps.tbccint.com\/day\/top.png",
"http:\/\/weather.webapps.tbccint.com\/toggle-right.png",
"http:\/\/weather.webapps.tbccint.com\/day\/rec_top_main.png",
"http:\/\/weather.webapps.tbccint.com\/day\/change-location.png",
"http:\/\/weather.webapps.tbccint.com\/sun_large.png",
"http:\/\/www.facebook.com\/plugins\/like.php?href=http%3A%2F%2Fapps.conduit.com%2FWeathercom-The-Weather-Channel--app%3Fappid%3D96a27762-7d9a-4703-89b9-10b2a20044c0",
"http:\/\/weather.webapps.tbccint.com\/day\/rec_bottom_main.png",
"http:\/\/weather.webapps.tbccint.com\/day\/bottom.png",
"http:\/\/weather.webapps.tbccint.com\/logo.png",
"http:\/\/weather.webapps.tbccint.com\/save-right.png",
"http:\/\/weather.webapps.tbccint.com\/loadingConduit.gif",
"http:\/\/apps.conduit.com\/search?SearchSourceOrigin=47"
],
"crc32": "539E2A1D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a4d139ebc4cb6b5d_popup.html",
"ssdeep": null,
"size": 10585,
"sha512": "6c08e522d9f7a877c30db881bf6ec3b010d2b381b7f491c6687ee34591a698c3fc3a925d410b6b9f485cc9bbf545635213349fb5265379e4eade8b8fe73c4f85",
"pids": [
2816
],
"md5": "9e06442bdde6fa837fd23d3a7cd0fb5c"
},
{
"yara": [],
"sha1": "ac56acd0b99a486f3bece8712ef87f6b6b862055",
"name": "1a5b68473e23de68_menu.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\menu.css",
"type": "assembler source, ASCII text, with CRLF line terminators",
"sha256": "1a5b68473e23de688d443aeba360411116e32ff5e751ffe0da3a6eb41934d4f8",
"urls": [],
"crc32": "046AE837",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1a5b68473e23de68_menu.css",
"ssdeep": null,
"size": 6170,
"sha512": "4b3bd95099eca6561df9a3136e7082cb89e601428299e8df3896664ee288e447e03ea0fe535dae340c6e5a4b0d9e6ba0c07bccdbd0317db4d27684df7b7c8295",
"pids": [
2816
],
"md5": "f9fbf0b8c2021603a669c65f99ac80c7"
},
{
"yara": [],
"sha1": "fab146603a44891bb7994bd7bacf949c89e0ce19",
"name": "b9b33810029a5ed9_pop3executer.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\POP3Executer.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "b9b33810029a5ed96c4b66accc26994ffb53989df8a536ea04cd47805b780d4a",
"urls": [],
"crc32": "EC96D034",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b9b33810029a5ed9_pop3executer.js",
"ssdeep": null,
"size": 19603,
"sha512": "3907e933c0d5b4abb68befe5f8a1f5a758a553df6f66f043f0d0d3c08ca6c306062a09de226b23f750ddf35e818fc81cd457bfe47eed45b041543dd24023a776",
"pids": [
2816
],
"md5": "03933b23270aa6d96b6b7c19c414daba"
},
{
"yara": [],
"sha1": "2c55f9a4f4790d29b9b6d4425ca9332b89b69d92",
"name": "aa0a54b48ea3c988_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\bgpage.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "aa0a54b48ea3c988bf210e2d539fd52c479dcea56a1e7061cab7dda2085c3537",
"urls": [
"http:\/\/weather.webapps.tbccint.com\/",
"http:\/\/wxdata.weather.com\/wxdata\/hf\/"
],
"crc32": "CD36A210",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/aa0a54b48ea3c988_bgpage.js",
"ssdeep": null,
"size": 15452,
"sha512": "89f9dedab8ac4ee864111a0abae9e2f5a8e82055449e44757c26f69c9692b470b51721d8a826843878bfe0d6ae25114eaffa5e34ae2b6ccde3ff3e1121dcd597",
"pids": [
2816
],
"md5": "d7f87816ce8179979b7fddfde25a7de2"
},
{
"yara": [],
"sha1": "9491d2210a76d0b0c10dbe3dd43bbbb5ef83e8ed",
"name": "861c7924205d2fd4_information.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\information.png",
"type": "PNG image data, 30 x 29, 8-bit\/color RGBA, non-interlaced",
"sha256": "861c7924205d2fd421c18b150f50c2fbc3ed2f8479956501b84f31c985ed210a",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "82EA26F2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/861c7924205d2fd4_information.png",
"ssdeep": null,
"size": 2903,
"sha512": "c0fb5d9616b0c48232d411dd2e3e769edb91222e53e05d0dd09b15c56935080b5b912a0e84258b87567055862d2d1021e92f9b49ca6a47b94339289528810793",
"pids": [
2816
],
"md5": "37a7af251c518f6b310b5681b786316b"
},
{
"yara": [],
"sha1": "3a8bf60868de3d90d8cb03d15a59cc51437bf80e",
"name": "4cc09895545b9bde_framework.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\framework.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "4cc09895545b9bde89fa111a6b82931651436b6949f97c789bbac52b2fb4f8d4",
"urls": [
"http:\/\/hosting.conduit.com\/EULA\/)."
],
"crc32": "E860803C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4cc09895545b9bde_framework.js",
"ssdeep": null,
"size": 7138,
"sha512": "b72d3ab7890d58d756e9cb7cd739ceb84105ae684b31c09dbb11eac25f63127b8b3e82d8ee717712ecbe8efb5884be726794a49ef3449067b1d9f0491f7363cf",
"pids": [
2816
],
"md5": "766d15a130a25ada7e5aabf59cf89e1a"
},
{
"yara": [],
"sha1": "9702d52fd703ab8544899779568f6666a2938a71",
"name": "71d48c74e6c28993_popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "71d48c74e6c28993aa36dadbb6e7a26be7c0a90519926e8b328dff07197e6da9",
"urls": [],
"crc32": "55AB0B90",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/71d48c74e6c28993_popup.js",
"ssdeep": null,
"size": 13480,
"sha512": "6f314ec33fd5acf53d33dbece25eedff6685459f78f307487f3bd9daae0d71306cd49de4fc62a08ea0db8efc824d6cff62200219b5f995fd1704f6763c6ecbda",
"pids": [
2816
],
"md5": "ed3198ba0e3d6a84194fae0690433117"
},
{
"yara": [],
"sha1": "f33dd433ea1bae0ae64de1b6ef25f797400b2d6b",
"name": "31fb9ded1fb814e6_browserappapi.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\browserAppApi.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "31fb9ded1fb814e6e7beeb7f08c0394e834724cf4eadea18dc99b1bf98f40db1",
"urls": [
"http:\/\/hosting.conduit.com\/EULA\/)."
],
"crc32": "896E9CEE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/31fb9ded1fb814e6_browserappapi.js",
"ssdeep": null,
"size": 62435,
"sha512": "135b5289af4e243c6b99661f85467d027b2d22721585b22bc519e292ddb6b11fd81210f1bf366dcd6940a72c09d6617b2d389e44dcef083c4c3f365138184a63",
"pids": [
2816
],
"md5": "80b3d53eece29bc65de0a23df2ebcec8"
},
{
"yara": [],
"sha1": "4eb1654a5c2b4c2213dfd962db2fb1f7b9e2282d",
"name": "0438088425d4f52b_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.html",
"type": "HTML document, ASCII text, with CRLF, CR line terminators",
"sha256": "0438088425d4f52becaed087d081657f6f652c2772305b7fd10efe0db5f1755e",
"urls": [],
"crc32": "EC75BD45",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0438088425d4f52b_bgpage.html",
"ssdeep": null,
"size": 280,
"sha512": "0ff3108667712d37dc3fe05f99af61e8d7638d7fe5da40848bd1bf986671b35034fefc8d594f4d1a4e8827be702bdb20c0e2b5dc8eb47fefeb7007bea6faa2c4",
"pids": [
2816
],
"md5": "9a85f855f7ac04021ff7144dd63bce4d"
},
{
"yara": [],
"sha1": "5eab0fce10229962065f2f228f13c83252e9c1ef",
"name": "76537f87ae619d99_badges.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\badges.png",
"type": "PNG image data, 30 x 44, 8-bit\/color RGBA, non-interlaced",
"sha256": "76537f87ae619d99aa20a3e29e105c97c0eb6270cd4b6fafca4a64e9d9828171",
"urls": [],
"crc32": "060FF264",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/76537f87ae619d99_badges.png",
"ssdeep": null,
"size": 3667,
"sha512": "abfb8bc88cac647c6d7b06a34f0eb7e322cec9699a168b78612ae0906e76d0f2af1135afe56fccce53d4d9b3f9e73fc936cb750ee9d901099da4bff281a8aa1f",
"pids": [
2816
],
"md5": "7bb826786b5638ccce0d8fce14d585b7"
},
{
"yara": [],
"sha1": "375d43705838e03d4df178a7c5f531d4c77a642e",
"name": "a23a94c3e687ed26_embedded.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\embedded.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "a23a94c3e687ed2657d9437fc792fab3b146a218556b528ee5fd71c2448c1058",
"urls": [],
"crc32": "F5F12105",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a23a94c3e687ed26_embedded.html",
"ssdeep": null,
"size": 2403,
"sha512": "5fbb36f518918f5aac8f4263fc5e9e8cc159c1e417f4865c135af6866e4b14c668fafa554b521419ef2b5526214c51b2b1ac5e17ad1419f306eb1debba91c56a",
"pids": [
2816
],
"md5": "322474c6d276982b08f8478642ef08da"
},
{
"yara": [],
"sha1": "a6f8e76bb853fcdf8fc78bae9fbdb40d4949074b",
"name": "d2a006c348b6eaee_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\popup.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "d2a006c348b6eaee8ffd1d96494725266b0ae8ab46c76864bd10089e551a6df7",
"urls": [],
"crc32": "4005750F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d2a006c348b6eaee_popup.html",
"ssdeep": null,
"size": 555,
"sha512": "271faa52f21b7e498b458a092d555115d74eaab63d47ec66259fdec2865576654658e6ae044ae8fbb3a9b86793310269b426dbf8666533699ebc40d0fd64ea12",
"pids": [
2816
],
"md5": "91de169f6742bb12c8395b006e2287d5"
},
{
"yara": [],
"sha1": "86c29f7b953f1750db2cc2e94e9ad545b8963e2c",
"name": "5bbc28cbdb5f6e28_general.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\general.css",
"type": "UTF-8 Unicode text, with CRLF line terminators",
"sha256": "5bbc28cbdb5f6e28dfc185f15f61d3dd637cec30bcebea0a73e4c07adc402982",
"urls": [],
"crc32": "A3879A7C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5bbc28cbdb5f6e28_general.css",
"ssdeep": null,
"size": 9937,
"sha512": "6288e4f755be0e099ff1056add67c3561145d41aff138c4bc969345186a91cca634165d35111f7542b5ae1017be906748084aac69efd65b039335304aa4625ab",
"pids": [
2816
],
"md5": "292a2acf9f47859831f63e78721b9599"
},
{
"yara": [],
"sha1": "693582467916fd3b81eebcdafcbe76aa6b1acdd6",
"name": "53618e0a070019cd_backstage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\backstage.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "53618e0a070019cd52872693091877adbce477c7761c31242160328011e009ea",
"urls": [
"http:\/\/www.conduit.com\/"
],
"crc32": "0EDC7797",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/53618e0a070019cd_backstage.html",
"ssdeep": null,
"size": 1297,
"sha512": "648fa52f5f996b7b3d347366145631d266434a750909d2506b8dbb48d777adb6288114a23eedae296399c429e6032fb373f09c435a7c391f59d8711932a63c1e",
"pids": [
2816
],
"md5": "35478478152e48ff8bdd576fb5237c78"
},
{
"yara": [],
"sha1": "eab035e7507cce1415aea4025e564f9bdaac331f",
"name": "f96960d45ea0c651_weather.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\weather.GIF",
"type": "GIF image data, version 89a, 21 x 20",
"sha256": "f96960d45ea0c6513150a4386b2b256312ed2b9b37b8818f50a03f72af2c37c1",
"urls": [],
"crc32": "AE50A449",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f96960d45ea0c651_weather.gif",
"ssdeep": null,
"size": 1158,
"sha512": "997ec9fd38072f2467ecf1fd20b8304a37c90c09c15bfe13e135dc2f7fca94faf251cf6f952e2dfb4a2c0c8336a4e3fcc7ca14a0c4908d3749c74ca2c086f7ab",
"pids": [
2816
],
"md5": "c014b05b57f644af608106016c9bda0b"
},
{
"yara": [],
"sha1": "59e1f96bf48b8f0899c5fbd082a0f5ab93b71c6d",
"name": "1617b50b9abfbece_suggestprovider.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\suggestProvider.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1617b50b9abfbecebdfc3334c981a5d3b93c37e6b487b9817a7642f364944ed7",
"urls": [],
"crc32": "EB70FB26",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1617b50b9abfbece_suggestprovider.js",
"ssdeep": null,
"size": 16989,
"sha512": "a785236972c83d6efda46b30b16d09d31659d4c66cfdc8b96291d66eaa2d991a7321a56923ece61f4317a66acafb4f72a3dd8c17ecef8f67ead9e5a779e304cd",
"pids": [
2816
],
"md5": "0d080ce751b4c6e31b4b4137b671116c"
},
{
"yara": [],
"sha1": "c2b14a6cfd96eb008aa0a8dae26bd473be879e5f",
"name": "ae958d41f71aeba9_stepper.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\stepper.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "ae958d41f71aeba90d126dfd539c20113c5a2c3d88006aa4b362715250941653",
"urls": [],
"crc32": "1C227EA0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ae958d41f71aeba9_stepper.js",
"ssdeep": null,
"size": 1678,
"sha512": "9a95f580e142c16f729487d9e84b2a8860e10c4001d8ff87a67396f7925c935d54871ae9e0a85bddd4c8a18bbd606643806f7c329892220375485797074d468b",
"pids": [
2816
],
"md5": "887c809e97061b7cf7c189740c08e185"
},
{
"yara": [],
"sha1": "ef5e495f1498ac3b0271ce42999eac5ccda5591c",
"name": "c65faf4197df892e_lgf.view.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\lgf.view.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "c65faf4197df892e5dd8a62473fcc48a630ee02c7c2ff7f183ce10abdf3b2f5d",
"urls": [],
"crc32": "D2E00172",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c65faf4197df892e_lgf.view.js",
"ssdeep": null,
"size": 1925,
"sha512": "14a0e6018b68004e3ab9bcce6b8f70d547eb0236f75f19d514b1b6eb00a82ae22b7597cfc0822c1d00de56733db9925a15b44e6658d220d94c4a06016741deee",
"pids": [
2816
],
"md5": "b077aecf7c11f64ecc112d830f707873"
},
{
"yara": [],
"sha1": "b97a2f8e14de4495eeb2bc0927911e93739bce9e",
"name": "0055885eb55ebf52_popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Popup.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "0055885eb55ebf52decac68068de652b2b6adebed739c6d35150d08a1f208cdb",
"urls": [
"http:\/\/emailnotifier.webapps.tbccint.com\/"
],
"crc32": "F6DB6DEE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0055885eb55ebf52_popup.js",
"ssdeep": null,
"size": 61449,
"sha512": "a40a7ff7103f0ce76f98b860425a6e3fd9264263c4b0245d7ff8f176731a8d7cda449143a84c40c3203424d5a479eeaa95672c82e9f3cd9e330984254d870d42",
"pids": [
2816
],
"md5": "a30301ded3d56bcc40bcf296917fb2e6"
},
{
"yara": [],
"sha1": "8130ac289d3199e235733c34298b8fd1b238ba5a",
"name": "de4a401573f58199_ok-button-default.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-Default.png",
"type": "PNG image data, 98 x 39, 8-bit\/color RGBA, non-interlaced",
"sha256": "de4a401573f5819979699f451e3039bb82979d42b9178bbcb584cd8b555079a1",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "86AEED59",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/de4a401573f58199_ok-button-default.png",
"ssdeep": null,
"size": 1373,
"sha512": "07be46516bc8d8124e3f463df5f09070946a7ccf72bccf2cf68dabb255a7277cbe87f1562508fb803f6b0b581ed3075edc29a987a3232eb65e54f8f58a5a6916",
"pids": [
2816
],
"md5": "256839a2752e94ae7d4356a2f4a931fa"
},
{
"yara": [],
"sha1": "273ee04fcbc05054dfca62e8fe63acfb5042dbe6",
"name": "458daff8437f22c2_popup.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\popup.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "458daff8437f22c2b41000e3b68979a22356f01822aaa5406978877a3d1cb805",
"urls": [],
"crc32": "2E650F05",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/458daff8437f22c2_popup.js",
"ssdeep": null,
"size": 21343,
"sha512": "78ec4541299b72a012b1f4f16ec746b9d71151d889e320b2a39d07709ea6ef5ba6adb85c71a74d8f45212a0c8c5230ced1b31939092bb676840e8618b8d42d98",
"pids": [
2816
],
"md5": "8317bb7beed509d32054b4237b9f430a"
},
{
"yara": [],
"sha1": "2ff2d687041ef2bcaf38a110edc501ab65bd779b",
"name": "070d210aa6ae546a_arrow-right.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right.png",
"type": "PNG image data, 7 x 7, 8-bit\/color RGBA, non-interlaced",
"sha256": "070d210aa6ae546a61bf40c7f67264ff883997fcecaab9c42a1fcedd40462f13",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "FF12BD09",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/070d210aa6ae546a_arrow-right.png",
"ssdeep": null,
"size": 1022,
"sha512": "eddcd8dd3c050bb6e5aa6e6cdee98bed171dbd5f1a327b8a386a9db3565286a8f3d84d37a02150b8b7f3f2fe0df4571946ac40d591b6afc5749ccb27ad6b79f5",
"pids": [
2816
],
"md5": "29b27d94acda7f1e0b60a040f7a6ebda"
},
{
"yara": [],
"sha1": "c39200fe2e8f98bfbef707407bef0770ca4f9368",
"name": "dd499682553eb7de_popup.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "dd499682553eb7def36eca11d5de412a6f42537fd3a23a36427de704aa9d6e92",
"urls": [
"http:\/\/twitter.com\/"
],
"crc32": "110149EE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/dd499682553eb7de_popup.html",
"ssdeep": null,
"size": 3091,
"sha512": "172773278ce4a343c738734bdc5e86aca7a36f94087198f0455f59407e20bb07577c79ec7835b811728ecdf667f75241db4c465fa5f43891bbece668032063aa",
"pids": [
2816
],
"md5": "bfc3d048b8a63591c6e74b9efafefc34"
},
{
"yara": [],
"sha1": "2dc55fcb6ae2a56b5718dcde1f6d0fbb8245a10d",
"name": "f89d5b9c975ed293_arrow-down.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down.png",
"type": "PNG image data, 7 x 7, 8-bit\/color RGBA, non-interlaced",
"sha256": "f89d5b9c975ed29395d6ae7648ccb84e6dfa4d15996d0b156b6d64c37b79b758",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "E323628F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f89d5b9c975ed293_arrow-down.png",
"ssdeep": null,
"size": 1027,
"sha512": "463272daee30f9512e23210d66e49395f56004ceeb792f918d8b427ce249932601267eafbfe38d9757f54596afa680a3cd36ed3f56e1f75f91858b18e9727a77",
"pids": [
2816
],
"md5": "7af0b379c7e2c28a8daae01047bca01f"
},
{
"yara": [],
"sha1": "43fc18e56a5fd7d9f0fd08413422003c71937ca1",
"name": "7e7c35feacf71871_pie.htc",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\PIE.htc",
"type": "HTML document, ASCII text, with very long lines",
"sha256": "7e7c35feacf71871eb72423dd701b0bb1a5e99a380ff8fb769adc6c4fde2904f",
"urls": [
"http:\/\/css3pie.com"
],
"crc32": "1630037E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7e7c35feacf71871_pie.htc",
"ssdeep": null,
"size": 28280,
"sha512": "02649ae204883531af64087809b98f4795ce4e3b9d42f1bdff9658ed793d992965294903579a71d1a20b938845e5532b0e8a59b36fdef87633e5ff6efc78e111",
"pids": [
2816
],
"md5": "e781697ffed7cf6f50919824269f69fe"
},
{
"yara": [],
"sha1": "40f8c65cd1c3b76315fbd17d1200dad355bc2764",
"name": "76d946ec1929631d_toolbaroverlay.xul",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.xul",
"type": "XML 1.0 document, ASCII text",
"sha256": "76d946ec1929631d59bbbe9a9a92d1a7876a587e2a088c499a599c1ad198a669",
"urls": [
"http:\/\/www.mozilla.org\/keymaster\/gatekeeper\/there.is.only.xul"
],
"crc32": "1C1FCC9F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/76d946ec1929631d_toolbaroverlay.xul",
"ssdeep": null,
"size": 1894,
"sha512": "767594c288ce6ca21324949693d90abdca6ea5f72e77b5f01b85a2dc66339df39db2ecdba14b8ec0bae7d3d2dadbea025f946c030b0be12e3bfa2e1809f0f4a8",
"pids": [
2816
],
"md5": "5c5ed866cccc3cec289b422adf012f52"
},
{
"yara": [],
"sha1": "70edd62cef0b5c8ab9c96cea53fda67a6e15d412",
"name": "55fa7352edfd046f_servicelayer.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\serviceLayer.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "55fa7352edfd046f4fd0696ab656b258eba9a9fff33d5ec5e1b7f98c85482bee",
"urls": [
"http:\/\/ip2location.conduit-services.com\/feature\/EB_FEATURE_NAME",
"http:\/\/hosting.conduit.com\/EULA\/).",
"http:\/\/blabla",
"http:\/\/storage.conduit.com\/bankimages\/iconsGallery\/24\/4893084600226060960.png",
"http:\/\/servicemap.tbccint.com\/toolbar?dum=2",
"http:\/\/storage.conduit.com\/bankimages\/iconsGallery\/24\/5541818981211231875.png",
"http:\/\/servicemap.tbccint.com\/toolbaruninstall?dum=2",
"http:\/\/clientlog.conduit-services.com\/log\/putlog",
"http:\/\/servicemap.conduit-services.com\/toolbar?ownerId=",
"http:\/\/localhost\/settings\/toolbarSettings.json",
"http:\/\/clientlog.tbccint.com\/log\/putlog",
"http:\/\/servicemap.conduit-services.com\/toolbaruninstall?ownerId=",
"http:\/\/www.socialgrowthtechnologies.com\/couponbuddy_v001\/index.php?ctid="
],
"crc32": "FF12395A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/55fa7352edfd046f_servicelayer.js",
"ssdeep": null,
"size": 471817,
"sha512": "a142af0ff471cf0e5dc0d43aa57f8c1d1ecb840cf65e979f7867912aefceef318f9d75e10330a4fab33f27e47029875601208b39c9e44192d188868a936f0d6d",
"pids": [
2816
],
"md5": "8ea2a33069640f5e80f2521f6b19afb7"
},
{
"yara": [],
"sha1": "babbe1c1ad7f2fb482b2929f7abc1007b162c24a",
"name": "fcf44ee2d28b3694_arrow-left.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left.png",
"type": "PNG image data, 7 x 7, 8-bit\/color RGBA, non-interlaced",
"sha256": "fcf44ee2d28b3694e1865408f045ebb14d3f81e92d04ac3e373e82598c7b4b05",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "B7B5D05B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/fcf44ee2d28b3694_arrow-left.png",
"ssdeep": null,
"size": 1074,
"sha512": "53eacefeb0f58a98bca5b12949f6bdd4f1b1288748da9efb876466bdabc6eacbdb6a1a456e51fb9e658b9f9d4987a3658c62afedfc530dc54bca0d1fe19e51c2",
"pids": [
2816
],
"md5": "c65452956778e4b937617307b34f672a"
},
{
"yara": [],
"sha1": "55fb0ada2ecbe7b6fb9ba5e4d700df50d379be2c",
"name": "8c7fedff4f3152f0_lgf.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\lgf.html",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "8c7fedff4f3152f0504efa1ebb016ddc96375d0f58dcd20f6302d9ab11baaf44",
"urls": [],
"crc32": "F6522010",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/8c7fedff4f3152f0_lgf.html",
"ssdeep": null,
"size": 2460,
"sha512": "b16a9f0b1161339b50196191647e5298de56dae95f53bc81a462b8b2b19c8f37ff0527eeca16dc70c85f8d02c8a7f75ece9e77983b3ea06f40665a4981a5ef23",
"pids": [
2816
],
"md5": "c048ad3f472bc154a3ac4cb4066cd3d0"
},
{
"yara": [],
"sha1": "aacbfd23fd7ee10f55d8b3339ce860c4146e7dcf",
"name": "94408e98a30364a7_newmain.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\newMain.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "94408e98a30364a7d2e40e76320c4b31c3bf00e54db4e3305985377ebcc8eb6a",
"urls": [],
"crc32": "173236E9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/94408e98a30364a7_newmain.css",
"ssdeep": null,
"size": 3274,
"sha512": "815634c6663bc14fc1531cf6f7869e35095a7e99336f7a8165dc29efdceff72d566fc5e0235407b1940b0f2937b11ad053a4528740cf1e05c937f729610ae753",
"pids": [
2816
],
"md5": "81bc4f4a62defd7d77c229cb40a87e4b"
},
{
"yara": [],
"sha1": "544b3cb5375eb5f64684f73e1e17548d226de2d8",
"name": "0c1775a0616a13eb_notification.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notification.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "0c1775a0616a13eb3eba2defe6f10bd20f4e10544861985856fe2b39c767b9a9",
"urls": [
"http:\/\/servicemap.conduit-services.com\/alert",
"http:\/\/servicemap.tbccint.com\/alert?dum=2"
],
"crc32": "895CA151",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/0c1775a0616a13eb_notification.js",
"ssdeep": null,
"size": 46431,
"sha512": "f0b964a73702d6ccd5a870fdd9d1352db2b08f38967fd1b49e0fd2a26550254cad5d724c0034ef7c15ac69a1029b56d01576ef7e8434f4c4a77567ff2eb10142",
"pids": [
2816
],
"md5": "d4b1075a68c712d8b9660a26d25cbeb7"
},
{
"yara": [],
"sha1": "65628430b2191b3e91043674dda32194e4282b4a",
"name": "c2e9283174c77fce_common.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\common.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "c2e9283174c77fce4d843e247c0fd2d851f3296e7b56e9b0784837bc81727d8d",
"urls": [
"http:\/\/weather.webapps.tbccint.com\/",
"http:\/\/ip2location.conduit-services.com\/ip\/",
"http:\/\/wxdata.weather.com\/wxdata",
"http:\/\/wxdata.weather.com\/wxdata\/search\/search?siteLocale=en_US",
"http:\/\/ip2location.tbccint.com\/ip\/"
],
"crc32": "52517E45",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c2e9283174c77fce_common.js",
"ssdeep": null,
"size": 18559,
"sha512": "c71abf8700831be8b60fdac98919e3741e68b5f0f0f252bb506a9aa5fc667cab87deab93891ada926e790ea75a5a4c87b70a5ced102757c8b56e4ddb0c148149",
"pids": [
2816
],
"md5": "b6d0c451d5c1c685e0fe8404f8cf3b69"
},
{
"yara": [],
"sha1": "f56e9af803a4168db827606efc6e2b4f4c4c26dc",
"name": "6c1c49724aa5bf3c_version.txt",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\version.txt",
"type": "ASCII text, with no line terminators",
"sha256": "6c1c49724aa5bf3c3b9247bb503640bf8511f4472d9ec49e9b7025e8b3d30b81",
"urls": [],
"crc32": "98519644",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6c1c49724aa5bf3c_version.txt",
"ssdeep": null,
"size": 9,
"sha512": "ac480571f4ffa4273114383241a0d3dfab98fc2d8e3f0b6f0f60b968fc03f245aa84931ad8b15d11a5f1f155ea556d2c2169df61c59442c39bc50e42381da229",
"pids": [
2816
],
"md5": "9ffbbad024280e9f17836276dc99c9c6"
},
{
"yara": [],
"sha1": "7616163d5d7dde2f1d4df3185264cfeed8a7d838",
"name": "56f8ef28c964fa92_bgpage.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\bgpage.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "56f8ef28c964fa92242c9fb7e696dfbdcd81389e30ba8803cf2cc0ab8722eafa",
"urls": [],
"crc32": "5EC3CD40",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/56f8ef28c964fa92_bgpage.html",
"ssdeep": null,
"size": 751,
"sha512": "9d85cbe6841e59d0e0c6f7c8c8df92da05dd222a9e75b2da757aaf6b463352bbd89d8435edf7ebadafbc411d8ccf1ff5ff58e0c0873d9d75e4a21da4ee3bd06d",
"pids": [
2816
],
"md5": "58a3af1b569bd34ba98d6ccec28655e3"
},
{
"yara": [],
"sha1": "299e10ae7f348d8ab01d2d23357056ffde2c32f9",
"name": "c8cdac3fcb0e00ba_help.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\help.gif",
"type": "GIF image data, version 89a, 32 x 32",
"sha256": "c8cdac3fcb0e00ba58deec2a780e0d465027f8d45fdd39c64cd1a58974160e95",
"urls": [],
"crc32": "45F483C3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c8cdac3fcb0e00ba_help.gif",
"ssdeep": null,
"size": 1582,
"sha512": "717e36c20b93fe63f35620406a746f0e3c1262553543ded7b11ef6568aceeb24de5dfae09bd2482e0aa78dac74a8335dffbc66b0616cadb2a4ff9e33f304fda5",
"pids": [
2816
],
"md5": "f9ddf0e4c7e149164ab42f14e5b5c9dc"
},
{
"yara": [],
"sha1": "ecf02eb627c565e5b7ddeefbe7d31ad08fa7bd7f",
"name": "aeac799b355fd994_aboutbox.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\aboutBox.js",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "aeac799b355fd994639c54c4a280a1e1b696643ab574c4084991da9d327ca6b9",
"urls": [
"http:\/\/trust.cpccint.com\/",
"http:\/\/trust.conduit.com\/"
],
"crc32": "563B812A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/aeac799b355fd994_aboutbox.js",
"ssdeep": null,
"size": 8017,
"sha512": "eb9f277023fac6122d41d419d2bde9b475a88c6a48036a78510d41cc30d86778b05e5a4407d2a24e1ba427c3c0a275a73869f19c88261a4098199accfd70c8b2",
"pids": [
2816
],
"md5": "556a2a803edf76c55cafe9cb8573a595"
},
{
"yara": [],
"sha1": "0efd773e0823999c97c0a8845acede6550ff3943",
"name": "d2413312e9423c07_bg-hide-click.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide-click.png",
"type": "PNG image data, 477 x 43, 8-bit\/color RGBA, non-interlaced",
"sha256": "d2413312e9423c07db94c30961845a581a641331981b551c80767d66196b7875",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "3E5764F8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d2413312e9423c07_bg-hide-click.png",
"ssdeep": null,
"size": 1792,
"sha512": "85684a3442350513d638cfb6b1ae8e84c5c61a69f130cd2b81859be7fd4405984d2504e54bf3f07a4a2d246d2c4445d15be62dbffd9711a11b2cacec8283c5d0",
"pids": [
2816
],
"md5": "1ac319e2f2ff57142ea50acbbfafb700"
},
{
"yara": [],
"sha1": "d84386958c4df554201ff13b2d932a2469bd4818",
"name": "cf569189c4942f6f_selectionlistener.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\selectionListener.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "cf569189c4942f6ff6370392dbd5fdb7baf915bf56e539fc8e3309d7b2d5d0e9",
"urls": [],
"crc32": "1A7B796A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/cf569189c4942f6f_selectionlistener.js",
"ssdeep": null,
"size": 10900,
"sha512": "d368df7c89086ce98e793194d4e05081e8e7b45fd849dc4dd537e5e51cc7517c3c8f3aeecf6f81ef3f2e4c5030dbc41cdbdf5cdcaa63dd9a906091d56b0099d4",
"pids": [
2816
],
"md5": "f42b6b85699786b45dbcafbcf4bd9c9d"
},
{
"yara": [],
"sha1": "63417559bd5013457ed63f41dafc1194aa778c0d",
"name": "efce73026d025250_rounded_corners_left_white_34.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white_34.png",
"type": "PNG image data, 315 x 34, 8-bit\/color RGBA, non-interlaced",
"sha256": "efce73026d02525022793f5ad77bd1d036683a5a12d4477dcb1910d93f2ac463",
"urls": [],
"crc32": "E18544BD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/efce73026d025250_rounded_corners_left_white_34.png",
"ssdeep": null,
"size": 536,
"sha512": "6e635379c98033bd5aa0bc03569fc3ae6a473e4876ed983cd8a80ee9ef1f903bbc4d84f54b8f66d89672019de1377ddf4ac965d38e96d69b322cdf49f952f46d",
"pids": [
2816
],
"md5": "3199600e37233dff201be2eca3b1ce6d"
},
{
"yara": [],
"sha1": "3e279e00646298b45dc4142fbeee0c7976852c8f",
"name": "bc9bb6d46884fcb5_log4javascript.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascript.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "bc9bb6d46884fcb5926b2f39e2a22afa8d473645250723f362376371fdcc16ef",
"urls": [
"http:\/\/www.thismuchiknow.co.uk\/?p=25",
"http:\/\/www.apache.org\/licenses\/LICENSE-2.0",
"http:\/\/log4javascript.org"
],
"crc32": "A0A443D9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/bc9bb6d46884fcb5_log4javascript.js",
"ssdeep": null,
"size": 220433,
"sha512": "d75d046a14e03938a5059f527fc3b53d44acb53000cb81aa512a1b3de90b7539632cdda8e55cfa84643684a04044cfcb569877ca3bf7c03d7a89a05f4c02788b",
"pids": [
2816
],
"md5": "5df5363586e7dd29082384366fa6ba42"
},
{
"yara": [],
"sha1": "92760508c061ff7c0a997cf214703ff59f3e5eec",
"name": "49cdc5c502de8554_thumbs.db",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\Thumbs.db",
"type": "Microsoft Thumbs.db [app-store-icon.png, arrow.png, divider.png]",
"sha256": "49cdc5c502de85547fecec990840cf968358fe88a7d6e4efde0a38c0c1aa44e1",
"urls": [],
"crc32": "8A039BAA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/49cdc5c502de8554_thumbs.db",
"ssdeep": null,
"size": 8192,
"sha512": "b564b25a8137e0b4b9ca2453ee2d88d9e6871a7a7e4ab2013a7d366dbffd685f92f7183c45aa329a044f61a3725cacabc67f258ebaf68560ec5d41ce257878dc",
"pids": [
2816
],
"md5": "678a2975e961cf9c32cff7f1a8fe317b"
},
{
"yara": [],
"sha1": "23ba70c47340de64a0eb69105742c2d256cef8fe",
"name": "921d465f108e6e31_chevron_sprites.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\chevron_sprites.png",
"type": "PNG image data, 29 x 76, 8-bit\/color RGBA, non-interlaced",
"sha256": "921d465f108e6e31120f45b85e7afb6d7154bd858d663ffdbb26fa26054bcf27",
"urls": [],
"crc32": "13F844BF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/921d465f108e6e31_chevron_sprites.png",
"ssdeep": null,
"size": 4809,
"sha512": "5eed1112fba52f3523f8687ddfeb32d60d338f488ec9118135e750ff84b61c7958a17646b7bbd198c04360edbb14ecfd64b67dfe841a6daf6777e466ce7c27ae",
"pids": [
2816
],
"md5": "acbde2be74f73aa81b65a64378afdef5"
},
{
"yara": [],
"sha1": "0907b59c876ac4e1db90bdc7ce3dc9fff243a329",
"name": "a15f4e58ec775fa9_retentiondialog.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\RetentionDialog.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "a15f4e58ec775fa97214f9637a9f6adfdd402f5f11d7b64d511dcae19d5bbf44",
"urls": [],
"crc32": "207C8C88",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a15f4e58ec775fa9_retentiondialog.html",
"ssdeep": null,
"size": 2824,
"sha512": "a00aacca8705fce4c043eff9e58cc4d5c9332afb688c0be770856ce712e2d96217e456242e2894a6d71a14014e8a7a68a75b83da3b506a3e8de6df7bc80ba8ea",
"pids": [
2816
],
"md5": "d19cfee6f5b6cc9e326b51509c7f8150"
},
{
"yara": [],
"sha1": "f91a9df147294f40b7f227261996c66386f371f4",
"name": "e59e8cbc51480387_embedded.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embedded.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "e59e8cbc5148038700fa6a81774e42697661032eec01919c4ffd9b80c92399bd",
"urls": [
"http:\/\/radio.webapps.tbccint.com\/embedded\/plus-for-menu.png"
],
"crc32": "1D64BC59",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e59e8cbc51480387_embedded.js",
"ssdeep": null,
"size": 18800,
"sha512": "a88653524c05783e112d291765a9cd193968f6d646ba81dbcd11c4274278ef1d077ba41fd036455ac98231da0aff18af339408af60da2b669ae188595ecd9c4b",
"pids": [
2816
],
"md5": "fd1476c2d23b609eab3b2da654db64c5"
},
{
"yara": [],
"sha1": "20a685874d4176191255c0bea4ea3877b4a57ebc",
"name": "e256da3106006838_preferences.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.js",
"type": "ASCII text",
"sha256": "e256da31060068389d4a24ff12cb3bd25e1bc464e9e60ac90852b7e10b363479",
"urls": [],
"crc32": "33D3B1B0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e256da3106006838_preferences.js",
"ssdeep": null,
"size": 2275,
"sha512": "ed11396380ff473774aeef770a051545d53935b0d3443ce990bb095c5f1c1fc021e9c06e52657c6c265fab3cb6123993baca59008a41f3ebfa765284e1d99a34",
"pids": [
2816
],
"md5": "c8e50acec1603e2ac1f8c7f0d91aafba"
},
{
"yara": [],
"sha1": "10cd4a839a376bd5aee6a831595964ef6fd8eabd",
"name": "7a51e592798461cd_json2.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\json2.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "7a51e592798461cd9e88f4f418e5e0c8d915c5456cbcbee873bfde3feb49c785",
"urls": [
"http:\/\/www.JSON.org\/js.html",
"http:\/\/www.JSON.org\/json2.js",
"http:\/\/javascript.crockford.com\/jsmin.html"
],
"crc32": "55CC15CA",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/7a51e592798461cd_json2.js",
"ssdeep": null,
"size": 17356,
"sha512": "6aa87b323dfd23cff960c5f84adbd922f874565866d58ef6d02354618c6734bf7cdcd84f0c67eeef8a214ad8365cbaeecf6c012bd700516d953453ec2bedd0d7",
"pids": [
2816
],
"md5": "ef145431e097f221e6740ddfda72c9b5"
},
{
"yara": [],
"sha1": "d4be04af33ca9901696c202d01f1e88659647e13",
"name": "94992d29ee6f2e19_facebook.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\facebook.png",
"type": "PNG image data, 18 x 18, 8-bit\/color RGBA, non-interlaced",
"sha256": "94992d29ee6f2e19b6b4915b54fd4f1ed7e12d62558aabd2488310c151284228",
"urls": [],
"crc32": "7AC71216",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/94992d29ee6f2e19_facebook.png",
"ssdeep": null,
"size": 892,
"sha512": "1bbacf86eaec88e48d9928408fb424ff307344a7a5fcb15c476dbf58a86b30e2f45612eaddc0932ff6c770f558b6bbabe67580bfef0a130fb73953e6958e9020",
"pids": [
2816
],
"md5": "5aae3708bf987c7bb7356c2f102d8aff"
},
{
"yara": [],
"sha1": "4a7feef3ab6747f1d0df953257ede7c3d9216b77",
"name": "453dce67c55589b8_browserdetect.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\BrowserDetect.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "453dce67c55589b861c61d5aeb62cf6f7d5f3e32bcb77bc770636a9331bcab75",
"urls": [],
"crc32": "3898B260",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/453dce67c55589b8_browserdetect.js",
"ssdeep": null,
"size": 2652,
"sha512": "a7e3af1ab38b1f7d07e696d6c98a7fd97bd8b9dd556a0f6c84e459a788c58898446594b55c3aec3e83fcdeea3a08a37b25aad2217c708b3914a0001669ea7d91",
"pids": [
2816
],
"md5": "5a59bcbe764c5d212fbd56521ddaaf0b"
},
{
"yara": [],
"sha1": "31ec17d75befe8265aa90265114b815cf6cd01ea",
"name": "c6ae759a583b315e_chrome.manifest",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\chrome.manifest",
"type": "ASCII text",
"sha256": "c6ae759a583b315e821eeeed66794e0eaa51532edd07ef3572cfe24fcbf0708a",
"urls": [],
"crc32": "F585AB18",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c6ae759a583b315e_chrome.manifest",
"ssdeep": null,
"size": 1240,
"sha512": "a3e8a365c95ea99c6318d7b3ef6878490d52216f207fa378baabd3916d1ca42039eb277bf5f5cc1b8a44a270d2f8a1e71cf3fa5099894dad5e2de52be13718db",
"pids": [
2816
],
"md5": "8ee39ce3e4f7ae47622f90c21892b3a7"
},
{
"yara": [],
"sha1": "14e6e772f411c5ac6e86f4941bb008eacdc11faa",
"name": "a7ce9923f28e7877_reset.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\reset.css",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "a7ce9923f28e78772fc30573dcb7fb33c1bcc2c9a848d86d0d591ad71c370db2",
"urls": [
"http:\/\/meyerweb.com\/eric\/tools\/css\/reset\/"
],
"crc32": "0A1DD031",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a7ce9923f28e7877_reset.css",
"ssdeep": null,
"size": 1473,
"sha512": "11b944c7f07718d828601574abf84022c9c746d5f5865da0dd9afe430f582dcc316d71215907879ff472fa137cedd79bc2d66b6513b4ac4bf704b0363bad2827",
"pids": [
2816
],
"md5": "8834f76aa18c578215f9d9136ecb4ff4"
},
{
"yara": [],
"sha1": "d3f8e45265bea2363e006d13355ddf1744118daf",
"name": "1d4539763237ce23_menus.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menus.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "1d4539763237ce236c91df4985ebf14a3aeafb0bc72a846c9e1e5ae3b587dfde",
"urls": [],
"crc32": "6F5DCB8C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1d4539763237ce23_menus.js",
"ssdeep": null,
"size": 42346,
"sha512": "7506b1641b6313929ab8351aa4abe69ecb40fde49190630390eef45ef0c97b422d8780a031168f1a3f05ce5d6f5558ff4c79c3fe2c72cf7338d9fa98e9855b79",
"pids": [
2816
],
"md5": "892c8e7ec9694f758586da1f5a9a95bd"
},
{
"yara": [],
"sha1": "e742909d9c073b4c724d375a9d0e6ce660e24da3",
"name": "b88404db42294af7_tooltips.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tooltips.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF, LF line terminators",
"sha256": "b88404db42294af7af9451f439807ef79016787cb97b2626576b4d2683b45bfd",
"urls": [],
"crc32": "AD39AF36",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/b88404db42294af7_tooltips.js",
"ssdeep": null,
"size": 2066,
"sha512": "294a08d1e9cf852d74fb799b1c9e2bde2386ef619531a7bd504ce3dec01e421b34d0559d835f9c73bddd32555041a28d533ad2155139475990733551e3f1b9e7",
"pids": [
2816
],
"md5": "baf746032718286dea1a47f3f316125d"
},
{
"yara": [],
"sha1": "64659fd18b057638de5c7c2f3c49fe7918aea2f8",
"name": "a28f596cc3fd597f_arrow.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\arrow.png",
"type": "PNG image data, 32 x 46, 8-bit\/color RGBA, non-interlaced",
"sha256": "a28f596cc3fd597fb597e3649a68ad56b43713005c83894013e206aa1f48b48f",
"urls": [],
"crc32": "81BF21C9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/a28f596cc3fd597f_arrow.png",
"ssdeep": null,
"size": 1948,
"sha512": "a8787b35e2ba3ee87999dc1fff8074b1c347a28fa32036c009303bcd84efd73ff0e282eb795d65197cd69d6f7c8a1dd8f6c301f234fb4bdd747942d1dbdf4714",
"pids": [
2816
],
"md5": "20c75b64c6a399b5d167a88c80a2ec8a"
},
{
"yara": [],
"sha1": "ba7d9c16731d3900bdfd05197ab171d7e8c04d3b",
"name": "d029d4cfbe88cc76_json2.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "d029d4cfbe88cc764e7ea188b61a8941105f0fad2db6c24dc251c395bcff8f76",
"urls": [
"http:\/\/www.JSON.org\/js.html",
"http:\/\/www.JSON.org\/json2.js",
"http:\/\/javascript.crockford.com\/jsmin.html"
],
"crc32": "FA1B9F32",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d029d4cfbe88cc76_json2.js",
"ssdeep": null,
"size": 17384,
"sha512": "c7b1e0f8c2731c64b1b79af8d6fd32483efba8727cca4d9f47bb9e6d4d8a36a963c444c2a2782d53533a86be2ef90ab6b9766b1b10198ce1cefd94a99c3c5a6b",
"pids": [
2816
],
"md5": "adc96d631ee675982230e9b107eb513d"
},
{
"yara": [],
"sha1": "f993cb5c73c6bdd576f79aca6185aac5d9b39783",
"name": "e923be74e82e189f_commons.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\commons.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "e923be74e82e189f2d44c901136b2edeef07c2688a5261632b97ee4ec7994dca",
"urls": [],
"crc32": "FC80186D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e923be74e82e189f_commons.js",
"ssdeep": null,
"size": 10112,
"sha512": "a57ec39ac5baa308be3005df8d15c5bb56d1c6aa9893d5ed55ff13ffba78204caa55f60138ddfb8419e040ca9e3a94b2bc6f3e44d36a438c2416b783dfc203ee",
"pids": [
2816
],
"md5": "ddef3e8796a135508c6a1f24d1a64c1d"
},
{
"yara": [],
"sha1": "e45be6e9685765ace3bf5cf716e8b9fda24d3522",
"name": "6d34386efb332b9e_default.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\default.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "6d34386efb332b9ecca1c1ff85562a0948f0476b31b5951d20c60fc8d4c9e629",
"urls": [],
"crc32": "60A26A54",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/6d34386efb332b9e_default.css",
"ssdeep": null,
"size": 10278,
"sha512": "ffd4449c304d81b35f57e3b0d6fc1fe416f3f96ce7c2f79e59f7b61a344744e9679472bfa91f85d30fef3aec642c7396af9f5eadae41c58f9cc3bd52cbf9d427",
"pids": [
2816
],
"md5": "6e27a9f57e4206ea0be733f3f1de5e13"
},
{
"yara": [],
"sha1": "e254a6490d7f224964d39a270b0bd7cc81b70202",
"name": "09c653f0ed6110d1_ct3329621.fulluserid",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"type": "ASCII text, with no line terminators",
"sha256": "09c653f0ed6110d1fc4079b66242af9b0ef938d919de4d1e556dddfc4e2a7a2e",
"urls": [],
"crc32": "B6E30DDE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/09c653f0ed6110d1_ct3329621.fulluserid",
"ssdeep": null,
"size": 37,
"sha512": "989abc1e98ff261e95fa54b995e192b88ce5a087a0f34056ca6d524932a029257ce2f05cb430fad8c85294d9d153e59224bb1f419ffa25107a276f4ab09fd6e2",
"pids": [
2816
],
"md5": "be8798c66ce765e2f37b6e6627b2730f"
},
{
"yara": [],
"sha1": "1b250bed269230e888e51685fc434a5c09385838",
"name": "e7de70bf867cf291_gadget.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\gadget.css",
"type": "ASCII text",
"sha256": "e7de70bf867cf29156992ad1099a692a830967bdb2713798b0c2fa492f88fcfb",
"urls": [
"http:\/\/weather.webapps.conduitapps.com\/night\/rollover.png",
"http:\/\/weather.webapps.conduitapps.com\/logo_footer.png)",
"http:\/\/weather.webapps.conduitapps.com\/day\/rollover.png",
"http:\/\/weather.webapps.conduitapps.com\/shadow.png)",
"http:\/\/weather.webapps.conduitapps.com\/save-center.png"
],
"crc32": "519EA0A0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e7de70bf867cf291_gadget.css",
"ssdeep": null,
"size": 10423,
"sha512": "a7445854dcb21ee003134a5fe1e0c4255a47063ad37a8d747a7f63101880084be05c13a795533c74caf3ba07bad4de8372b7fc1787ee09ac6b8e8e09338457ab",
"pids": [
2816
],
"md5": "4907f56baba543430693d9b10e03d266"
},
{
"yara": [],
"sha1": "b858cb282617fb0956d960215c8e84d1ccf909c6",
"name": "36a9e7f1c95b82ff_sspv.txt",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\sspv.txt",
"type": "very short file (no magic)",
"sha256": "36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068",
"urls": [],
"crc32": "E96CCF45",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/36a9e7f1c95b82ff_sspv.txt",
"ssdeep": null,
"size": 1,
"sha512": "f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768",
"pids": [
2816
],
"md5": "7215ee9c7d9dc229d2921a40e899ec5f"
},
{
"yara": [],
"sha1": "0e35de35571d5fa98e9478681a49492f265bd5b3",
"name": "2d8ee4fbb80bb4c3_bgpage.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpage.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "2d8ee4fbb80bb4c3abfe487aa31ab4e7ce1109010758dc7d83a01d4f37866cee",
"urls": [
"http:\/\/mediaplayer.webapps.tbccint.com",
"http:\/\/radio.webapps.tbccint.com\/embedded\/equalizer_playing3.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/maximize_closed_rollover3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/bg-closed3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/ajax-loader2.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_arrow.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/play_rollover3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_left.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_right.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/station-panel_middle.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume_rollover2.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/equalizer_stopped3.gif",
"http:\/\/radio.webapps.tbccint.com\/gadget\/divider_station",
"http:\/\/mediaplayer.webapps.conduitapps.com",
"http:\/\/radio.webapps.tbccint.com\/embedded\/minimize_open_normal.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/bg_open4.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/open-app_closed_normal3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Pause_rollover3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/volume_normal.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/open-app_closed_rollover3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/maximize_closed_normal3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/equalizer_error2.gif",
"http:\/\/radio.webapps.tbccint.com\/embedded\/minimize_open_rollover.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/Pause_normal3.png",
"http:\/\/radio.webapps.tbccint.com\/embedded\/play_normal3.png"
],
"crc32": "D3F5312A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/2d8ee4fbb80bb4c3_bgpage.js",
"ssdeep": null,
"size": 34610,
"sha512": "2eecbfbad637e40d104356840dbc3b750a254ad1af097d036d16a7ef6dceabd6c71ec9b83d8e1bc4627afdacf3d299ac1082a699539d2982a10b5444f18e7145",
"pids": [
2816
],
"md5": "ec1945d7015839105827027ab46491e6"
},
{
"yara": [],
"sha1": "1b78614c336710d8fa8ac36c8550de3c8dd90dc5",
"name": "c575369f2820d940_bgpageearly.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpageEarly.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "c575369f2820d94074ba0395fde8575ee13e3198dcbe8dd0e953ba67353db905",
"urls": [],
"crc32": "A54BB675",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c575369f2820d940_bgpageearly.js",
"ssdeep": null,
"size": 563,
"sha512": "3d76951f50ae1b4f7057c2efe3272c80d0a8df0e506651017bd35cdbf690426cecc6a34d406cd2dfda6cb77a0e5b67b585cc85655380af1b89c2188198ffebca",
"pids": [
2816
],
"md5": "2b2120040239a512121a1804d0fe5215"
},
{
"yara": [],
"sha1": "80ca1eecb99b7a062e80179ff4fdc1afa7f40935",
"name": "5635b355d92da0ab_untrusted.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "5635b355d92da0abab59739bc98feca069d3cdddb6936fb6e95f20174fd29b60",
"urls": [],
"crc32": "8D1BEBF6",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/5635b355d92da0ab_untrusted.html",
"ssdeep": null,
"size": 3358,
"sha512": "693682fa04385599456c6fecb29026e054487bd4bed7517241bd1fbd20e7e468862396e930f200a4b7f9bb7bb9ff405c484d29392041fc56734e01e22ee82d34",
"pids": [
2816
],
"md5": "ee6c7c18c60ccde8bfdc03020df0c40c"
},
{
"yara": [],
"sha1": "2ced830fb7e2a5bc632577979843a8282009dc97",
"name": "e9574ca3098c20b8_prev_hover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev_hover.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "e9574ca3098c20b88759a681e55522baca2648541f45a3707913a3ca32554cee",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "FDFC95A0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e9574ca3098c20b8_prev_hover.png",
"ssdeep": null,
"size": 1829,
"sha512": "e44dce88d282f5579a28a80fa25c3a89033c7917f777fcba9def64392144212d51ca11393d73440c529fe617bef74d01e657028432b418c1565bc943c61f4c63",
"pids": [
2816
],
"md5": "6be44044b35e9df46c8105a356db6991"
},
{
"yara": [],
"sha1": "0dbd1d1e57d797e770d629d33d6cdf59f55ec464",
"name": "f3b93ae30ffa5a55_toolbarfirsttimedialog.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "f3b93ae30ffa5a55420451e10f834bf023dd89f9d4a84fbc25d08fdde6c1e10e",
"urls": [],
"crc32": "4831AD49",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/f3b93ae30ffa5a55_toolbarfirsttimedialog.css",
"ssdeep": null,
"size": 11701,
"sha512": "944ee599b3a698ab2cfa0576ea184742400b137abcdfe3c477f926447d1c210b5c2dd0b1f23e28f33bf3c678fcdd7a90db7ba8f0691dc7cb2ef4536e627a6603",
"pids": [
2816
],
"md5": "240858dcad133761be50a2c2399482fc"
},
{
"yara": [],
"sha1": "fb2e4397e8d6542612a60991a7f953a491e1b3b0",
"name": "01956f8932640ea9_arrow-left-strong.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left-strong.png",
"type": "PNG image data, 7 x 7, 8-bit\/color RGBA, non-interlaced",
"sha256": "01956f8932640ea92aeb37c73009df470bb638239e753ffc568e31c8a6c0c833",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "2F816DC9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/01956f8932640ea9_arrow-left-strong.png",
"ssdeep": null,
"size": 1042,
"sha512": "a4b334e4d5842b59657019cfc86c514f31e9c8e8aa7484e4743bf6934f144d0b264d5e190a616078001e8668bbe68dc89ff3ec2613f31e59aae1d6aa9434e34e",
"pids": [
2816
],
"md5": "d144c04272547480c136c67f7468d62a"
},
{
"yara": [],
"sha1": "7421e7db997f33ea458fe9000b23a0f46c12d9d6",
"name": "55ef7405a3377033_ok-button-mouseover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-MouseOver.png",
"type": "PNG image data, 98 x 39, 8-bit\/color RGBA, non-interlaced",
"sha256": "55ef7405a33770335550bf284354a1c525353319ad412a74e004e6f06e6d18a0",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "15D1F3DF",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/55ef7405a3377033_ok-button-mouseover.png",
"ssdeep": null,
"size": 1499,
"sha512": "be75d2eb420126e26793cedf669ab8dc9902e91228f3bdf0a8a209e6e3401c3166129004a005d5402def8fb02c0ecb4d9f8ef14c23837f8d231cd2ce1da17c75",
"pids": [
2816
],
"md5": "9deef0fe3dae006397218840743fa9e5"
},
{
"yara": [],
"sha1": "78b5cd6c7d2609782a0eb8b7f270a59441465455",
"name": "53e8111a4c520bc1_mp_sprites.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\mp_sprites.png",
"type": "PNG image data, 72 x 48, 8-bit\/color RGBA, non-interlaced",
"sha256": "53e8111a4c520bc1c4df796dfcb7fd1c4cf40746a45eb2208d975c9a4bd72d86",
"urls": [],
"crc32": "33085E77",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/53e8111a4c520bc1_mp_sprites.png",
"ssdeep": null,
"size": 4861,
"sha512": "c349e70556319a4de27d09ae81b43ef8ad2eabe7943d4dfefb00c867a1fcc34bf2bb2b27574da137c501bb275fc681ed5a040e1e32571aeeaad77b46045dab31",
"pids": [
2816
],
"md5": "4bc9180c057499f167c20eef236e3329"
},
{
"yara": [],
"sha1": "8b222cbaa67bd7154b5ce9cc28386c14393bd1e3",
"name": "44aad5da2bcee3f8_next_hover.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next_hover.png",
"type": "PNG image data, 67 x 30, 8-bit\/color RGBA, non-interlaced",
"sha256": "44aad5da2bcee3f82bf6b486fc429536da4a5c398ed4ff4149369315a4d8580a",
"urls": [
"http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
"http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
"http:\/\/ns.adobe.com\/xap\/1.0\/"
],
"crc32": "012D9F4F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/44aad5da2bcee3f8_next_hover.png",
"ssdeep": null,
"size": 1828,
"sha512": "39d39b8bb3042d5c11f128b2f14d392d088e3710c252763b25d2e23d6325b145d68a9bef6bec5d7290b352c599a16123247d83c2ac0913efd5174b1d04523294",
"pids": [
2816
],
"md5": "a2da2b3e7098d3407a1667df21149498"
},
{
"yara": [],
"sha1": "9aa707dda25bc0b8a12f1920dfe2825013baaf8b",
"name": "c544d3b400cd433d_searchprotectormanager.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\searchProtectorManager.js",
"type": "UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators",
"sha256": "c544d3b400cd433dae60ac4741d24ae3ecf1bc96966010de33547463429de55e",
"urls": [],
"crc32": "B16D1F73",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/c544d3b400cd433d_searchprotectormanager.js",
"ssdeep": null,
"size": 67821,
"sha512": "beb051b89e7910556270999a2be50792dea004aa94dadf2606cf20312b9d2a0c2f2557b625d81c1cbb0822b3fde51ff9c8ff98e10f4add384f10e86d8fae4672",
"pids": [
2816
],
"md5": "cd6c981d974c2a13d1b71592222f24c5"
},
{
"yara": [],
"sha1": "15562456688cc5abc17f0ca718bbe8e051b21fe3",
"name": "22fb1fd952884b32_menu.icon.apps.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\menu.icon.apps.png",
"type": "PNG image data, 19 x 19, 8-bit\/color RGBA, non-interlaced",
"sha256": "22fb1fd952884b32c3dab19bcd11b9aac330805c9f06dcf19362ee4c23632d6f",
"urls": [],
"crc32": "7D56A75B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/22fb1fd952884b32_menu.icon.apps.png",
"ssdeep": null,
"size": 609,
"sha512": "b3fdd61eb8932fd173ce96f5316cf592425d1c5b7ee12bc3941133a6602a67a264b9c2474dbf6ea81deddd0d7f406b562fc1eb9caac0ac3f46bf5923bbb0e898",
"pids": [
2816
],
"md5": "e919a7a527c694a7900e5bf91c155504"
},
{
"yara": [],
"sha1": "836b94559dc635400063f606f82464a4eaffdf76",
"name": "e90d2bfc978c87b8_radio.gif",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\radio.GIF",
"type": "GIF image data, version 89a, 21 x 21",
"sha256": "e90d2bfc978c87b8b28e37bb55f1f2c97f6b67588d32e3c1221f4221a17e470a",
"urls": [],
"crc32": "9676E9A2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e90d2bfc978c87b8_radio.gif",
"ssdeep": null,
"size": 1163,
"sha512": "fb3e38d5b059be05d129e515d819de9b7583a42e69b6dfe429fc7438df3705d49cc9029bec593877b9db84dcd6e0f5361f8d4b9b373a0796c69a5f809117f75e",
"pids": [
2816
],
"md5": "fb3b7ee5eaedf1979d123bb78a880fe9"
},
{
"yara": [],
"sha1": "7119f5e3e906eaf0f0e81c153f44461571f4553e",
"name": "1d17cdaa6ca20fed_settings.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\settings.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1d17cdaa6ca20fedc5e04b9ce07ea7e7a3036a6952dc52bb2ec1f84048d14fbf",
"urls": [
"http:\/\/client.conduit-storage.com\/analytics\/dialogs\/"
],
"crc32": "4F443015",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1d17cdaa6ca20fed_settings.js",
"ssdeep": null,
"size": 154,
"sha512": "548fbdfeb31ab92871e32b4c807f14552825a6fc704e82352593efbaab62638811ac3174337e527b1ff68296a50f854f08c81fdce05f09a9aca4080105a62c81",
"pids": [
2816
],
"md5": "c906351ef17e61c2c70ee8a6773a7fc1"
},
{
"yara": [],
"sha1": "b574f7b2ee7dc9ab52032fa6c6d7db4b610b9cf8",
"name": "594de0712a96d2e1_scroll_down.png",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_down.png",
"type": "PNG image data, 32 x 14, 8-bit\/color RGB, non-interlaced",
"sha256": "594de0712a96d2e1a5cdf596d2d7d996fb70a51b63687061001d12a4157267ab",
"urls": [],
"crc32": "BD6F8A7A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/594de0712a96d2e1_scroll_down.png",
"ssdeep": null,
"size": 759,
"sha512": "915c2a446281c67337f937778dea52061debbac892a5ba4ddfe01be93fde67bfedc3359fc1003dbc89fed4022c67227453d344b820727afb37e79bd79ec63bae",
"pids": [
2816
],
"md5": "25ffe6fd900b585822ab2c21cf44fdaa"
},
{
"yara": [],
"sha1": "5d64f03be569584e54702eaddfee6161eb6f8913",
"name": "ae9a3ab61599f882_restartdialog.css",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.css",
"type": "ASCII text, with CRLF line terminators",
"sha256": "ae9a3ab61599f882a5eaeae10035c90bc408b20c9d07fb002f41ddb15f196029",
"urls": [],
"crc32": "6522CC2B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/ae9a3ab61599f882_restartdialog.css",
"ssdeep": null,
"size": 3626,
"sha512": "46f03b419d1232d7e6cce78f474594b142641c908cd1378cf5eb8194bedabbb63a44e24720f59951411261c092f1a61fbdf190e9b8488fe792717661e5695dc5",
"pids": [
2816
],
"md5": "2a52b6d95c9941c61666f5a1812bf147"
},
{
"yara": [],
"sha1": "d9e3db1a2226cbbad03b929e725b91b2e70fbbd4",
"name": "1f08a8204a43d524_system.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\system.js",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1f08a8204a43d52430e0c173da1aecbaf5c3e2b8ae277df30af20a22778a8dad",
"urls": [
"http:\/\/www.conduit.com",
"http:\/\/apps.conduit.com\/search?SearchSourceOrigin=47"
],
"crc32": "FAE82217",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/1f08a8204a43d524_system.js",
"ssdeep": null,
"size": 2262,
"sha512": "b899d8bb102ee3c3e772cb6440e0bde09cf17ec6f23cfb3ceff1dbd80c76b76efbc67840f14d0a00383210f3318761e590ab7352754f38ee11184c07f331cf66",
"pids": [
2816
],
"md5": "6a27d645010f655b0b74f83295bf5d6b"
},
{
"yara": [],
"sha1": "dd761fd2bbfbac75c876369495639a4114c9c06c",
"name": "d0927eb4c06fc051_settings.html",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\Settings.html",
"type": "HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "d0927eb4c06fc051eb03b4c287a4711390716d80e2cab1d73eea5147dfe30532",
"urls": [],
"crc32": "991DC91A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/d0927eb4c06fc051_settings.html",
"ssdeep": null,
"size": 2564,
"sha512": "399f99e844fe521e5377e5fe13f813cf3487fa2f835da6d17c09b213442cad9a7895c86063784ceb6bdaee57aba1415a26b90e5cde8e42e566d835de70a739ed",
"pids": [
2816
],
"md5": "7405ebdacd3628f10d7d7fc574eac2ce"
},
{
"yara": [],
"sha1": "bf22cc31a72128ae0967ed7b0b0d6001caa0727a",
"name": "e7ffa1480a36e909_jquery.jscrollpane.min.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.jscrollpane.min.js",
"type": "ASCII text, with very long lines, with CRLF, LF line terminators",
"sha256": "e7ffa1480a36e9096ceb14c49238d1d6a11adf342789915349640d5914e959ab",
"urls": [
"http:\/\/jscrollpane.kelvinluck.com\/"
],
"crc32": "265772D3",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/e7ffa1480a36e909_jquery.jscrollpane.min.js",
"ssdeep": null,
"size": 14990,
"sha512": "766750ec6893c45d3d4dbeb81ca3bb734580444189bd5726edce384050884053f77e503a749cb019c8b3a0a70846c0d2fa146ac5d54b084df43b19d088b6c489",
"pids": [
2816
],
"md5": "d0e1a077baea83155021a2b7d3caf27b"
},
{
"yara": [],
"sha1": "a76bbc179e955027259b6814789f108b033d5d88",
"name": "114666690a92283a_renderhandler.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\renderHandler.js",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "114666690a92283a87f6e4d52c67c60aa6f55464382c816b1cb798b9062a86e1",
"urls": [],
"crc32": "6524B9E1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/114666690a92283a_renderhandler.js",
"ssdeep": null,
"size": 6957,
"sha512": "eb5a9cd9f2c4b06d45207ae2f36042180b0f38f1f8b6875439d5a1157f937180b21a5fe359461d83b51babcc06dd8b5f013ad90986bdb701740f6dd3d203560a",
"pids": [
2816
],
"md5": "6adffad56a25fbebeb7845f571bdf441"
},
{
"yara": [],
"sha1": "ef1981b8ca1fbc5dae4a7c33c2e70f9c217155cb",
"name": "4ed7d9bfa5a33a23_newPrefs1.js",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"type": "ASCII text, with very long lines, with CRLF line terminators",
"sha256": "4ed7d9bfa5a33a23eebeb3451df2771984f393bf5b0010535a07abe0e1e2376c",
"urls": [],
"crc32": "28E77B0D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/9426\/files\/4ed7d9bfa5a33a23_newPrefs1.js",
"ssdeep": null,
"size": 7625,
"sha512": "ac2bb02058f4e71b21594d67feca6976df20ee5747759b2e47cc6d19c304f1833f28f1551ba4308c67fdfe655b3d5ab36152b322c6b0074ea051a8e97810b23a",
"pids": [
2816
],
"md5": "009e764b21c1ecd491f5f419ed277b6d"
}
]Generic
[
{
"process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"process_name": "59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"pid": 2816,
"summary": {
"file_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\popup2.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\options.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascript.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\contentManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-LTR.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\navigationTests.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\priceGongMigration.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\html5shiv.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\information.popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\settings.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\information.popup.html",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\setup.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\inbox.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.sf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\background.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\sdk.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\chrome.manifest",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\dd-arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\higlighter_script.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\emailNotifier.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\historyProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\warning.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\RetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-LTR.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4moz.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\corelibs.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\RetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\important.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Providers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\MozillaRetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerBack.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_onclick_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\PIE.htc",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\main.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\npFirefoxPlugin.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\information.popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\ie_fix.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Image.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\buttonSprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\AccountManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\SearchApp_Ant.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\scroller.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\autoComplete.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\POP3Executer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.tmpl.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_up.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\Settings.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\resize.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\mp_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\FirefoxCtype.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-on.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApiFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\yoxscroll.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\showHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\html5SupportIe.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\embedded.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide-click.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\radioCommon.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailDecoder.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\BrowserContextMenuManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\NotificationPopup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\popups.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Inboxer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\options.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\weather.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\IMAPExecuter.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\menu_arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\Main.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menus.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\badges.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\Thumbs.db",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\lgf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\BackStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\renderHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tooltips.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\new_chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\menu.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\selectionListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-mouseover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\LAB.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\bgPage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-off.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\toolbarapi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.textshadow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.6.2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.ellipsis.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\options.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.5.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\toolbar.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\manifest.mf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\generalDialogStyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\suggestProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\view.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\title.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embeddedEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\EN.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\stations.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\webAppUtils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.controller.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\defaultEngineImage.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\NotificationSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\general.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\help.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\facebook.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\Commons.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\MozillaRetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\scrollers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectEmbedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\info.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\default.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\SettingsManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectPopup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\fallback24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.rsa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\app-store-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\OK_Btn.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\serviceLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\BrowserDetect.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\Settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\layoutManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_down.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsw5930.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\date-functions.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\gadget.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Timer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\ToolbarAndAppsSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\aboutBox.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\settingsIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\browserAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\frontstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\RetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\downArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\version.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\FrontStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\settings.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\uus.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\jquery.ezmark.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\localstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\bgPage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notificationUIManger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\gf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\stepper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\autoCompleteManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Invoker.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.autocomplete.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\providerHelper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\information.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\AppName.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\aboutBox.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\menu.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\DialogsAPI.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\ie_back.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\player.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en_rtl.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\logic.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\truste_welcome.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\np-mswmp.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery-ui-1.8.10.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4conduit.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Translation.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\closeIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ajax-loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\ok-button.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.4.1.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\searchProtectorManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\sspv.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\xPath.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.viewPerformanceLog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\system.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\mamModule.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\ui.stepper.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.text-overflow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\al.view.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf_ie.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Topbg.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popupTransparent.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\radio.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailMerger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\separation-line.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\divider.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\upArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascriptStub4Release.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\menu.icon.apps.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\sprite-ok-button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notification.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\newMain.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\settings.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\searchListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\SearchProtector.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\MozillaRetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\ie8.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\loader-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_mouseover_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\commons.js"
],
"file_recreated": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp"
],
"directory_created": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts"
],
"dll_loaded": [
"PROPSYS.dll",
"C:\\Windows\\system32\\pnrpnsp.dll",
"C:\\Windows\\System32\\mswsock.dll",
"apphelp.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"DNSAPI.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"kernel32.dll",
"C:\\Windows\\system32\\ole32.dll",
"dwmapi.dll",
"C:\\Windows\\system32\\napinsp.dll",
"ntmarta.dll",
"API-MS-WIN-Service-Management-L1-1-0.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
"DHCPCSVC.DLL",
"OLEAUT32.DLL",
"RASMAN.DLL",
"ole32.dll",
"CRYPTSP.dll",
"API-MS-Win-Security-SDDL-L1-1-0.dll",
"SHFOLDER",
"rtutils.dll",
"IPHLPAPI.DLL",
"API-MS-WIN-Service-winsvc-L1-1-0.dll",
"wininet.dll",
"C:\\Windows\\SysWOW64\\oleaut32.dll",
"OLEAUT32.dll",
"profapi.dll",
"SHELL32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Windows\\System32\\winrnr.dll",
"comctl32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"RichEd20",
"ADVAPI32.dll",
"rpcrt4.dll",
"SETUPAPI.dll",
"WS2_32.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll"
],
"file_opened": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Windows\\AppPatch\\sysmain.sdb",
"C:\\",
"C:\\Users\\cuck\\AppData",
"C:\\Windows\\System32\\",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini",
"C:\\Windows\\System32\\en-US\\shdocvw.dll.mui",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\Users\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\Downloads\\desktop.ini"
],
"connects_host": [
"setupapi.toolbar.tbccint.com"
],
"regkey_opened": [
"HKEY_CURRENT_USER\\Software\\Conduit\\AppPaths",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\DnsClient",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\KnownFolderSettings",
"HKEY_CLASSES_ROOT\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rdf\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\AccessProviders",
"HKEY_CLASSES_ROOT\\.js",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\CurVer",
"HKEY_CLASSES_ROOT\\*",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\{2F711B17-773C-41D4-93FA-7F23EDCECB66}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.js",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\ShellEx\\IconHandler",
"HKEY_CLASSES_ROOT\\inifile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\ShellEx\\IconHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tmp\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Rpc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"HKEY_CLASSES_ROOT\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Objects\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}",
"HKEY_CURRENT_USER\\Interface\\{2A1C9EB2-DF62-4154-B800-63278FCB8037}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\SmartBar\\UninstallerData\\CT3329621\\FF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{55272A00-42CB-11CE-8135-00AA004BB851}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.rdf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Folder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rdf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\PropertyHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_CLASSES_ROOT\\.ini\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\text",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_CURRENT_USER\\Interface\\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}",
"HKEY_CLASSES_ROOT\\.js\\OpenWithProgids",
"HKEY_CLASSES_ROOT\\.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32",
"HKEY_CURRENT_USER\\${_REG_ISM_VALUES_KEY_PATH_}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocHandler32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini\\UserChoice",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
"HKEY_CURRENT_USER\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\DocObject",
"HKEY_CLASSES_ROOT\\JSFile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.js\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\*\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\PropertyBag",
"HKEY_CURRENT_USER\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\OleAut",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\{2F711B17-773C-41D4-93FA-7F23EDCECB66}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_CLASSES_ROOT\\.rdf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.ini",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}",
"HKEY_CLASSES_ROOT\\.tmp\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\ShellEx\\PropertyHandler",
"HKEY_CLASSES_ROOT\\Unknown",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\SmartBar\\FF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Wpad",
"HKEY_CLASSES_ROOT\\.rdf\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\System\\DNSClient",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}",
"HKEY_CURRENT_USER\\Interface\\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}",
"HKEY_CURRENT_USER\\Interface\\{55272A00-42CB-11CE-8135-00AA004BB851}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\TreatAs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}",
"HKEY_CURRENT_USER\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\{2F711B17-773C-41D4-93FA-7F23EDCECB66}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASMANCS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ini\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\Progid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\ShellEx\\PropertyHandler",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ini",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rdf",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.tmp",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\SmartBar\\AppPaths",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}",
"HKEY_CLASSES_ROOT\\AllFilesystemObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\MS Shell Dlg 2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
"HKEY_CLASSES_ROOT\\.ini",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\UsersFiles\\NameSpace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\System",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}",
"HKEY_CLASSES_ROOT\\SystemFileAssociations\\.js",
"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\UsersFiles\\NameSpace\\DelegateFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\Progid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.tmp",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
"HKEY_CLASSES_ROOT\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\Mozilla Firefox",
"HKEY_CURRENT_USER\\Interface\\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\crypt32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}",
"HKEY_CLASSES_ROOT\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\ShellEx\\PropertyHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.js",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
],
"resolves_host": [
"wpad",
"cuckpc"
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\popup2.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\options.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascript.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\contentManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-LTR.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\navigationTests.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\priceGongMigration.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\html5shiv.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\information.popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\settings.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\information.popup.html",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\inbox.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.sf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\background.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\sdk.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\chrome.manifest",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\dd-arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\higlighter_script.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\emailNotifier.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\historyProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\warning.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\RetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.autocomplete.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4moz.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\corelibs.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\RetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\important.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Providers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\MozillaRetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerBack.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_onclick_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\PIE.htc",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\main.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\npFirefoxPlugin.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\information.popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\ie_fix.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Image.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\buttonSprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\AccountManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\SearchApp_Ant.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next_hover.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\scroller.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\preferences.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\framework.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\autoComplete.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\POP3Executer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.tmpl.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_up.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\Settings.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\resize.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\mp_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\FirefoxCtype.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-on.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApiFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\yoxscroll.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\showHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\html5SupportIe.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\embedded.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide-click.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\radioCommon.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailDecoder.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\jquery.alerts.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\BrowserContextMenuManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\localization.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\NotificationPopup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\popups.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Inboxer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\options.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\powered-by.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\weather.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.xml2json.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\IMAPExecuter.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\menu_arrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\Main.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menus.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\badges.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\main.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\Thumbs.db",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\lgf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\BackStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\renderHandler.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tooltips.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\new_chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.scrollTo-1.4.2-min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\menu.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\logo.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\selectionListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-mouseover-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-mouseover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\LAB.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\bgPage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\chevron_sprites.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\checkbox-check-off.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\toolbarapi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\jquery.textshadow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.6.2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\jquery.ellipsis.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\options.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\lgf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.5.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\toolbar.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\manifest.mf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\bg-hide.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\2.0--spec--kicker.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\generalDialogStyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer_hover.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\suggestProvider.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\ToolbarFirstTimeDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\view.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\title.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\embeddedEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\EN.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\stations.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-RTL.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\webAppUtils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.controller.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\arrows.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\defaultEngineImage.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-MouseOver.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\NotificationSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\truste.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\general.css",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\help.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\facebook.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\Prev.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\Commons.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\MozillaRetentionDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\scrollers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectEmbedded.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.mousewheel.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\info.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\default.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\SettingsManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\script2injectPopup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\fallback24.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\zigbert.rsa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\app-store-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\OK_Btn.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-down.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\serviceLayer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\excanvas.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\BrowserDetect.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\utils.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\Settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\layoutManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\scroll_down.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\date-functions.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\gadget.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Timer.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\ToolbarAndAppsSettings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\aboutBox.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\settingsIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\jquery.jscrollpane.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\browserAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\frontstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\RetentionDialog.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\appManager.model.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\separator.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\downArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\version.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\embedded.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\FrontStage.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\settings.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\uus.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\jquery.ezmark.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\bgPage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notificationUIManger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\jquery-ui-1.8.10.custom.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left-strong.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\gf.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\stepper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\common.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\autoCompleteManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\popup.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Close.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Invoker.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\x-default-LTR.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\providerHelper.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\information.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\AppName.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\aboutBox.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\agree.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\AbstractionLayerFront.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\OK-Button-OnClick.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\backstage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\menu.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\DialogsAPI.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\ie_back.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\player.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\dialog_tip_left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en_rtl.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\logic.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Popup.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\truste_welcome.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\np-mswmp.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\json2.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\jquery-ui-1.8.10.custom.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\untrusted.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\log4conduit.jsm",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\Translation.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\closeIcon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\reset.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ajax-loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\ok-button.png",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\jquery-1.4.1.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_transparent.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\trusted.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\popup.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\searchProtectorManager.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\history--x-default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\sspv.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\xPath.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\bubble.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\al.viewPerformanceLog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\jquery.jscrollpane.min.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\system.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\minibrowser.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white_34.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\mamModule.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\ui.stepper.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\icons.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\webAppApi.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-right.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.text-overflow.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\toolbaroverlay.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\content-pattern.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\al.view.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\gf_ie.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\Topbg.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\popupTransparent.xul",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\radio.GIF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\MailMerger.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\bgpage.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\Next.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\x.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\gadget.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\arrow-left.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\ic_Closer.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\iestyle.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\separation-line.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\en.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\divider.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\gf.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\upArrow.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\ie7styles.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\log4javascriptStub4Release.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\menu.icon.apps.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\sprite-ok-button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\notification.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\restartDialog.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\newMain.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\settings.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\bgpage.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\content-sep.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\loader.gif",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\searchListener.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\SearchProtector.css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\pg_offers.html",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_right_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\bgpageEarly.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\MozillaRetentionDialog.view.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\ie8.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\rounded_corners_left_white.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\loader-icon.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\OK-Button-Default.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\ie8_mouseover_button.png",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\settings.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\commons.js"
],
"regkey_deleted": [
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.installUsageEarly",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.installUsage"
],
"file_deleted": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsw5930.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp"
],
"file_exists": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib\\",
"C:\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\script\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults\\preferences\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\res\\",
"C:\\Windows\\System32\\propsys.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\setup.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\tbccint.xml",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\msd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\",
"C:\\Windows\\SysWOW64\\propsys.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.fullUserID",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsy5E63.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\Optimizer\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style\\rsx",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\modules\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\dark\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\localstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gadgetFrame\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.dum",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images\\light",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\Css\\",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\sl",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\custom-theme\\",
"C:\\Users\\cuck",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\css",
"C:\\Users\\cuck\\AppData\\Local",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\core\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\META-INF\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view\\style",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\view",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\components\\mam\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\agreement",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\gf\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\css\\custom-theme\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\js\\resources\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\restart\\images\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\resources",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\lib",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\aboutBox\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\api\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.jscrollpane\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\HIGHLIGHTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spsd\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\PRICE_GONG\\images",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\WEATHER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\resources\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\MULTI_RSS\\js",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\TWITTER",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp\\spbd\\images",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\NOTIFICATION\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\js\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\menu\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\APPLICATION_BUTTON\\Js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\js",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ac\\img",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\SEARCH\\buildSettings\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\options\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\logic\\uninstall\\dialog\\css",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\EMAIL_NOTIFIER\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\sp",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\wa\\RADIO_PLAYER\\css\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\lib\\jquery.alerts",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\tb\\al\\ui\\dlg\\ftd\\images\\"
],
"mutex": [
"IESQMMUTEX_0_208"
],
"file_failed": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\localstore.rdf",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll"
],
"wmi_query": [
"SELECT MacAddress FROM Win32_NetworkAdapter WHERE Manufacturer != 'Microsoft' AND MacAddress IS NOT NULL AND MacAddress != '' AND (ConfigManagerErrorCode = 0 OR (ConfigManagerErrorCode = 22 AND NetConnectionStatus = 0)) AND NOT PNPDeviceID LIKE 'ROOT\\\\%'",
"SELECT ProcessorId FROM Win32_Processor WHERE DeviceID = 'CPU0'"
],
"guid": [
"{add8ba80-002b-11d0-8f0f-00c04fd7d062}",
"{dcb00c01-570f-4a9b-8d69-199fdba5723b}",
"{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
"{f309ad18-d86a-11d0-a075-00c04fb68820}",
"{a47979d2-c419-11d9-a5b4-001185ad2b89}",
"{00000000-0000-0000-c000-000000000046}",
"{4590f811-1d3a-11d0-891f-00aa004b2e24}",
"{44aca674-e8fc-11d0-a07c-00c04fb68820}",
"{9e175b6d-f52a-11d8-b9a5-505054503030}",
"{d0074ffd-570f-4a9b-8d69-199fdba5723b}",
"{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
"{7c857801-7381-11cf-884d-00aa004b2e24}",
"{b056521a-9b10-425e-b616-1fcd828db3b1}",
"{674b6698-ee92-11d0-ad71-00c04fd8fdff}",
"{8bc3f05e-d86b-11d0-a075-00c04fb68820}",
"{dffacdc5-679f-4156-8947-c5c76bc0b67f}",
"{d5f569d0-593b-101a-b569-08002b2dbf7a}",
"{dc12a687-737f-11cf-884d-00aa004b2e24}",
"{dcb00000-570f-4a9b-8d69-199fdba5723b}",
"{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsl5940.tmp",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\Users\\desktop.ini",
"C:\\Users\\cuck\\Downloads\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999.bin",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\version.txt",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\defaults\\preferences\\defaults.js",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Attributes",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\defaultKeys",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\CopyFileChunkSize",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\\DefaultConnectionSettings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\crypt32\\DebugHeapFlags",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableFileTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\MaxRpcSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\AutoProxyDetectType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableImprovedZoneCheck",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Icon",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Stream",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Mozilla\\Mozilla Firefox\\CURRENTVERSION",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Security_HKLM_only",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\ConsoleTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProgramData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\ComputerName\\ActiveComputerName\\ComputerName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Domain",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Shell Folders\\Common AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\MS Shell Dlg 2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\NoFileFolderConnection",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.js\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableConsoleTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\WpadLastNetwork",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\FileDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\JSFile\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.UserID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\LoadWithoutCOM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\MaxFileSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\UsersFiles\\NameSpace\\DelegateFolders\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F} {ADD8BA80-002B-11D0-8F0F-00C04FD7D062} 0xFFFF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\HideFolderVerbs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MaxUndoItems",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\Tcpip\\Parameters\\Hostname",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{054FAE61-4DD8-4787-80B6-090220C4B700}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{B196B286-BAB4-101A-B69C-00AA00341D07}\\InprocServer32\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F1B32785-6FBA-4FCF-9D55-7B8E7F157091}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\CopyFileBufferedSynchronousIo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{EE32E446-31CA-4ABA-814F-A5EBD2FD6D5E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B0DB17D-9CD2-4A93-9733-46CC89022E7C}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52528A6B-B9E3-4ADD-B60D-588C2DBA842D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\CopyFileOverlappedCount",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{15CA69B3-30EE-49C1-ACE1-6B5EC372AFB5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A520A1A4-1780-4FF6-BD18-167343C5AF16}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A74AEB-AEB4-465C-A014-D097EE346D63}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8AD10C31-2ADB-4296-A8F7-E4701232C972}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{76FC4E2D-D6AD-4519-A663-37BD56068185}\\Name",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OOBEInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A75D362E-50FC-4FB7-AC2C-A8BEAA314493}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{AE50C081-EBD2-438A-8655-8A092E34987A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B94237E7-57AC-4347-9151-B08C6C32D1F7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F3CE0F7C-4901-4ACC-8648-D5D44B04EF8F}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\Name",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{10C07CD0-EF91-4567-B850-448B77CB37F9}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B250C668-F57D-4EE1-A63C-290EE7D1AA1F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{724EF170-A42D-4FEF-9F26-B60E846FBA4F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{54EED2E0-E7CA-4FDB-9148-0F4247291CFA}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{8983036C-27C0-404B-8F08-102D10DCFD74}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{491E922F-5643-4AF4-A7EB-4E7A138D8174}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{190337D1-B8CA-4121-A639-6D472D16972A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D20BEEC4-5CA8-4905-AE3B-BF251EA09B53}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D9DC8A3B-B784-432E-A781-5A1130A75963}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{43668BF8-C14E-49B2-97C9-747784D784B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4900540-2379-4C75-844B-64E6FAF8716B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B7534046-3ECB-4C18-BE4E-64CD4CB7D6AC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DEBF2536-E1A8-4C59-B6A2-414586476AEA}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{55272A00-42CB-11CE-8135-00AA004BB851}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{859EAD94-2E85-48AD-A71A-0969CB56A6CD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{6F0CD92B-2E97-45D1-88FF-B0D186B8DEDD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0F214138-B1D3-4A90-BBA9-27CBC0C5389A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2112AB0A-C86A-4FFE-A368-0DE96E47012E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C870044B-F49E-4126-A9C3-B52A1FF411E8}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A990AE9F-A03B-4E80-94BC-9912D7504104}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2B0F765D-C0E9-4171-908E-08A611B84FF6}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1A6FDBA2-F42D-4358-A798-B74D745926C5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BFEFB45-347D-4006-A5BE-AC0CB0567192}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DF7266AC-9274-4867-8D55-3BD661DE872D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9274BD8D-CFD1-41C3-B35E-B13F55A758F4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A305CE99-F527-492B-8B1A-7E76FA98D6E4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCB5256F-79F6-4CEE-B725-DC34E402FD46}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{9E52AB10-F80D-49DF-ACB8-4330F5687855}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{915221FB-9EFE-4BDA-8FD7-F78DCA774F87}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A302545D-DEFF-464B-ABE8-61C8648D939B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C1BAE2D0-10DF-4334-BEDD-7AA20B227A9D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Advanced\\MaxUndoItems",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4D9F7874-4E0C-4904-967B-40B0D20C3E4B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B88F4DAA-E7BD-49A9-B74D-02885A5DC765}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{69D2CF90-FC33-4FB7-9A0C-EBB0F0FCB43C}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{E555AB60-153B-4D17-9F04-A5FE99FC15EC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{BCBD3057-CA5C-4622-B42D-BC56DB0AE516}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2A00375E-224C-49DE-B8D1-440DF7EF3DDC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{289A9A43-BE44-4057-A41B-587A76D7E7F9}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0AC0837C-BBF8-452A-850D-79D08E667CA7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{48DAF80B-E6CF-4F4E-B800-0E69D84EE384}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{352481E8-33BE-4251-BA85-6007CAEDCF9D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{98EC0E18-2098-4D44-8644-66979315A281}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D0384E7D-BAC3-4797-8F14-CBA229B392B5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C5ABBF53-E17F-4121-8900-86626FC2C973}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE61D971-5EBC-4F02-A3A9-6C82895E5C04}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2C36C0AA-5812-4B87-BFD0-4CD0DFB19B39}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7B396E54-9EC5-4300-BE0A-2482EBAE1A26}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A63293E8-664E-48DB-A079-DF759E0509F7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CD7AEE2-2219-4A67-B85D-6C9CE15660CB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5CE4A5E9-E4EB-479D-B89F-130C02886155}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath"
],
"directory_enumerated": [
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newlocalstore.rdf",
"C:\\Windows\\System32\\*.*",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.UserID",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\rasphone.pbk",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\*.*",
"C:\\Windows\\System32\\ras\\*.pbk",
"C:\\Windows\\System32",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.installUsageEarly.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\nsu94B6.tmp",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\xpi\\install.rdf",
"C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\rasphone.pbk",
"C:\\Windows\\System32\\shdocvw.dll",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\CT3329621\\CT3329621.xpi",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621\\CT3329621.installUsage.txt",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*.pbk",
"C:\\Users\\cuck",
"C:\\ProgramData\\Microsoft\\Network\\Connections\\Pbk\\*.pbk",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\CT3329621",
"C:\\Windows",
"C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\newPrefs1.js"
],
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableConsoleTracing",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.fullUserID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecisionReason",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\defaultKeys",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecision",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.searchUninstallUserMode",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadNetworkName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\EnableFileTracing",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections\\DefaultConnectionSettings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\MaxFileSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileTracingMask",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecisionTime",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\WpadLastNetwork",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.dum",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\smartbar.machineId",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.UserID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\ConsoleTracingMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Tracing\\RASMANCS\\FileDirectory",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\UninstallerData\\CT3329621\\FF\\ServiceMapURL",
"HKEY_CURRENT_USER\\Software\\AppDataLow\\Software\\Smartbar\\FF\\CT3329621.searchUserMode"
]
},
"first_seen": 1599641586.84375,
"ppid": 2016
},
{
"process_path": "C:\\Windows\\System32\\lsass.exe",
"process_name": "lsass.exe",
"pid": 476,
"summary": {},
"first_seen": 1599641586.53125,
"ppid": 376
},
{
"process_path": "C:\\Windows\\explorer.exe",
"process_name": "explorer.exe",
"pid": 1788,
"summary": {
"regkey_written": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\FFlags",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByDirection",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2\\Settings",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Sort",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\LogicalViewMode",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Mode",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\UserStartTime",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\LastAdvertisement",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupView",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ColInfo",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\IconStreams",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:FMTID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PastIconsStream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Streams\\Desktop\\TaskbarWinXP",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\IconSize",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:PID"
],
"file_opened": [
"C:\\"
],
"regkey_opened": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2"
],
"regkey_deleted": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupCollapseState",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemOrder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemPos800x600x96(1)"
],
"file_exists": [
"C:\\cuckoo_1788.ini",
"C:\\Users\\cuck\\Desktop"
],
"mutex": [
"Local\\Shell.CMruPidlList"
],
"file_failed": [
"C:\\cuckoo_1788.ini"
],
"guid": [
"{2fb499a3-cfce-480f-a5f3-2453db7a2b7a}",
"{660b90c8-73a9-4b58-8cae-355b7f55341b}",
"{46a6eeff-908e-4dc6-92a6-64be9177b41c}",
"{42aedc87-2188-41fd-b9a3-0c966feabec1}"
],
"regkey_read": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlot",
"HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PromotedIconCache",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClearRecentDocsOnExit",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU Size"
]
},
"first_seen": 1599641591.671249,
"ppid": 1740
}
]Signatures
[
{
"markcount": 1,
"families": [],
"description": "Queries for the computername",
"severity": 1,
"marks": [
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1599641591.42175,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 47519
}
],
"references": [],
"name": "antivm_queries_computername"
},
{
"markcount": 1,
"families": [],
"description": "Tries to locate where the browsers are installed",
"severity": 1,
"marks": [
{
"category": "registry",
"ioc": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Mozilla\\Mozilla Firefox\\CURRENTVERSION",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "locates_browser"
},
{
"markcount": 1,
"families": [],
"description": "Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available",
"severity": 1,
"marks": [
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "GlobalMemoryStatusEx",
"return_value": 1,
"arguments": {},
"time": 1599641587.24975,
"tid": 2588,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 3808
}
],
"references": [],
"name": "antivm_memory_available"
},
{
"markcount": 1,
"families": [],
"description": "The executable contains unknown PE section names indicative of a packer (could be a false positive)",
"severity": 1,
"marks": [
{
"category": "section",
"ioc": ".ndata",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "pe_features"
},
{
"markcount": 1,
"families": [],
"description": "Allocates read-write-execute memory (usually to unpack itself)",
"severity": 2,
"marks": [
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2816,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x75094000"
},
"time": 1599641587.29675,
"tid": 2420,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2816,
"type": "call",
"cid": 4158
}
],
"references": [],
"name": "allocates_rwx"
},
{
"markcount": 0,
"families": [],
"description": "Checks whether any human activity is being performed by constantly checking whether the foreground window changed",
"severity": 2,
"marks": [],
"references": [
"https:\/\/www.virusbtn.com\/virusbulletin\/archive\/2015\/09\/vb201509-custom-packer.dkb"
],
"name": "antisandbox_foregroundwindows"
},
{
"markcount": 1,
"families": [],
"description": "Steals private information from local Internet browsers",
"severity": 2,
"marks": [
{
"category": "registry",
"ioc": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Mozilla\\Mozilla Firefox",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "infostealer_browser"
},
{
"markcount": 10,
"families": [],
"description": "Drops an executable to the user AppData folder",
"severity": 2,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\np-mswmp.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsPrefsJs.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\System.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsUtils.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\InetC.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\ctypes\\FirefoxCtype.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsJSON.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Plugins\\npFirefoxPlugin.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsCRandom.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\nsb5951.tmp\\nsZip.dll",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "exe_appdata"
},
{
"markcount": 2,
"families": [],
"description": "Executes one or more WMI queries",
"severity": 2,
"marks": [
{
"category": "wmi",
"ioc": "SELECT MacAddress FROM Win32_NetworkAdapter WHERE Manufacturer != 'Microsoft' AND MacAddress IS NOT NULL AND MacAddress != '' AND (ConfigManagerErrorCode = 0 OR (ConfigManagerErrorCode = 22 AND NetConnectionStatus = 0)) AND NOT PNPDeviceID LIKE 'ROOT\\\\%'",
"type": "ioc",
"description": null
},
{
"category": "wmi",
"ioc": "SELECT ProcessorId FROM Win32_Processor WHERE DeviceID = 'CPU0'",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "has_wmi"
},
{
"markcount": 1,
"families": [],
"description": "Checks adapter addresses which can be used to detect virtual network interfaces",
"severity": 2,
"marks": [
{
"call": {
"category": "network",
"status": 0,
"stacktrace": [],
"last_error": 0,
"nt_status": -1073741772,
"api": "GetAdaptersAddresses",
"return_value": 111,
"arguments": {
"flags": 0,
"family": 0
},
"time": 1599641588.67175,
"tid": 2820,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 43851
}
],
"references": [],
"name": "antivm_network_adapters"
},
{
"markcount": 38,
"families": [],
"description": "Checks for the Locally Unique Identifier on the system for a suspicious privilege",
"severity": 2,
"marks": [
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44247
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44250
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44253
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44257
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44261
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44265
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44269
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44273
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44277
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.32775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44281
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44285
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44289
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44293
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44297
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44301
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44305
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44309
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44313
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44317
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44321
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44325
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44329
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44333
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44337
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44341
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44345
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44349
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44353
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44357
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44361
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44365
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44369
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44372
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44376
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44380
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44384
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44388
},
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "LookupPrivilegeValueW",
"return_value": 1,
"arguments": {
"system_name": "",
"privilege_name": "SeDebugPrivilege"
},
"time": 1599641591.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 44392
}
],
"references": [],
"name": "privilege_luid_check"
},
{
"markcount": 2,
"families": [],
"description": "Executes one or more WMI queries which can be used to identify virtual machines",
"severity": 2,
"marks": [
{
"category": "wmi",
"ioc": "SELECT ProcessorId FROM Win32_Processor WHERE DeviceID = 'CPU0'",
"type": "ioc",
"description": null
},
{
"category": "wmi",
"ioc": "SELECT MacAddress FROM Win32_NetworkAdapter WHERE Manufacturer != 'Microsoft' AND MacAddress IS NOT NULL AND MacAddress != '' AND (ConfigManagerErrorCode = 0 OR (ConfigManagerErrorCode = 22 AND NetConnectionStatus = 0)) AND NOT PNPDeviceID LIKE 'ROOT\\\\%'",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "wmi_antivm"
},
{
"markcount": 2,
"families": [],
"description": "Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config",
"severity": 3,
"marks": [
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "NtSetValueKey",
"return_value": 0,
"arguments": {
"index": 0,
"key_handle": "0x0000000000000f84",
"value": "\u0014\u0000\u0000\u0000\u0005\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0010\u0000\u0000\u0000\u0014\u0000\u0000\u0000IL \u0006\u0010\u0000$\u0000\u0018\u0000\u0010\u0000\u0010\u0000\u00ff\u00ff\u00ff\u00ff!\u0010\u00ff\u00ff\u00ff\u00ff\u00ff\u00ff\u00ff\u00ffBM6\u0000\u0000\u0000\u0000\u0000\u0000\u00006\u0000\u0000\u0000(\u0000\u0000\u0000\u0010\u0000\u0000\u0000@\u0002\u0000\u0000\u0001\u0000 \u0000\u0000\u0000\u0000\u0000\u0000\u0090\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
"reg_type": 3,
"regkey": "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PastIconsStream"
},
"time": 1599641167.42452,
"tid": 1828,
"flags": {
"reg_type": "REG_BINARY"
}
},
"pid": 1788,
"type": "call",
"cid": 539
},
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "NtSetValueKey",
"return_value": 0,
"arguments": {
"index": 0,
"key_handle": "0x00000000000001e0",
"value": "\u0014\u0000\u0000\u0000\u0007\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0004\u0000\u0000\u0000\u0014\u0000\u0000\u0000{\u0000S\u00003\u00008\u0000O\u0000S\u00004\u00000\u00004\u0000-\u00001\u0000Q\u00004\u00003\u0000-\u00004\u00002\u0000S\u00002\u0000-\u00009\u00003\u00000\u00005\u0000-\u00006\u00007\u0000Q\u0000R\u00000\u0000O\u00002\u00008\u0000S\u0000P\u00002\u00003\u0000}\u0000\\\u0000r\u0000k\u0000c\u0000y\u0000b\u0000e\u0000r\u0000e\u0000.\u0000r\u0000k\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u00e4\u0007\t\u0000F\u0000b\u0000y\u0000i\u0000r\u0000 \u0000C\u0000P\u0000 \u0000v\u0000f\u0000f\u0000h\u0000r\u0000f\u0000:\u0000 \u00001\u0000 \u0000z\u0000r\u0000f\u0000f\u0000n\u0000t\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u000e\u0000\u0000\u0000v\u00ae x\u00e3#)B\u0082\u00c1\u00e4\u001c\u00b6}[\u009c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00b3\u0086;4\u00e6\u00ee\u00d4\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\r !\u008f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\u0000S\u00003\u00008\u0000O\u0000S\u00004\u00000\u00004\u0000-\u00001\u0000Q\u00004\u00003\u0000-\u00004\u00002\u0000S\u00002\u0000-\u00009\u00003\u00000\u00005\u0000-\u00006\u00007\u0000Q\u0000R\u00000\u0000O\u00002\u00008\u0000S\u0000P\u00002\u00003\u0000}\u0000\\\u0000r\u0000k\u0000c\u0000y\u0000b\u0000e\u0000r\u0000e\u0000.\u0000r\u0000k\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u00e4\u0007\t\u0000F\u0000c\u0000r\u0000n\u0000x\u0000r\u0000e\u0000f\u0000:\u0000 \u00006\u00007\u0000%\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u000f\u0000\u0000\u0000s\u00ae x\u00e3#)B\u0082\u00c1\u00e4\u001c\u00b6}[\u009c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0086\u00e2\u009e\u00956\u0005\u00d4\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\r !\u008f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000{\u0000S\u00003\u00008\u0000O\u0000S\u00004\u00000\u00004\u0000-\u00001\u0000Q\u00004\u00003\u0000-\u00004\u00002\u0000S\u00002\u0000-\u00009\u00003\u00000\u00005\u0000-\u00006\u00007\u0000Q\u0000R\u00000\u0000O\u00002\u00008\u0000S\u0000P\u00002\u00003\u0000}\u0000\\\u0000r\u0000k\u0000c\u0000y\u0000b\u0000e\u0000r\u0000e\u0000.\u0000r\u0000k\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\u00c0\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u00e4\u0007\t\u0000H\u0000a\u0000v\u0000q\u0000r\u0000a\u0000g\u0000v\u0000s\u0000v\u0000r\u0000q\u0000 \u0000a\u0000r\u0000g\u0000j\u0000b\u0000e\u0000x\u0000 \u0000A\u0000b\u0000 \u0000V\u0000a\u0000g\u0000r\u0000e\u0000a\u0000r\u0000g\u0000 \u0000n\u0000p\u0000p\u0000r\u0000f\u0000f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
"reg_type": 3,
"regkey": "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\IconStreams"
},
"time": 1599641167.42452,
"tid": 1828,
"flags": {
"reg_type": "REG_BINARY"
}
},
"pid": 1788,
"type": "call",
"cid": 541
}
],
"references": [],
"name": "creates_largekey"
},
{
"markcount": 1,
"families": [],
"description": "Creates a windows hook that monitors keyboard input (keylogger)",
"severity": 3,
"marks": [
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "SetWindowsHookExW",
"return_value": 14811529,
"arguments": {
"thread_identifier": 0,
"callback_function": "0x00000000ffe9ae10",
"module_address": "0x00000000ffdf0000",
"hook_identifier": 13
},
"time": 1599641232.00252,
"tid": 1828,
"flags": {
"hook_identifier": "WH_KEYBOARD_LL"
}
},
"pid": 1788,
"type": "call",
"cid": 4737
}
],
"references": [],
"name": "infostealer_keylogger"
},
{
"markcount": 13,
"families": [],
"description": "Modifies the Firefox configuration file",
"severity": 3,
"marks": [
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004a0",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-button\\\",\\\"home-button\\\",\\\"customizableui-special-spring1\\\",\\\"urlbar-container\\\",\\\"customizableui-special-spring2\\\",\\\"downloads-button\\\",\\\"library-button\\\",\\\"sidebar-button\\\"],\\\"TabsToolbar\\\":[\\\"tabbrowser-tabs\\\",\\\"new-tab-button\\\",\\\"alltabs-button\\\"],\\\"toolbar-menubar\\\":[\\\"menubar-items\\\"]},\\\"seen\\\":[\\\"developer-button\\\"],\\\"dirtyAreaCache\\\":[\\\"PersonalToolbar\\\",\\\"nav-bar\\\",\\\"TabsToolbar\\\",\\\"toolbar-menubar\\\"],\\\"currentVersion\\\":14,\\\"newElem",
"offset": 0
},
"time": 1599641591.60875,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 47962
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ac",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-button\\\",\\\"home-button\\\",\\\"customizableui-special-spring1\\\",\\\"urlbar-container\\\",\\\"customizableui-special-spring2\\\",\\\"downloads-button\\\",\\\"library-button\\\",\\\"sidebar-button\\\"],\\\"TabsToolbar\\\":[\\\"tabbrowser-tabs\\\",\\\"new-tab-button\\\",\\\"alltabs-button\\\"],\\\"toolbar-menubar\\\":[\\\"menubar-items\\\"]},\\\"seen\\\":[\\\"develope",
"offset": 0
},
"time": 1599641591.81275,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 48458
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ac",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-button\\\",\\\"home-button\\\",\\\"customizableui-special-spring1\\\",\\\"urlbar-container\\\",\\\"customizableui-special-spring2\\\",\\\"downloads-button\\\",\\\"library-button\\\",\\\"sidebar-button\\\"],\\\"TabsToolbar\\\":[\\\"tabbrowser-tabs\\\",\\\"new-tab-button\\\",\\\"alltabs-button\\\"],\\\"toolbar-menubar\\\":[\\\"menu",
"offset": 0
},
"time": 1599641591.87475,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 48960
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ac",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-button\\\",\\\"home-button\\\",\\\"customizableui-special-spring1\\\",\\\"urlbar-container\\\",\\\"customizableui-special-spring2\\\",\\\"downloads",
"offset": 0
},
"time": 1599641591.95275,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 49475
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ac",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-button\\\",\\\"home-button\\\",\\\"customizableui-special-spring1\\\",",
"offset": 0
},
"time": 1599641592.98375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 87237
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004e8",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-button\\\",\\\"home-button\\\",\\\"customizableui-special-spring1\\\",",
"offset": 0
},
"time": 1599641599.45275,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 159358
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004e8",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"back-button\\\",\\\"forward-button\\\",\\\"stop-reload-",
"offset": 0
},
"time": 1599641599.51575,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 159777
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ec",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installSp\", \"false\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolbar\\\":[\\\"personal-bookmarks\\\"],\\\"nav-bar\\\":[\\\"bac",
"offset": 0
},
"time": 1599641602.29675,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 198186
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ec",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installSp\", \"false\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.searchRevert\", \"false\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"widget-overflow-fixed-list\\\":[],\\\"PersonalToolba",
"offset": 0
},
"time": 1599641602.34375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 198591
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ec",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installSessionId\", \"-1\");\r\nuser_pref(\"CT3329621.installSp\", \"false\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.searchRevert\", \"false\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser.uiCustomization.state\", \"{\\\"placements\\\":{\\\"",
"offset": 0
},
"time": 1599641602.39075,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 198990
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ec",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installSessionId\", \"-1\");\r\nuser_pref(\"CT3329621.installSp\", \"false\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.searchRevert\", \"false\");\r\nuser_pref(\"CT3329621.searchUserMode\", \"1\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.homepage_override.mstone\", \"60.0.2\");\r\nuser_pref(\"browser",
"offset": 0
},
"time": 1599641602.43775,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 199381
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004ec",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installSessionId\", \"-1\");\r\nuser_pref(\"CT3329621.installSp\", \"false\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.searchRevert\", \"false\");\r\nuser_pref(\"CT3329621.searchUninstallUserMode\", \"1\");\r\nuser_pref(\"CT3329621.searchUserMode\", \"1\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(\"browser.startup.homepage_override.buildID\", \"20180605171542\");\r\nuser_pref(\"browser.startup.hom",
"offset": 0
},
"time": 1599641602.48375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 199772
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x00000504",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\prefs.js",
"buffer": "\/\/ Mozilla User Preferences\r\n\r\n\/\/ DO NOT EDIT THIS FILE.\r\n\/\/\r\n\/\/ If you make changes to this file while the application is running,\r\n\/\/ the changes will be overwritten when the application exits.\r\n\/\/\r\n\/\/ To change a preference value, you can either:\r\n\/\/ - modify it via the UI (e.g. via about:config in the browser); or\r\n\/\/ - set it within a user.js file in your profile.\r\n\r\nuser_pref(\"CT3329621.FF19Solved\", \"true\");\r\nuser_pref(\"CT3329621.UserID\", \"UN13491046901156369\");\r\nuser_pref(\"CT3329621.dum\", \"2\");\r\nuser_pref(\"CT3329621.fullUserID\", \"UN13491046901156369.IN.20200909095311\");\r\nuser_pref(\"CT3329621.installDate\", \"09\/09\/2020 09:53:19\");\r\nuser_pref(\"CT3329621.installSessionId\", \"-1\");\r\nuser_pref(\"CT3329621.installSp\", \"false\");\r\nuser_pref(\"CT3329621.installerVersion\", \"1.11.0.11\");\r\nuser_pref(\"CT3329621.searchRevert\", \"false\");\r\nuser_pref(\"CT3329621.searchUninstallUserMode\", \"1\");\r\nuser_pref(\"CT3329621.searchUserMode\", \"1\");\r\nuser_pref(\"CT3329621.toolbarInstallDate\", \"09-09-2020 09:53:12\");\r\nuser_pref(\"CT3329621.versionFromInstaller\", \"10.33.0.5\");\r\nuser_pref(\"CT3329621.xpeMode\", \"1\");\r\nuser_pref(\"app.normandy.first_run\", false);\r\nuser_pref(\"app.normandy.startupExperimentPrefs.browser.urlbar.matchBuckets\", \"suggestion:4,general:5\");\r\nuser_pref(\"app.normandy.user_id\", \"e26d362b-7820-4cde-99c5-e76055ca856a\");\r\nuser_pref(\"app.update.lastUpdateTime.addon-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.background-update-timer\", 1529094428);\r\nuser_pref(\"app.update.lastUpdateTime.blocklist-background-update-timer\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.browser-cleanup-thumbnails\", 1529094118);\r\nuser_pref(\"app.update.lastUpdateTime.experiments-update-timer\", 1529094465);\r\nuser_pref(\"app.update.lastUpdateTime.recipe-client-addon-run\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.search-engine-update-timer\", 1529094308);\r\nuser_pref(\"app.update.lastUpdateTime.telemetry_modules_ping\", 0);\r\nuser_pref(\"app.update.lastUpdateTime.xpi-signature-verification\", 0);\r\nuser_pref(\"browser.bookmarks.restore_default_bookmarks\", false);\r\nuser_pref(\"browser.cache.disk.capacity\", 358400);\r\nuser_pref(\"browser.cache.disk.filesystem_reported\", 1);\r\nuser_pref(\"browser.cache.disk.smart_size.first_run\", false);\r\nuser_pref(\"browser.download.panel.shown\", true);\r\nuser_pref(\"browser.keywordURLPromptDeclined\", 1);\r\nuser_pref(\"browser.laterrun.bookkeeping.profileCreationTime\", 1529094088);\r\nuser_pref(\"browser.laterrun.bookkeeping.sessionCount\", 3);\r\nuser_pref(\"browser.laterrun.enabled\", true);\r\nuser_pref(\"browser.migration.version\", 66);\r\nuser_pref(\"browser.newtabpage.activity-stream.impressionId\", \"{132737d2-738b-43c9-97aa-70a184bf7b66}\");\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationLastShownDate\", 1529046000);\r\nuser_pref(\"browser.newtabpage.activity-stream.migrationRemainingDays\", 3);\r\nuser_pref(\"browser.newtabpage.storageVersion\", 1);\r\nuser_pref(\"browser.onboarding.seen-tourset-version\", 2);\r\nuser_pref(\"browser.onboarding.tour-type\", \"new\");\r\nuser_pref(\"browser.pageActions.persistedActions\", \"{\\\"version\\\":1,\\\"ids\\\":[\\\"bookmark\\\",\\\"bookmarkSeparator\\\",\\\"copyURL\\\",\\\"emailLink\\\",\\\"sendToDevice\\\",\\\"pocket\\\",\\\"screenshots\\\"],\\\"idsInUrlbar\\\":[\\\"pocket\\\",\\\"bookmark\\\"]}\");\r\nuser_pref(\"browser.pagethumbnails.storage_version\", 3);\r\nuser_pref(\"browser.places.smartBookmarksVersion\", 8);\r\nuser_pref(\"browser.safebrowsing.provider.google4.lastupdatetime\", \"1529094108834\");\r\nuser_pref(\"browser.safebrowsing.provider.google4.nextupdatetime\", \"1529095912834\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.lastupdatetime\", \"1529094091576\");\r\nuser_pref(\"browser.safebrowsing.provider.mozilla.nextupdatetime\", \"1529097691576\");\r\nuser_pref(\"browser.search.countryCode\", \"SE\");\r\nuser_pref(\"browser.search.region\", \"SE\");\r\nuser_pref(\"browser.sessionstore.upgradeBackup.latestBuildID\", \"20180605171542\");\r\nuser_pref(\"browser.shell.didSkipDefaultBrowserCheckOnFirstRun\", true);\r\nuser_pref(\"browser.shell.mostRecentDateSetAsDefault\", \"1529094436\");\r\nuser_pref(\"browser.slowStartup.averageTime\", 1635);\r\nuser_pref(\"browser.slowStartup.samples\", 3);\r\nuser_pref(",
"offset": 0
},
"time": 1599641602.65575,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 201101
}
],
"references": [],
"name": "modifies_firefox_configuration"
},
{
"markcount": 5,
"families": [],
"description": "Sets or modifies WPAD proxy autoconfiguration file for traffic interception",
"severity": 3,
"marks": [
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "RegSetValueExA",
"return_value": 0,
"arguments": {
"key_handle": "0x000003fc",
"value": 1,
"regkey_r": "WpadDecisionReason",
"reg_type": 4,
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecisionReason"
},
"time": 1599641591.24975,
"tid": 2820,
"flags": {
"reg_type": "REG_DWORD"
}
},
"pid": 2816,
"type": "call",
"cid": 43871
},
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "RegSetValueExA",
"return_value": 0,
"arguments": {
"key_handle": "0x000003fc",
"value": "\u0010t\u0086\u00b3\u00c9\u0086\u00d6\u0001",
"regkey_r": "WpadDecisionTime",
"reg_type": 3,
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecisionTime"
},
"time": 1599641591.24975,
"tid": 2820,
"flags": {
"reg_type": "REG_BINARY"
}
},
"pid": 2816,
"type": "call",
"cid": 43872
},
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "RegSetValueExA",
"return_value": 0,
"arguments": {
"key_handle": "0x000003fc",
"value": 3,
"regkey_r": "WpadDecision",
"reg_type": 4,
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadDecision"
},
"time": 1599641591.24975,
"tid": 2820,
"flags": {
"reg_type": "REG_DWORD"
}
},
"pid": 2816,
"type": "call",
"cid": 43873
},
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "RegSetValueExW",
"return_value": 0,
"arguments": {
"key_handle": "0x000003fc",
"value": "Unidentified network",
"regkey_r": "WpadNetworkName",
"reg_type": 1,
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}\\WpadNetworkName"
},
"time": 1599641591.24975,
"tid": 2820,
"flags": {
"reg_type": "REG_SZ"
}
},
"pid": 2816,
"type": "call",
"cid": 43874
},
{
"call": {
"category": "registry",
"status": 1,
"stacktrace": [],
"api": "RegSetValueExW",
"return_value": 0,
"arguments": {
"key_handle": "0x000003f8",
"value": "{E34DF837-3A38-4E8C-83F4-ABF8AB3FB4A6}",
"regkey_r": "WpadLastNetwork",
"reg_type": 1,
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Wpad\\WpadLastNetwork"
},
"time": 1599641591.28075,
"tid": 2820,
"flags": {
"reg_type": "REG_SZ"
}
},
"pid": 2816,
"type": "call",
"cid": 43942
}
],
"references": [],
"name": "modifies_proxy_wpad"
},
{
"markcount": 2,
"families": [],
"description": "Writes a potential ransom message to disk",
"severity": 3,
"marks": [
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004d8",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\backstage.html",
"buffer": "();\r\n var replyCallback = $('#injectCommunicatorReplyCallback').val();\r\n var callback = $('#injectCommunicatorCallback').val();\r\n WriteLog(\"[tabs][injectCommunicator]: Callback = \" + callback);\r\n WriteLog(\"[tabs][executeScript]: windowId = \" + windowId + \", tabId = \" + tabId + \", funcName = \" + funcName + \", replyCallback = \" + replyCallback + \", callback = \" + callback);\r\n conduit.abstractionlayer.backstage.tabs.injectCommunicator(windowId, tabId, funcName, window[replyCallback], window[callback]);\r\n WriteLog(\"After injectCommunicator\");\r\n });\r\n\r\n \/\/ Repository api\r\n $('#repositorySetKeyButton').click(function (event) {\r\n var keyName = $('#repositorySetKeyNameText').val();\r\n var data = $('#repositorySetKeyDataText').val();\r\n var encrypt = ($('#repositorySetKeyEncrypted::checked').length == 1);\r\n WriteLog(\"[Repository][setKey]: keyName = \" + keyName + \", data = \" + data + \", encrypt = \" + encrypt);\r\n var result = conduit.abstractionlayer.commons.repository.setKey(keyName, data, encrypt);\r\n WriteLog(\"Result [Repository][setKey]: result = \" + unescape(result.result) + \", status = \" + result.status + \", Description = \" + result.description);\r\n });\r\n\r\n $('#repositoryGetKeyButton').click(function (event) {\r\n var keyName = $('#repositoryGetKeyNameText').val();\r\n var decrypt = ($('#repositoryGetKeyDcrypted::checked').length == 1);\r\n WriteLog(\"[Repository][getKey]: keyName = \" + keyName + \", decrypt = \" + decrypt);\r\n var result = conduit.abstractionlayer.commons.repository.getKey(keyName, decrypt);\r\n WriteLog(\"Result [Repository]gsetKey]: result = \" + unescape(result.result) + \", status = \" + result.status + \", Description = \" + result.description);\r\n });\r\n\r\n $('#repositoryRemoveKeyButton').click(function (event) {\r\n var keyName = $('#repositoryRemoveKeyNameText').val();\r\n WriteLog(\"[Repository][removeKey]: keyName = \" + keyName);\r\n var result = conduit.abstractionlayer.commons.repository.removeKey(keyName);\r\n WriteLog(\"Result [Repository][removeKey]: result = \" + unescape(result.result) + \", status = \" + result.status + \", Description = \" + result.description);\r\n });\r\n\r\n $('#repositoryHasKeyButton').click(function (event) {\r\n var keyName = $('#repositoryHasKeyNameText').val();\r\n WriteLog(\"[Repository][hasKey]: keyName = \" + keyName);\r\n var result = conduit.abstractionlayer.commons.repository.hasKey(keyName);\r\n WriteLog(\"Result [Repository][hasKey]: result = \" + unescape(result.result) + \", status = \" + result.status + \", Description = \" + result.description);\r\n });\r\n\r\n $('#repositorySetGlobalKeyButton').click(function (event) {\r\n var keyName = $('#repositorySetGlobalKeyNameText').val();\r\n var data = $('#repositorySetGlobalKeyDataText').val();\r\n WriteLog(\"[Repository][setGlobalKey]: keyName = \" + keyName + \", data = \" + data);\r\n var result = conduit.abstractionlayer.commons.repository.setGlobalKey(keyName, data);\r\n WriteLog(\"Result [Repository][setGlobalKey]: result = \" + unescape(result.result) + \", status = \" + result.status + \", Description = \" + result.description);\r\n });\r\n\r\n $('#repositoryGetGlobalKeyButton').click(function (event) {\r\n var keyName = $('#repositoryGetGlobalKeyNameText').val();\r\n WriteLog(\"[Repository][getGlobalKey]: keyName = \" + keyName);\r\n var result = conduit.abstractionlayer.commons.repository.getGlobalKey(keyName);\r\n WriteLog(\"Result [Repository][getGlobalKey]: result = \" + unescape(result.result) + \", status = \" + result.status + \", Description = \" + result.desc",
"offset": 0
},
"time": 1599641598.84375,
"tid": 1516,
"flags": {}
},
"pid": 2816,
"type": "call",
"cid": 153311
},
{
"call": {
"category": "file",
"status": 1,
"stacktrace": [],
"api": "NtWriteFile",
"return_value": 0,
"arguments": {
"file_handle": "0x000004d8",
"filepath": "C:\\Users\\cuck\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\74r5sasm.default\\extensions\\{31264a33-a653-46c4-af49-1232c59a7da5}\\Chrome\\CT3329621\\content\\test\\toolbar\\frontstage.html",
"buffer": "nu\" class=\"category-menu-item backstageApiItem\">Popup<\/span>\r\n <\/li>\r\n \r\n
- \r\n
- Creat WB<\/span> <\/li>\r\n
- Remove WB<\/span> <\/li>\r\n
- Change Size WB<\/span><\/li>\r\n
- Get All WB<\/span> <\/li>\r\n
- add doc load <\/span> <\/li>\r\n
- add nav complete <\/span> <\/li>\r\n
- add nav error <\/span> <\/li>\r\n\r\n \r\n <\/ul>\r\n
- \r\n
- isSupportedFunction<\/span> <\/li>\r\n <\/ul>\r\n
- \r\n
- Write<\/span><\/li>\r\n
- Read<\/span> <\/li>\r\n
- Delete File<\/span> <\/li>\r\n
- Is File Exist<\/span><\/li>\r\n
- Is File Read Only<\/span><\/li>\r\n
- Set File Read Only<\/span><\/li>\r\n
- Get All Files<\/span><\/li>\r\n
- Copy<\/span><\/li>\r\n
- Rename<\/span><\/li>\r\n
- Create Directory<\/span><\/li>\r\n
- Delete Directory<\/span><\/li>\r\n
- ", "offset": 0 }, "time": 1599641598.85875, "tid": 1516, "flags": {} }, "pid": 2816, "type": "call", "cid": 153511 } ], "references": [], "name": "ransomware_message" } ]
Yara
The Yara rules did not detect anything in the file.
Network
{ "tls": [], "udp": [ { "src": "192.168.56.101", "dst": "192.168.56.255", "offset": 662, "time": 6.559067010879517, "dport": 137, "sport": 137 }, { "src": "192.168.56.101", "dst": "192.168.56.255", "offset": 5990, "time": 12.554468154907227, "dport": 138, "sport": 138 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 7834, "time": 6.216172218322754, "dport": 5355, "sport": 51001 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 8162, "time": 4.156800031661987, "dport": 5355, "sport": 53595 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 8490, "time": 6.276615142822266, "dport": 5355, "sport": 53848 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 8818, "time": 4.66920018196106, "dport": 5355, "sport": 54255 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 9146, "time": 3.0501351356506348, "dport": 5355, "sport": 55314 }, { "src": "192.168.56.101", "dst": "224.0.0.252", "offset": 9474, "time": 7.063086986541748, "dport": 5355, "sport": 55880 }, { "src": "192.168.56.101", "dst": "239.255.255.250", "offset": 9794, "time": 4.758980989456177, "dport": 1900, "sport": 1900 }, { "src": "192.168.56.101", "dst": "239.255.255.250", "offset": 29204, "time": 4.236804008483887, "dport": 3702, "sport": 49152 }, { "src": "192.168.56.101", "dst": "239.255.255.250", "offset": 37588, "time": 6.324549198150635, "dport": 1900, "sport": 53598 } ], "dns_servers": [], "http": [], "icmp": [], "smtp": [], "tcp": [], "smtp_ex": [], "mitm": [], "hosts": [], "pcap_sha256": "c407273d22e7d55f613386b157c85bb864b17e0fa91334fb076caa5567bbeeed", "dns": [], "http_ex": [], "domains": [], "dead_hosts": [], "sorted_pcap_sha256": "d795f8267328a4e281c1ba0a84d68a7c6494f9b480c19cf0ff3bfba837108b48", "irc": [], "https_ex": [] }Screenshots
bs_player_controlbar_b.exe removal instructions
The instructions below shows how to remove bs_player_controlbar_b.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the bs_player_controlbar_b.exe file for removal, restart your computer and scan it again to verify that bs_player_controlbar_b.exe has been successfully removed. Here are the removal instructions in more detail:
- Download and install FreeFixer: http://www.freefixer.com/download.html
- Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
- When the scan is finished, locate bs_player_controlbar_b.exe in the scan result and tick the checkbox next to the bs_player_controlbar_b.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate bs_player_controlbar_b.exe in the scan result.
c:\downloads\bs_player_controlbar_b.exe 
- Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the bs_player_controlbar_b.exe file.
- Restart your computer.
- Start FreeFixer and scan your computer again. If bs_player_controlbar_b.exe still remains in the scan result, proceed with the next step. If bs_player_controlbar_b.exe is gone from the scan result you're done.
- If bs_player_controlbar_b.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
- Restart your computer.
- Start FreeFixer and scan your computer again. Verify that bs_player_controlbar_b.exe no longer appear in the scan result.
Hashes [?]
Property Value MD5 e351a5f965ef4bbb41cfa7a182b8c623 SHA256 59fa8c1a30c30fd5af35941a5f64386f1ef07b5985cd43d0ce73473445bbf999 Error Messages
These are some of the error messages that can appear related to bs_player_controlbar_b.exe:
bs_player_controlbar_b.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
bs_player_controlbar_b.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
1.11.0.11 has stopped working.
End Program - bs_player_controlbar_b.exe. This program is not responding.
bs_player_controlbar_b.exe is not a valid Win32 application.
bs_player_controlbar_b.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with the file?
To help other users, please let us know what you will do with the file:
Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
No comments posted yet.
Leave a reply
- Read<\/span> <\/li>\r\n
- Write<\/span><\/li>\r\n
- Remove WB<\/span> <\/li>\r\n
