What is calendarsetup.exe?
calendarsetup.exe is part of Calendar ActiveX Control and developed by Viscom Software according to the calendarsetup.exe version information.
calendarsetup.exe's description is "Calendar ActiveX Control Setup "
calendarsetup.exe is digitally signed by Viscom Software.
calendarsetup.exe is usually located in the 'c:\downloads\' folder.
None of the anti-virus scanners at VirusTotal reports anything malicious about calendarsetup.exe.
If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.
Vendor and version information [?]
The following is the available information on calendarsetup.exe:
| Property | Value |
|---|---|
| Product name | Calendar ActiveX Control |
| Company name | Viscom Software |
| File description | Calendar ActiveX Control Setup |
| Comments | This installation was built with Inno Setup. |
| Legal copyright | |
| Product version | |
| File version |
Here's a screenshot of the file properties when displayed by Windows Explorer:
| Product name | Calendar ActiveX Control .. |
| Company name | Viscom Software .. |
| File description | Calendar ActiveX Control Setup .. |
| Comments | This installation was built with Inn.. |
| Legal copyright | .. |
| Product version | |
| File version |
Digital signatures [?]
calendarsetup.exe has a valid digital signature.
| Property | Value |
|---|---|
| Signer name | Viscom Software |
| Certificate issuer name | COMODO Code Signing CA 2 |
| Certificate serial number | 4ec2dfb746a14d9d785704a238276711 |
VirusTotal report
None of the 72 anti-virus programs at VirusTotal detected the calendarsetup.exe file.
Sandbox Report
The following information was gathered by executing the file inside Cuckoo Sandbox.
Summary
Successfully executed process in sandbox.
Summary
{
"file_created": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp"
],
"file_recreated": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat"
],
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\InstallLocation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: App Path",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\URLUpdateInfo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\URLInfoAbout",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR2.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR2.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\MiscStatus\\1\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pzq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR3.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\HelpLink",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\QuietUninstallString",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\InstallDate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: User",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\UninstallString",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\LanguageList",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\NoModify",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\EstimatedSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR6.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: Language",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\NoRepair",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Publisher",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\DisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\HRZR_PGYFRFFVBA",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\InprocServer32\\ThreadingModel",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCache",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR5.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR4.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR6.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: Setup Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: Icon Group",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR3.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR5.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR4.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version"
],
"dll_loaded": [
"C:\\Windows\\system32\\sfc.dll",
"netutils.dll",
"C:\\Windows\\system32\\odbcint.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"C:\\Windows\\syswow64\\MSCTF.dll",
"srvcli.dll",
"LINKINFO.dll",
"C:\\Windows\\system32\\uxtheme.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"UxTheme.dll",
"C:\\Windows\\system32\\ole32.dll",
"msls31.dll",
"dwmapi.dll",
"slc.dll",
"imm32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"ntmarta.dll",
"PROPSYS.dll",
"USP10.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
"MSVCRT.DLL",
"OLEAUT32.DLL",
"comctl32",
"ole32.dll",
"SHLWAPI.dll",
"USER32.dll",
"IMM32.dll",
"API-MS-Win-Security-SDDL-L1-1-0.dll",
"C:\\Windows\\system32\\shlwapi.dll",
"ADVAPI32.dll",
"C:\\Windows\\system32\\xmllite.dll",
"uxtheme.dll",
"OLEAUT32.dll",
"profapi.dll",
"SHELL32.dll",
"comctl32.dll",
"C:\\Windows\\system32\\shell32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"kernel32.dll",
"RICHED20.DLL",
"shfolder.dll",
"DEVRTL.dll",
"shell32.dll",
"SETUPAPI.dll",
"ntshrui.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx"
],
"file_failed": [
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_c_2010_multiple_calendar_d6ba2234989a1027.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net2010_multiple_calendar_bd368f24ced155e0.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\cuckoo_3036.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Windows\\Calendar2.INI",
"C:\\Windows\\Calendar.INI",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net2010_multiple_calendar_my_project_4f21fc43e587a96b.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vc_d0b740cac9ed8135.cdf-ms",
"C:\\ProgramData\\Microsoft\\desktop.ini",
"C:\\Windows\\Calendar6.INI",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\cuckoo_1788.ini",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_c_2010_multiple_calendar_properties_6eebf8b79eabf33c.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net2010_general_7bb47d5359bda3be.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net_a06fdd4632a65f63.cdf-ms",
"C:\\Windows\\Calendar3.INI",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb_d0b740cac9ed8134.cdf-ms",
"C:\\Windows\\Calendar4.INI",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\cuckoo_2628.ini",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_access_a045fc2e33644f00.cdf-ms",
"C:\\cuckoo_552.ini",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_20c7a9fd8a2a4367.cdf-ms",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\desktop.ini",
"C:\\cuckoo_1500.ini",
"C:\\cuckoo_1680.ini",
"C:\\Windows\\Calendar5.INI",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vfp_54d6895083be957a.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_help_19a256d039301d1a.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vc_res_a070340a32a6dde7.cdf-ms",
"C:\\cuckoo_368.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General"
],
"command_line": [
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx\"",
"\"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp\" \/SL5=\"$1902E6,1945771,140800,C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin\" ",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx\""
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Directory",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C",
"HKEY_CLASSES_ROOT\\Outlook.Application.12",
"HKEY_CLASSES_ROOT\\Outlook.Application.11",
"HKEY_CLASSES_ROOT\\Outlook.Application.10",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PropertyBag",
"HKEY_CURRENT_USER\\SOFTWARE\\ODBC\\ODBC.INI\\ODBC",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\AccessProviders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0",
"HKEY_CURRENT_USER\\Software\\CodeGear\\Locales",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Icons",
"HKEY_CURRENT_USER\\Interface",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877",
"HKEY_LOCAL_MACHINE\\System\\Setup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Policies",
"HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820",
"HKEY_CURRENT_USER\\Control Panel\\Desktop",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3",
"HKEY_CURRENT_USER\\Software\\Borland\\Delphi\\Locales",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Keyboard Layouts\\041D0409",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E",
"HKEY_LOCAL_MACHINE\\Software",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_CLASSES_ROOT\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PropertyBag",
"HKEY_CLASSES_ROOT\\CALENDAR.CalendarCtrl.1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\BidInterface\\Loader",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886",
"HKEY_LOCAL_MACHINE\\Software\\Policies",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Keyboard Layouts\\04090409",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
"HKEY_CURRENT_USER\\Software\\Borland\\Locales",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
"HKEY_CLASSES_ROOT\\CLSID\\{00BB2763-6A77-11D0-A535-00C04FD7D062}\\InProcServer32",
"HKEY_LOCAL_MACHINE\\Software\\CodeGear\\Locales",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
"HKEY_CLASSES_ROOT\\CLSID\\{03C036F1-A186-11D0-824A-00AA005B4383}\\InProcServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F",
"HKEY_CLASSES_ROOT\\Folder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Outlook.Application",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
"HKEY_CURRENT_USER\\Software",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_CLASSES_ROOT\\AllFilesystemObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\setup\\PnpLockdownFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_CLASSES_ROOT\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\ODBC\\ODBC.INI\\ODBC",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete\\Client\\",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
],
"file_moved": [
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.ncb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\AssemblyInfo.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Program.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\AssemblyInfo.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.opt"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.plg"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\resource.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.ico"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\MFC71.dll"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.Designer.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.settings"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.clw"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.aps"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.log"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.scx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.myapp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.csproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.resX"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.vbproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.log"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.suo"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\App.config"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcr71.dll"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.rc2"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.lic"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Form1.frm"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.resX"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.PJT"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\AssemblyInfo.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.suo"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcp71.dll"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\ReadMe.txt"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\AssemblyInfo.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.Designer.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj.user"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.settings"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.Designer.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.rc"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbw"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.SCT"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.h"
]
],
"file_written": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp"
],
"regkey_deleted": [
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1"
],
"file_deleted": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.url",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.pif",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.pif",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"directory_removed": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp"
],
"file_exists": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcr71.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\AssemblyInfo.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Python27\\python.exe",
"C:\\Users\\cuck\\Desktop",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Program.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.Designer.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.myapp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\App.config",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.opt",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.cpp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.rc",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.Designer.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.resX",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\cuckoo_2628.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.resX",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"C:\\cuckoo_1680.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\ReadMe.txt",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample",
"C:\\cuckoo_3036.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.cpp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.Designer.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.Designer.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.SCT",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.csproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.cpp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.log",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.Designer.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.clw",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\Program Files (x86)",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.settings",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.ncb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.suo",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.h",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.aps",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\AssemblyInfo.cs",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Form1.frm",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.ico",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcp71.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.PJT",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.plg",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.lic",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbw",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\MFC71.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\Users\\cuck",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\cuckoo_552.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.scx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.Designer.vb",
"C:\\Users\\Public\\Desktop",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.log",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\AssemblyInfo.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\AssemblyInfo.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.cpp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.rc2",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.settings",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.Designer.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj.user",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\resource.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Python27\\pythonw.exe",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\cuckoo_1500.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.suo",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.url",
"C:\\cuckoo_368.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
"C:\\ProgramData",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\",
"C:\\Windows\\System32\\netmsg.dll",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Users\\Public",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\System32\\shell32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Users\\Public\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools",
"C:\\Users\\cuck\\Downloads\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"C:\\Windows\\System32\\imageres.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
"C:\\Program Files (x86)",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample",
"C:\\ProgramData\\Microsoft\\Windows",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010",
"C:\\Program Files (x86)\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
"C:\\Users\\Public\\Desktop\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Windows\\SysWOW64\\en-US\\KERNELBASE.dll.mui",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\",
"C:\\Users",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\Users\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer",
"C:\\Users\\cuck",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Python 2.7",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
"C:\\Users\\cuck\\AppData",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games",
"C:\\Windows\\System32",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"C:\\ProgramData\\Microsoft",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Windows\\win.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"guid": [
"{add8ba80-002b-11d0-8f0f-00c04fd7d062}",
"{ea1afb91-9e28-4b86-90e9-9e9f8a5eefaf}",
"{46a6eeff-908e-4dc6-92a6-64be9177b41c}",
"{eac04bc0-3791-11d2-bb95-0060977b464c}",
"{5e078e03-8265-4bbe-9487-d242edbef910}",
"{00bb2763-6a77-11d0-a535-00c04fd7d062}",
"{00000000-0000-0000-c000-000000000046}",
"{56fdf344-fd6d-11d0-958a-006097c9a090}",
"{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}",
"{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
"{660b90c8-73a9-4b58-8cae-355b7f55341b}",
"{807c1e6c-1d00-453f-b920-b61bb7cdd997}",
"{00021401-0000-0000-c000-000000000046}",
"{dffacdc5-679f-4156-8947-c5c76bc0b67f}",
"{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
"{bbd20037-bc0e-42f1-913f-e2936bb0ea0c}",
"{03c036f1-a186-11d0-824a-00aa005b4383}",
"{00bb2765-6a77-11d0-a535-00c04fd7d062}",
"{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}"
],
"file_read": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"C:\\Users\\Public\\Desktop\\desktop.ini",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Users\\desktop.ini",
"C:\\Windows\\win.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\Public\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\cuck\\Downloads\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
"C:\\Program Files (x86)\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\abgrcnq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Gnfx Fpurqhyre.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Erzbgr Qrfxgbc Pbaarpgvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\KCF Ivrjre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman TUR,162",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Tahoma Armenian",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf Sverjnyy jvgu Nqinaprq Frphevgl.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Tms Rmn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Erzbgr Nffvfgnapr.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Fixed Miriam Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AccListViewV6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Vagrearg Rkcybere.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{NN198O3P-PQ8P-7QR1-98Q1-O460S637193O}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New CE,238",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.suo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\QIQ Znxre\\QIQZnxre.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{15067OP1-P5N8-425R-37P6-SN0O891674S9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zngu Vachg Cnary.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.resX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\FuncrPbyyrpgbe.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\IsShortcut",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\zvtjvm.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\cevagznantrzrag.zfp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Snk naq Fpna.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ErzbgrQrfxgbc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesChanges",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.TrggvatFgnegrq",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FavccvatGbby.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf AG\\Npprffbevrf\\jbeqcnq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.NamespaceCLSID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesRemovedChanges",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P1P6S8NP-40N3-0S5P-146S-65N9QP70OOO4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\RegisteredOrganization",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Erfbhepr Zbavgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj.user",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.rc2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\MS Shell Dlg 2",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesRemovedChanges",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LanmanWorkstation\\Parameters\\RpcCacheTimeout",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\efgehv.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Category",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragMinDist",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Pnyphyngbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Qvfx Pyrnahc.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnCynlre32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.URL\\PerceivedType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Jvaqbjf Rkcybere.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.log",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.Designer.cs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Rkcybere.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\FuncrPbyyrpgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent,0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{00BB2763-6A77-11D0-A535-00C04FD7D062}\\InProcServer32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OQ3S924R-55SO-N1ON-9QR6-O50S9S2460NP}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfcnvag.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\Jvaqbjf Wbheany.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zbovyvgl Pragre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\FangSong_GB2312",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR (k86).yax",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\MUI\\StringCacheSettings\\StringCacheGeneration",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New Baltic,186",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.opt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewShadow",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Zrqvn Cynlre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\DefaultFeature",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Fvqrone.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewAlphaSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Flfgrz Gbbyf\\Cevingr Punenpgre Rqvgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.csproj",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.resX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{35786D3C-B075-49b9-88DD-029876E11C01}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.SCT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\zvc.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.ico",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\vFPFV Vavgvngbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.URL\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Flfgrz Pbasvthengvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bqopnq32.rkr",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\displayswitch.exe,-320",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.aps",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman Baltic,186",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SnippingTool.exe,-15051",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{Q4N262QQ-PR44-Q105-S36O-9Q77N8PO65N4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zntavsl.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonVideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bfx.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Cnvag.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Gnfx Fpurqhyre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\msvcr71.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.chm\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Zrqvn Cynlre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jbeqcnq.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\aneengbe.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Punenpgre Znc.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonMusic",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{QNN168QR-4306-P8OP-8P11-O596240OQQRQ}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInterval",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.chm\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.vbproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\erpqvfp.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pnyp.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Clguba27\\clguba.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnPragre",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial TUR,162",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\msvcp71.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\David Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.URL\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Startup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent Bold",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.64Ovg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Rirag Ivrjre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.chm\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Client\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Frphevgl Pbasvthengvba Znantrzrag.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Qngn Fbheprf (BQOP).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\resource.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Perngr Erpbirel Qvfp.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New TUR,162",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.Designer.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\qvfcynlfjvgpu.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.Qrsnhyg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.FgvpxlAbgrf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Helvetica",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Ba-Fperra Xrlobneq.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Sversbk.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInset",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzcbarag Freivprf.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JS.zfp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\GnoGvc.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FbhaqErpbeqre.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cresbeznapr Zbavgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman CYR,204",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesResolve",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\TclTk",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\freivprf.zfp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman CE,238",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\FXSRESM.dll,-114",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.myapp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flap Pragre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pbzrkc.zfp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\GnoGvc.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fgvpxl Abgrf.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JSF.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pzq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\FavoritesRemovedChanges",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Nalgvzr Hctenqr.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ZqFpurq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.cpp",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Npprffvovyvgl\\Fcrrpu Erpbtavgvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Abgrcnq.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesChanges",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\MFC71.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Rod Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\\SortOrderIndex",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\AssemblyInfo.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\App.config",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fbhaq Erpbeqre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{7SR8Q22N-SO1Q-N8OR-01R3-6P8693961R6R}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.plg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial CYR,204",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\AssemblyInfo.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SNTSearch.dll,-505",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\mstsc.exe,-4000",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Programs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Erfgber.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\PerceivedType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf CbjreFuryy Zbqhyrf.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qvfcynlfjvgpu.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\RegisteredOwner",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Stream",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\OobeFldr.dll,-33056",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman Greek,161",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0\\win32\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Zrqvn Pragre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P804OON7-SN5S-POS7-8O55-2096R5S972PO}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\cbfgzvt.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy (k86).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.suo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.ncb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\HELPDIR\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf Wbheany\\Wbheany.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre Ercbegf.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Pbzznaq Cebzcg.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonPictures",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.log",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\IsShortcut",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NN47365-O2O3-1961-69RO-S866R376O12S}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.scx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Zbqhyr Qbpf.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfpbasvt.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\ShellEx\\IconHandler\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Form1.frm",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent Bold,0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jrypbzr Pragre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\ReadMe.txt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfvasb32.rkr",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Always Use Tab",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Clguba (pbzznaq yvar).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Miriam Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NOQ94SO-R7Q6-84N6-N997-P918RQQR0NR5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.vb",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial Greek,161",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\AssemblyInfo.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{03C036F1-A186-11D0-824A-00AA005B4383}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.clw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\puneznc.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New Greek,161",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\ArgjbexCebwrpgvba.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Sversbk.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\kcfepuij.rkr",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SESSION MANAGER\\PendingFileRenameOperations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial Baltic,186",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere (64-ovg).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Aneengbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Program.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New CYR,204",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.Designer.vb",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Zntavsl.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\qsethv.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\MS Shell Dlg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\AutoSuggest",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SESSION MANAGER\\PendingFileRenameOperations2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\Public",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ArgCebw.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.PJT",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OO044OSQ-25O7-2SNN-22N8-6371N93R0456}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\KaiTi_GB2312",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\R7PS176R110P211O",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\TclTk",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{53123611-QN37-S8QN-SNP9-03R76QO9Q64Q}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.lic",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pyrnazte.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Startup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zboflap.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.Designer.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\LoadWithoutCOM",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\freivprf.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzchgre Znantrzrag.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfNalgvzrHctenqrHV.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\XpsRchVw.exe,-102",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\DefaultFeature",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\VQYR (Clguba THV).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Documents",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qsethv.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.rc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\rhqprqvg.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial CE,238",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Zrzbel Qvntabfgvpf Gbby.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\vfpfvpcy.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Vasbezngvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.resx",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Favccvat Gbby.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfen.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\FolderTypeID",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf QIQ Znxre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Helv",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\AssemblyInfo.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cevag Znantrzrag.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US"
],
"directory_enumerated": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\*",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins???.*"
],
"directory_created": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp"
]
}Dropped
[
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "474259c573eab4ef3e22eccf4d9f81d577ad9745",
"name": "f6ada46b8736de5d_calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Tue Jan 17 12:54:44 2006, length=196608, window=hide",
"sha256": "f6ada46b8736de5df057a3af4221f36aa20b9a8f41e2ed88782350a19b6dee09",
"urls": [],
"crc32": "36A0ADB8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/f6ada46b8736de5d_calendar activex sample.lnk",
"ssdeep": null,
"size": 1389,
"sha512": "ebd82deaa2e0a4b733fabf761db7d55196fa616f6f744a353ec83eb7266ef1c79827d4d0d4d9287c4b68012e4b3dd0b8418ff0b9ee87c5873a7d2c8e85d26706",
"pids": [
2968
],
"md5": "09c19d03df0c6238041320a0830bd8bc"
},
{
"yara": [],
"sha1": "7b96a1c5f31123d14ff5b39426a465bc3928ae0d",
"name": "520c31cd151f723f_calsample.ncb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.ncb",
"type": "MSVC program database ver 2.00",
"sha256": "520c31cd151f723f07c2e17536edd77feab78f3e1b69abe43db1416f7ffabec7",
"urls": [],
"crc32": "4036A621",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/520c31cd151f723f_calsample.ncb",
"ssdeep": null,
"size": 66560,
"sha512": "24b049848fd99e1586cde30e593a9a860e37833fc332483e405aff2e112ed0f63dd1177883c587c89e090ff59ae5f2b89dc81add63023533df023cc980a475f0",
"pids": [
2968
],
"md5": "bfa71377ef16a54fa333d96ff36f97d3"
},
{
"yara": [],
"sha1": "618f8907bbe7f1a9e08f4f734965baf15bb558bd",
"name": "aec2206269fe4e7c_Form1.vb",
"filepath": "C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "aec2206269fe4e7caeecb54adceb3d1e3391959e0aae421c30e04bd3d2592df8",
"urls": [],
"crc32": "36997D18",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/aec2206269fe4e7c_Form1.vb",
"ssdeep": null,
"size": 2380,
"sha512": "042fae3789161cd3db4f694d28cead5c0e35ad7d78a50bb81a6751b63b7c1f67ce69ce3ec50bb17cfefd42e3ae6c98e2f632a185c95a7110c1fc514cdb6c1ab1",
"pids": [
2968
],
"md5": "c72fe590dc7e7d338e32cc6455a30632"
},
{
"yara": [],
"sha1": "aae9d4bd1c3394a5d2597702589962934c3668f4",
"name": "b473f13388e6e5ae_settings.designer.cs",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\properties\\settings.designer.cs",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "b473f13388e6e5ae0594c2952881832de41c403b1101cf20956bbd3ecf3432ed",
"urls": [],
"crc32": "9B7875DD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/b473f13388e6e5ae_settings.designer.cs",
"ssdeep": null,
"size": 1104,
"sha512": "0ce46ecde01f622fcfc73bfe615c84cf2f293d20349c9f01085680561578d83ca786768a7fcc52d3eb9fcd5b239cd7ae441b0776daa49c25a13bea9ddb39877b",
"pids": [
2968
],
"md5": "eb6a7375d0b06e7ece09ac0ee70afa71"
},
{
"yara": [],
"sha1": "c7240e0823a2f105aabd24c69cdd0ac2a60b1c1d",
"name": "f62e0e18e36b34ca_project1.vbproj",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net\\project1.vbproj",
"type": "ASCII text, with CRLF line terminators",
"sha256": "f62e0e18e36b34caa00cb5f7153b595355cd0cf185bd2a51bff864e09647b413",
"urls": [],
"crc32": "072F34FC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/f62e0e18e36b34ca_project1.vbproj",
"ssdeep": null,
"size": 5169,
"sha512": "7af03b80f7ac9055165483bf302962afac22afcf80affe90ced8ea9b6582700090e4c9a03369fb1c21bf102e5184c9e8fac8e803de7ccbac1f7a9de656913558",
"pids": [
2968
],
"md5": "6b49c269b601f931f7025c6dd28b8da5"
},
{
"yara": [],
"sha1": "e7cfbcb5b07e7a3c5ade9d8b910349031a6f7c56",
"name": "a8ce3df2cba8020f_calendar.lic",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar.lic",
"type": "ASCII text, with CRLF line terminators",
"sha256": "a8ce3df2cba8020f7b7f4a5492a9e919970e5b685bfdbce6acb80e38bf0751d8",
"urls": [],
"crc32": "484A1DD0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/a8ce3df2cba8020f_calendar.lic",
"ssdeep": null,
"size": 365,
"sha512": "5c7604e356c1b23cf1dcab522ac0735b975736400ae54f965db2159954504a9b00c3c939fbab31ef42f9dfffbd17647125c4e9532e050aad5af7bd3e42ff1179",
"pids": [
2968
],
"md5": "08c2a7e897cc68ec121e0daf518e6398"
},
{
"yara": [],
"sha1": "91a42aed4b61fb323295ab9f763d2fb2659b9405",
"name": "3f6ace7248a0ef6e_form1.frm",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb\\form1.frm",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3f6ace7248a0ef6e295b7686c07fe6f64e88f20abd33943817921e938622751d",
"urls": [],
"crc32": "152F7344",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/3f6ace7248a0ef6e_form1.frm",
"ssdeep": null,
"size": 23217,
"sha512": "1dc9d26227aada50e4c078554d96f629ac75811393d584d1dd426bad8d0b3497a95ea84e24da582094ecf4d24c7638e19b184bf24a32116f6dcd4450b9ca622a",
"pids": [
2968
],
"md5": "96e4297b0356ae25d39efc66be41f48f"
},
{
"yara": [],
"sha1": "2ca3d37eaaf371148d77608e2798603b0cc267f3",
"name": "b8db44150c73394f_proj1.pjx",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vfp\\proj1.pjx",
"type": "Visual FoxPro DBF, 2 records * 130, update-date 06-1-16, codepage ID=0x78, with memo .FPT, at offset 1192 1st record \"\\020\"",
"sha256": "b8db44150c73394f2d47288ebfc59b39509a8cba3ab2e263fdcb1000b923975c",
"urls": [],
"crc32": "9AC89E2D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/b8db44150c73394f_proj1.pjx",
"ssdeep": null,
"size": 1453,
"sha512": "56e321ce29a3ca35d9dc151b22dcdf32bdcb0dc1f7b917f03403141943c0f55fe1f5994b1fc5cbae0acf0790ba91c3e538f05fdc6750d0d45d37d433ab38935f",
"pids": [
2968
],
"md5": "ace9c7feb2b22de4ffc25c36b141e87d"
},
{
"yara": [],
"sha1": "eecc02893440e0b4a4670da076ed7616a27086c9",
"name": "bfcf7a622fb40495_form1.resx",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\general\\form1.resx",
"type": "XML 1.0 document, ASCII text, with CRLF line terminators",
"sha256": "bfcf7a622fb404951f70a5cbf580241928fb4240c0af5cf8c6880c67eea74731",
"urls": [],
"crc32": "145F9375",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/bfcf7a622fb40495_form1.resx",
"ssdeep": null,
"size": 53047,
"sha512": "80024836321b7f8d412533686a66ca9d3cdb6179a8623476dc0bafc063807deec0c85d66f6d27163e59aeb19b9fac7648f87d76588d7e1f79511f02501b6ef96",
"pids": [
2968
],
"md5": "05a06c19d07b1549fde1a58d12289192"
},
{
"yara": [],
"sha1": "218502711e5bfdfe612d17bd543ce17639cdf78b",
"name": "0f2e36952b53d40b_project1.vbp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb\\project1.vbp",
"type": "ASCII text, with CRLF line terminators",
"sha256": "0f2e36952b53d40bca26ebd21913e674d72891c9d34f250346e3e5b60462a371",
"urls": [],
"crc32": "BE1D996C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/0f2e36952b53d40b_project1.vbp",
"ssdeep": null,
"size": 780,
"sha512": "729eb8abbf01fc4502f1b8725551dcca0d4ae43bedaee91734f00d65c24d9be1ceeb2b0a1fae445f619bdb3f667750af6ca6a72e17cb73738b0fb168e7362b3c",
"pids": [
2968
],
"md5": "bafa11aa4a1823f91f952298b27acc02"
},
{
"yara": [],
"sha1": "fd9f56d18c32ca2ee0021ac96506043327721ef4",
"name": "ae9ffea1f769b409_calendar.cpp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calendar.cpp",
"type": "C source, ASCII text, with CRLF line terminators",
"sha256": "ae9ffea1f769b4096c354a17354a046dc840d44bb8176874b83089dd9f966804",
"urls": [],
"crc32": "0BA4B515",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/ae9ffea1f769b409_calendar.cpp",
"ssdeep": null,
"size": 7292,
"sha512": "0143463520c58bfc1a28937d27bf3e2d8b41cca66ab28ad11f603e4bf77fee2709155c47380c35885499c1d9f93b52a7abf413af32fdfdfa05e07bc1c47e3e88",
"pids": [
2968
],
"md5": "e724a98d4cc6f709d2491c82dff4b48f"
},
{
"yara": [],
"sha1": "81ca08e7a4cd246fc0abcda355b9b93548395811",
"name": "61b5b3c1c65845fa_project1.suo",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net\\project1.suo",
"type": "Composite Document File V2 Document, Cannot read section info",
"sha256": "61b5b3c1c65845fa80bd6e45a2e90597cf0726c2ceee6cf493c9d80a9e753ab4",
"urls": [],
"crc32": "2A435A7C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/61b5b3c1c65845fa_project1.suo",
"ssdeep": null,
"size": 8192,
"sha512": "4e403fafa4f183793aa548306c913c94c5cc83bf5e4d796c4b02afcb357f61408ed7fd538198845389326a965c97af3d27895e250b5b59ab03f4c840b4712b66",
"pids": [
2968
],
"md5": "1329359012973eb40a82a5784d903ed4"
},
{
"yara": [],
"sha1": "5ff39013314c5db6c70fe64073750f928cd9ee69",
"name": "c6eb17aac64c0ac6_calendar6.ocx",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar6.ocx",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "c6eb17aac64c0ac6759b37a2ce6216458fdb59f60ad805fd734708dfc736d45b",
"urls": [
"http:\/\/www.viscomsoft.com"
],
"crc32": "C6D6115A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c6eb17aac64c0ac6_calendar6.ocx",
"ssdeep": null,
"size": 450560,
"sha512": "1a7ec1cc2ac54f982067dfe5ddb619f8611547fc5b94947390961c840d1bfa00bfd94877cdd4ba7a85f6e91dd68432a597b560e3096fd6061878b8dc1170785e",
"pids": [
2968
],
"md5": "01b540f9298e5c0b210d241eccfa635b"
},
{
"yara": [],
"sha1": "86a9a512c9c1d5394f54455d7c4e80f67259f280",
"name": "e5c8d59ee94ce937_project1.vbw",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb\\project1.vbw",
"type": "ASCII text, with CRLF line terminators",
"sha256": "e5c8d59ee94ce9379feee7aec211904691e2db328462c3f51624b5402353ab39",
"urls": [],
"crc32": "EC41A40B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/e5c8d59ee94ce937_project1.vbw",
"ssdeep": null,
"size": 49,
"sha512": "d797868ccb9aa04175fbf60998d0f8281b6f74c15e5e79336bef0bff217bc94344c3c6417d40a5c228c223a6dbf9e98baa1be5ba8dcd7267f11010771e5f2310",
"pids": [
2968
],
"md5": "7834e82915f952a86d7cdcc918c88eed"
},
{
"yara": [],
"sha1": "5ab9adadd248477c1594f7414820048893c0390d",
"name": "6fd0eafcedecef7d_application.designer.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\application.designer.vb",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "6fd0eafcedecef7d15b35f3af088b6503a1075bfcd7c5b42c54c59b66bba7942",
"urls": [],
"crc32": "9596DEB1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/6fd0eafcedecef7d_application.designer.vb",
"ssdeep": null,
"size": 1521,
"sha512": "7f3f1d5e584907920222ff53189a611c0e8917888e3288f5e72393a477635679911e95a11e34273c68c701922048ebee059c9eba18a2e5a536ba2becf564b30a",
"pids": [
2968
],
"md5": "27e64dd1857270bea1644ff9bffdbe00"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "f27bb058c660d7ff99b65b90d0e20aa508112eed",
"name": "43699fdb7550dcc5_uninstall calendar activex control.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:17 2019, mtime=Tue Sep 17 23:53:17 2019, atime=Tue Sep 17 23:53:06 2019, length=1174979, window=hide",
"sha256": "43699fdb7550dcc5f98c0eca20f6f3968f9836b457ad570be3dddfaffe6f6345",
"urls": [],
"crc32": "A963D584",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/43699fdb7550dcc5_uninstall calendar activex control.lnk",
"ssdeep": null,
"size": 1137,
"sha512": "e0593b8a8d6818b59a1919079d1c6c4649acf8507cacec7adea6a85fe682e65cf5823989c252bb1b2fbe27218b907e84fc26cc1783ce243e9f94a3f19630cd92",
"pids": [
2968
],
"md5": "8ebb6df2f03c0c7f75ab3f10dee139cb"
},
{
"yara": [],
"sha1": "ab388f26e358f3b7380feb7b5c8852c6f1409db7",
"name": "7a866390361abb0b_calendar3.ocx",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar3.ocx",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "7a866390361abb0b21b84749cb49852bbc549abbdff55dc6bdcc2dc45ab2c3f8",
"urls": [
"http:\/\/www.viscomsoft.com"
],
"crc32": "41BFE696",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/7a866390361abb0b_calendar3.ocx",
"ssdeep": null,
"size": 450560,
"sha512": "3a13588f5fc2ec9f1f4849cc7ea1f54474620e77089bf6045e19a4e6670875dee408733c3751162b5c3fc5b8acb210b5f8188ceb166fec80bf95f380bdd81620",
"pids": [
2968
],
"md5": "e1a98381401ef01a46cbe0d0ceb53fa1"
},
{
"yara": [],
"sha1": "9e61771c4f36345675be098f9919091bbaf50d4e",
"name": "b01c427d62e5ffa3_calendar.mdb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\access\\calendar.mdb",
"type": "Microsoft Access Database",
"sha256": "b01c427d62e5ffa3932d0b581ebaba91c974ea9c670037136b2a707f0d06be74",
"urls": [],
"crc32": "E2C0FC8B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/b01c427d62e5ffa3_calendar.mdb",
"ssdeep": null,
"size": 196608,
"sha512": "cf8c4facc8f3e2229568dcc7a7704bd533ef2d46cdb128172856c724cf8c3c789f4069321dd0557f2a608e480950a551f4b85e082b363e9e414a605e93cfb241",
"pids": [
2968
],
"md5": "7ee1e7be81727f850be9eded3f2fa9ef"
},
{
"yara": [],
"sha1": "0c35e801f533d55037d89db5d94b43a4a65d0130",
"name": "568b24570e912a8b_calsample.dsp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.dsp",
"type": "ASCII text, with CRLF line terminators",
"sha256": "568b24570e912a8b73eb67d45c44f4def2f7c4fa19c71ffac7712e58d76d0609",
"urls": [],
"crc32": "65DFB731",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/568b24570e912a8b_calsample.dsp",
"ssdeep": null,
"size": 4655,
"sha512": "6c673ac605a4b0c00ed8519da02b9ed157a820e53fb1b2ef37d56f00f0ebd7f97e0f0d12a75fc6f40131ad82adf8bb1f8ff1ac4ecb3a3a878155274ab4d3060b",
"pids": [
2968
],
"md5": "e844524026ba6de8c56d59d2727823ff"
},
{
"yara": [],
"sha1": "8a482b716949102309b3638887a02eb1c1160d62",
"name": "a63b1a1e58b9b527_form1.sct",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vfp\\form1.sct",
"type": "FoxPro FPT, blocks size 1, next free block index 27997, field type 1, field length 16, 1st item \"VERSION = 3.00\"",
"sha256": "a63b1a1e58b9b527b3afecc6da5b9ba90d322668a9f42eb879a7d4e70f7bb802",
"urls": [],
"crc32": "D25054B8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/a63b1a1e58b9b527_form1.sct",
"ssdeep": null,
"size": 27997,
"sha512": "68212b74e8816fa2e59a6b8742b8710f7f432fa38dbbb4a473a5d7584cd71c29e5bd826aaef5b276bec5afcded19aa8e2a3489046a20388069087cfdb0aae863",
"pids": [
2968
],
"md5": "1ee225c09be982c2b86163611268e867"
},
{
"yara": [],
"sha1": "3e89ff837147c16b4e41c30d6c796374e0b8e62c",
"name": "9884e9d1b4f8a873__shfoldr.dll",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows",
"sha256": "9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87",
"urls": [],
"crc32": "AE2C3EC2",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/9884e9d1b4f8a873__shfoldr.dll",
"ssdeep": null,
"size": 23312,
"sha512": "9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3",
"pids": [
2968
],
"md5": "92dc6ef532fbb4a5c3201469a5b5eb63"
},
{
"yara": [],
"sha1": "692921fdd80730b6223860c12a9066c4e5ab191c",
"name": "2160cf57964efde0_program.cs",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\program.cs",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "2160cf57964efde0e6a8b672de0fe083e251112613662807d3d17c776314f77d",
"urls": [],
"crc32": "17A69102",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/2160cf57964efde0_program.cs",
"ssdeep": null,
"size": 511,
"sha512": "e1a2bc29f8df9f559581d87663d75fbbb3c2c489fdfbf788e1d9fa3b08724960b641e990c5c79d3bfff6b6e020c47b47a6ec4fb14dca6b3ba39a863d914b7121",
"pids": [
2968
],
"md5": "952d7cdb550935ddd4b493c0d1b4769b"
},
{
"yara": [],
"sha1": "4f7a5079eca4d13f45d38583dfb5d589f02f52b1",
"name": "355344e8af18727f_assemblyinfo.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\general\\assemblyinfo.vb",
"type": "ASCII text, with CRLF line terminators",
"sha256": "355344e8af18727fae1ea47493a5d5cf76b5e37f9fab34730f7a2b2ebdaf4d76",
"urls": [],
"crc32": "1B78D333",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/355344e8af18727f_assemblyinfo.vb",
"ssdeep": null,
"size": 911,
"sha512": "5457b07b41702a1fab31e837b6cb98786fa77a1cac35eb57890da54f3bc737bd143718d914ac05fb7032a88d68261654c1ee62df427a8fb237587a91a29dc93c",
"pids": [
2968
],
"md5": "7a50d276fd2c5a5da856b654371c16a6"
},
{
"yara": [],
"sha1": "eb2448fb6bb9f4ae9e57813086670dadf124f26b",
"name": "978d44712f462534_unins000.dat",
"filepath": "C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat",
"type": "data",
"sha256": "978d44712f462534c0f4b892032eec193122fc3b567fc1ec6cac5bf7a0c78048",
"urls": [],
"crc32": "7DBF5E3E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/978d44712f462534_unins000.dat",
"ssdeep": null,
"size": 28307,
"sha512": "7c1ecbf5da6036f5e5705408dda0478d0dc90e32bb5146a1f6ed3f298dfb0c39ad06ca21bc895af069f9b5f850ce3f43ab24b15050f6955abe17c4e0d83aedc7",
"pids": [
2968
],
"md5": "4c5c6888de56e9a3503e3f45c3977dea"
},
{
"yara": [],
"sha1": "e6482d5778bbb715eafd8064e74db2206b3535c0",
"name": "3225bc6a4f0432a1_resource.h",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\resource.h",
"type": "ASCII text, with CRLF line terminators",
"sha256": "3225bc6a4f0432a11b451673e77715003ead4a4c221c03506b0f88f36288a8a2",
"urls": [],
"crc32": "002D6860",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/3225bc6a4f0432a1_resource.h",
"ssdeep": null,
"size": 2389,
"sha512": "4c09ebecd97d6ed0ba1d8b6f8d9d92bb8bd809a2033aa02c88b930c08432f1594e273e02ad9d63281af9ee15097790f6b4bf1311939e2fc00a51a467abb62a30",
"pids": [
2968
],
"md5": "d9de3503104c5b2b65e3893519421982"
},
{
"yara": [],
"sha1": "79175646fb3c9d09070eb67d4ee7f13bc5ca0e0c",
"name": "c67dbb759fa3ec0b_form1.resx",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\form1.resx",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "c67dbb759fa3ec0b78215716d9ac1325572a505f3aa328539263e0048b4b4a39",
"urls": [],
"crc32": "BEA21C32",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c67dbb759fa3ec0b_form1.resx",
"ssdeep": null,
"size": 9413,
"sha512": "5fed2e25f3dcd4a4fc4fe5c509bf6fcf0e7481760615eaf0b54dc27192092925b33a42bb716443ca02a215c742e5f317b78db37271e727437d8b42f7cc17a9c0",
"pids": [
2968
],
"md5": "b97c79a29089eb5ba0249bab90bb7c26"
},
{
"yara": [],
"sha1": "6267a98a107b51e7c380c2fb389271218efd5be9",
"name": "8b06925f1de8bbf1_calsample.rc2",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\res\\calsample.rc2",
"type": "ASCII text, with CRLF line terminators",
"sha256": "8b06925f1de8bbf1a5ca11e2f5bcf706d9acca85b1d8e8e00143b18885556fed",
"urls": [],
"crc32": "35D0F56F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/8b06925f1de8bbf1_calsample.rc2",
"ssdeep": null,
"size": 401,
"sha512": "300c7eab3ae3a48819054f50ab46ce7aeb7ece753cd2b683e74888c9f4b5143b8d170bf8414645f63a3f0deb38aedd908b74babe539dfe3ff4ddd52df0bb5fc0",
"pids": [
2968
],
"md5": "aa44cd579385539b848372b9ff005abc"
},
{
"yara": [],
"sha1": "b02982a816782c3c16ad5a321dce0a79cab124a2",
"name": "89c8d27247ff86f1_485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"type": "PE32 executable (GUI) Intel 80386, for MS Windows",
"sha256": "89c8d27247ff86f189ebba01e27c47daa184a04c5f002130f9d336ca80d71202",
"urls": [],
"crc32": "D7DEC5EC",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/89c8d27247ff86f1_485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"ssdeep": null,
"size": 1154048,
"sha512": "e99977ed9b3ea6607d347fe3e339cff40e70166db6a93443046cb7e0bc2a6f7c598503a55030f7d9ae0e8ede8b706bb4bd682bbdadf215641247b96bae0d09f4",
"pids": [
2456
],
"md5": "394289faec0a43faea574588cb367018"
},
{
"yara": [],
"sha1": "739cf30e92a9f60406b2a5f32003d52b5f66f5eb",
"name": "6513102088149773_proj1.pjt",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vfp\\proj1.pjt",
"type": "FoxPro FPT, blocks size 33, next free block index 113, field type 0",
"sha256": "6513102088149773b61f0965e6fb7fd37109bb81cd4d7608b2f34e529eb3aa46",
"urls": [],
"crc32": "5E66B406",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/6513102088149773_proj1.pjt",
"ssdeep": null,
"size": 3729,
"sha512": "c2320fa1b11757809b1c9f95df7681d7d1dae8f95203756bf42e6255bfa393a892f3310159b906a48e2a4e99cbe43102da2ae3525717d790b486f44642391d2d",
"pids": [
2968
],
"md5": "9d4d84d378cf744fdbe2659abe990310"
},
{
"yara": [],
"sha1": "efe32d504ce72f32e92dcf01aa2752b04d81a342",
"name": "a4c86fc4836ac728__setup64.tmp",
"filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"type": "PE32+ executable (console) x86-64, for MS Windows",
"sha256": "a4c86fc4836ac728d7bd96e7915090fd59521a9e74f1d06ef8e5a47c8695fd81",
"urls": [],
"crc32": "B1C5F7C5",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/a4c86fc4836ac728__setup64.tmp",
"ssdeep": null,
"size": 6144,
"sha512": "ba0469851438212d19906d6da8c4ae95ff1c0711a095d9f21f13530a6b8b21c3acbb0ff55edb8a35b41c1a9a342f5d3421c00ba395bc13bb1ef5902b979ce824",
"pids": [
2968
],
"md5": "4ff75f505fddcc6a9ae62216446205d9"
},
{
"yara": [],
"sha1": "fc18779bacdc09814f2240d5e9d1331278a102c3",
"name": "e1c4239ac767915b_resources.designer.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\resources.designer.vb",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "e1c4239ac767915b7b4b19fedaa1b395f4a276f96d469abcbc83d7b4984e376a",
"urls": [],
"crc32": "2F7455D7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/e1c4239ac767915b_resources.designer.vb",
"ssdeep": null,
"size": 2788,
"sha512": "54a2f90d7b1d4c510010581e6e384ae11ea953950e2bc28597cd29549831af41625c750d3be310595bc9b54296e09fecf32a637f7c23ceae9d56c17ddd57bea3",
"pids": [
2968
],
"md5": "52cd0b34ca71e71295666ccec676face"
},
{
"yara": [],
"sha1": "df7ff641c2b7e90853ed1d324f4e2ce5b474f665",
"name": "12c39a52cc404aaf_calsample.opt",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.opt",
"type": "Composite Document File V2 Document, Cannot read section info",
"sha256": "12c39a52cc404aaf83aa55e265a836837d8d5d816d39eaea77d510144d581cea",
"urls": [],
"crc32": "6F90FC18",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/12c39a52cc404aaf_calsample.opt",
"ssdeep": null,
"size": 105472,
"sha512": "87a185a601023d387819735a2ae09da6604c0b22860d150e6c33b08984c49d12c403fbc1448acb7cab20edf3634b035abb1ca6a9425f791995a246fd9ad6ea7b",
"pids": [
2968
],
"md5": "ac32ce85aab6d79803afef6146fb2b20"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "76be60c047e16e2001af0135c6c45730de0406e3",
"name": "34edc58a23e198aa_calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Tue Jan 17 11:31:46 2006, length=585, window=hide",
"sha256": "34edc58a23e198aa3bb81cd363a22a2e84724d35fecd7bdcb5af6c8487e57fc2",
"urls": [],
"crc32": "D26364CB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/34edc58a23e198aa_calendar activex sample.lnk",
"ssdeep": null,
"size": 1362,
"sha512": "fa117df3a9fbde68eece38fdacaf51206742c9bc933e482a8ea6a94d27938c1a1844bb1bb0cf58e445d5c941132965c621b06f04517ddd0fcb638810593792fc",
"pids": [
2968
],
"md5": "200931ba7a276f8ad1788eb6a163daae"
},
{
"yara": [],
"sha1": "47b15748ecc8e952c5935170090db7c269ce4b4f",
"name": "66b5ebd1b0fc73f0_resources.resx",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\resources.resx",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262",
"urls": [],
"crc32": "76745A94",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/66b5ebd1b0fc73f0_resources.resx",
"ssdeep": null,
"size": 5612,
"sha512": "883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6",
"pids": [
2968
],
"md5": "0cd8c971317d19bbed44757809bcb92b"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "0ec48ab33e262514f4c364d159fb8e82e54cc39a",
"name": "22d91a89333cfe66_help.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:17 2019, mtime=Tue Sep 17 23:53:17 2019, atime=Sun Jul 14 00:21:02 2013, length=136404, window=hide",
"sha256": "22d91a89333cfe664ceaf68de23e48a107bc0989f008e7a44bab48ce7ad2de56",
"urls": [],
"crc32": "A5D5A88D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/22d91a89333cfe66_help.lnk",
"ssdeep": null,
"size": 1236,
"sha512": "435c8d4dbbc3f8ac8ed1e80e8ddb1402befe17e362d119b8f32bf18a650b576402515df02a4877a721222280a30ba7c582974fae12f7cdadad29da32a5d970c7",
"pids": [
2968
],
"md5": "8b8f1981bfd841955dd06ffed8204ff6"
},
{
"yara": [],
"sha1": "242ab3f1bb68165da9c3051be96074ffe1a1162e",
"name": "4154fa856a26290e_calendar5.ocx",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar5.ocx",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "4154fa856a26290ee8e3925f31f975cbcab65856647dbeff11c4c28abd731278",
"urls": [
"http:\/\/www.viscomsoft.com"
],
"crc32": "FC3A0C98",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/4154fa856a26290e_calendar5.ocx",
"ssdeep": null,
"size": 450560,
"sha512": "d4893eb79bb9d9ed395ec14c4c8314f5ecd130cbbed7e63237691512624fb8b85947a604fa7da9a6f40fb393ab8743e4719367bdaf4416427dce5c151e7d7b22",
"pids": [
2968
],
"md5": "98efc13ca2c7dc58e118fe28b42f5c9d"
},
{
"yara": [],
"sha1": "d3b1ce70ee8135dd3a573ba607b098587927b61e",
"name": "18c4757e5b36dc29_calendar2.ocx",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar2.ocx",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "18c4757e5b36dc2953f9d8202251eeb02b705a6d9028ce646862bb0151520f78",
"urls": [
"http:\/\/www.viscomsoft.com"
],
"crc32": "2C703657",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/18c4757e5b36dc29_calendar2.ocx",
"ssdeep": null,
"size": 450560,
"sha512": "38a03a6fea8112f85d9a36fab932a725634338993b208607d043d7178ddfc7570f0fe14b4d86a72eaf4b046d655163b821bfaf08cb5d463344778d048e93b0e2",
"pids": [
2968
],
"md5": "d7fe489f6b67a09b7f6ec91368a1d2e1"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "75dcb02db5ff349815396a97850210e88c51a566",
"name": "52f91bcd0ef09973_multiple calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Wed Jul 10 22:46:04 2013, length=879, window=hide",
"sha256": "52f91bcd0ef09973c573975f0ded604e9c65454dc1d9fdd37efb67c31633e4ec",
"urls": [],
"crc32": "18501B93",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/52f91bcd0ef09973_multiple calendar activex sample.lnk",
"ssdeep": null,
"size": 1638,
"sha512": "3407d95d304f7829007aba121619c060248ed1119d2003abdfdfb34ed440fa87f43bea471f591ac9f2280831e583e34c6e108449a68a6021853c927eca8b8e3e",
"pids": [
2968
],
"md5": "3ab915fdb6560b7d1f069400b2b5ee03"
},
{
"yara": [],
"sha1": "3b513bf4da90451b49d586dd5f9ebef09193d274",
"name": "e8e2f9522edf790f_project1.log",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net\\project1.log",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "e8e2f9522edf790f3576c86acd4e9cd55eafcc7d3750f702baa38915bc9dae02",
"urls": [],
"crc32": "98401A49",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/e8e2f9522edf790f_project1.log",
"ssdeep": null,
"size": 2881,
"sha512": "0cb2bedf6ab2d4996bdd1f815a42d88c654778a5f00a42814126c8137f95c47ba8b8ddd166ff2d2e8a80e76cb322c0bd593b72a3ca4da988cfe64a2adb5f9c34",
"pids": [
2968
],
"md5": "5d81f46d2dd50faae1ea7ab9c48df046"
},
{
"yara": [],
"sha1": "bc5733c16f02c578463170d3d8be7c3c17d1693f",
"name": "04630351e41ca93b_form1.cs",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\form1.cs",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "04630351e41ca93ba25a3796f372fdc06d3d0bb99fa2eb1490045ab1235aced6",
"urls": [],
"crc32": "E5286836",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/04630351e41ca93b_form1.cs",
"ssdeep": null,
"size": 3084,
"sha512": "717ccca506268c4ecfdaeba94fee46a7d2e5e9e1019e4f926cd170f132262b46e0eb17678cef6e8f5565f0ea4df9f77375800dc51d16bab88f98bec8c863cbfc",
"pids": [
2968
],
"md5": "d2048057adec0590e41bd746c687e964"
},
{
"yara": [],
"sha1": "b329597aa1d138ef97264a1b09f77f4a97d05daa",
"name": "17d9ba10a2faf562_calsample.ico",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\res\\calsample.ico",
"type": "MS Windows icon resource - 2 icons, 32x32, 16 colors",
"sha256": "17d9ba10a2faf5620bd85df1b7691c1f1de2c29db33c3eef719c90d0d10aea94",
"urls": [],
"crc32": "120DE4E4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/17d9ba10a2faf562_calsample.ico",
"ssdeep": null,
"size": 1078,
"sha512": "7cdf089c421af224b73069072d8381e17a0ebd57b69ad39362ffdcdf827c89bc685090397f7a8a397a30dddd22bf3b8ca68ddcb89b76ed8853498675240e31f5",
"pids": [
2968
],
"md5": "e3e1ed66c0a0a58bbd5da9f6343b8bf2"
},
{
"yara": [],
"sha1": "6734e429e4266a332a42a487a1cbed6c0316e01e",
"name": "74805b63b6fcfd43_calendar.h",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calendar.h",
"type": "C++ source, ASCII text, with CRLF line terminators",
"sha256": "74805b63b6fcfd434d5438981e29309ae242d0f6d222926c31e12c5de8bab97d",
"urls": [],
"crc32": "24BCD6A5",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/74805b63b6fcfd43_calendar.h",
"ssdeep": null,
"size": 2971,
"sha512": "92087c15786f0b9c0b5d3d542183383495012233bd10ce0d87e3af5615c244cc146e8a0f7763b5a59005d1598e3c1b081c5de924daba55ff26922b903ad7184c",
"pids": [
2968
],
"md5": "353cdbaf3bffed544c012ad85d9c4561"
},
{
"yara": [],
"sha1": "79ff54c3fa41df4c02d14ddd73673f053e5f4c7a",
"name": "ba3d6e5b161be292_calsample.plg",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.plg",
"type": "HTML document, ASCII text, with CRLF line terminators",
"sha256": "ba3d6e5b161be2927e128bc0be4ca367765d480e0006608156f674ba1102a553",
"urls": [],
"crc32": "440E7DAE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/ba3d6e5b161be292_calsample.plg",
"ssdeep": null,
"size": 980,
"sha512": "bb56dd23f2e514f8969e352f746af22dc14b495ba15710e232b9acc39129b7bb6feb882f1018d517c0dc4f4199696f9a2900e3ec9ceaff3cc769dab3200f91d2",
"pids": [
2968
],
"md5": "65b4083da5a2ad87ba0744f8f80e7c42"
},
{
"yara": [],
"sha1": "8558ea4251762227a57629e3f2e66bc6cb14dd3e",
"name": "965862ec1db888e2_form1.designer.cs",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\form1.designer.cs",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "965862ec1db888e29e7eb423fe4ead5a572f8c01401c338c2e9a13db193e9d54",
"urls": [],
"crc32": "ACC57D82",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/965862ec1db888e2_form1.designer.cs",
"ssdeep": null,
"size": 10368,
"sha512": "74b1be9e02864d076bfea5644d4f9a9ad129fe0457d33e9e825286df0c71ea951e4f70d318cb1708a1d518d895fb713dbd78f4927cd070fd7f8effaaac9f36d9",
"pids": [
2968
],
"md5": "d277c3ddc4a265a71e3b1527616d542a"
},
{
"yara": [],
"sha1": "fb04dca7af08854d08e38968ed0f6308e76f429e",
"name": "c044b2a7caacd572_calendar.ocx",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar.ocx",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "c044b2a7caacd572fdc0cdaf5d28095742cd82a5791912051875f0d57931e841",
"urls": [
"http:\/\/www.viscomsoft.com"
],
"crc32": "15F3E573",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c044b2a7caacd572_calendar.ocx",
"ssdeep": null,
"size": 118784,
"sha512": "b45e5c4f50bd55c9ecb7d3bcb7e2a28e356e92ad3fabf905c61c39190c2639743928d981f21c9daf02d96d9bbfb725c2759397a3f38c76c11a1c1992120b7a17",
"pids": [
2968
],
"md5": "e2f40d16c560e91a5ad1193a368248b1"
},
{
"yara": [],
"sha1": "55f73660830106254c0193b6dce138122c999e14",
"name": "ceeec452615d2677_calendar.chm",
"filepath": "c:\\program files (x86)\\calendar activex control\\help\\calendar.chm",
"type": "MS Windows HtmlHelp Data",
"sha256": "ceeec452615d26773f46ba1c6c3febdd106288fa60b2755c076ce34c48c7be21",
"urls": [],
"crc32": "481905B8",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/ceeec452615d2677_calendar.chm",
"ssdeep": null,
"size": 136404,
"sha512": "96dbefbae8c79b9c98e34f99d5c2466b787ea06cf17c1fd9895a6b7f0d3e82ac00d5f4084276d1f943c176cd1c2f85013027e5939dcdff52d8408bd5b9dbc908",
"pids": [
2968
],
"md5": "e356ec469b7ff86d8e665897a28af171"
},
{
"yara": [],
"sha1": "ad7b574724645a55d921b65a366fab1d97561354",
"name": "a578a1fa6b9c7ab6_website.url",
"filepath": "c:\\program files (x86)\\calendar activex control\\website.url",
"type": "MS Windows 95 Internet shortcut text (URL=), ASCII text, with CRLF line terminators",
"sha256": "a578a1fa6b9c7ab6cc2cc1725ea525332cdbe9cbcb95d248f568b02319db5bce",
"urls": [
"http:\/\/www.viscomsoft.com\/products\/calendar\/"
],
"crc32": "D2825E67",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/a578a1fa6b9c7ab6_website.url",
"ssdeep": null,
"size": 73,
"sha512": "882b1832bce295096cf710de4eb2c74f41402b142717b710c540e23baeac884529a3128d70ed91b85b6ed541fbf9e2cc2606ee5c2e1d4cc843538db1ba018fa6",
"pids": [
2968
],
"md5": "c28858036a051190e4bdf8f1333d9aa0"
},
{
"yara": [],
"sha1": "796bca7c5d35a9cde723b14eb70659c2859af07b",
"name": "509a64e229583787_settings.designer.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\settings.designer.vb",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "509a64e2295837872229ca91b5acb7b759af8f7a0bd4463aba472fbbf5fcdbca",
"urls": [],
"crc32": "E6A68C2B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/509a64e229583787_settings.designer.vb",
"ssdeep": null,
"size": 3015,
"sha512": "7aab3eaa4865139cf646e58df39d53f012fab042da274746d56350699c91ceeb6e4bcbce9874a711784b041e8fd7ac0dbadab7bd8eda0a3c28d2580a4787dd16",
"pids": [
2968
],
"md5": "df7c9ac71690d848a7d7e1bb8d381848"
},
{
"yara": [],
"sha1": "47fd2c7556203af131d182a3f8304c9c69242f47",
"name": "536f4baa7d66b119_form1.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net\\form1.vb",
"type": "ASCII text, with CRLF line terminators",
"sha256": "536f4baa7d66b119808879d5e6a3c812c086e1aee5e379b0ceeb17071fa14bfe",
"urls": [],
"crc32": "42615419",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/536f4baa7d66b119_form1.vb",
"ssdeep": null,
"size": 76671,
"sha512": "b43957c8a52d1ccfe22f43221750cd48e6f5e0f564d9293d15e62556de829cfd06570ec0887afc4e50fdeed98dcbcd6597256a8098aff866cc7c46068e6585a2",
"pids": [
2968
],
"md5": "c28cf6e963728c936c5cbf481ec5f7a2"
},
{
"yara": [],
"sha1": "829075b2f82a82bd62a9172a991e7e6a59df572e",
"name": "a8bb16073fcb85db_windowsapplication1.sln",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\windowsapplication1.sln",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "a8bb16073fcb85db1676b67a9a88c188619d329a4398fdc197c1aca698521954",
"urls": [],
"crc32": "4C81E779",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/a8bb16073fcb85db_windowsapplication1.sln",
"ssdeep": null,
"size": 879,
"sha512": "69fa8bfa2058135f4e3245906c4459ce74ad440e8db64cc02db674ff10cab53f653a5e1205e68f022e10184ff4ebca9bd65956d35e5e1daf4c7db3cfbc7c15ab",
"pids": [
2968
],
"md5": "a93edac02ba2f2c124cb0fc44e87b9d9"
},
{
"yara": [],
"sha1": "05e9433a24891c3c2531379093eef99e73dd4866",
"name": "d23ebfbb7a65f583_project1.sln",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\general\\project1.sln",
"type": "ASCII text, with CRLF line terminators",
"sha256": "d23ebfbb7a65f58383d27f372518d4b83cc2a1b7b49e698480b46959f218df6e",
"urls": [],
"crc32": "EC96855F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/d23ebfbb7a65f583_project1.sln",
"ssdeep": null,
"size": 900,
"sha512": "b5acf1d7cb8877f3366d5da7b79d4460c4ec6afb897b85b8613e4d9501db6f922dead1a99acd441afdd49c0b78c33ad41628d70c25f75f24f536942014950dc1",
"pids": [
2968
],
"md5": "f193555c05885f9370c3493cc958de36"
},
{
"yara": [],
"sha1": "d3770f8f19bfade3f8ebfe597063a3a8011d9687",
"name": "c49b79fac305fbe1_calsample.h",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.h",
"type": "C++ source, ASCII text, with CRLF line terminators",
"sha256": "c49b79fac305fbe180fba70f659a90cc4467fd5694d030cfd58431b3fb18daaf",
"urls": [],
"crc32": "7BE730E4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c49b79fac305fbe1_calsample.h",
"ssdeep": null,
"size": 1357,
"sha512": "b24448527c65de529dcb344ce5a43b076c74beb4b2ac5fcc03839a570fd6d11b7699d811248576ef9c4d5af47a6286e2474f703b46959dd3f3052e5eaa9bd07e",
"pids": [
2968
],
"md5": "49c2fa15bcdd7de380a73b8feeddbd4e"
},
{
"yara": [],
"sha1": "4aca102cbf3a965dec506590187e2999b0f64017",
"name": "9bd3ff96b9ea6afc_stdafx.h",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\stdafx.h",
"type": "C source, ASCII text, with CRLF line terminators",
"sha256": "9bd3ff96b9ea6afc5d4e658ef4e9bc3a946812c16d788822fff6102e64df12ea",
"urls": [],
"crc32": "C5543F5E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/9bd3ff96b9ea6afc_stdafx.h",
"ssdeep": null,
"size": 1054,
"sha512": "b6e386ef55f97416fbfa597261679a52e536f72c02c33a657cbd9ecceb91e1326cbe344a17b871cf13bb7fac92c2fdedfa59951de09d62ec397c38b4f743f830",
"pids": [
2968
],
"md5": "a898d8a65d136c1619e24d95bff9722e"
},
{
"yara": [],
"sha1": "701b9683ee7bc4f7242dc197ca1b04329989bd69",
"name": "ebd6ef9852c0bfb6_license.doc",
"filepath": "c:\\program files (x86)\\calendar activex control\\license.doc",
"type": "Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 936, Title: Viscom Software, Author: JimmyComputer, Template: Normal.dot, Last Saved By: jimmy, Revision Number: 9, Name of Creating Application: Microsoft Word 10.0, Total Editing Time: 03:00, Create Time\/Date: Mon Jan 3 15:05:00 2005, Last Saved Time\/Date: Sun Jul 14 10:38:00 2013, Number of Pages: 1, Number of Words: 761, Number of Characters: 4342, Security: 0",
"sha256": "ebd6ef9852c0bfb6b218ca3eb6c98d9f799473121ebd6ae4fbb8d75dc43be1b1",
"urls": [],
"crc32": "8EF35939",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/ebd6ef9852c0bfb6_license.doc",
"ssdeep": null,
"size": 29696,
"sha512": "1f0d0e0c80501edda903c649b92cf5430578f1d334ab11b85b8f9c2e0a8356bd0f184e1009b35c793636b947bc35136cbe5c09bebc7f4952663ac3f540710c46",
"pids": [
2968
],
"md5": "1e5f97c34a0f12f989d08f4b0f2fe7b7"
},
{
"yara": [],
"sha1": "1fc1f97be1b5d62bcdcb9c99520bbb9e06e8ef15",
"name": "442da7441761722d_stdafx.cpp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\stdafx.cpp",
"type": "C source, ASCII text, with CRLF line terminators",
"sha256": "442da7441761722d06805822ae091ddc70165a2eab7d97328d856bf17baef0ba",
"urls": [],
"crc32": "0F2AD4F0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/442da7441761722d_stdafx.cpp",
"ssdeep": null,
"size": 211,
"sha512": "f3cc93c7074bb96c14b944e96045ae05b5c17b9c928797e7be1cafa85208c9037422146d24c5c83fd2cc3b8d9ac091da0b18204502c7bd2ecf6da828ba7edfc4",
"pids": [
2968
],
"md5": "b3c9915b9297ba825bfd181c0e936fd6"
},
{
"yara": [],
"sha1": "9bec71d82c303bb921c371afa6cbb5f9e8b79f5f",
"name": "c36579b6027bcd37_readme.txt",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\readme.txt",
"type": "ASCII text, with CRLF line terminators",
"sha256": "c36579b6027bcd37426a9427d2b1ce32178d992d3ebf20a3cf34ab2745461e84",
"urls": [],
"crc32": "0C81475D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c36579b6027bcd37_readme.txt",
"ssdeep": null,
"size": 3633,
"sha512": "6f2453993597d79956aa0a8aa7701a35a4d8b84fba37fc3956bea1b15233c5be76e67e608004a5a1b0fc83f84518edb9d99a18f11eb40ec21c5cd5f68417e16b",
"pids": [
2968
],
"md5": "99ceb971b833b8803d3328266b31e94b"
},
{
"yara": [],
"sha1": "c3c8d1caf65c20700f316761648b06fc3f5c9a84",
"name": "8c535a7fa3e10486_project1.sln",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net\\project1.sln",
"type": "ASCII text, with CRLF line terminators",
"sha256": "8c535a7fa3e104866a8bf89f43949a5d591bb3edf46e56c671d86ff92f2e5633",
"urls": [],
"crc32": "43551203",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/8c535a7fa3e10486_project1.sln",
"ssdeep": null,
"size": 901,
"sha512": "3993563545ef8c3749dc8f40e2858fe0ef92be12f5eea5bde0ae3e812326f7146245c5a63b12c38093e3b49d0f69e72835d5d4bb0e15a09e16c3c87827de2ddf",
"pids": [
2968
],
"md5": "9659fa8d32a276fdbd028ed90e63893f"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "3e4d60567449c346da33935040b28f7c38df1d8c",
"name": "9d2773f6f9b39a6c_calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Sun Dec 18 19:49:14 2011, length=6607, window=hide",
"sha256": "9d2773f6f9b39a6c9bb014530333d838615942b13e2b401183cbc33338d21dc2",
"urls": [],
"crc32": "F189316E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/9d2773f6f9b39a6c_calendar activex sample.lnk",
"ssdeep": null,
"size": 1560,
"sha512": "b4cd11dbcde64f39acb35ac280d012e7a48772230a4c8e79c7e274647b0827eb87ad667811e02d63935d78832b86d2f02b537ddcfa2e05ff94832e53535d63fa",
"pids": [
2968
],
"md5": "862684be3bbb6466baa643327c2ff833"
},
{
"yara": [],
"sha1": "c19394d95e4142f2f4c20e979fa3484356039400",
"name": "79b156151260934c_resources.designer.cs",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\properties\\resources.designer.cs",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "79b156151260934c00501e4ab8ef05506c259a2b7264da43d04b00b92e76ae4f",
"urls": [],
"crc32": "067F9283",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/79b156151260934c_resources.designer.cs",
"ssdeep": null,
"size": 2866,
"sha512": "4ec4a0ba097ba4de2a7afb120160e959f56435393c8f716d1b91339db7f037ce74bb40f59419ca7f14dacd790d99cc76756716398d3e5cbf288b426e78d6532b",
"pids": [
2968
],
"md5": "d66cd6702a857e5d686ce5a59adf207f"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "031008c4c5d2e78096ff0ba3f43a451a93bce722",
"name": "10b563146a3aee4e_license agreement.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:17 2019, mtime=Tue Sep 17 23:53:17 2019, atime=Sun Jul 14 23:38:50 2013, length=29696, window=hide",
"sha256": "10b563146a3aee4ec0a73d93b15919c346a130821befa045120298e8f96c5ea9",
"urls": [],
"crc32": "3D8DE717",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/10b563146a3aee4e_license agreement.lnk",
"ssdeep": null,
"size": 1130,
"sha512": "a5369e6cafaa3de5d4eda4d953289e84015ae1512d3cd0bfe44dccd8c32d1176398db337592a5e72a59c62ee902840d0537ddf64efe9ce47b15e6f0248825afb",
"pids": [
2968
],
"md5": "b8bd2f7fd3a894f1946d1544816c5a44"
},
{
"yara": [],
"sha1": "69d7ddb4eed9f7e53a9b515dec2f7668e91c4501",
"name": "1c489855b66d47f9_app.config",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\app.config",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "1c489855b66d47f9bdc8960775f1ed0f0c940b6d046da78d5566f7a5c3e5a1e4",
"urls": [],
"crc32": "C527DBFD",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/1c489855b66d47f9_app.config",
"ssdeep": null,
"size": 201,
"sha512": "195e05986209e0979624b8e86fdc6e53adc1bd5846a7cc4b8392d156d11a3d0d78e84f5dec23fe0a30b0b93fdf2e2090a0656cfac646639bbde9ffaccb4c31a5",
"pids": [
2968
],
"md5": "a0126e979c1b17d5331da2277f46d6ff"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "b1acaa9fbdbc6b8a64606206c6f736e59fe828f6",
"name": "261da8205576b774_multiple activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Sat Jul 13 23:31:38 2013, length=879, window=hide",
"sha256": "261da8205576b774d4e77c6195e3e591c962e14743e13cb57d2bea335801d239",
"urls": [],
"crc32": "E88ECF11",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/261da8205576b774_multiple activex sample.lnk",
"ssdeep": null,
"size": 1672,
"sha512": "2b7b3bfc24e219ba4bf603dbf41c8fce5bcf241ec544d22e1fb07fbcd97f0d968389a256f9ece16b1b9cc0e3cea6350b9517abcadd154086634339582acbd270",
"pids": [
2968
],
"md5": "d55ad3145139e31712d7e969cc7e716a"
},
{
"yara": [],
"sha1": "542a53b82e9b58a95e7422e845d65b0bbc83d2d0",
"name": "53731d89b3570b04_form1.resx",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\form1.resx",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "53731d89b3570b04a85a834fd7294e0e02d2aab51ca7f735c1a88d1bced262f7",
"urls": [],
"crc32": "DA30700D",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/53731d89b3570b04_form1.resx",
"ssdeep": null,
"size": 9413,
"sha512": "9558644eddeb25d47581ce28c93300bf3425509b648f7654e03f19e5c1f523045b4f31bd1b4324f3bc54e51a6373d2c693a25854899440454237c5e60c78fc12",
"pids": [
2968
],
"md5": "070f13f386672d2665ffc40fd4f0d9ea"
},
{
"yara": [],
"sha1": "d5502a1d00787d68f548ddeebbde1eca5e2b38ca",
"name": "8094af5ee310714c_msvcr71.dll",
"filepath": "c:\\program files (x86)\\calendar activex control\\msvcr71.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe",
"urls": [],
"crc32": "35563170",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/8094af5ee310714c_msvcr71.dll",
"ssdeep": null,
"size": 348160,
"sha512": "3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da",
"pids": [
2968
],
"md5": "86f1895ae8c5e8b17d99ece768a70732"
},
{
"yara": [],
"sha1": "1bba770a54d7a0675c9ebb16a6b8ebfbf8801fee",
"name": "c408964ffd3ed52b_calendar4.ocx",
"filepath": "c:\\program files (x86)\\calendar activex control\\calendar4.ocx",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "c408964ffd3ed52baeb018bca883cd15691e545a343e5d6f6fa6b0dba2fbb0c7",
"urls": [
"http:\/\/www.viscomsoft.com"
],
"crc32": "703AAF29",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c408964ffd3ed52b_calendar4.ocx",
"ssdeep": null,
"size": 450560,
"sha512": "1ae7817972124d3f653411f570aace1e0d8daf9a18e9dbc46270cde0751c3ef4f790452ff9d654d39be5aafb82d7ac0dd004704686548275c5bd6f6238edab0f",
"pids": [
2968
],
"md5": "9eeeacb2d2ee42d19e4b69d4146f7b48"
},
{
"yara": [],
"sha1": "d1fd06b6ae37045896dbe555f70246f861c9d0f3",
"name": "8828317c5c14bbe5_calsampledlg.h",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsampledlg.h",
"type": "C++ source, ASCII text, with CRLF line terminators",
"sha256": "8828317c5c14bbe58eefb403d77d877084fbeced5fe959bb668e907279d16c6e",
"urls": [],
"crc32": "7A8DCAFE",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/8828317c5c14bbe5_calsampledlg.h",
"ssdeep": null,
"size": 2633,
"sha512": "7d9c2a925ca42f9b21af8bfc0782f550e4519fe1539d0eb6763c07dc9dba779e3fe4a540a33b60d563ff395096e9961c5a3eabd7048409fd0a4d68b870b7c6ef",
"pids": [
2968
],
"md5": "2b0a1c63b06eb91bc87a30886373f96e"
},
{
"yara": [],
"sha1": "b3caf9980cf30f96ce7cdf57087686f659880f96",
"name": "82345fb8908d527d_form1.scx",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vfp\\form1.scx",
"type": "Visual FoxPro DBF, 74 records * 109, update-date 06-1-16, codepage ID=0x78, with memo .FPT, at offset 1032 1st record \"COMMENT Screen \"",
"sha256": "82345fb8908d527d76512f4f7d552afbdb8d64136474603ec71d22e700238d4b",
"urls": [],
"crc32": "B67E7D8E",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/82345fb8908d527d_form1.scx",
"ssdeep": null,
"size": 9099,
"sha512": "8068f7d30f3c58ededa570c4b5c19872e4c6a455180b21d2e11a80eb4762defdf49f7ee718ade23140a689324c3152b2ae055647a02fa94b8968ebe57177eac1",
"pids": [
2968
],
"md5": "2ba9cc300809773dc83606ed5fa6436a"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "31201af45d823808ac0acc4870f2570060bdbd5b",
"name": "753240e949cefafa_visit calendar activex control web site.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Sat May 6 10:30:06 2006, length=73, window=hide",
"sha256": "753240e949cefafa50c5f992a5e67df7d9d93fe7e16c6f0972b2916dffc71df4",
"urls": [],
"crc32": "FC277E57",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/753240e949cefafa_visit calendar activex control web site.lnk",
"ssdeep": null,
"size": 1130,
"sha512": "62d67b7fcd8a87450dd53c118c7b0f348e19e9dd6dd3deef99c3ff5062580927b6ed5cadad3402e3ef197d8ac3c1d5edc5a302889571e112c5d227e5a82e3a49",
"pids": [
2968
],
"md5": "dec342fae35fd82eae7cd6b5a6fcaad5"
},
{
"yara": [],
"sha1": "c8ccb04eedac821a13fae314a2435192860c72b8",
"name": "df96156f6a548fd6_msvcp71.dll",
"filepath": "c:\\program files (x86)\\calendar activex control\\msvcp71.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b",
"urls": [],
"crc32": "5A3B11D4",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/df96156f6a548fd6_msvcp71.dll",
"ssdeep": null,
"size": 499712,
"sha512": "7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43",
"pids": [
2968
],
"md5": "561fa2abb31dfa8fab762145f81667c2"
},
{
"yara": [],
"sha1": "ebaff6b72318a776428ea0cf192abe8416a881d3",
"name": "2ac6536b8b86fb63_windowsapplication1.csproj",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\windowsapplication1.csproj",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "2ac6536b8b86fb6305aa0fa42eb62bad90aa69ee5715bfb0cc7c2913f6729486",
"urls": [],
"crc32": "7CDB6520",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/2ac6536b8b86fb63_windowsapplication1.csproj",
"ssdeep": null,
"size": 7932,
"sha512": "a5ea2428c1770ed7688755e199ff011b369dd84c0a8555f5abce1aef31df3e9fcd3f22d51bc6cf9ff102a4bdc6958720c4b6ef00a10447f10f58bef4fffcfb88",
"pids": [
2968
],
"md5": "2d32e56061761000f20c17afd3d1cae0"
},
{
"yara": [],
"sha1": "99bae4542263026c9cf6970bc1cf882c68d93f57",
"name": "ce3e582861091b11_windowsapplication1.vbproj",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\windowsapplication1.vbproj",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "ce3e582861091b11f535b631c2d31b0c6f6f97e193cfead28289e4a7e8960a41",
"urls": [],
"crc32": "ABE6F969",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/ce3e582861091b11_windowsapplication1.vbproj",
"ssdeep": null,
"size": 9451,
"sha512": "14ac88a934dba984e1b94310a2f881d8cd284ddaf2cb28a39890b87627ed50e63e182dc16d66034ffffd97aa6fd71c6eac6ea11c71e3d8b986fa2c1171bc98b7",
"pids": [
2968
],
"md5": "43a1e432cddd0bf8b9ca824cc123e0a5"
},
{
"yara": [],
"sha1": "b70a4872aa9790204e9229828738881dd6101b5a",
"name": "bdd9647bbdcab4b5_unins000.exe",
"filepath": "c:\\program files (x86)\\calendar activex control\\unins000.exe",
"type": "PE32 executable (GUI) Intel 80386, for MS Windows",
"sha256": "bdd9647bbdcab4b5bdce406309622d5f9401b3b3d3b956f1102b73494f3d3663",
"urls": [],
"crc32": "AB8B8074",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/bdd9647bbdcab4b5_unins000.exe",
"ssdeep": null,
"size": 1174979,
"sha512": "2c1ae64425d48bd429a83d78212fb31808888c6ac544de284fa86cee3fe23d928bd044174c4a5bdf9befa9a3df4cb125b047cafd7cab139249d705f405d6bad5",
"pids": [
2968
],
"md5": "0dac0e286057fad7b4fda03425f8b9f9"
},
{
"yara": [],
"sha1": "952dfcd050e1a5a93793df413c9c20c2c182f01f",
"name": "815b2d7619ff5bbd_project1.vbproj",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\general\\project1.vbproj",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "815b2d7619ff5bbdb1c7ae042cbf3e5db32fa79d211a9c259cdf480563dec9b7",
"urls": [],
"crc32": "E75B3652",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/815b2d7619ff5bbd_project1.vbproj",
"ssdeep": null,
"size": 6607,
"sha512": "b25d87868f456fe292161f28eaf16e59eb9f60dac2a29a3d2c992b7199473930c30bf18c49c358c29ce221b4dc679d539272466b9986171020f5c9b5f5e38857",
"pids": [
2968
],
"md5": "166d65deb96f46c256e8a2921f41ae05"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "34254f1cda3578a5c91924c79fcbc89f5de8499b",
"name": "54f598729c3fea45_calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Tue Jan 17 13:00:40 2006, length=1453, window=hide",
"sha256": "54f598729c3fea4507f7886b78855fc32bd9f0f12315860bfd2d0bcf72212103",
"urls": [],
"crc32": "9B6B349C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/54f598729c3fea45_calendar activex sample.lnk",
"ssdeep": null,
"size": 1345,
"sha512": "df39a271472e5ecce3bee2114f935e58fb48b8c127f9d981b5d4e6e42b4a12e78415c82947625ca75f4f65f82635c4d28887ebf2728bc8ea453c24cfbe6b7e02",
"pids": [
2968
],
"md5": "7f217fe8692a31f9e1563a491fd72e77"
},
{
"yara": [],
"sha1": "9a820bef12266f5e641770f44af881f9517f5222",
"name": "aee1c3cda12a474a_settings.settings",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\settings.settings",
"type": "XML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "aee1c3cda12a474a7a8ead292418eb734cde3c4a74a4977e0bb0ed160613a1eb",
"urls": [],
"crc32": "ED82F55C",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/aee1c3cda12a474a_settings.settings",
"ssdeep": null,
"size": 279,
"sha512": "c8229ffec5e3a2df33855a22f53fade99c88e7c92404c35529d2168ef21597de0477164fb888da7192fb3745d47980fa4e8a6259485dfe5a34b481ddd780a432",
"pids": [
2968
],
"md5": "4a12ce12282d0ee237b12e7513037c50"
},
{
"yara": [],
"sha1": "a0f327583f98c649f2639557c2a329c836173872",
"name": "6e35af4b4ef77ff3_calsample.rc",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.rc",
"type": "C source, ASCII text, with CRLF line terminators",
"sha256": "6e35af4b4ef77ff33aae69adc79de088ff3ea0a82e920602251661bdd7f5bd50",
"urls": [],
"crc32": "EEF1CEEB",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/6e35af4b4ef77ff3_calsample.rc",
"ssdeep": null,
"size": 10383,
"sha512": "27a3729c077e6954045287ac377f0d8bf7de29bd1f8aaee24b5429bc456b7c7c1c2156d0056cd6f493c4ca207754ae0c77b36a39ed05c59c4f2f7a4faaaa5504",
"pids": [
2968
],
"md5": "0f3a270ad2f9463276800c9519a105d8"
},
{
"yara": [],
"sha1": "5e1d04de66ffcc5dfd813530ab6992e6daaae417",
"name": "f6a4290723520cad_settings.settings",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\properties\\settings.settings",
"type": "XML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265",
"urls": [],
"crc32": "12D89760",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/f6a4290723520cad_settings.settings",
"ssdeep": null,
"size": 249,
"sha512": "a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa",
"pids": [
2968
],
"md5": "8c0f00d7d9b0046695a0255f1b11b061"
},
{
"yara": [],
"sha1": "15bcd61c2c7c0089d5b0d02292641a27c2dcf939",
"name": "9c2374dfd204cada_calsample.aps",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.aps",
"type": "MSVC .res",
"sha256": "9c2374dfd204cadaa2e4ec04fdd2e8cac7d72d3c3a394bf9cbda673ce18661ee",
"urls": [],
"crc32": "A7AB3F5B",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/9c2374dfd204cada_calsample.aps",
"ssdeep": null,
"size": 41452,
"sha512": "8a38393814d3b13914cf3c644119298a47b9d9797c911b63a2316b458ee0e84032ffcf14990ca898978fdabf4695234df44b7ce5dd574f695c178d18c9241d10",
"pids": [
2968
],
"md5": "6e51fc849096429f8caef3c07a1f132e"
},
{
"yara": [],
"sha1": "f46d948123835752ba918a3c8df20cfeb75802dc",
"name": "abe4f8fe87f96b26_assemblyinfo.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\assemblyinfo.vb",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "abe4f8fe87f96b261fbd100ebc27d6a1b8eef4ab389f2753b7a33a577e2941ae",
"urls": [],
"crc32": "8880F23F",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/abe4f8fe87f96b26_assemblyinfo.vb",
"ssdeep": null,
"size": 1191,
"sha512": "010c4e109118155749b62176fa1f5ce55659d72d9f044d9a81714625c67db0493e5081c738a91be312e1d6346155bf93ed9ba00a27f12c08d950bc0f5b036316",
"pids": [
2968
],
"md5": "2a23fdafc96e65060b6d224604d53b83"
},
{
"yara": [],
"sha1": "664dc99e78261a43d876311931694b6ef87cc8b9",
"name": "4da5efdc46d126b4_mfc71.dll",
"filepath": "c:\\program files (x86)\\calendar activex control\\mfc71.dll",
"type": "PE32 executable (DLL) (GUI) Intel 80386, for MS Windows",
"sha256": "4da5efdc46d126b45daeee8bc69c0ba2aa243589046b7dfd12a7e21b9bee6a32",
"urls": [],
"crc32": "2CD0C018",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/4da5efdc46d126b4_mfc71.dll",
"ssdeep": null,
"size": 1060864,
"sha512": "b1ced222c3b7e63e22d093c8aa3467f5ea20312fe76a112baed7c63d238bbe8dee94dfe8f42474f7b1de7aa7acb8ba8e2b36fdd0a3cda83ee85ac9a34f859fa4",
"pids": [
2968
],
"md5": "f35a584e947a5b401feb0fe01db4a0d7"
},
{
"yara": [],
"sha1": "8d7568e6d76a9af80abf793752408c0d529ba344",
"name": "bd3b7c0f13a1e36b_calsampledlg.cpp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsampledlg.cpp",
"type": "C++ source, ASCII text, with CRLF line terminators",
"sha256": "bd3b7c0f13a1e36b68734252c32e0be457db2b1021a2f4e0bc4b140756e694a6",
"urls": [],
"crc32": "D71E6D54",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/bd3b7c0f13a1e36b_calsampledlg.cpp",
"ssdeep": null,
"size": 13377,
"sha512": "59080f039c4e0466794c92634df33932086f5008f6ca99fb0727c7ec9252fa195c4f210b957e70619827b38ffb36f56df45d6899504da0a40eeda388de94af75",
"pids": [
2968
],
"md5": "607e6e8997a74a8996c56bcc6728582c"
},
{
"yara": [],
"sha1": "8364b33ce2178f90f50e7d654c908563b9431bcc",
"name": "99c777d06cd233f3_windowsapplication1.sln",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\windowsapplication1.sln",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "99c777d06cd233f349ada494ec477ce6833f63e81ac1f4a74fa2d58e2b2a95da",
"urls": [],
"crc32": "91E067F0",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/99c777d06cd233f3_windowsapplication1.sln",
"ssdeep": null,
"size": 879,
"sha512": "87677aaca7838018e0b8100b003c0ceed701ec2e251c0036968e9f34047a149e147fdf323a1f4d95137aa8ecb3fd3ea4758df4ce6cfd2925c45839fd0c454d86",
"pids": [
2968
],
"md5": "7166db7039a2c7d912b63a1431735ddf"
},
{
"yara": [],
"sha1": "cbbf49b239334726057f011ff11a3ea4dc3c2b74",
"name": "5605000614c35923_application.myapp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\my project\\application.myapp",
"type": "XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "5605000614c35923161d336908a5d48dd74faaff90177e540f1d9b3c88109da5",
"urls": [],
"crc32": "D1636A30",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/5605000614c35923_application.myapp",
"ssdeep": null,
"size": 510,
"sha512": "ca46793fed311c87efc96bd2631c283d7b2cbba006474988462200a916ce8de86dc49e789459b681392a5b9bdbf61108c81c11abcdf9527a99825450e5ce538a",
"pids": [
2968
],
"md5": "8d39b4af3f919328612b64fcbf5d1b8c"
},
{
"yara": [],
"sha1": "abbbce379bbe22d78ec230afb235d9ed5ef6e867",
"name": "b22b5abfd0e11748_calsample.dsw",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.dsw",
"type": "ASCII text, with CRLF line terminators",
"sha256": "b22b5abfd0e1174893b5b6f19fa5ef711fdd9139f43ecbf4ed307a9744954b1d",
"urls": [],
"crc32": "AAB62551",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/b22b5abfd0e11748_calsample.dsw",
"ssdeep": null,
"size": 585,
"sha512": "5bde3092226bce19a76f1d9d54b04899a1f6e6871684c69d4074a79aefdef74e828a34d20dc9a187150a86615060982002099daef6dfe2acc8db7af03f5a1abb",
"pids": [
2968
],
"md5": "2c7527cbb98bb30ef6e3e3261342e9f8"
},
{
"yara": [],
"sha1": "dff384cc125c02691e3ccaa1c656281fd3980025",
"name": "564e044f8f45555c_project1.suo",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\general\\project1.suo",
"type": "Composite Document File V2 Document, Cannot read section info",
"sha256": "564e044f8f45555cdbf4772d0b4933cea783cf559ae23b66ba58f465bb693ba1",
"urls": [],
"crc32": "35FFCE63",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/564e044f8f45555c_project1.suo",
"ssdeep": null,
"size": 17408,
"sha512": "f5e584fc495eb0255bb9d9f7b764585978a437912238b819da27b8728f2d3fd939f3d34e8d09b7edb587d0637209acc6ffc3a314ea6def28dc7d9ddb029da258",
"pids": [
2968
],
"md5": "8852ecd522813022262a2f9a25ae092b"
},
{
"yara": [],
"sha1": "f0d251edac6738ea179d91c1f4c2cccee0ffc335",
"name": "05a7e759fc05be7f_form1.designer.vb",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net2010\\multiple calendar\\form1.designer.vb",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "05a7e759fc05be7f1699ca7946f0707d7224d16b70cb5a67d867772c97708373",
"urls": [],
"crc32": "D8A94D48",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/05a7e759fc05be7f_form1.designer.vb",
"ssdeep": null,
"size": 8920,
"sha512": "98c40c26a1cd43223fa83676e038a60509dada1cd514943b0a6e3a7ebc71e8ecd1140ccbb7c91242fae607f85500a4b78fa388bf0b2acee87f20e93500989025",
"pids": [
2968
],
"md5": "87335648facf976217646725743e8131"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "3391e17926aeecfa0ae1753664eae4a1bf82971d",
"name": "af1c7d8dde7a1047_calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Sat May 6 10:22:30 2006, length=780, window=hide",
"sha256": "af1c7d8dde7a10472de8f5cb3822ad94da09aa1e2cd5dcfc9098fc9534906142",
"urls": [],
"crc32": "CB6C3CE7",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/af1c7d8dde7a1047_calendar activex sample.lnk",
"ssdeep": null,
"size": 1357,
"sha512": "2e414bc534ea34079426ce6e0f0ef1cd9967f6723253092d27e491c4333924ed8d2cdc07dc6bf261fe32251c1552a7c81b2380011f2a64393f23415f5ffbb5ee",
"pids": [
2968
],
"md5": "6aa0c2b1ce93653ef4b54dd1e98542d3"
},
{
"yara": [],
"sha1": "a895671299b6be15149a932620b55f98f20e7354",
"name": "f9694d75581cebd6_project1.vbproj.user",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vb.net\\project1.vbproj.user",
"type": "ASCII text, with CRLF line terminators",
"sha256": "f9694d75581cebd679f5126652d05e15eb08a113187922a04b713601f3625667",
"urls": [],
"crc32": "424A65E9",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/f9694d75581cebd6_project1.vbproj.user",
"ssdeep": null,
"size": 1813,
"sha512": "bcb670c13f7fa34831639bb1561be1dafb95fbd3bd517001c90dd0e6d75c248a56c9ab8b1ef90ac7d823f62fcd9caf88f4e78cd641a069afcd9eb41c247cfebd",
"pids": [
2968
],
"md5": "cba348e298e95bc7a78ce3a383e70c88"
},
{
"yara": [],
"sha1": "f275a961a7a338203fd274f89946cbffef070e9b",
"name": "1d7c9e2fc2c251a2_calsample.clw",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.clw",
"type": "ASCII text, with CRLF line terminators",
"sha256": "1d7c9e2fc2c251a2fba393a3f8e9b5bb31289c1cd5e33c8c13ed29704009573e",
"urls": [],
"crc32": "7F6C873A",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/1d7c9e2fc2c251a2_calsample.clw",
"ssdeep": null,
"size": 4049,
"sha512": "86618e077190118c2b400f656835eda8ef762fc1a70e3caf564c92c6fde5ab10efe4876c8fcebb2e1bb0ab60da6a2db8b5f15176043d6a26b3c6d57e13dbc1d6",
"pids": [
2968
],
"md5": "8921b2d7987fd89e3cd3ee85c12285c2"
},
{
"yara": [],
"sha1": "27f87c9df00e752c65aa65ca3084b26cfbb68188",
"name": "4ca77fd746548c13_calsample.cpp",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\vc\\calsample.cpp",
"type": "C source, ASCII text, with CRLF line terminators",
"sha256": "4ca77fd746548c13a7bbdadaed03bfb8a81769c6dcfd99989d755efd880163b7",
"urls": [],
"crc32": "67534408",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/4ca77fd746548c13_calsample.cpp",
"ssdeep": null,
"size": 2105,
"sha512": "9b38e3becb1dd9af55dd081e565dc1a877cbfcdfb75a2e598e2dea85b0c85d27dcd4c261918c7db3debc339645005a907e1151570c27ebfc4ac95310c20a4f4c",
"pids": [
2968
],
"md5": "70af2f197da089bf4aead2c49ae01c7b"
},
{
"yara": [],
"sha1": "a27cbb44acb180962fe435739ee6c5e64a8ce7e5",
"name": "c39ef57c3db790f2_assemblyinfo.cs",
"filepath": "c:\\program files (x86)\\calendar activex control\\examples\\c#2010\\multiple calendar\\properties\\assemblyinfo.cs",
"type": "UTF-8 Unicode (with BOM) text, with CRLF line terminators",
"sha256": "c39ef57c3db790f2103c711a52e8a6c769d7123e3c186677be47d08082e5877c",
"urls": [],
"crc32": "7EAB7534",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/c39ef57c3db790f2_assemblyinfo.cs",
"ssdeep": null,
"size": 1496,
"sha512": "6f310e979f8822a426c3aba6fb9827395d4983eb8cdf5b9e23a19e8b9b389079b5c7fb502437b7b3008fc63f0fb6560f84fc54134b5af488af00b6114cb909dc",
"pids": [
2968
],
"md5": "b78e870bd20fd301c3774475fe4f2309"
},
{
"yara": [
{
"meta": {
"description": "(no description)"
},
"name": "LnkHeader",
"offsets": {
"guid": [
[
4,
0
]
],
"signature": [
[
0,
1
]
]
},
"strings": [
"ARQCAAAAAADAAAAAAAAARg==",
"TAAAAA=="
]
}
],
"sha1": "ba4f9a018ec250d2b2d0f33b3d6dcafad57e0e39",
"name": "4ae967a5ec7d4727_calendar activex sample.lnk",
"filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Tue Sep 17 23:53:18 2019, mtime=Tue Sep 17 23:53:18 2019, atime=Sun Dec 18 19:38:00 2011, length=5169, window=hide",
"sha256": "4ae967a5ec7d472702f6175ab9b54894a69ba8cd8f263085d73572613404ceaa",
"urls": [],
"crc32": "21C3F0C1",
"path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2602\/files\/4ae967a5ec7d4727_calendar activex sample.lnk",
"ssdeep": null,
"size": 1404,
"sha512": "c8706b1d91643d242194a8daad7e1895eaac49f0fbd9716c8cb3c2801e15fbd4c2741dac874518dcab19719e8742d288f7de86fc12b616a5ab71c57f2983cf61",
"pids": [
2968
],
"md5": "f26fde2afb6e007468bc50e258be7dba"
}
] Generic
[
{
"process_path": "C:\\Windows\\SysWOW64\\regsvr32.exe",
"process_name": "regsvr32.exe",
"pid": 368,
"summary": {
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\ProgID\\(Default)"
],
"dll_loaded": [
"ADVAPI32.dll",
"kernel32.dll",
"MSVCRT.DLL",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"C:\\Windows\\system32\\odbcint.dll"
],
"file_failed": [
"C:\\Windows\\Calendar.INI"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0\\win32",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\HELPDIR",
"HKEY_CLASSES_ROOT\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}",
"HKEY_CURRENT_USER\\SOFTWARE\\ODBC\\ODBC.INI\\ODBC",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\BidInterface\\Loader",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\ODBC\\ODBC.INI\\ODBC",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_CLASSES_ROOT\\CALENDAR.CalendarCtrl.1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}",
"HKEY_CURRENT_USER\\Interface",
"HKEY_CLASSES_ROOT\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{36177545-C70B-4B91-AD70-935F19737BF2}\\InprocServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"file_read": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{FA0EDD73-AECE-43FF-8396-6E6CDB7F2716}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{A035D4AC-4104-4772-AD67-C48F484EA961}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{16634781-D218-43A0-BFC6-6E71D2CC8C25}\\ProxyStubClsid32\\(Default)"
]
},
"first_seen": 1568775217.1555,
"ppid": 2968
},
{
"process_path": "C:\\Windows\\SysWOW64\\regsvr32.exe",
"process_name": "regsvr32.exe",
"pid": 2628,
"summary": {
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR2.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR2.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{DFC6543F-9EF3-4A64-973A-3A53570F186C}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version"
],
"dll_loaded": [
"ADVAPI32.dll",
"kernel32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx"
],
"file_failed": [
"C:\\Windows\\Calendar2.INI"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Interface",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\HELPDIR",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"file_read": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{70A408F8-EB4F-429A-8783-4061A86DDF78}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version"
]
},
"first_seen": 1568775218.1086,
"ppid": 2968
},
{
"process_path": "C:\\Windows\\SysWOW64\\regsvr32.exe",
"process_name": "regsvr32.exe",
"pid": 552,
"summary": {
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR5.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR5.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{F07D88A7-6133-460F-8B47-3F1072FC79E6}\\Version\\(Default)"
],
"dll_loaded": [
"ADVAPI32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"kernel32.dll"
],
"file_failed": [
"C:\\Windows\\Calendar5.INI"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Interface",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"file_read": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{03EF184A-E26A-4803-B290-87DA0244BF30}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version"
]
},
"first_seen": 1568775218.9055,
"ppid": 2968
},
{
"process_path": "C:\\Windows\\SysWOW64\\regsvr32.exe",
"process_name": "regsvr32.exe",
"pid": 1500,
"summary": {
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR3.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR3.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{A95E494C-3663-4943-BC57-32E548258EE6}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0\\win32\\(Default)"
],
"dll_loaded": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"ADVAPI32.dll",
"kernel32.dll"
],
"file_failed": [
"C:\\Windows\\Calendar3.INI"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Interface",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"file_read": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{F7B8AE34-979D-4147-AA8B-E9D6E92DDE7D}\\1.0\\0\\win32\\(Default)"
]
},
"first_seen": 1568775218.4055,
"ppid": 2968
},
{
"process_path": "C:\\Windows\\SysWOW64\\regsvr32.exe",
"process_name": "regsvr32.exe",
"pid": 3036,
"summary": {
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR4.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR4.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\MiscStatus\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{28259E73-11D9-4FCF-A713-5F90618692EC}\\ToolboxBitmap32\\(Default)"
],
"dll_loaded": [
"ADVAPI32.dll",
"kernel32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx"
],
"file_failed": [
"C:\\Windows\\Calendar4.INI"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\HELPDIR",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\FLAGS",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0\\win32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_CURRENT_USER\\Interface",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib"
],
"file_opened": [
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx"
],
"file_read": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{2F682D17-DB54-482D-951A-FD191E9121A3}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version"
]
},
"first_seen": 1568775218.6399,
"ppid": 2968
},
{
"process_path": "C:\\Windows\\System32\\lsass.exe",
"process_name": "lsass.exe",
"pid": 476,
"summary": {},
"first_seen": 1568775186.3281,
"ppid": 376
},
{
"process_path": "C:\\Windows\\SysWOW64\\regsvr32.exe",
"process_name": "regsvr32.exe",
"pid": 1680,
"summary": {
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\MiscStatus\\1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{E4FECAAA-CD59-42C8-81A5-59181A9F481F}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\ToolboxBitmap32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\InprocServer32\\ThreadingModel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\Control\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\Version\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\ProgID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR6.CalendarCtrl.1\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CALENDAR6.CalendarCtrl.1\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\InprocServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{3CE8DDBD-A42B-40FE-8F8A-A83D4E8E4E19}\\MiscStatus\\(Default)"
],
"dll_loaded": [
"ADVAPI32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"kernel32.dll"
],
"file_failed": [
"C:\\Windows\\Calendar6.INI"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\ocxfile\\AutoRegister",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32",
"HKEY_CLASSES_ROOT\\ocxfile",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\FLAGS",
"HKEY_CURRENT_USER\\Interface",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\HELPDIR",
"HKEY_CLASSES_ROOT\\.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}",
"HKEY_CURRENT_USER\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0\\win32"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"file_read": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\0\\win32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ocx\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\ProxyStubClsid32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\HELPDIR\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{E29F2897-3C6D-4513-809E-12E38BC33DE7}\\1.0\\FLAGS\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\TypeLib\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{199BCDB7-226C-4CDE-8533-50CF8FFA165A}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{50D4BC31-D36F-457E-8DD7-26C868336DBE}\\TypeLib\\Version"
]
},
"first_seen": 1568775219.1399,
"ppid": 2968
},
{
"process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"process_name": "485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"pid": 2456,
"summary": {
"file_created": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp"
],
"directory_created": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp"
],
"dll_loaded": [
"dwmapi.dll",
"kernel32.dll",
"UxTheme.dll",
"shell32.dll",
"comctl32.dll",
"C:\\Windows\\system32\\uxtheme.dll"
],
"file_opened": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"C:\\Windows\\SysWOW64\\en-US\\KERNELBASE.dll.mui",
"C:\\Windows\\System32\\netmsg.dll",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
],
"regkey_opened": [
"HKEY_CURRENT_USER\\Software\\CodeGear\\Locales",
"HKEY_CURRENT_USER\\Software\\Borland\\Delphi\\Locales",
"HKEY_LOCAL_MACHINE\\Software\\CodeGear\\Locales",
"HKEY_CURRENT_USER\\Software\\Borland\\Locales"
],
"file_written": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp"
],
"file_deleted": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp"
],
"directory_removed": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp"
],
"file_exists": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp"
],
"command_line": [
"\"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp\" \/SL5=\"$1902E6,1945771,140800,C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin\" "
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US"
]
},
"first_seen": 1568775186.6094,
"ppid": 2780
},
{
"process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"process_name": "485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"pid": 2968,
"summary": {
"file_created": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp"
],
"file_recreated": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat"
],
"directory_created": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp"
],
"dll_loaded": [
"C:\\Windows\\system32\\sfc.dll",
"netutils.dll",
"C:\\Windows\\syswow64\\MSCTF.dll",
"srvcli.dll",
"LINKINFO.dll",
"kernel32.dll",
"UxTheme.dll",
"C:\\Windows\\system32\\ole32.dll",
"msls31.dll",
"dwmapi.dll",
"slc.dll",
"imm32.dll",
"ntmarta.dll",
"PROPSYS.dll",
"USP10.dll",
"API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
"OLEAUT32.DLL",
"comctl32",
"ole32.dll",
"SHLWAPI.dll",
"USER32.dll",
"IMM32.dll",
"API-MS-Win-Security-SDDL-L1-1-0.dll",
"C:\\Windows\\system32\\shlwapi.dll",
"shell32.dll",
"uxtheme.dll",
"OLEAUT32.dll",
"profapi.dll",
"SHELL32.dll",
"comctl32.dll",
"C:\\Windows\\system32\\shell32.dll",
"RICHED20.DLL",
"shfolder.dll",
"DEVRTL.dll",
"ADVAPI32.dll",
"SETUPAPI.dll",
"ntshrui.dll"
],
"file_opened": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"C:\\Windows\\System32\\imageres.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Windows\\SysWOW64\\en-US\\KERNELBASE.dll.mui",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Windows\\System32",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\",
"C:\\Windows\\System32\\netmsg.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"C:\\Windows\\System32\\shell32.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"C:\\Windows\\win.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\",
"C:\\Program Files (x86)",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\",
"C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\desktop.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx"
],
"command_line": [
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx\"",
"\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx\""
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Keyboard Layouts\\04090409",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Directory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\AccessProviders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
"HKEY_CURRENT_USER\\Software\\CodeGear\\Locales",
"HKEY_CURRENT_USER\\Software\\Borland\\Locales",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Icons",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
"HKEY_CLASSES_ROOT\\CLSID\\{00BB2763-6A77-11D0-A535-00C04FD7D062}\\InProcServer32",
"HKEY_LOCAL_MACHINE\\System\\Setup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\Software\\CodeGear\\Locales",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
"HKEY_CURRENT_USER\\Software\\Policies",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
"HKEY_CLASSES_ROOT\\CLSID\\{03C036F1-A186-11D0-824A-00AA005B4383}\\InProcServer32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_CLASSES_ROOT\\Folder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_CURRENT_USER\\Software",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Policies",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
"HKEY_CURRENT_USER\\Control Panel\\Desktop",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
"HKEY_CURRENT_USER\\Software\\Borland\\Delphi\\Locales",
"HKEY_CLASSES_ROOT\\AllFilesystemObjects",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
"HKEY_LOCAL_MACHINE\\software\\microsoft\\windows\\currentversion\\setup\\PnpLockdownFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete\\Client\\",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Keyboard Layouts\\041D0409",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
],
"file_moved": [
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.ncb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\AssemblyInfo.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Program.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\AssemblyInfo.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.opt"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.plg"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\resource.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.ico"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\MFC71.dll"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.Designer.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.settings"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.clw"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.aps"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.log"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.scx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.myapp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.csproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.resX"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.vbproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.log"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.suo"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\App.config"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcr71.dll"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.rc2"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.lic"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Form1.frm"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.resX"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.PJT"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\AssemblyInfo.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.suo"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcp71.dll"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.sln"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\ReadMe.txt"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\AssemblyInfo.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.cpp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.Designer.vb"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.h"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsp"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.Designer.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj.user"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.settings"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.Designer.cs"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.rc"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbw"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.resx"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.SCT"
],
[
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.h"
]
],
"file_written": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.dat",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp"
],
"regkey_deleted": [
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1"
],
"file_deleted": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.url",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.pif",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_setup64.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.pif",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.pif",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"directory_removed": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp"
],
"file_exists": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcr71.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\",
"C:\\Users\\cuck\\AppData\\Local\\Temp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-H6BJT.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QHO56.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-CC5K9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\AssemblyInfo.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7GNQ.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-VQO00.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Program.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.Designer.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.myapp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\App.config",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.opt",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-UHOD5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.cpp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B350V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-25I83.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-BJ20A.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-9L2F3.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-R6BMR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-PFF4T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-ARLUU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-IGAHU.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.rc",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-RO5KH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-11I5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-V0QSJ.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.Designer.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-Q566P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-12AIG.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-FTU3U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.resX",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VT3B1.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T4J1J.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1AVH0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.resX",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-EUI0P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\ReadMe.txt",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-EL6G9.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\is-HB6QV.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.cpp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.Designer.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-RLFH8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-UTSHB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-EFQPF.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-PQ4KL.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-50339.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.Designer.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.SCT",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-8G4G6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-18PBE.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.csproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.cpp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-8GO9M.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.log",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-BBTUH.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.Designer.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.clw",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\is-V6N9I.tmp",
"C:\\Program Files (x86)",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-I4I0U.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-LBH4R.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-99FUR.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-837OB.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.settings",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-OOJTD.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-G7T48.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.ncb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.suo",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-QBGL0.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.h",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.aps",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-6AJD6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\AssemblyInfo.cs",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Form1.frm",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-B9PSU.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-0TTT4.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-J516J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.ico",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-T0F7T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-0HJKQ.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.sln",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\msvcp71.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-B7FLL.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.PJT",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-PTLPM.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.plg",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.lic",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-806ML.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-KSPS6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbw",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-LC00P.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-E09DN.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\MFC71.dll",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\is-2M6UH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-3L0QA.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-NAQB1.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-ED4E8.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.scx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.Designer.vb",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-AB31Q.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.log",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\is-BK7EH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-PQJ2J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\AssemblyInfo.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\AssemblyInfo.vb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-1ON9M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.cpp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\is-K6C8N.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.rc2",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\is-CC2HH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-6G995.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-VRQ1S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\is-U095V.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.url",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-7MU5J.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.settings",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-3KTN6.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-N15J5.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-MST64.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-L7J3T.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.Designer.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\is-H3AGQ.tmp",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-DCCRB.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj.user",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.resx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\resource.h",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-74LAS.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-7COID.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\is-RGO5D.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\is-KRE9S.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.cs",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\is-50ICH.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\is-KPA07.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.suo",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.url",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\is-RH75M.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"file_failed": [
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_c_2010_multiple_calendar_d6ba2234989a1027.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net2010_multiple_calendar_bd368f24ced155e0.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net2010_multiple_calendar_my_project_4f21fc43e587a96b.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vc_d0b740cac9ed8135.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_c_2010_multiple_calendar_properties_6eebf8b79eabf33c.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net2010_general_7bb47d5359bda3be.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb.net_a06fdd4632a65f63.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vb_d0b740cac9ed8134.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_access_a045fc2e33644f00.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_20c7a9fd8a2a4367.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vc_res_a070340a32a6dde7.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_help_19a256d039301d1a.cdf-ms",
"C:\\Windows\\winsxs\\FileMaps\\program_files_x86_calendar_activex_control_examples_vfp_54d6895083be957a.cdf-ms",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General"
],
"guid": [
"{ea1afb91-9e28-4b86-90e9-9e9f8a5eefaf}",
"{eac04bc0-3791-11d2-bb95-0060977b464c}",
"{5e078e03-8265-4bbe-9487-d242edbef910}",
"{00bb2763-6a77-11d0-a535-00c04fd7d062}",
"{00000000-0000-0000-c000-000000000046}",
"{56fdf344-fd6d-11d0-958a-006097c9a090}",
"{807c1e6c-1d00-453f-b920-b61bb7cdd997}",
"{00021401-0000-0000-c000-000000000046}",
"{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
"{03c036f1-a186-11d0-824a-00aa005b4383}",
"{00bb2765-6a77-11d0-a535-00c04fd7d062}",
"{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}"
],
"file_read": [
"C:\\Users\\cuck\\AppData\\Local\\Temp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.bin",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\Windows\\win.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Program Files (x86)\\desktop.ini"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman TUR,162",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Tahoma Armenian",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Tms Rmn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Fixed Miriam Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AccListViewV6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New CE,238",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.suo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.resX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Form1.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\RegisteredOrganization",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj.user",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.rc2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\MS Shell Dlg 2",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LanmanWorkstation\\Parameters\\RpcCacheTimeout",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragMinDist",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.log",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.Designer.cs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent,0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{00BB2763-6A77-11D0-A535-00C04FD7D062}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\FangSong_GB2312",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.opt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewShadow",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ListviewAlphaSelect",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.csproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.resX",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.SCT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\res\\calsample.ico",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.aps",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman Baltic,186",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonVideo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\msvcr71.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\StdAfx.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonMusic",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInterval",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.vbproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial TUR,162",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\msvcp71.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\David Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Startup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New Baltic,186",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent Bold",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Desktop",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Client\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\resource.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New TUR,162",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Settings.settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Resources.Designer.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Helvetica",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\ScrollInset",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman CYR,204",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman CE,238",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.myapp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsampleDlg.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\MFC71.dll",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Rod Transparent",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\AssemblyInfo.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\App.config",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.plg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial CYR,204",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\AssemblyInfo.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Programs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\RegisteredOwner",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Form1.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times New Roman Greek,161",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InitFolderHandler",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows\\DragDelay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.suo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.ncb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Times",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonPictures",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.log",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\form1.scx",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Form1.frm",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arabic Transparent Bold,0",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.sln",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\ReadMe.txt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Category",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\Always Use Tab",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
"HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Miriam Transparent",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Form1.vb",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial Greek,161",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\AssemblyInfo.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{03C036F1-A186-11D0-824A-00AA005B4383}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.clw",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New Greek,161",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Application.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SESSION MANAGER\\PendingFileRenameOperations",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial Baltic,186",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\unins000.exe",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Program.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Courier New CYR,204",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.Designer.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\MS Shell Dlg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\AutoComplete\\AutoSuggest",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SESSION MANAGER\\PendingFileRenameOperations2",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\Public",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.PJT",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\KaiTi_GB2312",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.lic",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Startup",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.Designer.cs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResourceType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.cpp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Documents",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\Properties\\Settings.settings",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.rc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Attributes",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Arial CE,238",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calendar.h",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\Resources.resx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{905E63B6-C1BF-494E-B29C-65B732D3D21A}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Helv",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\My Project\\AssemblyInfo.vb",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\PnpLockdownFiles\\%SystemDrive%\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\\Roamable",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\\ParentFolder"
],
"directory_enumerated": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\Form1.vb",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\*",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\*",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\unins???.*"
],
"regkey_written": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\HelpLink",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\InstallDate",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\QuietUninstallString",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\URLInfoAbout",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: User",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: Language",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\InstallLocation",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\DisplayName",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\URLUpdateInfo",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: App Path",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\EstimatedSize",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\NoModify",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Publisher",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: Setup Version",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\UninstallString",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\Inno Setup: Icon Group",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1\\NoRepair"
]
},
"first_seen": 1568775186.9062,
"ppid": 2456
},
{
"process_path": "C:\\Windows\\explorer.exe",
"process_name": "explorer.exe",
"pid": 1788,
"summary": {
"regkey_written": [
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCache",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\HRZR_PGYFRFFVBA",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\LanguageList",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pzq.rkr"
],
"dll_loaded": [
"C:\\Windows\\system32\\xmllite.dll"
],
"file_opened": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories",
"C:\\ProgramData",
"C:\\",
"C:\\Users\\cuck\\AppData",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample",
"C:\\Users",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample",
"C:\\Users\\Public\\desktop.ini",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\ProgramData\\Microsoft",
"C:\\Users\\cuck\\AppData\\Roaming",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Users\\Public",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\Users\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
"C:\\ProgramData\\Microsoft\\Windows",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Python 2.7",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\cuck",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools",
"C:\\Users\\cuck\\Downloads\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
"C:\\Program Files (x86)\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"C:\\Users\\Public\\Desktop\\desktop.ini"
],
"regkey_opened": [
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179",
"HKEY_CLASSES_ROOT\\Outlook.Application.12",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31",
"HKEY_CLASSES_ROOT\\Outlook.Application.10",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4",
"HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7",
"HKEY_CLASSES_ROOT\\Outlook.Application.11",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50",
"HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4",
"HKEY_CLASSES_ROOT\\Outlook.Application",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features",
"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8"
],
"file_exists": [
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access\\calendar.mdb",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net\\Project1.vbproj",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC\\calsample.dsw",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\cuck\\Desktop",
"C:\\Python27\\pythonw.exe",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP\\proj1.pjx",
"C:\\cuckoo_3036.ini",
"C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Access",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VC",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\website.url",
"C:\\Python27\\python.exe",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General\\Project1.vbproj",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\cuckoo_1680.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VB\\Project1.vbp",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\HELP\\calendar.chm",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\c#2010\\Multiple Calendar",
"C:\\cuckoo_2628.ini",
"C:\\Users\\cuck",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
"C:\\cuckoo_552.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\license.doc",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar\\WindowsApplication1.sln",
"C:\\cuckoo_1500.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu",
"C:\\Program Files (x86)\\Calendar ActiveX Control",
"C:\\Users\\Public\\Desktop",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\cuckoo_368.ini",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\Multiple Calendar",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\Vb.Net2010\\General",
"C:\\Program Files (x86)\\Calendar ActiveX Control\\Examples\\VFP"
],
"file_failed": [
"C:\\cuckoo_1500.ini",
"C:\\ProgramData\\Microsoft\\desktop.ini",
"C:\\cuckoo_2628.ini",
"C:\\cuckoo_1788.ini",
"C:\\cuckoo_3036.ini",
"C:\\cuckoo_368.ini",
"C:\\cuckoo_552.ini",
"C:\\cuckoo_1680.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\desktop.ini"
],
"guid": [
"{add8ba80-002b-11d0-8f0f-00c04fd7d062}",
"{00000000-0000-0000-c000-000000000046}",
"{46a6eeff-908e-4dc6-92a6-64be9177b41c}",
"{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}",
"{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
"{660b90c8-73a9-4b58-8cae-355b7f55341b}",
"{dffacdc5-679f-4156-8947-c5c76bc0b67f}",
"{bbd20037-bc0e-42f1-913f-e2936bb0ea0c}"
],
"file_read": [
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
"C:\\Users\\cuck\\Documents\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"C:\\Users\\Public\\Desktop\\desktop.ini",
"C:\\Users\\cuck\\Searches\\desktop.ini",
"C:\\Users\\cuck\\Links\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
"C:\\Users\\cuck\\Videos\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"C:\\Users\\cuck\\Desktop\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
"C:\\Users\\cuck\\Contacts\\desktop.ini",
"C:\\Users\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
"C:\\Users\\cuck\\Pictures\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\cuck\\Music\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
"C:\\Users\\cuck\\Favorites\\desktop.ini",
"C:\\Users\\cuck\\Saved Games\\desktop.ini",
"C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\Public\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"C:\\Users\\cuck\\Downloads\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
"C:\\Program Files (x86)\\desktop.ini",
"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk"
],
"regkey_read": [
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesResolve",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\DefaultFeature",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Fvqrone.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NN47365-O2O3-1961-69RO-S866R376O12S}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Flfgrz Gbbyf\\Cevingr Punenpgre Rqvgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\zvc.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\SuppressionPolicy",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qsethv.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\rhqprqvg.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfNalgvzrHctenqrHV.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Erzbgr Qrfxgbc Pbaarpgvba.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NOQ94SO-R7Q6-84N6-N997-P918RQQR0NR5}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\\SortOrderIndex",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Frphevgl Pbasvthengvba Znantrzrag.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Rirag Ivrjre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zbovyvgl Pragre.yax",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SNTSearch.dll,-505",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FbhaqErpbeqre.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\Favorites",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FavccvatGbby.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{QNN168QR-4306-P8OP-8P11-O596240OQQRQ}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\FuncrPbyyrpgbe.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\GnoGvc.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.chm\\Content Type",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf Sverjnyy jvgu Nqinaprq Frphevgl.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fgvpxl Abgrf.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JSF.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.chm\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\efgehv.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Erzbgr Nffvfgnapr.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\mstsc.exe,-4000",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.URL\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\vFPFV Vavgvngbe.yax",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\FXSRESM.dll,-114",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zntavsl.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pzq.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\kcfepuij.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Cnvag.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{53123611-QN37-S8QN-SNP9-03R76QO9Q64Q}",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\displayswitch.exe,-320",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Nalgvzr Hctenqr.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ZqFpurq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Npprffvovyvgl\\Fcrrpu Erpbtavgvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\VQYR (Clguba THV).yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Perngr Erpbirel Qvfp.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\QIQ Znxre\\QIQZnxre.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\DocObject",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{15067OP1-P5N8-425R-37P6-SN0O891674S9}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{Q4N262QQ-PR44-Q105-S36O-9Q77N8PO65N4}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere (64-ovg).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Abgrcnq.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pyrnazte.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.FgvpxlAbgrf",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jbeqcnq.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Aneengbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pbzrkc.zfp",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bfx.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cresbeznapr Zbavgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\abgrcnq.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\qsethv.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\KCF Ivrjre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnCynlre32",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Gnfx Fpurqhyre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Vagrearg Rkcybere.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\FavoritesRemovedChanges",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zngu Vachg Cnary.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Zrqvn Cynlre.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesChanges",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\cevagznantrzrag.zfp",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SnippingTool.exe,-15051",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\IsShortcut",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\puneznc.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\BrowseInPlace",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.chm\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.Qrsnhyg",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf AG\\Npprffbevrf\\jbeqcnq.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Punenpgre Znc.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Zrqvn Pragre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Snk naq Fpna.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\PerceivedType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy (k86).yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ErzbgrQrfxgbc",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesChanges",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre Ercbegf.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\zvtjvm.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\R7PS176R110P211O",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\TclTk",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.TrggvatFgnegrq",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\TclTk",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Flfgrz Pbasvthengvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{35786D3C-B075-49b9-88DD-029876E11C01}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\AlwaysShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Zntavsl.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flap Pragre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zboflap.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\erpqvfp.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Clguba27\\clguba.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ArgCebw.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fbhaq Erpbeqre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\ArgjbexCebwrpgvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\PerceivedType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P1P6S8NP-40N3-0S5P-146S-65N9QP70OOO4}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{NN198O3P-PQ8P-7QR1-98Q1-O460S637193O}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qvfcynlfjvgpu.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\\InProcServer32\\LoadWithoutCOM",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Ba-Fperra Xrlobneq.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cevag Znantrzrag.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\XpsRchVw.exe,-102",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.URL\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\freivprf.zfp",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesRemovedChanges",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzchgre Znantrzrag.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\qvfcynlfjvgpu.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Favccvat Gbby.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.doc\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\CLSID\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\\SuppressionPolicy",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf Wbheany\\Wbheany.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.64Ovg",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\DefaultFeature",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfen.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P804OON7-SN5S-POS7-8O55-2096R5S972PO}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\cbfgzvt.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Pnyphyngbe.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\freivprf.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesRemovedChanges",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Qvfx Pyrnahc.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Erfgber.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Sversbk.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Qngn Fbheprf (BQOP).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bqopnq32.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.URL\\PerceivedType",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Jvaqbjf Rkcybere.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{7SR8Q22N-SO1Q-N8OR-01R3-6P8693961R6R}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\FuncrPbyyrpgbe.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.NamespaceCLSID",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\NeverShowExt",
"HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\OobeFldr.dll,-33056",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OO044OSQ-25O7-2SNN-22N8-6371N93R0456}",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Zrzbel Qvntabfgvpf Gbby.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Rkcybere.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\vfpfvpcy.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Clguba (pbzznaq yvar).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\(Default)",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UsersFiles\\NameSpace\\DelegateFolders\\SuppressionPolicy",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf CbjreFuryy Zbqhyrf.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jrypbzr Pragre.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Vasbezngvba.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\(Default)",
"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\MUI\\StringCacheSettings\\StringCacheGeneration",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\SuppressionPolicy",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\DocObject",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Pbzznaq Cebzcg.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfpbasvt.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfcnvag.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\ShellEx\\IconHandler\\(Default)",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\Jvaqbjf Wbheany.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfvasb32.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf QIQ Znxre.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\aneengbe.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\InternetShortcut\\IsShortcut",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzcbarag Freivprf.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Zbqhyr Qbpf.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\IsShortcut",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pnyp.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnPragre",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR (k86).yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\NeverShowExt",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Gnfx Fpurqhyre.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vbproj\\AlwaysShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\PerceivedType",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OQ3S924R-55SO-N1ON-9QR6-O50S9S2460NP}",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Erfbhepr Zbavgbe.yax",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\chm.file\\IsShortcut",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\Content Type",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Sversbk.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Zrqvn Cynlre.yax",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JS.zfp",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34\\586A8930D8DF3B6489614C37910BFCF5",
"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\GnoGvc.rkr",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dsw\\NeverShowExt",
"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72\\586A8930D8DF3B6489614C37910BFCF5"
]
},
"first_seen": 1568775198.6867,
"ppid": 1740
}
]Signatures
[
{
"markcount": 13,
"families": [],
"description": "Queries for the computername",
"severity": 1,
"marks": [
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775197.8122,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 3175
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775203.7192,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 6066
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775206.0473,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 7320
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775207.1412,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 7567
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775208.4692,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 7823
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775209.1412,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 8016
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775210.6253,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 8263
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775211.9532,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 8509
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775213.2973,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 8755
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775213.9532,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 8939
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775214.6562,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 9117
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775215.3442,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 9297
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetComputerNameW",
"return_value": 1,
"arguments": {
"computer_name": "CUCKPC"
},
"time": 1568775216.0003,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 9474
}
],
"references": [],
"name": "antivm_queries_computername"
},
{
"markcount": 1,
"families": [],
"description": "Checks if process is being debugged by a debugger",
"severity": 1,
"marks": [
{
"call": {
"category": "system",
"status": 0,
"stacktrace": [],
"last_error": 0,
"nt_status": -1073741772,
"api": "IsDebuggerPresent",
"return_value": 0,
"arguments": {},
"time": 1568775186.8124,
"tid": 2676,
"flags": {}
},
"pid": 2456,
"type": "call",
"cid": 363
}
],
"references": [],
"name": "checks_debugger"
},
{
"markcount": 1,
"families": [],
"description": "The executable contains unknown PE section names indicative of a packer (could be a false positive)",
"severity": 1,
"marks": [
{
"category": "section",
"ioc": ".itext",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "pe_features"
},
{
"markcount": 27,
"families": [],
"description": "Allocates read-write-execute memory (usually to unpack itself)",
"severity": 2,
"marks": [
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2456,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x00400000"
},
"time": 1568775186.7504,
"tid": 2676,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2456,
"type": "call",
"cid": 98
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2456,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 90112,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x00401000"
},
"time": 1568775186.7504,
"tid": 2676,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2456,
"type": "call",
"cid": 100
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2456,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 53248,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x00420000"
},
"time": 1568775186.7504,
"tid": 2676,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2456,
"type": "call",
"cid": 102
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtAllocateVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2968,
"region_size": 4096,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"protection": 64,
"process_handle": "0xffffffff",
"allocation_type": 4096,
"base_address": "0x00680000"
},
"time": 1568775187.0003,
"tid": 2588,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE",
"allocation_type": "MEM_COMMIT"
}
},
"pid": 2968,
"type": "call",
"cid": 144
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 368,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74381000"
},
"time": 1568775217.4525,
"tid": 2824,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 368,
"type": "call",
"cid": 11
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 368,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x70d71000"
},
"time": 1568775217.4525,
"tid": 2824,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 368,
"type": "call",
"cid": 13
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 368,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x70d11000"
},
"time": 1568775217.4525,
"tid": 2824,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 368,
"type": "call",
"cid": 15
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2628,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x1004a000"
},
"time": 1568775218.1866,
"tid": 1576,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2628,
"type": "call",
"cid": 11
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2628,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77351000"
},
"time": 1568775218.1866,
"tid": 1576,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2628,
"type": "call",
"cid": 13
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2628,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74441000"
},
"time": 1568775218.1866,
"tid": 1576,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2628,
"type": "call",
"cid": 15
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 2628,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74421000"
},
"time": 1568775218.1866,
"tid": 1576,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 2628,
"type": "call",
"cid": 17
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1500,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x1004a000"
},
"time": 1568775218.4835,
"tid": 2728,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1500,
"type": "call",
"cid": 11
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1500,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77351000"
},
"time": 1568775218.4835,
"tid": 2728,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1500,
"type": "call",
"cid": 13
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1500,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74441000"
},
"time": 1568775218.4835,
"tid": 2728,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1500,
"type": "call",
"cid": 15
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1500,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74421000"
},
"time": 1568775218.4835,
"tid": 2728,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1500,
"type": "call",
"cid": 17
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3036,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x1004a000"
},
"time": 1568775218.7179,
"tid": 1744,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3036,
"type": "call",
"cid": 11
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3036,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77351000"
},
"time": 1568775218.7179,
"tid": 1744,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3036,
"type": "call",
"cid": 13
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3036,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74441000"
},
"time": 1568775218.7179,
"tid": 1744,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3036,
"type": "call",
"cid": 15
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 3036,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74421000"
},
"time": 1568775218.7179,
"tid": 1744,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 3036,
"type": "call",
"cid": 17
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 552,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x1004a000"
},
"time": 1568775218.9835,
"tid": 800,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 552,
"type": "call",
"cid": 11
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 552,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77351000"
},
"time": 1568775218.9835,
"tid": 800,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 552,
"type": "call",
"cid": 13
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 552,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74441000"
},
"time": 1568775218.9835,
"tid": 800,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 552,
"type": "call",
"cid": 15
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 552,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74421000"
},
"time": 1568775218.9835,
"tid": 800,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 552,
"type": "call",
"cid": 17
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1680,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x1004a000"
},
"time": 1568775219.2179,
"tid": 312,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1680,
"type": "call",
"cid": 11
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1680,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x77351000"
},
"time": 1568775219.2329,
"tid": 312,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1680,
"type": "call",
"cid": 13
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1680,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74441000"
},
"time": 1568775219.2329,
"tid": 312,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1680,
"type": "call",
"cid": 15
},
{
"call": {
"category": "process",
"status": 1,
"stacktrace": [],
"api": "NtProtectVirtualMemory",
"return_value": 0,
"arguments": {
"process_identifier": 1680,
"stack_dep_bypass": 0,
"stack_pivoted": 0,
"heap_dep_bypass": 0,
"length": 4096,
"protection": 64,
"process_handle": "0xffffffff",
"base_address": "0x74421000"
},
"time": 1568775219.2329,
"tid": 312,
"flags": {
"protection": "PAGE_EXECUTE_READWRITE"
}
},
"pid": 1680,
"type": "call",
"cid": 17
}
],
"references": [],
"name": "allocates_rwx"
},
{
"markcount": 0,
"families": [],
"description": "Checks whether any human activity is being performed by constantly checking whether the foreground window changed",
"severity": 2,
"marks": [],
"references": [
"https:\/\/www.virusbtn.com\/virusbulletin\/archive\/2015\/09\/vb201509-custom-packer.dkb"
],
"name": "antisandbox_foregroundwindows"
},
{
"markcount": 2,
"families": [],
"description": "Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation",
"severity": 2,
"marks": [
{
"call": {
"category": "misc",
"status": 0,
"stacktrace": [],
"last_error": 3,
"nt_status": -1073741772,
"api": "GetDiskFreeSpaceExW",
"return_value": 0,
"arguments": {
"root_path": "C:\\Program Files (x86)\\Calendar ActiveX Control\\",
"free_bytes_available": 145813847675373812,
"total_number_of_free_bytes": 0,
"total_number_of_bytes": 1976713768
},
"time": 1568775194.7343,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 2940
},
{
"call": {
"category": "misc",
"status": 1,
"stacktrace": [],
"api": "GetDiskFreeSpaceExW",
"return_value": 1,
"arguments": {
"root_path": "C:\\Program Files (x86)\\",
"free_bytes_available": 23511617536,
"total_number_of_free_bytes": 0,
"total_number_of_bytes": 34252779520
},
"time": 1568775194.7503,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 2943
}
],
"references": [],
"name": "antivm_disk_size"
},
{
"markcount": 12,
"families": [],
"description": "Creates a shortcut to an executable file",
"severity": 2,
"marks": [
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\License Agreement.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Uninstall Calendar ActiveX Control.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VC Sample\\Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Multiple ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VFP Sample\\Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Access Sample\\Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\C# 2010 Sample\\Multiple Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net 2010 Sample\\Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB.Net Sample\\Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\VB Sample\\Calendar ActiveX Sample.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Visit Calendar ActiveX Control Web Site.lnk",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Calendar ActiveX Control\\Help.lnk",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "creates_shortcut"
},
{
"markcount": 6,
"families": [],
"description": "Creates a suspicious process",
"severity": 2,
"marks": [
{
"category": "cmdline",
"ioc": "\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar.ocx\"",
"type": "ioc",
"description": null
},
{
"category": "cmdline",
"ioc": "\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar4.ocx\"",
"type": "ioc",
"description": null
},
{
"category": "cmdline",
"ioc": "\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar5.ocx\"",
"type": "ioc",
"description": null
},
{
"category": "cmdline",
"ioc": "\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar3.ocx\"",
"type": "ioc",
"description": null
},
{
"category": "cmdline",
"ioc": "\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar6.ocx\"",
"type": "ioc",
"description": null
},
{
"category": "cmdline",
"ioc": "\"C:\\Windows\\system32\\regsvr32.exe\" \/s \"C:\\Program Files (x86)\\Calendar ActiveX Control\\Calendar2.ocx\"",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "suspicious_process"
},
{
"markcount": 2,
"families": [],
"description": "Drops an executable to the user AppData folder",
"severity": 2,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-3HDJ8.tmp\\_isetup\\_shfoldr.dll",
"type": "ioc",
"description": null
},
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "exe_appdata"
},
{
"markcount": 4,
"families": [],
"description": "Queries for potentially installed applications",
"severity": 2,
"marks": [
{
"call": {
"category": "registry",
"status": 0,
"stacktrace": [],
"last_error": 6,
"nt_status": -1073741772,
"api": "RegOpenKeyExW",
"return_value": 2,
"arguments": {
"access": "0x00000001",
"base_handle": "0x80000001",
"key_handle": "0x00000000",
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"regkey_r": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"options": 0
},
"time": 1568775187.4372,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 2288
},
{
"call": {
"category": "registry",
"status": 0,
"stacktrace": [],
"last_error": 6,
"nt_status": -1073741772,
"api": "RegOpenKeyExW",
"return_value": 2,
"arguments": {
"access": "0x00000001",
"base_handle": "0x80000002",
"key_handle": "0x00000000",
"regkey": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"regkey_r": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"options": 0
},
"time": 1568775187.4372,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 2289
},
{
"call": {
"category": "registry",
"status": 0,
"stacktrace": [],
"last_error": 0,
"nt_status": -1073741772,
"api": "RegOpenKeyExW",
"return_value": 2,
"arguments": {
"access": "0x00000008",
"base_handle": "0x80000001",
"key_handle": "0x00000000",
"regkey": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"regkey_r": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"options": 0
},
"time": 1568775219.3122,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 9672
},
{
"call": {
"category": "registry",
"status": 0,
"stacktrace": [],
"last_error": 0,
"nt_status": -1073741772,
"api": "RegOpenKeyExW",
"return_value": 2,
"arguments": {
"access": "0x00000008",
"base_handle": "0x80000002",
"key_handle": "0x00000000",
"regkey": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"regkey_r": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Calendar ActiveX Control_is1",
"options": 0
},
"time": 1568775219.3122,
"tid": 2588,
"flags": {}
},
"pid": 2968,
"type": "call",
"cid": 9674
}
],
"references": [],
"name": "queries_programs"
},
{
"markcount": 1,
"families": [],
"description": "Deletes executed files from disk",
"severity": 3,
"marks": [
{
"category": "file",
"ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\is-NDVRU.tmp\\485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517.tmp",
"type": "ioc",
"description": null
}
],
"references": [],
"name": "deletes_executed_files"
},
{
"markcount": 1,
"families": [],
"description": "Creates a windows hook that monitors keyboard input (keylogger)",
"severity": 3,
"marks": [
{
"call": {
"category": "system",
"status": 1,
"stacktrace": [],
"api": "SetWindowsHookExW",
"return_value": 23134525,
"arguments": {
"thread_identifier": 0,
"callback_function": "0x00000000ffe9ae10",
"module_address": "0x00000000ffdf0000",
"hook_identifier": 13
},
"time": 1568775276.4527,
"tid": 1828,
"flags": {
"hook_identifier": "WH_KEYBOARD_LL"
}
},
"pid": 1788,
"type": "call",
"cid": 21242
}
],
"references": [],
"name": "infostealer_keylogger"
}
]Yara
The Yara rules did not detect anything in the file.
Network
{
"tls": [],
"udp": [
{
"src": "192.168.56.101",
"dst": "192.168.56.255",
"offset": 546,
"time": 3.0791051387787,
"dport": 137,
"sport": 137
},
{
"src": "192.168.56.101",
"dst": "192.168.56.255",
"offset": 5226,
"time": 9.0786621570587,
"dport": 138,
"sport": 138
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7070,
"time": 3.0109779834747,
"dport": 5355,
"sport": 51001
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7398,
"time": 1.0194520950317,
"dport": 5355,
"sport": 53595
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 7726,
"time": 3.0186111927032,
"dport": 5355,
"sport": 53848
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 8054,
"time": 1.6460251808167,
"dport": 5355,
"sport": 54255
},
{
"src": "192.168.56.101",
"dst": "224.0.0.252",
"offset": 8382,
"time": -0.1008768081665,
"dport": 5355,
"sport": 55314
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 8710,
"time": 1.5794630050659,
"dport": 1900,
"sport": 1900
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 28120,
"time": 1.0485851764679,
"dport": 3702,
"sport": 49152
},
{
"src": "192.168.56.101",
"dst": "239.255.255.250",
"offset": 36504,
"time": 3.124899148941,
"dport": 1900,
"sport": 53598
}
],
"dns_servers": [],
"http": [],
"icmp": [],
"smtp": [],
"tcp": [],
"smtp_ex": [],
"mitm": [],
"hosts": [],
"pcap_sha256": "47297a7a9be3caaabea9ddf88045af153aa24de2f39e1a440b94cc3dcd586a6c",
"dns": [],
"http_ex": [],
"domains": [],
"dead_hosts": [],
"sorted_pcap_sha256": "10d202e3c790106ad39b9d0fa936281a4d2cc00f87100fc88af35526cd6cb43e",
"irc": [],
"https_ex": []
}Screenshots
Hashes [?]
| Property | Value |
|---|---|
| MD5 | 7bfdea48966bdd7745ddb0033992194d |
| SHA256 | 485cf3f27dca7c7914b4fecd58cbf8dd7f519bb40f52ab8912b6980129aa0517 |
Error Messages
These are some of the error messages that can appear related to calendarsetup.exe:
calendarsetup.exe has encountered a problem and needs to close. We are sorry for the inconvenience.
calendarsetup.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.
Calendar ActiveX Control Setup has stopped working.
End Program - calendarsetup.exe. This program is not responding.
calendarsetup.exe is not a valid Win32 application.
calendarsetup.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.
What will you do with the file?
To help other users, please let us know what you will do with the file:
Malware or legitimate?
If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.
And now some shameless self promotion ;)
Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.
If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.
Comments
Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.
I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.
No comments posted yet.