What is mpfreesetup.exe?

mpfreesetup.exe is part of MixPad and developed by NCH Software according to the mpfreesetup.exe version information.

mpfreesetup.exe's description is "MixPad Multitrack Recording Software"

mpfreesetup.exe is digitally signed by NCH Software Pty Ltd.

mpfreesetup.exe is usually located in the 'c:\downloads\' folder.

None of the anti-virus scanners at VirusTotal reports anything malicious about mpfreesetup.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

None of the 70 anti-virus programs at VirusTotal detected the mpfreesetup.exe file.

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Summary

{
    "file_created": [
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\empty.MID",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\accent.wav",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\beat.wav",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\patterns.mpdlib",
        "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\categories.mpdcat"
    ],
    "regkey_written": [
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dct",
        "HKEY_CURRENT_USER\\.ddp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\sr2file\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aif",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.gsm\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Sort",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\MixPadInstall",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.oga",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\neffile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dct\\OpenWithProgIds\\NCH.MixPad.dct",
        "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.flv",
        "HKEY_CURRENT_USER\\.dvf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aifc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aiff",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.gsm",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rec",
        "HKEY_CURRENT_USER\\giffile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\deprojfile\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\apjfile\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rmj",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\apjfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mid",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\tgafile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\xvidfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ra\\OpenWithProgIds\\NCH.MixPad.ra",
        "HKEY_CURRENT_USER\\.raf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.msv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpga",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\(Default)",
        "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.m4r\\(Default)",
        "HKEY_CURRENT_USER\\webpfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\arwfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.spx\\OpenWithProgIds\\NCH.MixPad.spx",
        "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\URLInfoAbout",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mid\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\tgafile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\(Default)",
        "HKEY_CURRENT_USER\\7zfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\wpsfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHeditsound\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\vpjfile\\(Default)",
        "HKEY_CURRENT_USER\\pgffile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpdp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\(Default)",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.opus",
        "HKEY_CURRENT_USER\\.wv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.au",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dart",
        "HKEY_CURRENT_USER\\.pgf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\DisplayIcon",
        "HKEY_CURRENT_USER\\.nef\\(Default)",
        "HKEY_CURRENT_USER\\odtfile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wv",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_CURRENT_USER\\docxfile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpg\\OpenWithProgIds\\NCH.MixPad.mpg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.amr",
        "HKEY_CURRENT_USER\\dngfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\wpdfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.CDA\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.dct\\(Default)",
        "HKEY_CURRENT_USER\\nppfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.ape\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.act",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Settings\\InstallerPath",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_CURRENT_USER\\erffile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\.dss\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\.qcp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ram",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.spx",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.qcp\\OpenWithProgIds\\NCH.MixPad.qcp",
        "HKEY_CURRENT_USER\\NCH.MixPad.dct\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\(Default)",
        "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Mode",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\(Default)",
        "HKEY_CURRENT_USER\\wpsfile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.voc\\OpenWithProgIds\\NCH.MixPad.voc",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\.ram\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wav",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\shell\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\.vox\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Streams\\Desktop\\TaskbarWinXP",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\rw2file\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\nppfile\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dart\\OpenWithProgIds\\NCH.MixPad.dart",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.avi",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.flac",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ra",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:FMTID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rm",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aifc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aiff",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\FFlags",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.opus",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dss",
        "HKEY_CURRENT_USER\\tgafile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wmv\\OpenWithProgIds\\NCH.MixPad.wmv",
        "HKEY_CURRENT_USER\\cdofile\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp4\\OpenWithProgIds\\NCH.MixPad.mp4",
        "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\wpsfile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aifc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dss\\OpenWithProgIds\\NCH.MixPad.dss",
        "HKEY_CURRENT_USER\\.webp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\MinutesRunSinceLastInstall",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\rarfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\7zfile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ds2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\Windows Error Reporting\\ExcludedApplications\\mixpad.exe",
        "HKEY_CURRENT_USER\\rarfile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.dss\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallDate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\DisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\shell\\(Default)",
        "HKEY_CURRENT_USER\\spjfile\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp3\\OpenWithProgIds\\NCH.MixPad.mp3",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.3gp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpg\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\webpfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\Publisher",
        "HKEY_CURRENT_USER\\cdofile\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.spx",
        "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\raffile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.dss\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mid",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\.rw2\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rec",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\.drp\\(Default)",
        "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\.smf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.flv\\OpenWithProgIds\\NCH.MixPad.flv",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\.moh\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupView",
        "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\neffile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\.voc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wma",
        "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.shn\\OpenWithProgIds\\NCH.MixPad.shn",
        "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\crwfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.sd2",
        "HKEY_CURRENT_USER\\apjfile\\(Default)",
        "HKEY_CURRENT_USER\\tar.gzfile\\Shell\\NCHextract\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Settings\\InstallerName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wmv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dvf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.shn\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.shn\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_CURRENT_USER\\.rm\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpeg\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\SVar",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mkv\\OpenWithProgIds\\NCH.MixPad.mkv",
        "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.act",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\.cdo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.asf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\LanguageList",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.caf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wav",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.smf",
        "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dvs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.qcp",
        "HKEY_CURRENT_USER\\srffile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\.exr\\(Default)",
        "HKEY_CURRENT_USER\\arwfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mp2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.rcd\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.vox",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dvf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpeg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\wpdfile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\GlobalAssocChangedCounter",
        "HKEY_CURRENT_USER\\.doc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ogg",
        "HKEY_CURRENT_USER\\arwfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHburn\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mp3\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.3gp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.voc",
        "HKEY_CURRENT_USER\\giffile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\jp2file\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.apj\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\(Default)",
        "HKEY_CURRENT_USER\\rtffile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByDirection",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\InstallLocation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aiff\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\UninstallString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\LastAdvertisement",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wv\\OpenWithProgIds\\NCH.MixPad.wv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aif\\OpenWithProgIds\\NCH.MixPad.aif",
        "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rcd\\OpenWithProgIds\\NCH.MixPad.rcd",
        "HKEY_CURRENT_USER\\drpfile\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\FXPresetsFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\Version",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.3gp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.xvid\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.sd2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.avi",
        "HKEY_CURRENT_USER\\cr2file\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\TIFImage.Document\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\neffile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\sr2file\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.sd2\\OpenWithProgIds\\NCH.MixPad.sd2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\.tgz\\(Default)",
        "HKEY_CURRENT_USER\\.mrw\\(Default)",
        "HKEY_CURRENT_USER\\neffile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ds2",
        "HKEY_CURRENT_USER\\pgffile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\IconStreams",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wma\\OpenWithProgIds\\NCH.MixPad.wma",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.flv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ram\\OpenWithProgIds\\NCH.MixPad.ram",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.mpeg2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpdp\\OpenWithProgIds\\NCH.MixPad.mpdp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aif\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\nppfile\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dss",
        "HKEY_CURRENT_USER\\srffile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\mpeg2file\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rcd",
        "HKEY_CURRENT_USER\\ddpfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\LogicalViewMode",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ogg\\OpenWithProgIds\\NCH.MixPad.ogg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dvf\\OpenWithProgIds\\NCH.MixPad.dvf",
        "HKEY_CURRENT_USER\\tar.gzfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\deprojfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mov",
        "HKEY_CURRENT_USER\\.mpga\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHextract\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ape",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\CurrentVersion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MIDI\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.shn",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\exrfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.ape\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.msv\\OpenWithProgIds\\NCH.MixPad.msv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_CURRENT_USER\\.7z\\(Default)",
        "HKEY_CURRENT_USER\\.nrw\\(Default)",
        "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.cda\\OpenWithProgIds\\NCH.MixPad.cda",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallerPath",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\(Default)",
        "HKEY_CURRENT_USER\\wpdfile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.vox",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.oga\\OpenWithProgIds\\NCH.MixPad.oga",
        "HKEY_CURRENT_USER\\.wpd\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\tgzfile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.voc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\(Default)",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\erffile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.flac",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.deproj\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aiff\\OpenWithProgIds\\NCH.MixPad.aiff",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:PID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.cda\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.cda",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\(Default)",
        "HKEY_CURRENT_USER\\mrwfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\bz2file\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rec\\OpenWithProgIds\\NCH.MixPad.rec",
        "HKEY_CURRENT_USER\\.dvs\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\shell\\(Default)",
        "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mp4",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.gsm",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Cloud\\FileFormat",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.flac\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\shell\\(Default)",
        "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.shn",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mid\\OpenWithProgIds\\NCH.MixPad.mid",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.raw\\OpenWithProgIds\\NCH.MixPad.raw",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aac",
        "HKEY_CURRENT_USER\\.gz\\(Default)",
        "HKEY_CURRENT_USER\\.wps\\(Default)",
        "HKEY_CURRENT_USER\\.vob\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.sr2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\webpfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.asf",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_CURRENT_USER\\.bz2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wma\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\TIFImage.Document\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.m4a",
        "HKEY_CURRENT_USER\\.dng\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "HKEY_CURRENT_USER\\tarfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.mpc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.MOD\\OpenWithProgIds\\NCH.MixPad.mod",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstalledByAdmin",
        "HKEY_CURRENT_USER\\spjfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\.raw\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4r\\OpenWithProgIds\\NCH.MixPad.m4r",
        "HKEY_CURRENT_USER\\erffile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.m4b\\(Default)",
        "HKEY_CURRENT_USER\\.dart\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ogg\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpeg",
        "HKEY_CURRENT_USER\\rw2file\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.au\\OpenWithProgIds\\NCH.MixPad.au",
        "HKEY_CURRENT_USER\\bz2file\\Shell\\NCHextract\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mod\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dart",
        "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\(Default)",
        "HKEY_CURRENT_USER\\.act\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallDateFirst",
        "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.act\\OpenWithProgIds\\NCH.MixPad.act",
        "HKEY_CURRENT_USER\\gzfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.moh",
        "HKEY_CURRENT_USER\\.divx\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "HKEY_CURRENT_USER\\.amr\\(Default)",
        "HKEY_CURRENT_USER\\.ra\\(Default)",
        "HKEY_CURRENT_USER\\ddpfile\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mod",
        "HKEY_CURRENT_USER\\sr2file\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\.srw\\(Default)",
        "HKEY_CURRENT_USER\\7zfile\\Shell\\NCHextract\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aifc\\OpenWithProgIds\\NCH.MixPad.aifc",
        "HKEY_CURRENT_USER\\.cr2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.amr\\OpenWithProgIds\\NCH.MixPad.amr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mov",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wav\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.avi\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.moh",
        "HKEY_CURRENT_USER\\.mpdp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rmj\\OpenWithProgIds\\NCH.MixPad.rmj",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.m4a\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mp4\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "HKEY_CURRENT_USER\\pgffile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\tarfile\\Shell\\NCHextract\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.opus\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dct",
        "HKEY_CURRENT_USER\\wpfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_CURRENT_USER\\.jp2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "HKEY_CURRENT_USER\\deprojfile\\(Default)",
        "HKEY_CURRENT_USER\\tar.gzfile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4a\\OpenWithProgIds\\NCH.MixPad.m4a",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpeg\\OpenWithProgIds\\NCH.MixPad.mpeg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\ApplicationDescription",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpga\\OpenWithProgIds\\NCH.MixPad.mpga",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wav\\OpenWithProgIds\\NCH.MixPad.wav",
        "HKEY_CURRENT_USER\\docxfile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mkv",
        "HKEY_CURRENT_USER\\NCH.MixPad.dss\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_CURRENT_USER\\bz2file\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rcd",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\docfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.gsm\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\tgzfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\EstimatedSize",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\giffile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.smf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\URL Protocol",
        "HKEY_CURRENT_USER\\.wp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\RegisteredApplications\\MixPad",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\docfile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\(Default)",
        "HKEY_CURRENT_USER\\neffile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rm",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.oga",
        "HKEY_CURRENT_USER\\.erf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ogg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ra",
        "HKEY_CURRENT_USER\\divxfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\(Default)",
        "HKEY_CURRENT_USER\\tgzfile\\Shell\\NCHextract\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.AAC\\OpenWithProgIds\\NCH.MixPad.aac",
        "HKEY_CURRENT_USER\\.spx\\(Default)",
        "HKEY_CURRENT_USER\\CABFolder\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.tga\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ape",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\dvfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\gzfile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_CURRENT_USER\\.rec\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wma",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aac",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.m4b",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\vobfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.m4r",
        "HKEY_CURRENT_USER\\.crw\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "HKEY_CURRENT_USER\\raffile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wmv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.m4r",
        "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mp2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mp3",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.m4b",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.m4a",
        "HKEY_CURRENT_USER\\raffile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\wpfile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.asf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\exrfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.rmj\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.qcp",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\UsageStatsChoice\\llinad",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpc",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rmj",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.3gp\\OpenWithProgIds\\NCH.MixPad.3gp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rm\\OpenWithProgIds\\NCH.MixPad.rm",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\vpjfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp2\\OpenWithProgIds\\NCH.MixPad.mp2",
        "HKEY_CURRENT_USER\\srffile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\odtfile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WMV\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpc\\OpenWithProgIds\\NCH.MixPad.mpc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.ds2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aif",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wmv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\IconSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.caf\\OpenWithProgIds\\NCH.MixPad.caf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.flac\\OpenWithProgIds\\NCH.MixPad.flac",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mkv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.asf\\OpenWithProgIds\\NCH.MixPad.asf",
        "HKEY_CURRENT_USER\\drpfile\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\RunsSinceLastInstall",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Software\\Installer",
        "HKEY_CURRENT_USER\\.srf\\(Default)",
        "HKEY_CURRENT_USER\\wpfile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.msv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vox\\OpenWithProgIds\\NCH.MixPad.vox",
        "HKEY_CURRENT_USER\\vpjfile\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.vpj\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\spjfile\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dvs\\OpenWithProgIds\\NCH.MixPad.dvs",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.gsm\\OpenWithProgIds\\NCH.MixPad.gsm",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\UserStartTime",
        "HKEY_CURRENT_USER\\.spj\\(Default)",
        "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2\\Settings",
        "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_CURRENT_USER\\.dv\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\IID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\VersionMinor",
        "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo\\(Default)",
        "HKEY_CURRENT_USER\\rtffile\\Shell\\NCHconvertdoc\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\(Default)",
        "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHeditsound\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.oga\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\srwfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ape\\OpenWithProgIds\\NCH.MixPad.ape",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4b\\OpenWithProgIds\\NCH.MixPad.m4b",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.au\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aac\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\DisplayVersion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.moh\\OpenWithProgIds\\NCH.MixPad.moh",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ColInfo",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\HRZR_PGYFRFFVBA",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.au",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.opus\\OpenWithProgIds\\NCH.MixPad.opus",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.gsm\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.smf\\OpenWithProgIds\\NCH.MixPad.smf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.caf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\VersionMajor",
        "HKEY_CURRENT_USER\\exrfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\(Default)",
        "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\gzfile\\Shell\\NCHextract\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHeditsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PastIconsStream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpdp",
        "HKEY_CURRENT_USER\\rw2file\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.mkv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\shell\\(Default)",
        "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHslideshow\\(Default)",
        "HKEY_CURRENT_USER\\tarfile\\Shell\\NCHextract\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ram",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.raw",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_CURRENT_USER\\ddpfile\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHburn\\command\\(Default)",
        "HKEY_CURRENT_USER\\giffile\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\URLUpdateInfo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_CURRENT_USER\\docfile\\Shell\\NCHconvertdoc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mod",
        "HKEY_CURRENT_USER\\drpfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dvs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.cda",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\CABFolder\\Shell\\NCHextract\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\(Default)",
        "HKEY_CURRENT_USER\\.ape\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.amr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.caf",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mp2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mp3",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
        "HKEY_CURRENT_USER\\nrwfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mp4",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mov\\OpenWithProgIds\\NCH.MixPad.mov",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\rarfile\\Shell\\NCHextract\\(Default)",
        "HKEY_CURRENT_USER\\.tar.gz\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.avi\\OpenWithProgIds\\NCH.MixPad.avi",
        "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHconvertimage\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.shn\\Shell\\NCHconvertsound\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.raw",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHeditsound\\(Default)",
        "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHslideshow\\command\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-1012",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mov\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_CURRENT_USER\\.npp\\(Default)",
        "HKEY_CURRENT_USER\\cdofile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.arw\\(Default)",
        "HKEY_CURRENT_USER\\.msv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ds2\\OpenWithProgIds\\NCH.MixPad.ds2",
        "HKEY_CURRENT_USER\\.tar\\(Default)",
        "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHconvertimage\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.flv",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpg",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Registration\\CurrentVersion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.sd2\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Hfref\\phpx\\NccQngn\\Ybpny\\Grzc\\a1f\\apufrghc.rkr",
        "HKEY_CURRENT_USER\\.rar\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpga"
    ],
    "dll_loaded": [
        "gdiplus.dll",
        "urlmon.dll",
        "API-MS-Win-Security-LSALookup-L1-1-0.dll",
        "srvcli.dll",
        "apphelp.dll",
        "LINKINFO.dll",
        "Advapi32.dll",
        "C:\\Windows\\system32\\DUser.dll",
        "UxTheme.dll",
        "MsftEdit.dll",
        "C:\\Windows\\system32\\ole32.dll",
        "POWRPROF.DLL",
        "dwmapi.dll",
        "ntdll.dll",
        "C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll",
        "slc.dll",
        "ntmarta.dll",
        "PROPSYS.dll",
        "C:\\Windows\\syswow64\\MSCTF.dll",
        "API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
        "OLEAUT32.DLL",
        "SspiCli.dll",
        "C:\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll",
        "comctl32",
        "ole32.dll",
        "SHLWAPI.dll",
        "CRYPTSP.dll",
        "USER32.dll",
        "IMM32.dll",
        "API-MS-Win-Security-SDDL-L1-1-0.dll",
        "C:\\Windows\\system32\\xmllite.dll",
        "Wer.dll",
        "OLEAUT32.dll",
        "netutils.dll",
        "SHELL32.dll",
        "DUser.dll",
        "comctl32.dll",
        "VERSION.dll",
        "kernel32.dll",
        "User32.dll",
        "DEVRTL.dll",
        "ADVAPI32.dll",
        "rpcrt4.dll",
        "SETUPAPI.dll",
        "ntshrui.dll",
        "Cabinet.dll",
        "user32.dll",
        "OLEACC.dll"
    ],
    "file_opened": [
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "C:\\Windows\\System32\\calc.exe",
        "C:\\ProgramData",
        "C:\\",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
        "c:\\program files (x86)\\internet explorer\\iexplore.exe",
        "c:\\program files (x86)\\mozilla firefox\\firefox.exe",
        "C:\\Users\\Public\\Pictures\\desktop.ini",
        "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
        "C:\\Windows\\System32\\displayswitch.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
        "C:\\Program Files (x86)\\Mozilla Firefox\\",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup",
        "C:\\ProgramData\\NCH Software",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
        "C:\\Users\\cuck\\Desktop\\desktop.ini",
        "C:\\Windows\\SysWOW64\\ieframe.dll",
        "C:\\Users\\Public\\Pictures",
        "C:\\Program Files (x86)\\windows media player\\wmplayer.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
        "C:\\Windows\\explorer.exe",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Firefox.lnk",
        "C:\\Windows\\System32\\en-US\\wfsr.dll.mui",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
        "C:\\Windows\\System32\\snippingtool.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk",
        "C:\\Windows\\System32\\oleaccrc.dll",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
        "C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "C:\\Users\\Public\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
        "C:\\Windows\\System32\\imageres.dll",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "C:\\Windows\\AppPatch\\sysmain.sdb",
        "\\\\?\\PIPE\\samr",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "C:\\Windows\\System32\\WFS.exe",
        "C:\\Users\\cuck\\Pictures",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming",
        "C:\\Program Files (x86)\\windows media player\\en-US\\wmplayer.exe.mui",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk",
        "C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
        "C:\\Program Files (x86)",
        "C:\\Program Files (x86)\\NCH Software\\MixPad\\",
        "C:\\ProgramData\\Microsoft\\Windows",
        "C:\\Windows\\System32\\DeviceCenter.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
        "C:\\Users\\Public\\Desktop",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db",
        "C:\\Program Files (x86)\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk",
        "C:\\Program Files (x86)\\NCH Software\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "C:\\Users\\Public\\Desktop\\desktop.ini",
        "C:\\Users\\Public\\Documents\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk",
        "C:\\Program Files (x86)\\nch software\\MixPad\\mixpad.exe",
        "C:\\Program Files\\Windows Sidebar\\sidebar.exe",
        "C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe",
        "C:\\Windows\\resources\\Themes\\Aero\\Shell\\NormalColor\\ShellStyle.dll",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
        "C:\\Program Files (x86)\\NCH Software",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk",
        "C:\\Users",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db",
        "C:\\Windows\\System32\\xpsrchvw.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad",
        "C:\\Users\\desktop.ini",
        "C:\\Windows\\System32\\mspaint.exe",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk",
        "C:\\Users\\cuck",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories",
        "C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db",
        "C:\\Windows\\System32\\SnippingTool.exe",
        "C:\\Windows\\System32\\WFSR.dll",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Python 2.7",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs",
        "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
        "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
        "c:\\program files (x86)\\nch software\\MixPad\\mixpad.exe",
        "C:\\Windows\\System32\\rundll32.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
        "C:\\Users\\cuck\\AppData",
        "C:\\Windows\\SysWOW64\\",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
        "C:\\Users\\cuck\\Desktop",
        "C:\\Windows\\System32\\en-US\\calc.exe.mui",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC",
        "C:\\Windows\\System32\\en-US\\DeviceCenter.dll.mui",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
        "C:\\Windows\\System32\\cmd.exe",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
        "C:\\Users\\Public",
        "C:\\ProgramData\\Microsoft",
        "C:\\Windows\\System32\\StikyNot.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
        "C:\\Windows\\Branding\\ShellBrd\\shellbrd.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
        "C:\\Users\\cuck\\Pictures\\desktop.ini",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
        "c:\\program files (x86)\\internet explorer\\en-US\\iexplore.exe.mui",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance",
        "C:\\Program Files (x86)\\NCH Software\\MixPad",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk",
        "C:\\Windows\\System32\\mstsc.exe"
    ],
    "file_copied": [
        [
            "C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin",
            "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpadsetup_v5.36.exe"
        ],
        [
            "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
            "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe"
        ]
    ],
    "regkey_opened": [
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.xvid\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flac",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressPoints",
        "HKEY_CURRENT_USER\\software\\classes\\.ram",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpga",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\software\\classes\\.raw",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mid\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.gz\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a\\shell\\open\\command",
        "HKEY_CLASSES_ROOT\\.mod",
        "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell\\Convert file type",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Cloud",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressBurn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\vobfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHeditvideo\\command",
        "HKEY_CLASSES_ROOT\\.qcp",
        "HKEY_CLASSES_ROOT\\.dss",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\.exr",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cdo",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.AU\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.apj",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\DrawPad",
        "HKEY_CURRENT_USER\\Software\\Classes\\wdpfile\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.shn\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ape",
        "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.rar\\userchoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpeg2",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\bz2file\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Switch",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\explorer.exe\\TaskbarExceptionsIcons",
        "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81",
        "HKEY_CLASSES_ROOT\\.ape",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHeditsound",
        "HKEY_CLASSES_ROOT\\.arw",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell\\NCHconvertdoc",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Switch",
        "HKEY_CURRENT_USER\\Software\\Classes\\.ape",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.apj",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Doxillion",
        "HKEY_CLASSES_ROOT\\.rar",
        "HKEY_CLASSES_ROOT\\.raw",
        "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\shell",
        "HKEY_CLASSES_ROOT\\.raf",
        "HKEY_CURRENT_USER\\software\\classes\\.act",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.ram",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.ts",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\exrfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell\\NCHconvertdoc\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mpeg",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE",
        "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\.3gp",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ape\\UserChoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dart",
        "HKEY_CLASSES_ROOT\\.wpd",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.wps",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Classes\\.3g2",
        "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell\\NCHextract\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ape\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aiff",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tiff",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvsfile",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mpdp",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.cda\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Edit sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\drpfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\.nrw",
        "HKEY_CLASSES_ROOT\\Folder",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aiff\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MIDI",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.shn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.png",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpeg\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mohfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rw2file\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\.aac",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.bmp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.cdo\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell\\NCHslideshow",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wma\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Prism",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.oga\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\.ddp",
        "HKEY_CLASSES_ROOT\\.divx",
        "HKEY_CURRENT_USER\\Software\\Classes\\.doc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpdfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell\\NCHslideshow\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rarfile\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
        "HKEY_CURRENT_USER\\software\\classes\\.flv",
        "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tga\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.oga",
        "HKEY_CURRENT_USER\\Software\\Classes\\.ogg",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cab",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi\\shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.srf\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHeditvideo\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mid",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.wp\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss",
        "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.srw\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wvfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\7zfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_INTERNET_SHELL_FOLDERS",
        "HKEY_CURRENT_USER\\software\\classes\\.ape",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cda",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Disketch",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.exr",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.divx\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound",
        "HKEY_CLASSES_ROOT\\.tar.gz",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ram\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rar",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.raf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.jpg",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ram",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wav",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
        "HKEY_CLASSES_ROOT\\.asf",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Switch",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wmv\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\crwfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\sd2file",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressPoints",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\VideoPad",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dng",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressAnimate",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.iso",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell\\NCHextract",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
        "HKEY_CURRENT_USER\\Software\\Classes\\.wdp",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tga\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nrwfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{04731B67-D933-450a-90E6-4ACD2E9408FE}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe",
        "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell\\NCHextract\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHconvertsound",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\Software\\Classes\\.iso",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tar\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.divx",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.avi\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.erf\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}",
        "HKEY_CLASSES_ROOT\\.smf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf\\shell\\open\\command",
        "HKEY_CLASSES_ROOT\\.wmv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\apjfile",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.cr2\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nch.mixpad",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.mpeg2\\userchoice",
        "HKEY_CLASSES_ROOT\\.wma",
        "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\shell\\NCHextract",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\crwfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHeditsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.nrw",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.dss\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.voc",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\Edit sound file",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHeditvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.avi",
        "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell\\Convert file type",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.au",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Pixillion",
        "HKEY_CURRENT_USER\\software\\classes\\.opus",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHeditvideo",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.AIFF\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\software\\classes\\.rmj",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf",
        "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\Desktop\\NameSpace\\DelegateFolders",
        "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\vocfile",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\ddpfile",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressZip",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.exr",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.nef\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\ds2file",
        "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.tar.gz",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\shnfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\.avi",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\cr2file\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell\\Extract with Express Zip",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\divxfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvs\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw\\shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\software\\classes\\.sd2",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.nrw\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Settings",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\CABFolder\\Shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aifc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wv\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dctfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rtffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\odtfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.dv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flac\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.vox",
        "HKEY_CURRENT_USER\\Software\\Classes\\.7z",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\qcpfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wav\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressBurn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\neffile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressZip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache",
        "HKEY_CURRENT_USER\\Software\\Classes\\.vob",
        "HKEY_CURRENT_USER\\Software\\Classes\\.voc",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.7z\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\.bz2",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\jp2file\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ds2\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.asf\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\vpjfile\\shell",
        "HKEY_CLASSES_ROOT\\.bmp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{e345f35f-9397-435c-8f95-4e922c26259e}",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\Extract with Express Zip",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell\\NCHconvertdoc\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.npp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dartfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\vpjfile",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.lnk",
        "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm\\shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.wpd\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\xvidfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.doc",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\Create slideshow",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mod\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dct",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.mkv",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.pdf",
        "HKEY_CURRENT_USER\\Software\\Classes\\.jpeg",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\apjfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ts",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvffile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nppfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs\\DefaultIcon",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tar.gz\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell\\NCHextract",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\Desktop\\NameSpace",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
        "HKEY_CLASSES_ROOT\\.opus",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.wp\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\.htm",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf",
        "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mod\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.odt",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\DelegateFolders",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.shn\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell\\NCHextract",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\spjfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.gsm",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.act",
        "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\Edit video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.dv\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\wdpfile\\shell\\open",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.iso",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.flac\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.bmp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.amr\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{450D8FBA-AD25-11D0-98A8-0800361B1103}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aif",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHeditsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.CDA\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\Edit sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\shell\\NCHslideshow",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aif\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mp4\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\TIFImage.Document\\shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc\\shell\\open\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tgz\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wp",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj\\shell",
        "HKEY_CURRENT_USER\\software\\classes\\.vox",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
        "HKEY_LOCAL_MACHINE\\Software\\RegisteredApplications",
        "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wma",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mpeg2\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\software\\classes\\.voc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wmv",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.smf",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.smf\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Class\\{4D36E96C-E325-11CE-BFC1-08002BE10318}",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.WAV\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wma\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{645FF040-5081-101B-9F08-00AA002F954E}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Software",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\srwfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\.wpd",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\(Default)",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.wps",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\.shn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.bz2",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.dng\\userchoice",
        "HKEY_CLASSES_ROOT\\.dng",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\MixPad",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectUI",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgzfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Scribe",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell\\NCHconvertdoc\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell",
        "HKEY_CLASSES_ROOT\\.flv",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHburn\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tga",
        "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\CurVer",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\docfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.npp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.3gp\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\.ra",
        "HKEY_CLASSES_ROOT\\.rw2",
        "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell",
        "HKEY_CLASSES_ROOT\\.rm",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3\\DefaultIcon",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.jp2\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgafile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell\\Extract with Express Zip",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell\\NCHextract",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2",
        "HKEY_CLASSES_ROOT\\https",
        "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.sr2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nrwfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell",
        "HKEY_CLASSES_ROOT\\.pgf",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd\\shell",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.dv\\UserChoice",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.3gp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tar.gzfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\amrfile",
        "HKEY_CLASSES_ROOT\\.htm",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flv\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wps",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rar\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wpd",
        "HKEY_CLASSES_ROOT\\.flac",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\drpfile\\shell",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\cdofile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r\\shell",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.ADTS\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{59031a47-3f72-44a7-89c5-5595fe6b30ee}",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHconvertvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.webp\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mov\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvf\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.rec",
        "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Doxillion",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\arwfile\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
        "HKEY_CURRENT_USER\\Software\\Classes\\.erf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\srffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHconvertimage\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell\\NCHextract",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\TIFImage.Document\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rw2file\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{4336a54d-038b-4685-ab02-99bb52d3fb8b}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.vox\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{daf95313-e44d-46af-be1b-cbacea2c3065}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vpj",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0",
        "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell\\NCHslideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx\\shell\\open\\command",
        "HKEY_CLASSES_ROOT\\.spx",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\Edit video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mkvfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.caf\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHextract",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mp3\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A",
        "HKEY_CURRENT_USER\\Software\\Classes\\.wav",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp\\shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.doc\\userchoice",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rtffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CLASSES_ROOT\\.mid",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\VideoPad",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\webpfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ogg\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\vpjfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga\\shell",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressAnimate",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\WavePad",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\bz2file\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.caf\\UserChoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{031E4825-7B94-4dc3-B131-E946B44C8DD5}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gz",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.aac",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tar.gzfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Disketch",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.msv",
        "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\shell",
        "HKEY_CLASSES_ROOT\\.aiff",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gsm",
        "HKEY_CURRENT_USER\\Software\\Classes\\.gsm",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rm\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.srw\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r\\shell\\open\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mov\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tar.gz\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\pgffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\drpfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rw2\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.doc\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dct\\shell",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.ASF\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.docx",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\gzfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\Convert sound file",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\ddpfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\erffile\\Shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.exr\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\deprojfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\pgffile\\Shell",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv\\shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\Edit sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\.caf",
        "HKEY_CURRENT_USER\\Software\\Classes\\.cab",
        "HKEY_CURRENT_USER\\Software\\Classes\\.webp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wdpfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wdpfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dngfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.webm",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Convert file type",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aiff\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Registration",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mid\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Scribe",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.vpj\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.voc\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHeditvideo\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mov",
        "HKEY_CURRENT_USER\\Software\\Classes\\.vpj",
        "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ddp",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\flacfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\spjfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\srwfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo\\command",
        "HKEY_CLASSES_ROOT\\.jpg",
        "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.bz2\\UserChoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.erf\\userchoice",
        "HKEY_CLASSES_ROOT\\AllFilesystemObjects",
        "HKEY_CLASSES_ROOT\\.tga",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Capabilities\\FileAssociations",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell",
        "HKEY_CLASSES_ROOT\\.tgz",
        "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.bmp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.xvid",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\caffile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.jp2",
        "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\actfile",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tar",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell\\NCHconvertdoc\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.CDA",
        "HKEY_CLASSES_ROOT\\.dvf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dss\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tar.gz",
        "HKEY_CLASSES_ROOT\\.dvs",
        "HKEY_CURRENT_USER\\Software\\Classes\\nppfile",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.mrw\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvf",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.oga\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvs",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.au\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\DreamPlan",
        "HKEY_CURRENT_USER\\software\\classes\\.gsm",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\Edit video file",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a\\shell",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressAnimate",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.CDA\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rarfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.msv\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nppfile\\shell\\open",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressAnimate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mpdp\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Doxillion",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\VideoPad",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mrw",
        "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell\\NCHextract\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\cr2file\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\Software\\Classes\\.srf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mrw",
        "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.sr2\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dngfile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.crw",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHeditsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.opus",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aac\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\Edit sound file",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressZip",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHconvertvideo",
        "HKEY_CLASSES_ROOT\\.erf",
        "HKEY_CLASSES_ROOT\\.cr2",
        "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\nchsetup.exe",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Windows Error Reporting\\ExcludedApplications",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\software\\classes\\.shn",
        "HKEY_CURRENT_USER\\software\\classes\\.msv",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.srf\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpg\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\.srf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell\\NCHextract",
        "HKEY_CLASSES_ROOT\\.srw",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP",
        "HKEY_CURRENT_USER\\software\\classes\\.moh",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.jp2\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\.deproj",
        "HKEY_CLASSES_ROOT\\.sr2",
        "HKEY_CURRENT_USER\\Software\\Classes\\.srw",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\smffile",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Scribe",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv",
        "HKEY_CLASSES_ROOT\\.moh",
        "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4a\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo\\command",
        "HKEY_CLASSES_ROOT\\.mov",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\DelegateFolders",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHslideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.moh\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Crescendo",
        "HKEY_CLASSES_ROOT\\.au",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell\\NCHconvertsound\\command",
        "HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
        "HKEY_CURRENT_USER\\software\\classes\\.caf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\AccessProviders",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.pgf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.wma",
        "HKEY_CLASSES_ROOT\\.dart",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mrw\\UserChoice",
        "HKEY_CLASSES_ROOT\\.sd2",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tar\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHburn",
        "HKEY_LOCAL_MACHINE\\System\\Setup",
        "HKEY_CURRENT_USER\\Software\\Classes\\cdofile",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.pgf\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Disketch",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.aif",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff\\DefaultIcon",
        "HKEY_CURRENT_USER\\software\\classes\\.dvs",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\Edit video file",
        "HKEY_CLASSES_ROOT\\.dct",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHeditvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\software\\classes\\.dvf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.nef",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Scribe",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CLASSES_ROOT\\.wp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CLASSES_ROOT\\.wv",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rmjfile",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\xvidfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.rw2",
        "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\recfile",
        "HKEY_CLASSES_ROOT\\.rtf",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\PhotoStage",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHeditsound\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.avi\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.m4v",
        "HKEY_CURRENT_USER\\Software\\Classes\\.gif",
        "HKEY_CLASSES_ROOT\\.m4r",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHslideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\spjfile",
        "HKEY_CLASSES_ROOT\\.m4a",
        "HKEY_CLASSES_ROOT\\.m4b",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853",
        "HKEY_CLASSES_ROOT\\.caf",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.cab",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.amr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\nchsetup.exe",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\Edit sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\shell\\NCHconvertimage",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MP3\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\srffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\spxfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\DrawPad",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wdpfile\\shell\\open",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.asf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\cdofile\\shell\\open",
        "HKEY_CURRENT_USER\\software\\classes\\.dct",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.sr2\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\docxfile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.raf\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\Shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.spj\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.gz\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.arw\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rafile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41",
        "HKEY_CURRENT_USER\\software\\classes\\.rm",
        "HKEY_CURRENT_USER\\Software\\Classes\\.dct",
        "HKEY_CURRENT_USER\\software\\classes\\.ra",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\shell\\NCHconvertimage",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rw2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.ogv",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aac\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell\\Extract with Express Zip",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MIDI\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.tar",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\msvfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.M4A\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.jpeg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\nchsetup.exe",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\Shell",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.wps\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell\\Convert file type",
        "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp3\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mrwfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nppfile",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
        "HKEY_CURRENT_USER\\Software\\Classes\\.gz",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.webp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.nrw\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mp3",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mp4",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp4",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gsm\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp3",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp2",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MOV\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\KindMap",
        "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell\\Extract with Express Zip",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec\\shell",
        "HKEY_CURRENT_USER\\software\\classes\\.m4r",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp4\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpg",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpc",
        "HKEY_CURRENT_USER\\Software\\Classes\\.spj",
        "HKEY_CLASSES_ROOT\\.3g2",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\WavePad",
        "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell\\NCHconvertimage",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.WMV\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MP4\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.mrw",
        "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mpg",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHslideshow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressPoints",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpeg2file\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rmj",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\raffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.3GP\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vox\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\gsmfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHslideshow",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wmv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.sr2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.bz2\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Prism",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF",
        "HKEY_CLASSES_ROOT\\.nef",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.drp",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\Edit sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
        "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell\\Extract with Express Zip",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rtf",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\Edit sound file",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMV",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Capabilities\\FileTypes",
        "HKEY_CURRENT_USER\\Software\\Classes\\.tgz",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.gsm\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
        "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell\\NCHextract",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.divx",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG",
        "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell\\NCHextract",
        "HKEY_CURRENT_USER\\Software\\Classes\\.tga",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.spx",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\shell\\NCHburn",
        "HKEY_CURRENT_USER\\software\\classes\\.spx",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell\\Convert file type",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.spj",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.7z\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\https\\OpenWithProgids",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.ini",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\apefile",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Pixillion",
        "HKEY_CLASSES_ROOT\\.gz",
        "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\apjfile\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.html",
        "HKEY_CLASSES_ROOT\\Interface\\{618736E0-3C3D-11CF-810C-00AA00389B71}\\ProxyStubClsid32",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\ddpfile\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\shell",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Switch",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgzfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\Convert video file",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wav\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.webp\\userchoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo\\command",
        "HKEY_CLASSES_ROOT\\.amr",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHconvertvideo",
        "HKEY_CLASSES_ROOT\\.ds2",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressBurn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mov",
        "HKEY_CLASSES_ROOT\\.gif",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.moh",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\webpfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CLASSES_ROOT\\.msv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mod",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF",
        "HKEY_CLASSES_ROOT\\.webp",
        "HKEY_CLASSES_ROOT\\.webm",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\vobfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rmfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\software\\classes\\.dart",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac\\shell",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ra\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Capabilities\\FileTypes",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.act",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\software\\classes\\.smf",
        "HKEY_CURRENT_USER\\software\\classes\\.mpc",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpsfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.raw",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\.docx",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace",
        "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell\\NCHconvertdoc\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.caf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\apjfile\\shell\\open",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.ddp\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell\\Extract with Express Zip",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\docfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo",
        "HKEY_CLASSES_ROOT\\.docx",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHeditsound\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.pdf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\odtfile\\shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\Software\\Classes\\.nef",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Rpc",
        "HKEY_CURRENT_USER\\Software\\Classes\\.rtf",
        "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.pgf",
        "HKEY_CLASSES_ROOT\\.m2ts",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nch.mixpad\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6",
        "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell\\Extract with Express Zip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tgz\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressBurn",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mkv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\opusfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81",
        "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.wp",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.divx\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\.ds2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\UsageStatsChoice",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\VideoPad",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2\\shell\\open\\command",
        "HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
        "HKEY_CURRENT_USER\\Software\\Classes\\.m4v",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.sd2\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.dss",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.tiff",
        "HKEY_CURRENT_USER\\software\\classes\\.rec",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\Edit video file",
        "HKEY_CLASSES_ROOT\\.ts",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dss",
        "HKEY_CLASSES_ROOT\\.xvid",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\PhotoStage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.7z",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4r\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mkv\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\voxfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\DreamPlan",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.dng\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\.jp2",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\shell\\NCHslideshow",
        "HKEY_CLASSES_ROOT\\.bz2",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\TaskbarExceptionsIcons",
        "HKEY_CLASSES_ROOT\\.aifc",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.drp",
        "HKEY_CLASSES_ROOT\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\InProcServer32",
        "HKEY_CLASSES_ROOT\\.nrw",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\cdofile",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\Edit sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4v",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rcdfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\.xvid",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc",
        "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\shell\\open",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.3g2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dart\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\m4rfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
        "HKEY_CLASSES_ROOT\\.mp2",
        "HKEY_CLASSES_ROOT\\.mp3",
        "HKEY_CLASSES_ROOT\\.mp4",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rtffile\\shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.3gp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\FirefoxHTML-E7CF176E110C211B\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.odt",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell\\Convert file type",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.voc\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.mpc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dssfile",
        "HKEY_CLASSES_ROOT\\.vox",
        "HKEY_CLASSES_ROOT\\.mpg",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Scheduler",
        "HKEY_CLASSES_ROOT\\.vob",
        "HKEY_CLASSES_ROOT\\.voc",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\shell\\NCHburn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\Edit sound file",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\Directory",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd",
        "HKEY_CLASSES_ROOT\\.avi",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.qcp",
        "HKEY_CLASSES_ROOT\\.mpeg2",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E",
        "HKEY_CURRENT_USER\\Software\\Classes\\.cr2",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cr2",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E",
        "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell\\Convert image file",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Crescendo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
        "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\shell\\open",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.au\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aifc",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0",
        "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rmj\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b\\shell\\open\\command",
        "HKEY_CLASSES_ROOT\\.mpga",
        "HKEY_CURRENT_USER\\Software\\Classes\\wdpfile",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\cmd.exe\\TaskbarExceptionsIcons",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877",
        "HKEY_CURRENT_USER\\Software\\Classes\\.crw",
        "HKEY_CLASSES_ROOT\\.cda",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.crw",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\rawfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tarfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\arwfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\nchsetup.exe",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\sr2file\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc",
        "HKEY_CURRENT_USER\\software\\classes\\.mkv",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
        "HKEY_CURRENT_USER\\Software\\Classes\\.cdo",
        "HKEY_CURRENT_USER\\Software\\Classes\\.tar",
        "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\Edit sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.srw",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp2\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.srf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.odt",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHextract\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.jp2",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpga\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Disketch",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.sd2",
        "HKEY_CLASSES_ROOT\\.shn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4a",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4b",
        "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ThumbnailCache",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv",
        "HKEY_CURRENT_USER\\Software\\Classes\\.m4a",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4r",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.vob\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell\\NCHextract\\command",
        "HKEY_CURRENT_USER\\software\\classes\\.mpdp",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
        "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\.dng",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\.jpg",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ds2",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\Create slideshow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{11016101-E366-4D22-BC06-4ADA335C892B}",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpg\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tgz",
        "HKEY_CLASSES_ROOT\\.png",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\.doc",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\Edit video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.qcp\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc\\shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\SuiteUsage",
        "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\shell\\NCHconvertimage",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gif",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\CABFolder\\shell\\NCHextract",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.mpdp\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9",
        "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Objects\\{871C5380-42A0-1069-A2EA-08002B30309D}",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell\\NCHconvertsound\\command",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\DreamPlan",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\flvfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\oggfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell",
        "HKEY_CLASSES_ROOT\\.mpdp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D",
        "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\shell\\",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHslideshow\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mrwfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aac",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cda\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{89D83576-6BD1-4c86-9454-BEB04E94C819}",
        "HKEY_CLASSES_ROOT\\.html",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.asf",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\.m2ts",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpgafile",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0",
        "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\.asf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aif\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.crw\\UserChoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{9343812e-1c37-4a49-a12e-4b2d810d956b}",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\DrawPad",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\Edit sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ogg",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.oga",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\ogafile",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rec",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg\\shell\\open\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.xvid\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHeditsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Crescendo",
        "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Prism",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m2ts",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\jp2file\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\m4bfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\software\\classes\\.mpga",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.mpeg2",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.apj\\userchoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
        "HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mkv\\UserChoice",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpdfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\PhotoStage",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\TIFImage.Document\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dct\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell\\Convert image file",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\Convert video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpeg\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell\\NCHconvertdoc\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.raf\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rcd",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\neffile\\Shell",
        "HKEY_CURRENT_USER\\software\\classes\\.qcp",
        "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Sharing",
        "HKEY_CURRENT_USER\\software\\classes\\.rcd",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vob",
        "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\raffile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\docxfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpeg",
        "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell\\NCHslideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vox",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\spjfile\\shell\\open",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\sr2file\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aifc\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\nch.mixpad\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6",
        "HKEY_CLASSES_ROOT\\.dv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Pixillion",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHconvertvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\.png",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
        "HKEY_CURRENT_USER\\software\\classes\\.dss",
        "HKEY_CURRENT_USER\\software\\classes\\.flac",
        "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressPoints",
        "HKEY_CURRENT_USER\\Software\\Classes\\.arw",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.arw",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\DefaultIcon",
        "HKEY_CURRENT_USER\\software\\classes\\.ds2",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv\\shell",
        "HKEY_CLASSES_ROOT\\.rmj",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\deprojfile\\shell\\open",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ogg\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell\\Convert sound file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss",
        "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell\\Extract with Express Zip",
        "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanmanServer\\DefaultSecurity",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\ramfile",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rm",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ra",
        "HKEY_CLASSES_ROOT\\.3gp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\exrfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au\\shell\\open\\command",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.nef\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpcfile",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressZip",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.deproj\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHconvertsound\\command",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.raw\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\.mpeg",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Crescendo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2",
        "HKEY_CURRENT_USER\\Software\\Classes\\.flac",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.exr\\UserChoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell\\NCHextract\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.arw\\userchoice",
        "HKEY_CLASSES_ROOT\\.rcd",
        "HKEY_CLASSES_ROOT\\NCH.MixPad.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\software\\classes\\.amr",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell\\NCHslideshow",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram\\shell",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mp2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A",
        "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound",
        "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tarfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rcd\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wdp",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rec\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\Convert video file",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Capabilities",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{26EE0668-A00A-44D7-9371-BEB064C98683}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.library-ms",
        "HKEY_CLASSES_ROOT\\.tiff",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4b\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpsfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHconvertimage\\command",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.m4a\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\divxfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.WMA\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell\\Convert file type",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.rw2\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpc\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PropertyBag",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.opus\\OpenWithProgIds",
        "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\odtfile\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\Edit video file",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\Convert image file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.act\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHconvertimage\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
        "HKEY_CURRENT_USER\\Software\\Classes\\.raf",
        "HKEY_CURRENT_USER\\software\\classes\\.wv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell\\NCHextract\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\.rar",
        "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell\\NCHextract\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\Edit video file",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\Burn with Express Burn",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpdp\\OpenWithProgIds",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpeg2file\\Shell",
        "HKEY_CURRENT_USER\\software\\classes\\.m4b",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dct",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHeditvideo",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgafile\\DefaultIcon",
        "HKEY_CLASSES_ROOT\\.ogg",
        "HKEY_CLASSES_ROOT\\.aif",
        "HKEY_CLASSES_ROOT\\.oga",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CLASSES_ROOT\\FirefoxURL-E7CF176E110C211B",
        "HKEY_CLASSES_ROOT\\.ogv",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mkv",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Pixillion",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell\\NCHconvertdoc\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.drp\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn",
        "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\Create slideshow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpdp",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.erf",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
        "HKEY_CURRENT_USER\\Software\\Classes\\.aiff",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHeditsound",
        "HKEY_CLASSES_ROOT\\.jpeg",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHeditvideo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
        "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHslideshow\\command",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.wpd\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.au",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r",
        "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid\\shell",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\gzfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\docxfile\\shell\\NCHconvertdoc",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\CABFolder\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHconvertimage",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.crw\\userchoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell\\Convert file type",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\deprojfile",
        "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell\\NCHslideshow",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\WavePad",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Prism",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ds2\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\7zfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma\\shell",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.cr2\\userchoice",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.npp\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpdpfile",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.wps\\UserChoice",
        "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.pgf\\userchoice",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra\\shell\\open\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\shell\\NCHextract",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\DrawPad",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.deproj",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHconvertsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHconvertvideo",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus\\shell\\open\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\erffile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\PhotoStage",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\Shell",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHconvertsound\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.png",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\drpfile\\shell\\open",
        "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\Convert sound file",
        "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\DefaultIcon",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHconvertvideo\\command",
        "HKEY_CLASSES_ROOT\\.7z",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.vob\\UserChoice",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\shell\\NCHextract",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc\\DefaultIcon",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2\\shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell\\NCHconvertsound\\command",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.AVI\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertdoc\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}",
        "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHeditsound",
        "HKEY_CLASSES_ROOT\\.wav",
        "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\WavePad",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\Doxillion",
        "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\.spx\\OpenWithProgIds",
        "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MPEG\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
        "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\DreamPlan",
        "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell\\NCHextract\\command",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
    ],
    "command_line": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe -installer \"C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin\" -instdata \"C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat\"",
        "\"C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe\" -installer \"C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin\" -instdata \"C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat\""
    ],
    "file_written": [
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "\\\\?\\PIPE\\samr",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\empty.MID",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\accent.wav",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\beat.wav",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\patterns.mpdlib",
        "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\categories.mpdcat"
    ],
    "regkey_deleted": [
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupCollapseState",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\_ShowSurveyNow",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\_ShowSurvey",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\InstalledBy",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\MixPadInstall",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\ShowSurvey",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemPos800x600x96(1)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemOrder",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\ShowSurveyNow",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\_InstalledBy"
    ],
    "file_deleted": [
        "",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\MixPadCounts.txt",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs.lnk"
    ],
    "directory_removed": [
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
        "C:\\Program Files (x86)\\NCH Software\\MixPad\\testfolder",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs"
    ],
    "file_exists": [
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
        "C:\\Users\\cuck\\Desktop",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
        "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini",
        "C:\\Python27\\python.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
        "C:\\Program Files (x86)\\NCH Software",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms",
        "C:\\Users\\Public",
        "C:\\ProgramData\\NCH Software\\MixPad",
        "C:\\Users",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\",
        "C:\\Windows\\inf\\",
        "C:\\Users\\cuck\\Documents",
        "C:\\Users\\Public\\Desktop\\NCH Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "C:\\Windows\\SysWOW64\\ieframe.dll",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms",
        "C:\\Users\\cuck\\Documents\\Mixpad Projects\\VST",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
        "C:\\Windows\\explorer.exe",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
        "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
        "C:\\Users\\Public\\Documents",
        "C:\\Users\\cuck",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ThumbCacheToDelete",
        "C:\\ProgramData\\NCH Software",
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "C:\\Users\\Public\\Desktop",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms",
        "C:\\Program Files (x86)\\NCH Software\\MixPad",
        "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
        "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db",
        "C:\\Users\\cuck\\Documents\\Mixpad Projects",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5",
        "C:\\Python27\\pythonw.exe"
    ],
    "mutex": [
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwReaderRefs",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_32.db!dfMaintainer",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_256.db!dfMaintainer",
        "Local\\Shell.CMruPidlList",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_sr.db!dfMaintainer",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1024.db!dfMaintainer",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!ThumbnailCacheInit",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_96.db!dfMaintainer",
        "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterMutex",
        "Local\\c:!users!cuck!appdata!roaming!microsoft!windows!ietldcache!"
    ],
    "file_failed": [
        "C:\\Program Files (x86)\\NCH Software\\MixPad",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk\\desktop.ini",
        "C:\\Users\\cuck\\Desktop\\NCH Suite.lnk\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
        "C:\\Users\\Public\\Desktop\\NCH Software.lnk",
        "C:\\ProgramData\\Microsoft\\desktop.ini",
        "C:\\Users\\Public\\Desktop\\NCH Software.lnk\\desktop.ini",
        "C:\\Users\\cuck\\Desktop\\NCH Suite.lnk",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "C:\\Users\\cuck\\Desktop\\NCH Software.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\desktop.ini",
        "C:\\Users\\cuck\\Desktop\\NCH Software.lnk\\desktop.ini"
    ],
    "guid": [
        "{6ccb7be0-6807-11d0-b810-00c04fd706ec}",
        "{4f6bcd94-c2a5-42ce-8dbc-31e794be4630}",
        "{7cc7aed8-290e-49bc-8945-c1401cc9306c}",
        "{14ce31dc-abc2-484c-b061-cf3416aed8ff}",
        "{a4341687-7593-47aa-9554-4b0ffc8b2214}",
        "{00021401-0000-0000-c000-000000000046}",
        "{688c934d-0c26-40f6-8d29-d56d72c76b48}",
        "{3ce74de4-53d3-4d74-8b83-431b3828ba53}",
        "{ea69859a-db5b-4c4a-8a8f-ae9759027534}",
        "{05a232fd-2bfb-4349-9d48-4787f317f50a}",
        "{000214fa-0000-0000-c000-000000000046}",
        "{529a9e6b-6587-4f23-ab9e-9c7d683e3c50}",
        "{660b90c8-73a9-4b58-8cae-355b7f55341b}",
        "{4657278a-411b-11d2-839a-00c04fd918d0}",
        "{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}",
        "{ae054212-3535-4430-83ed-d501aa6680e6}",
        "{9b63616c-36b2-46bc-959f-c1593952d19b}",
        "{1a1f4206-0688-4e7f-be03-d82ec69df9a5}",
        "{c3acefb5-f69d-4905-938f-fcadcf4be830}",
        "{42aedc87-2188-41fd-b9a3-0c966feabec1}",
        "{000214f9-0000-0000-c000-000000000046}",
        "{71d222e1-432f-429e-8c13-b6dafde5077a}",
        "{00000000-0000-0000-c000-000000000046}",
        "{b8967f85-58ae-4f46-9fb2-5d7904798f4b}",
        "{00000146-0000-0000-c000-000000000046}",
        "{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}",
        "{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
        "{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
        "{8be2d872-86aa-4d47-b776-32cca40c7018}",
        "{de5bf786-477a-11d2-839d-00c04fd918d0}",
        "{871c5380-42a0-1069-a2ea-08002b30309d}",
        "{0c733a8a-2a1c-11ce-ade5-00aa0044773d}",
        "{33c53a50-f456-4884-b049-85fd643ecfed}",
        "{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}",
        "{2fb499a3-cfce-480f-a5f3-2453db7a2b7a}",
        "{111f7c32-0546-4227-8b7f-c53a0b114a0f}",
        "{00000323-0000-0000-c000-000000000046}",
        "{5e078e03-8265-4bbe-9487-d242edbef910}",
        "{7d39402f-5b52-4b34-b528-b95f66927e1d}",
        "{75121952-e0d0-43e5-9380-1d80483acf72}",
        "{a4b544a1-438d-4b41-9325-869523e2d6c7}",
        "{603d3800-bd81-11d0-a3a5-00c04fd706ec}",
        "{14074e0b-7216-4862-96e6-53cada442a56}",
        "{ab8902b4-09ca-4bb6-b78d-a8f59079a8d5}",
        "{8ded7393-5db1-475c-9e71-a39111b0ff67}",
        "{1f02b6c5-7842-4ee6-8a0b-9a24183a95ca}",
        "{f678fcde-eb44-4b6e-9b75-cc4a661f5263}",
        "{bbd20037-bc0e-42f1-913f-e2936bb0ea0c}",
        "{934d4698-6a59-48f8-9f29-9fb30670320e}",
        "{64bc32b5-4eec-4de7-972d-bd8bd0324537}",
        "{4df0c730-df9d-4ae3-9153-aa6b82e9795a}",
        "{3c708557-c99d-4fa3-9231-56518418b4e4}",
        "{1f3427c8-5c10-4210-aa03-2ee45287d668}",
        "{9cfc2df3-6ba3-46ef-a836-e519e81f0ec4}",
        "{aa80e801-2021-11d2-93e0-0060b067b86e}",
        "{f676c15d-596a-4ce2-8234-33996f445db1}",
        "{4657278b-411b-11d2-839a-00c04fd918d0}",
        "{49f371e1-8c5c-4d9c-9a3b-54a6827f513c}",
        "{46a6eeff-908e-4dc6-92a6-64be9177b41c}",
        "{ed6ae9cf-ad35-46b7-ac30-3f8b9eb5349f}",
        "{000214e6-0000-0000-c000-000000000046}",
        "{50ef4544-ac9f-4a8e-b21b-8a26180db13f}",
        "{edb5f444-cb8d-445a-a523-ec5ab6ea33c7}",
        "{807c1e6c-1d00-453f-b920-b61bb7cdd997}",
        "{db6efb73-5153-43b7-8078-c6ffc4c0238c}",
        "{1685d4ab-a51b-4af1-a4e5-cee87002431d}",
        "{2faba4c7-4da9-4013-9697-20cc3fd40f85}"
    ],
    "file_read": [
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
        "\\\\?\\PIPE\\samr",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk",
        "C:\\Users\\Public\\Desktop\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk",
        "C:\\Users\\Public\\Pictures\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk",
        "C:\\Users\\cuck\\Desktop\\desktop.ini",
        "C:\\Users\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "C:\\Windows\\SysWOW64\\ieframe.dll",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Firefox.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk",
        "C:\\Users\\cuck\\Pictures\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
        "C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
        "C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "C:\\Users\\Public\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
        "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
        "C:\\Program Files (x86)\\desktop.ini",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk",
        "C:\\Users\\Public\\Documents\\desktop.ini"
    ],
    "regkey_read": [
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp3\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aiff\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.jpeg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.lnk\\BrowseInPlace",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCacheSMP",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\NoFileFolderJunction",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4a\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Genafpevcgvba Fbsgjner.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AccListViewV6",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{NN198O3P-PQ8P-7QR1-98Q1-O460S637193O}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-19\\ProfileImagePath",
        "HKEY_CURRENT_USER\\xvidfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\DisableProcessIsolation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\LocalizedString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
        "HKEY_CURRENT_USER\\.pdf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyMusic_ShouldShow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{6P8R83OO-12R1-934R-R703-RR23S8S87742}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\Content Type",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\StartMenuFavorites",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\FavoritesRemovedChanges",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zngu Vachg Cnary.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeDelay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\PerUserItem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyDocs_ShouldShow",
        "HKEY_CURRENT_USER\\Paint.Picture\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\wdpfile\\shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CacheRepair",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\jpegfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.htm\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.TrggvatFgnegrq",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wav\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.TTS\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Auto Update\\UAS\\UpdateCount",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\qsethv.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.FileName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
        "HKEY_CURRENT_USER\\.ape\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuMyMusic",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\UseInProcHandlerCache",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice\\Progid",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_TopMatch",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU Size",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Pnyphyngbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
        "HKEY_CURRENT_USER\\nrwfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\IsShortcut",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf CbjreFuryy Zbqhyrf.yax",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\DeviceCenter.dll,-1000",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-20\\ProfileImagePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\CallForAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Category",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Perngr Erpbirel Qvfp.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\DefaultIcon\\OpenIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F2-21D7-11D4-BDAF-00C04F60B9F0}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Fvqrone.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\giffile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CacheLimit",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qsethv.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\tgafile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\InProcServer32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FbhaqErpbeqre.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{04731B67-D933-450a-90E6-4ACD2E9408FE}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{89D83576-6BD1-4c86-9454-BEB04E94C819}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\zvc.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\shell\\open\\command\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogMask",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bqopnq32.rkr",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\displayswitch.exe,-320",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemNameDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\R7PS176R110P211O",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemPathDisplayNarrow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\PerUserItem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.tar\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldVersionHigh",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jbeqcnq.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vob\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Zrqvn Pragre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Security",
        "HKEY_CURRENT_USER\\.rcd\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wmv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\docfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyMusic",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{645FF040-5081-101B-9F08-00AA002F954E}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\erpqvfp.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\HomeGroup\\UIStatusCache\\UIStatus",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\DocObject",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\CLASS\\{4D36E96C-E325-11CE-BFC1-08002BE10318}\\UpperFilters",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\giffile\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\wpfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Rirag Ivrjre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\GnoGvc.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\InProcServer32\\LoadWithoutCOM",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetPlaces",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\QueryForOverlay",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\mstsc.exe,-4000",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\System.HideOnDesktop",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CacheOptions",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\UseInProcHandlerCache",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.M2TS\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetPlaces_ShouldShow",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\WindowsAnytimeUpgradeUI.exe,-1",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.png\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyDocs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Ivqrb Pncgher Fbsgjner.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Ivqrb Svyr Pbairegre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}\\InProcServer32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\explorer.exe,-7021",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowControlPanel_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Npprffvovyvgl\\Fcrrpu Erpbtavgvba.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\InProcServer32\\LoadWithoutCOM",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{daf95313-e44d-46af-be1b-cbacea2c3065}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.3gp\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Clguba (pbzznaq yvar).yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Nhqvb Rqvgvat Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowVideos",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cresbeznapr Zbavgbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSMMyDocs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsFORDISPLAY",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bfx.rkr",
        "HKEY_CURRENT_USER\\7zfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
        "HKEY_CURRENT_USER\\cr2file\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\Attributes",
        "HKEY_CURRENT_USER\\.mpc\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\FuncrPbyyrpgbe.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyComputer",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aifc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyComputer",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qvfcynlfjvgpu.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{F3F5824C-AD58-4728-AF59-A1EBE3392799}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.TTS\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\Upgrade",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P804OON7-SN5S-POS7-8O55-2096R5S972PO}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy (k86).yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SnippingTool.exe,-15051",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.Kind",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowDownloads",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Signature",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\NoOplock",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\kcfepuij.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Pbzznaq Cebzcg.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonPictures",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemFolderNameDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\aneengbe.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Zbqhyr Qbpf.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
        "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowPrinters",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\MapNetDriveVerbs",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemPathDisplayNarrow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\.spx\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplayNarrow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Ivqrb Rqvgvat Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\shellex\\IconHandler\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_CURRENT_USER\\erffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ForceRunOnStartMenu",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CachePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\.jp2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\\nchsetup.exe",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRun_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.SFGAOFlags",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyPics",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_INTERNET_SHELL_FOLDERS\\*",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\RestrictedAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHomegroup",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.HideOnDesktop",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResourceType",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\HomeGroup\\UIStatusCache\\OnlyMember",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecordedTV",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyComputer_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.CDA\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\Public",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
        "HKEY_CURRENT_USER\\divxfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\.mpeg2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
        "HKEY_CURRENT_USER\\srwfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\DefaultIcon\\OpenIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Startup",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_NotifyNewApps",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\freivprf.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aif\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\VQYR (Clguba THV).yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HideInWebView",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_SortByName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Zrzbel Qvntabfgvpf Gbby.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Vasbezngvba.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.tgz\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{7OO28ORO-Q4NN-033N-Q47P-30007S98P1PO}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetworkConnections",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfpbasvt.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf QIQ Znxre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeDelay",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowPrinters_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider\\Microsoft Strong Cryptographic Provider\\Image Path",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete\\Client\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HasNavigationEnum",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HideFolderVerbs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\MaxRpcSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_PowerButtonAction",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\rhqprqvg.rkr",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Erzbgr Qrfxgbc Pbaarpgvba.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{daf95313-e44d-46af-be1b-cbacea2c3065}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\UseDropHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CachePrefix",
        "HKEY_CURRENT_USER\\neffile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zntavsl.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfNalgvzrHctenqrHV.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Rkcerff Ohea PQ, QIQ be Oyh-Enl.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\System.HideOnDesktop",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\QIQ Znxre\\QIQZnxre.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CacheLimit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.iso\\(Default)",
        "HKEY_CURRENT_USER\\odtfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_NotifyNewApps",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\BrowseInPlace",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesChanges",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\System.DateModified",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{53123611-QN37-S8QN-SNP9-03R76QO9Q64Q}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\(Default)",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LanmanServer\\DefaultSecurity\\SrvsvcDefaultShareInfo",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplayNarrow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetConn_ShouldShow",
        "HKEY_CURRENT_USER\\.wv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\PerceivedType",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\DefaultIcon\\OpenIcon",
        "HKEY_CURRENT_USER\\Paint.Picture\\DocObject",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
        "HKEY_CURRENT_USER\\.crw\\(Default)",
        "HKEY_CURRENT_USER\\.dct\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
        "HKEY_CURRENT_USER\\vobfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\rw2file\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.srf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\unregmp2.exe,-4",
        "HKEY_CURRENT_USER\\.nrw\\(Default)",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{2427PQ55-7R36-2QS4-5570-077N30544ON0}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\System.HideOnDesktop",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowUser",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnCynlre32",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CachePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetHood",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Rkcybere.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CacheRepair",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\shellex\\LibraryDescriptionHandler\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\Jvaqbjf Wbheany.yax",
        "HKEY_CURRENT_USER\\pngfile\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{04731B67-D933-450A-90E6-4ACD2E9408FE}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\QueryForInfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F3F5824C-AD58-4728-AF59-A1EBE3392799}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.cab\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{94R7SNQ0-ROP6-50Q3-SR2R-83849404R34O}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParsingName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\efgehv.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rtf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{S6Q2N6N5-8NPO-9Q22-1R2O-O2P42251S9NO}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeOut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsUniversalDelegate",
        "HKEY_CURRENT_USER\\crwfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuMyGames",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.library-ms\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\System.HideOnDesktop",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{Q4N262QQ-PR44-Q105-S36O-9Q77N8PO65N4}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\Content Type",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplay",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AutoCascade",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\tarfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\jpegfile\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\rtffile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.png\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.TS\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Zrqvn Cynlre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\SessionStartTimeDefaultDeltaSecs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{1F3427C8-5C10-4210-AA03-2EE45287D668} {000214E6-0000-0000-C000-000000000046} 0xFFFF",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_CURRENT_USER\\pngfile\\BrowseInPlace",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.tiff\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Sharing\\UsersShareName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{e345f35f-9397-435c-8f95-4e922c26259e}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\IsShortcut",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zboflap.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\UseDropHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Clguba27\\clguba.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Punenpgre Znc.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.lnk\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.cda\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Startup",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CacheLimit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
        "HKEY_CURRENT_USER\\.flac\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpeg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.bmp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.shn\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{7SR8Q22N-SO1Q-N8OR-01R3-6P8693961R6R}",
        "HKEY_CURRENT_USER\\mpeg2file\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\DefaultIcon\\OpenIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\UseOutOfProcHandlerCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Zhygvgenpx Erpbeqvat Fbsgjner.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.gz\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.dss\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3G2\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider\\Microsoft Strong Cryptographic Provider\\Type",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HideInWebView",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\PerUserItem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere (64-ovg).yax",
        "HKEY_CURRENT_USER\\.html\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowControlPanel",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRun",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1F3427C8-5C10-4210-AA03-2EE45287D668}\\InProcServer32\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fgvpxl Abgrf.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCacheTBP",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ape\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
        "HKEY_CURRENT_USER\\xvidfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ArgCebw.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.library-ms\\PerceivedType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\UninstallString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Abgrcnq.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\DisableProcessIsolation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ErzbgrQrfxgbc",
        "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\ShellFolder",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\ZvkCnq Zhygvgenpx Erpbeqvat Fbsgjner.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fbhaq Erpbeqre.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowUser_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\QueryForInfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WMV\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\DontLoadAuthUIInExplorer",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
        "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
        "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PromotedIconCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E345F35F-9397-435C-8F95-4E922C26259E}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wdp\\(Default)",
        "HKEY_CURRENT_USER\\.act\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\NoOplock",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.lnk\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Favccvat Gbby.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rcd\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Windows.IsoFile\\shell\\(Default)",
        "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\cbfgzvt.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetPlaces",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cevag Znantrzrag.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\System32\\ie4uinit.exe,-734",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Zntavsl.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf Wbheany\\Wbheany.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\CacheLimit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.png\\Content Type",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
        "HKEY_CURRENT_USER\\sr2file\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CABFolder\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
        "HKEY_CURRENT_USER\\.oga\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CacheOptions",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CacheRepair",
        "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.MOD\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfvasb32.rkr",
        "HKEY_CURRENT_USER\\bz2file\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ZqFpurq.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CacheRepair",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\CLSID\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoUserFolderInStartMenu",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\OobeFldr.dll,-33056",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
        "HKEY_CURRENT_USER\\arwfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Program Files\\Windows Sidebar\\sidebar.exe,-1005",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\NoStartPage",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Fgernzvat Nhqvb Erpbeqre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{645FF040-5081-101B-9F08-00AA002F954E}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
        "HKEY_CURRENT_USER\\gzfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{645FF040-5081-101B-9F08-00AA002F954E}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
        "HKEY_CURRENT_USER\\srwfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OO044OSQ-25O7-2SNN-22N8-6371N93R0456}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-1012",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{9343812E-1C37-4A49-A12E-4B2D810D956B}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\IsShortcut",
        "HKEY_CURRENT_USER\\raffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowVideos",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\ShellEx\\{000214F9-0000-0000-C000-000000000046}\\(Default)",
        "HKEY_CURRENT_USER\\wpdfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\RelativePath",
        "HKEY_CURRENT_USER\\.caf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.mkv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OOBEInProgress",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Windows.IsoFile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\shellex\\IconHandler\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\LocalizedString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_INTERNET_SHELL_FOLDERS\\nchsetup.exe",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\CallForAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
        "HKEY_CURRENT_USER\\CABFolder\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\XpsRchVw.exe,-102",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HasNavigationEnum",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pbzrkc.zfp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRecentDocsMenu",
        "HKEY_CURRENT_USER\\mrwfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rec\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
        "HKEY_CURRENT_USER\\giffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\StartMenuFavorites",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HideFolderVerbs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CABFolder\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.library-ms\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Erzbgr Nffvfgnapr.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\BrowseInPlace",
        "HKEY_CURRENT_USER\\jpegfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Nhqvb Svyr Pbairegre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSMHelp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsFORPARSING",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
        "HKEY_CURRENT_USER\\srffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeOut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\open\\command\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Hfref\\phpx\\NccQngn\\Ybpny\\Grzc\\a1f\\apufrghc.rkr",
        "HKEY_CURRENT_USER\\crwfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider Types\\Type 001\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
        "HKEY_CURRENT_USER\\NCH.MixPad.gsm\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\.ogg\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
        "HKEY_CURRENT_USER\\.dng\\(Default)",
        "HKEY_CURRENT_USER\\.mpdp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\shell\\open\\NeverDefault",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesChanges",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
        "HKEY_CURRENT_USER\\pngfile\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mov\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FavccvatGbby.rkr",
        "HKEY_CURRENT_USER\\tar.gzfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoFavoritesMenu",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HideOnDesktopPerUser",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 13",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\ArgjbexCebwrpgvba.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecordedTV",
        "HKEY_CURRENT_USER\\.dss\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesRemovedChanges",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartMenu_Balloon_Time",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1F3427C8-5C10-4210-AA03-2EE45287D668}\\InProcServer32\\LoadWithoutCOM",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
        "HKEY_CURRENT_USER\\.cr2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoChangeStartMenu",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{15067OP1-P5N8-425R-37P6-SN0O891674S9}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\UseDefaultTile",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecentDocs_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Search\\Preferences\\WriteLog",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{89D83576-6BD1-4c86-9454-BEB04E94C819}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsAliasedNotifications",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldDllVersionHigh",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.IsPinnedToNameSpaceTree",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfcnvag.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\System.FileAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CachePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\RestrictedAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Zrqvn Cynlre.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Nalgvzr Hctenqr.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere.yax",
        "HKEY_CURRENT_USER\\mrwfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Nhqvb Svyr Pbairegre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SNTSearch.dll,-505",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{84BA9C75-6C22-4590-9BDC-5584EADE039E}\\ProxyStubClsid32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CacheRepair",
        "HKEY_CURRENT_USER\\docxfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\vFPFV Vavgvngbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\CLSID\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mid\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecentDocs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{98D99750-0B8A-4C59-9151-589053683D73}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Erfbhepr Zbavgbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\SVar",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowUser",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Vagrearg Rkcybere.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowSetProgramAccessAndDefaults_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CacheOptions",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CacheOptions",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TIFImage.Document\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonMusic",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\UseOutOfProcHandlerCache",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHelp_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\NoOplock",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\GlobalAssocChangedCounter",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\divxfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeIn",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\UseOutOfProcHandlerCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.caf\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.library-ms\\Content Type",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\System.HideOnDesktop",
        "HKEY_CURRENT_USER\\mpeg2file\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\DocObject",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.64Ovg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\InProcServer32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\FXPresetsFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Programs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Sversbk.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
        "HKEY_CURRENT_USER\\.divx\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.FileName",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Vaibvpr Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
        "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HideFolderVerbs",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_EnableDragDrop",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\CacheLimit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogMaxFileSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3G2\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{0N1NQ1P3-Q571-1494-P0OP-O2SR80509993}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\MUI\\StringCacheSettings\\StringCacheGeneration",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JS.zfp",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\GnoGvc.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\System.HideOnDesktop",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\PerUserItem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\UseDropHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowControlPanel",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
        "HKEY_CURRENT_USER\\pngfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\InProcServer32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\UseExecutableForTaskbarGroupIcon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JSF.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.act\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
        "HKEY_CURRENT_USER\\.xvid\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesRemovedChanges",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.AAC\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
        "HKEY_CURRENT_USER\\exrfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Frphevgl Pbasvthengvba Znantrzrag.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.docx\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CachePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\CLSID\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\NCH.MixPad.shn\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Paint.Picture\\BrowseInPlace",
        "HKEY_CURRENT_USER\\Paint.Picture\\AlwaysShowExt",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre Ercbegf.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Flfgrz Pbasvthengvba.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Programs",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{59D6F31B-FA6B-4FBA-8AF3-197FF140C714}\\ProxyStubClsid32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\DefaultIcon\\OpenIcon",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
        "HKEY_CURRENT_USER\\.srw\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowPrinters",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowSetProgramAccessAndDefaults",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.NamespaceCLSID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.gif\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.IconPath",
        "HKEY_CURRENT_USER\\cr2file\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\rtffile\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsFORPARSING",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NOQ94SO-R7Q6-84N6-N997-P918RQQR0NR5}",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
        "HKEY_CURRENT_USER\\dvfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\.rec\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{618736E0-3C3D-11CF-810C-00AA00389B71}\\ProxyStubClsid32\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyGames",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\pngfile\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\QueryForInfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_PowerButtonAction",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
        "HKEY_CURRENT_USER\\.ogv\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Aneengbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.Kind",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\wdpfile\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}",
        "HKEY_CURRENT_USER\\Paint.Picture\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf AG\\Npprffbevrf\\jbeqcnq.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\QueryForOverlay",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSMMyPictures",
        "HKEY_CURRENT_USER\\.dv\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{871C5380-42A0-1069-A2EA-08002B30309D}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CacheOptions",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfen.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\TclTk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\DefaultIcon\\OpenIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pyrnazte.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{e345f35f-9397-435c-8f95-4e922c26259e}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\odtfile\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecentDocs",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\PerUserItem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\AlwaysShowExt",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Ba-Fperra Xrlobneq.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-18\\ProfileImagePath",
        "HKEY_CURRENT_USER\\.gsm\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jrypbzr Pragre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\docxfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.avi\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\.ds2\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHomegroup",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Security_HKLM_only",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_SearchFiles",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{16709PSR-1Q53-82PQ-32N5-3ORN44577N7O}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.lnk\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\vfpfvpcy.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\UseInProcHandlerCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\dvfile\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\CachePrefix",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TIFImage.Document\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\zvtjvm.rkr",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHelp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\DefaultIcon\\OpenIcon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0xFFFF",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\ComputerName\\ActiveComputerName\\ComputerName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
        "HKEY_CURRENT_USER\\nrwfile\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@\"%windir%\\System32\\ie4uinit.exe\",-732",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{O229QR1P-N467-ON30-0O40-4OQN36QR0NQ5}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\InProcServer32\\ThreadingModel",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\CacheLimit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\QueryForOverlay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.Qrsnhyg",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\FuncrPbyyrpgbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\LocalizedString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp4\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\IsHostApp",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf Sverjnyy jvgu Nqinaprq Frphevgl.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.bmp\\Content Type",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SyncMode5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.amr\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\BrowseInPlace",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\NeverShowExt",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\FXSRESM.dll,-114",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\BrowseInPlace",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\CurrentVersion",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{14074E0B-7216-4862-96E6-53CADA442A56} {000214FA-0000-0000-C000-000000000046} 0xFFFF",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Nhqvb Rqvgvat Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Zhygvgenpx Erpbeqvat Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\wpsfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\PerUserItem",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AdminToolsRoot",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsParseDisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\PinToNameSpaceTree",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4v\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.bmp\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{PPR15160-R9R0-8NPN-3ON3-587QPQ389RO3}",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\AlwaysShowExt",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowVideos_ShouldShow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Snk naq Fpna.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemFolderNameDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\NoOplock",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowDownloads",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowSetProgramAccessAndDefaults",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flap Pragre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
        "HKEY_CURRENT_USER\\dngfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P1P6S8NP-40N3-0S5P-146S-65N9QP70OOO4}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\P:\\Hfref\\Choyvp\\Qrfxgbc\\APU Fhvgr.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\freivprf.zfp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\GlobalAssocChangedCounter",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Qvfx Pyrnahc.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.FgvpxlAbgrf",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Jvaqbjf Rkcybere.yax",
        "HKEY_CURRENT_USER\\.vox\\(Default)",
        "HKEY_CURRENT_USER\\pgffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{98D99750-0B8A-4c59-9151-589053683D73}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CacheLimit",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OQ3S924R-55SO-N1ON-9QR6-O50S9S2460NP}",
        "HKEY_CURRENT_USER\\jp2file\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\neffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldDllVersionLow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\AlwaysShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\IsShortcut",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pnyp.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR (k86).yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemNameDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\CallForAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemPathDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{208D2C60-3AEA-1069-A2D7-08002B30309D}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dss\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\DefaultFeature",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Flfgrz Gbbyf\\Cevingr Punenpgre Rqvgbe.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MIDI\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AdminToolsRoot_ShouldShow",
        "HKEY_CURRENT_USER\\rarfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecordedTV_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HideInWebView",
        "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\(Default)",
        "HKEY_CURRENT_USER\\.voc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\UseInProcHandlerCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.jpg\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\NoStaticDefaultVerb",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.odt\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\DefaultFeature",
        "HKEY_CURRENT_USER\\.shn\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\IsShortcut",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\KCF Ivrjre.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dct\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClearRecentDocsOnExit",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\KindMap\\.bmp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowDownloads_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\UseOutOfProcHandlerCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\System.HideOnDesktop",
        "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_SortByName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{35786D3C-B075-49b9-88DD-029876E11C01}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{27P77Q2R-7216-P38P-487P-9OR63P7NS32P}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyPics",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\InProcServer32\\InprocServer32",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\EnableShareDenyNone",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
        "HKEY_CURRENT_USER\\.webm\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\\*",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\DisableProcessIsolation",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\jp2file\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
        "HKEY_CURRENT_USER\\TIFImage.Document\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\LocalizedString",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Qngn Fbheprf (BQOP).yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{89D83576-6BD1-4C86-9454-BEB04E94C819}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\.mrw\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\NoOplock",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyMusic",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Sversbk.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzcbarag Freivprf.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRun",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldVersionLow",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlot",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows Search\\SystemIndexNormalization",
        "HKEY_CURRENT_USER\\rtffile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Gnfx Fpurqhyre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.voc\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{9343812e-1c37-4a49-a12e-4b2d810d956b}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.spx\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\Content Type",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pzq.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\P:\\Hfref\\Choyvp\\Qrfxgbc\\ZvkCnq Zhygvgenpx Erpbeqvat Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonVideo",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Cnvag.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\CLSID\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetConn",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M2TS\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\\SortOrderIndex",
        "HKEY_CURRENT_USER\\pngfile\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\https\\ShellFolder",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{9343812e-1c37-4a49-a12e-4b2d810d956b}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\SuppressionPolicy",
        "HKEY_CURRENT_USER\\.vob\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.3g2\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\\APU Fbsgjner\\ZvkCnq\\zvkcnq.rkr",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Erfgber.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M2TS\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuMorePrograms",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.IsPinnedToNameSpaceTree",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
        "HKEY_CURRENT_USER\\vobfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.asf\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetConn",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\puneznc.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{2N3SOQ22-PN4P-1656-08N9-84S586O334RN}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyPics_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\UseInProcHandlerCache",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CacheLimit",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHelp",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\abgrcnq.rkr",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartMenu_Balloon_Time",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AutoCascade",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
        "HKEY_CURRENT_USER\\.amr\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallDateFirst",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
        "HKEY_CURRENT_USER\\dngfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
        "HKEY_CURRENT_USER\\.nef\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}\\InProcServer32\\LoadWithoutCOM",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.SFGAOFlags",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\ShellEx\\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\(Default)",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHomegroup_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.IconPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NN47365-O2O3-1961-69RO-S866R376O12S}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnPragre",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Gnfx Fpurqhyre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\DocObject",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4b\\(Default)",
        "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstalledByAdmin",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyDocs",
        "HKEY_CURRENT_USER\\NCH.MixPad.ape\\Shell\\(Default)",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InitFolderHandler",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpc\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\cevagznantrzrag.zfp",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_TopMatch",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsFORPARSING",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\docxfile\\shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\DisableProcessIsolation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CachePath",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{QNN168QR-4306-P8OP-8P11-O596240OQQRQ}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\PQ Evccre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AdminToolsRoot",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PublishExpandedPath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\odtfile\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\DefaultIcon\\(Default)",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\StartMenuFavorites_ShouldShow",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemPathDisplay",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Icon",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogLevel",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wma\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\System.DateModified",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\RestrictedAttributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
        "HKEY_CURRENT_USER\\tgzfile\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\TclTk",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\LocalizedString",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zbovyvgl Pragre.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\DisableProcessIsolation",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\\SortOrderIndex",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HasNavigationEnum",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InfoTip",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzchgre Znantrzrag.yax",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\qvfcynlfjvgpu.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{04731B67-D933-450a-90E6-4ACD2E9408FE}\\SuppressionPolicy",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuNetworkPlaces",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Documents",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
        "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\sud.dll,-1",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Nppbhagvat Fbsgjner.yax",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeIn",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\UseOutOfProcHandlerCache",
        "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\DefaultIcon\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.au\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNTSecurity",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{S039R83P-O81R-O6QR-S04P-7S67S6Q0N140}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A\\586A8930D8DF3B6489614C37910BFCF5",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath",
        "HKEY_CURRENT_USER\\webpfile\\Shell\\(Default)"
    ],
    "directory_enumerated": [
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\*.*",
        "C:\\Windows\\SysWOW64",
        "C:\\Windows\\SysWOW64\\ieframe.dll",
        "C:\\Windows\\SysWOW64\\*.*",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\*.*",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\*.*",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\*.*",
        "C:\\Windows",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\*.*",
        "C:\\ProgramData\\NCH Software\\MixPad\\*.*",
        "C:\\Program Files (x86)\\NCH Software\\MixPad\\*.*",
        "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\*.*"
    ],
    "directory_created": [
        "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker",
        "C:\\Users\\cuck\\Documents\\Mixpad Projects",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
        "C:\\Program Files (x86)\\NCH Software\\MixPad\\testfolder",
        "C:\\Program Files (x86)\\NCH Software\\MixPad",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
        "C:\\Program Files (x86)\\NCH Software",
        "C:\\Users\\cuck\\Documents\\Mixpad Projects\\VST",
        "C:\\ProgramData\\NCH Software\\MixPad\\sounds",
        "C:\\ProgramData\\NCH Software\\MixPad",
        "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
        "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer",
        "C:\\ProgramData\\NCH Software"
    ]
}

Dropped

[
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "6656ad0bbf32a2fa6ff490ad732ec9e10c4a1a9a",
        "name": "c26cd64d388846be_video editing software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "c26cd64d388846be202af309d09d060fe01846ecc5cfb74749f29706cc236017",
        "urls": [],
        "crc32": "FDCDADF8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/c26cd64d388846be_video editing software.lnk",
        "ssdeep": null,
        "size": 1224,
        "sha512": "0962c790a6dd5a0b8f4c8651283988a52520fe62922b08a9bb48712c0dc24b417e3bd8bfd599bff039c22ef2d97269b503974ae57cada03dd4221e77ab90913d",
        "pids": [
            964
        ],
        "md5": "731397cd72bf90caf5b78d4fb3d84ff3"
    },
    {
        "yara": [],
        "sha1": "d24a2e025be9ec2b9e669e9b3ee746edfa941b7a",
        "name": "d8a421f066b26a10_nchsetup.exe",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
        "type": "PE32 executable (GUI) Intel 80386, for MS Windows",
        "sha256": "d8a421f066b26a1063500383fa760cca2688a4c066d8656f3676274c25d7ad33",
        "urls": [
            "http:\/\/www.entrust.net\/rpa03",
            "http:\/\/crl3.digicert.com\/DigiCertHighAssuranceEVRootCA.crl0",
            "http:\/\/ts-aia.ws.symantec.com\/tss-ca-g2.cer0",
            "http:\/\/ocsp.digicert.com0H",
            "http:\/\/cacerts.digicert.com\/DigiCertHighAssuranceEVRootCA.crt0",
            "https:\/\/content.dropboxapi.com\/2\/files\/upload",
            "https:\/\/api.dropboxapi.com\/2\/files\/list_folder\/continue",
            "https:\/\/content.dropboxapi.com\/2\/files\/upload_session\/start",
            "https:\/\/api.soundcloud.com\/tracks.json",
            "http:\/\/www.audiochannel.net\/versions\/mixpad.txt",
            "http:\/\/crl3.digicert.com\/EVCodeSigningSHA2-g1.crl07",
            "http:\/\/cgi.nch.com.au\/cgi-bin\/regcheck.exe?cmd=v",
            "http:\/\/crl4.digicert.com\/EVCodeSigningSHA2-g1.crl0K",
            "https:\/\/www.googleapis.com:443\/drive\/v2\/files\/%s",
            "http:\/\/crl4.digicert.com\/DigiCertHighAssuranceEVRootCA.crl0",
            "https:\/\/content.dropboxapi.com\/2\/files\/upload_session\/append_v2",
            "https:\/\/www.googleapis.com:443\/drive\/v2\/files",
            "http:\/\/crl3.digicert.com\/EVCodeSigning-g1.crl03",
            "http:\/\/cacerts.digicert.com\/DigiCertEVCodeSigningCA.crt0",
            "https:\/\/api.dropboxapi.com\/2\/files\/get_metadata",
            "https:\/\/api.dropboxapi.com\/2\/files\/delete",
            "http:\/\/ns.adobe.com\/xap\/1.0\/mm\/",
            "http:\/\/ns.adobe.com\/xap\/1.0\/",
            "http:\/\/www.audiochannel.net\/versions\/components\/%s.txt",
            "https:\/\/www.googleapis.com:443\/drive\/v2\/files\/%s\/trash",
            "http:\/\/www.entrust.net\/rpa0",
            "https:\/\/api.dropboxapi.com\/2\/files\/list_folder",
            "http:\/\/crl4.digicert.com\/EVCodeSigning-g1.crl0K",
            "http:\/\/ocsp.digicert.com0C",
            "http:\/\/crl.thawte.com\/ThawteTimestampingCA.crl0",
            "https:\/\/accounts.google.com\/o\/oauth2\/token",
            "https:\/\/www.nch.com.au\/mixpad\/%s",
            "http:\/\/ocsp.digicert.com0I",
            "https:\/\/api.soundcloud.com\/me.json?oauth_token=",
            "http:\/\/ocsp.entrust.net02",
            "http:\/\/crl.entrust.net\/2048ca.crl0",
            "https:\/\/content.dropboxapi.com\/2\/files\/download",
            "http:\/\/ocsp.entrust.net01",
            "http:\/\/ns.adobe.com\/xap\/1.0\/sType\/ResourceRef",
            "http:\/\/crl.entrust.net\/ts1ca.crl0",
            "https:\/\/api.soundcloud.com\/me\/tracks.json?oauth_token=%s",
            "https:\/\/www.nch.com.au\/general\/eulaconfirm.html?software=MixPad",
            "https:\/\/secure.nch.com.au\/cgi-bin\/register.exe?action=q",
            "http:\/\/ts-crl.ws.symantec.com\/tss-ca-g2.crl0(",
            "https:\/\/content.dropboxapi.com\/2\/files\/upload_session\/finish",
            "http:\/\/ocsp.thawte.com0",
            "http:\/\/cacerts.digicert.com\/DigiCertEVCodeSigningCA-SHA2.crt0",
            "https:\/\/api.soundcloud.com\/tracks\/%u.json?oauth_token=%s",
            "http:\/\/ts-ocsp.ws.symantec.com07",
            "https:\/\/www.digicert.com\/CPS0",
            "http:\/\/canberra.nchsoftware.com:120\/minidumpupload",
            "http:\/\/www.digicert.com\/ssl-cps-repository.htm0",
            "https:\/\/api.dropboxapi.com\/2\/users\/get_current_account"
        ],
        "crc32": "81B6257D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/d8a421f066b26a10_nchsetup.exe",
        "ssdeep": null,
        "size": 4693072,
        "sha512": "58091a31c6318b65a7d4f104bc87900dece3a4a25acf6af97c57937b2efdc52ffc2a72ff4b5d9f65de4810be6b107913aec354f1efb38d2546cb12ccb2e3fc11",
        "pids": [
            2740,
            1788
        ],
        "md5": "158f7dbc27a1018d037d064aece326ac"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "a9f795a87b0a21ddc37bce552b387aa871a93b87",
        "name": "5304a256c3a1d6e4_cd ripper.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "5304a256c3a1d6e40c78528fa4b89d73c31180c741ddb4872affa551c50f92d6",
        "urls": [],
        "crc32": "E822FDFF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/5304a256c3a1d6e4_cd ripper.lnk",
        "ssdeep": null,
        "size": 1188,
        "sha512": "5a148eb0169c78ec44e7498a52a1b0c95846a6040ece8dd3ec30524329142f25df6b508c2705d0cb5cd3698626e4e853bda13a1fbcdab6591c6ad319b72c5053",
        "pids": [
            964
        ],
        "md5": "3d19bf556439cd8304c3b194ca8455d1"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "86192626fa48f1e6e67d00c5ed554a3f138a1c01",
        "name": "3447879545eb613e_video capture software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "3447879545eb613ebe63879a4e9b097fe55eee4780aa8e046930334c05190747",
        "urls": [],
        "crc32": "3FD90AFF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/3447879545eb613e_video capture software.lnk",
        "ssdeep": null,
        "size": 1218,
        "sha512": "fd0a6ed88ea85631c2131f64d2ea23e86cdd611fa38ee56f4707d134fc91b4e0d841f1beebcc969e96b2f6d71e16ffea3d1ddc9783563c8afd700f4bd997aa67",
        "pids": [
            964
        ],
        "md5": "5b6b79b9930b22d9a6bd50346294ad4d"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "d55520850282b44725f9dd86c8d92cc818821a40",
        "name": "3cea5f4504095f80_video file converter.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "3cea5f4504095f8006a69905560a6039addfae7bd6b5be43967e46989759e898",
        "urls": [],
        "crc32": "168F02B8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/3cea5f4504095f80_video file converter.lnk",
        "ssdeep": null,
        "size": 1214,
        "sha512": "361dbcf7f20297f422e5d2719b4e918d6938a7c849f5340dd7e6ccb8db0852df454b82fcc89fce0808d0d34ba1f6ce7a094a1da51958eae8a836c325bf198a1a",
        "pids": [
            964
        ],
        "md5": "96d19049d175fb01976a43b254b6f3ab"
    },
    {
        "yara": [],
        "sha1": "6b7d375f4a439e4d7bcfb4fe52fa86fd74157cbe",
        "name": "f04bc04d733c6838_patterns.mpdlib",
        "filepath": "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\patterns.mpdlib",
        "type": "data",
        "sha256": "f04bc04d733c6838e4463dec257ae9e977a1dec01008fc94f03e64c1010c5ca9",
        "urls": [],
        "crc32": "EEAB50D9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/f04bc04d733c6838_patterns.mpdlib",
        "ssdeep": null,
        "size": 69525,
        "sha512": "b11267dcbbab322398127d83f300f95f9f731584b23db7c96dcf6bcd7cc0c9f6c73c7328d4ea77535ee1f2cea511d15b6a3ee551217dd5a99fb45fb2a41afce9",
        "pids": [
            964
        ],
        "md5": "2e07649da06bd248840211b5c5cd8a80"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "0cbdad3083760a99761e6c1bb1d5ce48015b0b67",
        "name": "6e5c8152876f9403_express burn cd, dvd or blu-ray.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "6e5c8152876f9403decf99547e1f1faf3c5f55155e518f13f4344033aa2c442b",
        "urls": [],
        "crc32": "AB4A505E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/6e5c8152876f9403_express burn cd, dvd or blu-ray.lnk",
        "ssdeep": null,
        "size": 1248,
        "sha512": "64d2c1884f4d5144d1fcbfba226283a0e6fe76ab806e7f31bd2e216d8f94b06623a9d322602d1fb092e68b41b1d0101387f1a9362db4a681b96ce548c3d1e627",
        "pids": [
            964
        ],
        "md5": "27fa97a3d65484d4510cda48a4d755fd"
    },
    {
        "yara": [],
        "sha1": "754ac5b983d96db378d0b0dfe2a9c4584c8107bd",
        "name": "703cb8c1f858f28a_nchsetup.cab",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
        "type": "Microsoft Cabinet archive data, 1542183 bytes, 1 file",
        "sha256": "703cb8c1f858f28a4e480666079393af728280cfb8cdb47b3f4c37041f4cd5e7",
        "urls": [],
        "crc32": "F496319D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/703cb8c1f858f28a_nchsetup.cab",
        "ssdeep": null,
        "size": 1542183,
        "sha512": "282ad1f8ca7632c40fa868c44c93fa3b4c57a1b1d47946b1d87cfb23d06c7d975260fe7668c1dd6fab17540b772a3f7edc0fa07a537e07bc59262009b2c9236b",
        "pids": [
            2740
        ],
        "md5": "9586e7e5842611003a3a0d96f6d806dc"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "dc80406589279a74eaf9b4980483451e4b383545",
        "name": "4a019a8c893de4c7_mixpad multitrack recording software.lnk",
        "filepath": "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "4a019a8c893de4c74effb56fc5ce19322898582205447e5a391fdddbb2a1b74b",
        "urls": [],
        "crc32": "D28DDA3F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/4a019a8c893de4c7_mixpad multitrack recording software.lnk",
        "ssdeep": null,
        "size": 1140,
        "sha512": "65321780b70aa8772b9c53bfee628aafe969e475ffa548fa5489286fa1ad6a395c3d7f4d7fe442d799acdf08239d468a9ea856dae5ae093af219f10be2312e2c",
        "pids": [
            964
        ],
        "md5": "401ca965557a4c780a4c9599b6654ccd"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "09236225ee8cc9e5a7cda3b57a28d99856c932f4",
        "name": "4fd2dd1396100fa8_accounting software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "4fd2dd1396100fa87cabb91619d80bbe9c0a6e2d24bfce241187def581590729",
        "urls": [],
        "crc32": "EC7DB93E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/4fd2dd1396100fa8_accounting software.lnk",
        "ssdeep": null,
        "size": 1232,
        "sha512": "c6169f1ef9b0ffd2b057288c085aa56d6c4958b71144dd2f07e1c439efc94cd314f96ba6d4d74de09708a75173ae41f2dc9a3fd0529a39b9dd062a13dc102c21",
        "pids": [
            964
        ],
        "md5": "fa28638b35945227a8d14363b207c302"
    },
    {
        "yara": [],
        "sha1": "a29be28de26fada900205281b9a1dd6d2d716d16",
        "name": "b28b94654e59fff7_nchdata.dat",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
        "type": "RIFF (little-endian) data, WAVE audio, Microsoft PCM, 8 bit, stereo 48000 Hz",
        "sha256": "b28b94654e59fff7fd0fc279a580d064ba843dde4e525a602cc4ffaba0acb264",
        "urls": [],
        "crc32": "0BACF38E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/b28b94654e59fff7_nchdata.dat",
        "ssdeep": null,
        "size": 79647,
        "sha512": "d8d10d73995abe98be661407bbf6984bf52d6cbab9ac5800cdea3935b0ec92eecfd1e43b2d73c68433e4887db42ebf9e7c96697823222fd56513c9d5fb05206b",
        "pids": [
            2740
        ],
        "md5": "500242fb59ac025ff2541b14d10fbc86"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "829013cd34d792362651927639ff535b665fc353",
        "name": "e2d9ce404f8bcb56_transcription software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "e2d9ce404f8bcb56b2540edcf24f5045decc36d1d16ffdb4499d40b67cfeacc2",
        "urls": [],
        "crc32": "7BDAF4D8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/e2d9ce404f8bcb56_transcription software.lnk",
        "ssdeep": null,
        "size": 1220,
        "sha512": "8f96ea7f19196c0a8ffed2247a5d92a3d8d04ca2ffd4eb8d63bde58907f34adce5e1862d902248bae3548d8bb0d707368d300b91b6c55ff52ffc800f63d1926e",
        "pids": [
            964
        ],
        "md5": "82a64acff7ed4e9c90537cb45d200de9"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "04e3d565b288b358c2d203973468a9df2e2357fd",
        "name": "f00fc8fed04004f8_nch suite.lnk",
        "filepath": "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=-910, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "f00fc8fed04004f8c3db48b0dfa00aade7ae24b292338616b8a6933faf44ab60",
        "urls": [],
        "crc32": "042269D3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/f00fc8fed04004f8_nch suite.lnk",
        "ssdeep": null,
        "size": 1254,
        "sha512": "65248c025fcb09cdb53ee824a2153488bf6988338ff9c1c5576c07391f0f3786ad3a84b588ab2a91868cdb801a1b1c03269786415f16977b6d3b66cd9e4c74f6",
        "pids": [
            964
        ],
        "md5": "a2bf53047acbc927b696973421a7016e"
    },
    {
        "yara": [],
        "sha1": "71359395938644a4bc301fa0646a5457d917e516",
        "name": "6e21159d50772889_accent.wav",
        "filepath": "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\accent.wav",
        "type": "RIFF (little-endian) data, WAVE audio, Microsoft PCM, 8 bit, mono 44100 Hz",
        "sha256": "6e21159d50772889a57a1c3931ec940d6d4f86b46dc20ffae09b85356e13866b",
        "urls": [],
        "crc32": "B81BE587",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/6e21159d50772889_accent.wav",
        "ssdeep": null,
        "size": 4647,
        "sha512": "2f68c29b122daeb5fa36b840340ad241265a8ff2936325028f686bd5a0abfe10bb792f53d6e37fba3ef4ee7802b8525c6a4a2763e0b1d54d5abfdf16a95db9ea",
        "pids": [
            964
        ],
        "md5": "93456a8cedccd8bc175dd1f807d7ef8c"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "78d2de64e005b9ff555ca2af94d8a67f00a4f580",
        "name": "a087f73e1abc167e_mixpad multitrack recording software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "a087f73e1abc167ee736dc88d0d71715d2d02415b8e2f50e2c46a7b778bec211",
        "urls": [],
        "crc32": "80964458",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/a087f73e1abc167e_mixpad multitrack recording software.lnk",
        "ssdeep": null,
        "size": 1152,
        "sha512": "c77fd35ec4fedd471e54b233c3dd2eeb4e6a6c41bcff6337da958b5e8429cbec908361841b56910dbe9cb7c74187dfe825babc14f50b4d4acc93a79381922542",
        "pids": [
            964
        ],
        "md5": "4e9710f4807cd72eed7572144c561a42"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "48ddb2c653f775d1ed9b3f8d0de215c9b5cbb096",
        "name": "270cda838a19f21a_invoice software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "270cda838a19f21a380451091a78461eb07d2264d648d58873c61d73d468f4e1",
        "urls": [],
        "crc32": "58F6BEE7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/270cda838a19f21a_invoice software.lnk",
        "ssdeep": null,
        "size": 1224,
        "sha512": "c3deafcb2736b18ece48d358af0248882f04bc8f7a49b74075e963527031129b2c7d35326940cc3c94b19df75d7f0df8478c51793caa2c2f27dd07d2a703ffff",
        "pids": [
            964
        ],
        "md5": "fb1154a5ddf00bd63ca98946f5d5a9ea"
    },
    {
        "yara": [],
        "sha1": "fb25e804b9f6ff0ec93fe37291ad7b20112b1cfc",
        "name": "8b726df35fa0fe15_beat.wav",
        "filepath": "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\beat.wav",
        "type": "RIFF (little-endian) data, WAVE audio, Microsoft PCM, 8 bit, stereo 48000 Hz",
        "sha256": "8b726df35fa0fe15f5623fe5c7f34038f69fd0fa1c7ccd79bc728e6788cc91e5",
        "urls": [],
        "crc32": "FB15A8BC",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/8b726df35fa0fe15_beat.wav",
        "ssdeep": null,
        "size": 5250,
        "sha512": "3a09089f3cfa3055352512eefe85b3db60082906a145530646c195ebcba16a694d405db957d2e5f64047b6c671a51cb292b0b96528595191e08566bbf4b1488a",
        "pids": [
            964
        ],
        "md5": "b4211ab2331c170f47764265ce162a96"
    },
    {
        "yara": [],
        "sha1": "a98806c961f0395aa550398312e634b0e6ecd18a",
        "name": "9d8c61eb9cf1e549_categories.mpdcat",
        "filepath": "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\categories.mpdcat",
        "type": "data",
        "sha256": "9d8c61eb9cf1e5495ec8934c34a190d7eae5258a9ba0432e8d904a5485636e4e",
        "urls": [],
        "crc32": "0CCD7FBE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/9d8c61eb9cf1e549_categories.mpdcat",
        "ssdeep": null,
        "size": 137,
        "sha512": "13c41d00ce34548b6b8f219c52c4b8e5ead942a7403abccd2acc3437e85268fba6ed65ef240597bee8d4043eb6318de54a5eb18e43cf7703a4dc7d378436825c",
        "pids": [
            964
        ],
        "md5": "41d5a6c9f5f96bab8fa1c449f4501d1f"
    },
    {
        "yara": [],
        "sha1": "004eef9c1eb1cfba2a0c2fb646d8f50eeedbadd5",
        "name": "c4cb52d138e93bf3_empty.mid",
        "filepath": "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\empty.MID",
        "type": "Standard MIDI data (format 0) using 1 track at 1\/120",
        "sha256": "c4cb52d138e93bf369c57206cd208d093aa98c2312c58b702dc18c102efbc024",
        "urls": [],
        "crc32": "186EE93C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/c4cb52d138e93bf3_empty.mid",
        "ssdeep": null,
        "size": 64,
        "sha512": "75524206f4c6cd6d0e22b201848ecddc585d24046fb14715ae0e783cbe00bac273af24dc0036f2a1f1c0084a96529240ad9475c018f586320977da5bb0d81942",
        "pids": [
            964
        ],
        "md5": "38993d0bc0a0104556e85888f525e4c4"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "970eda70d1d8fe070d9728c052d9ff9ae2d30883",
        "name": "84eb7575cbb65b40_audio file converter.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "84eb7575cbb65b408c0ecd9c1dfd655acca41c9a6bdbc80953e3ce7964c6cb91",
        "urls": [],
        "crc32": "C87A0C5E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/84eb7575cbb65b40_audio file converter.lnk",
        "ssdeep": null,
        "size": 1216,
        "sha512": "2580fc10df45a802ff896be778d1c65693a4e5ea0852937087729258cd2f06215502119955f67abaa0e487bcbc60a4c8f46ab5dc6fcedb06f6cd8cee40bf3d35",
        "pids": [
            964
        ],
        "md5": "be88cf8ced72575401b7cffdc7c019d4"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "f9515923496a957134c1751536c1a56e2eb2ee9f",
        "name": "00c87803bf403654_multitrack recording software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "00c87803bf403654e3d7cabf3c7eba90dc955644c9858a0e2baad482ce3388d9",
        "urls": [],
        "crc32": "2C99BC08",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/00c87803bf403654_multitrack recording software.lnk",
        "ssdeep": null,
        "size": 1178,
        "sha512": "6a4dd94f2b4332dd7ddec6f51f205ed38b88856385e9bb94a5868304e27e5fb8d257992f05ac4208a24d7b70092ab5c6ad81f97c6b6f23d918ed2ad016cb13e9",
        "pids": [
            964
        ],
        "md5": "b12b89367f1ad3813f83871e4e8122be"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "483c0fa42ddd7fad0f777adfd3a219f4055f59aa",
        "name": "8cce3893095972c7_audio editing software.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "8cce3893095972c7cde738dc3f14474c8bcf44dd73c702b38a0d42e1c1853d3c",
        "urls": [],
        "crc32": "0D500DE3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/8cce3893095972c7_audio editing software.lnk",
        "ssdeep": null,
        "size": 1222,
        "sha512": "62857869db14570ca6353cb238b730f2a1be6f3874bc4973097307e654bff15b1ec440c02b853e513f8fbbda63eee1c17df81e40e9b5c84e0fec5ee1777bebe2",
        "pids": [
            964
        ],
        "md5": "979e6ea6c3b5a93225421a4b882d3f86"
    },
    {
        "yara": [],
        "sha1": "06b042d6b1512e8d4967e90a6156af3263747a16",
        "name": "c5e4cb672710d420_nchdata.cab",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
        "type": "Microsoft Cabinet archive data, 6621 bytes, 1 file",
        "sha256": "c5e4cb672710d420f9009f79add3880243aba69666b8b888ef6ae30f7c8b3731",
        "urls": [],
        "crc32": "6F00D35C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/c5e4cb672710d420_nchdata.cab",
        "ssdeep": null,
        "size": 6621,
        "sha512": "37211a375cb45664d7ef11e0bd6f1a502de13ac8d27c8665e63032c1d6f8ae1124f6099892d1012f23b52a3cc60f124b1537e082fee789629084ac4fde161cbf",
        "pids": [
            2740
        ],
        "md5": "376c12ad7d8f28364b6d7750f60d2da2"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "1f7b4262991894083f5574d5abcf609e6ad1babb",
        "name": "089e7087155aa6be_streaming audio recorder.lnk",
        "filepath": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
        "type": "MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has command line arguments, Icon number=19, Archive, ctime=Fri May  8 15:53:09 2020, mtime=Fri May  8 15:53:09 2020, atime=Fri Feb 22 03:50:36 2019, length=4693072, window=hide",
        "sha256": "089e7087155aa6be68e68648f324772e2c2e906ccb4153a7f33a774dfcace7fc",
        "urls": [],
        "crc32": "54EB963D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/089e7087155aa6be_streaming audio recorder.lnk",
        "ssdeep": null,
        "size": 1228,
        "sha512": "07238036c0206411c851eea462cf111b9418f66936aa0343c5842782e1c85f030f486055a112184311a566e723cb570e8d06c44b97006485ecbadb24a803bba2",
        "pids": [
            964
        ],
        "md5": "141fbf8beff44858549904e33ac816ef"
    },
    {
        "yara": [
            {
                "meta": {
                    "description": "(no description)"
                },
                "name": "LnkHeader",
                "offsets": {
                    "guid": [
                        [
                            4,
                            0
                        ]
                    ],
                    "signature": [
                        [
                            0,
                            1
                        ]
                    ]
                },
                "strings": [
                    "ARQCAAAAAADAAAAAAAAARg==",
                    "TAAAAA=="
                ]
            }
        ],
        "sha1": "87350ae0ab85eb1ce260ce51b71f22f21d650d2e",
        "name": "8f70f7d09cd41705_nch software download site.lnk",
        "filepath": "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
        "type": "MS Windows shortcut, Item id list present, Has Description string, ctime=Sun Dec 31 22:47:48 1600, mtime=Sun Dec 31 22:47:48 1600, atime=Sun Dec 31 22:47:48 1600, length=0, window=hide",
        "sha256": "8f70f7d09cd417056caddeff50af3e3c34a4d4b77ad3c6dcefd3fe9f3906ac04",
        "urls": [],
        "crc32": "47B2CECB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/7409\/files\/8f70f7d09cd41705_nch software download site.lnk",
        "ssdeep": null,
        "size": 310,
        "sha512": "21593c73ddfd77117a284b924404833d3254b9690980a278f26bd843661a527036e90aca59c9ee8a09f4453ad2904ba38db8a04521df0a205b313529ae054d60",
        "pids": [
            964
        ],
        "md5": "b248af59a6d864af1840962353eb5edb"
    }
]

Generic

[
    {
        "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
        "process_name": "nchsetup.exe",
        "pid": 964,
        "summary": {
            "file_created": [
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\empty.MID",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\accent.wav",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\beat.wav",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\patterns.mpdlib",
                "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\categories.mpdcat"
            ],
            "regkey_written": [
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.gsm\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dct",
                "HKEY_CURRENT_USER\\.ddp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\sr2file\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aif",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\MixPadInstall",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.oga",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\neffile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dct\\OpenWithProgIds\\NCH.MixPad.dct",
                "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.flv",
                "HKEY_CURRENT_USER\\.dvf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aifc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aiff",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.gsm",
                "HKEY_CURRENT_USER\\spjfile\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rec",
                "HKEY_CURRENT_USER\\giffile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\deprojfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rmj",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\apjfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mid",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\tgafile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\xvidfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ra\\OpenWithProgIds\\NCH.MixPad.ra",
                "HKEY_CURRENT_USER\\.raf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.msv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpga",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\(Default)",
                "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.m4r\\(Default)",
                "HKEY_CURRENT_USER\\webpfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\arwfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.spx\\OpenWithProgIds\\NCH.MixPad.spx",
                "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\URLInfoAbout",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mid\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\tgafile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\(Default)",
                "HKEY_CURRENT_USER\\7zfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\wpsfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHeditsound\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\vpjfile\\(Default)",
                "HKEY_CURRENT_USER\\pgffile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpdp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\neffile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\(Default)",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.opus",
                "HKEY_CURRENT_USER\\.wv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.au",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dart",
                "HKEY_CURRENT_USER\\.pgf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\DisplayIcon",
                "HKEY_CURRENT_USER\\.nef\\(Default)",
                "HKEY_CURRENT_USER\\odtfile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wv",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_CURRENT_USER\\docxfile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpg\\OpenWithProgIds\\NCH.MixPad.mpg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.amr",
                "HKEY_CURRENT_USER\\dngfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\wpdfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.CDA\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.dct\\(Default)",
                "HKEY_CURRENT_USER\\nppfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.ape\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.act",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Settings\\InstallerPath",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_CURRENT_USER\\erffile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\.dss\\(Default)",
                "HKEY_CURRENT_USER\\.ape\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\.qcp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ram",
                "HKEY_CURRENT_USER\\divxfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.qcp\\OpenWithProgIds\\NCH.MixPad.qcp",
                "HKEY_CURRENT_USER\\NCH.MixPad.dct\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\(Default)",
                "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\(Default)",
                "HKEY_CURRENT_USER\\wpsfile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.voc\\OpenWithProgIds\\NCH.MixPad.voc",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\.ram\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wav",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\shell\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\.vox\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\rw2file\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\nppfile\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dart\\OpenWithProgIds\\NCH.MixPad.dart",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.avi",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\shell\\(Default)",
                "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.flac",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ra",
                "HKEY_CURRENT_USER\\docfile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rm",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aifc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aiff",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.opus",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dss",
                "HKEY_CURRENT_USER\\tgafile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\DisplayName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wmv\\OpenWithProgIds\\NCH.MixPad.wmv",
                "HKEY_CURRENT_USER\\cdofile\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp4\\OpenWithProgIds\\NCH.MixPad.mp4",
                "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\wpsfile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aifc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dss\\OpenWithProgIds\\NCH.MixPad.dss",
                "HKEY_CURRENT_USER\\.webp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\MinutesRunSinceLastInstall",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\rarfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\7zfile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ds2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\Windows Error Reporting\\ExcludedApplications\\mixpad.exe",
                "HKEY_CURRENT_USER\\rarfile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.dss\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallDate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp3\\OpenWithProgIds\\NCH.MixPad.mp3",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.3gp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpg\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\webpfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\Publisher",
                "HKEY_CURRENT_USER\\cdofile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.spx",
                "HKEY_CURRENT_USER\\raffile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.dss\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mid",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.rw2\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rec",
                "HKEY_CURRENT_USER\\.xvid\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\.drp\\(Default)",
                "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\.smf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.flv\\OpenWithProgIds\\NCH.MixPad.flv",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\.moh\\(Default)",
                "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\neffile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\.voc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wma",
                "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.shn\\OpenWithProgIds\\NCH.MixPad.shn",
                "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\crwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\shell\\(Default)",
                "HKEY_CURRENT_USER\\apjfile\\(Default)",
                "HKEY_CURRENT_USER\\tar.gzfile\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Settings\\InstallerName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.wmv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dvf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.shn\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.shn\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_CURRENT_USER\\.rm\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpeg\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\SVar",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mkv\\OpenWithProgIds\\NCH.MixPad.mkv",
                "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.act",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\.cdo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.asf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.caf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wav",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.smf",
                "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dvs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.qcp",
                "HKEY_CURRENT_USER\\srffile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\.exr\\(Default)",
                "HKEY_CURRENT_USER\\arwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mp2\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.rcd\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.vox",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dvf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpeg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\wpdfile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\GlobalAssocChangedCounter",
                "HKEY_CURRENT_USER\\.doc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ogg",
                "HKEY_CURRENT_USER\\arwfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHburn\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mp3\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.3gp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.voc",
                "HKEY_CURRENT_USER\\giffile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\jp2file\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.apj\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\(Default)",
                "HKEY_CURRENT_USER\\rtffile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\InstallLocation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aiff\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\UninstallString",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wv\\OpenWithProgIds\\NCH.MixPad.wv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aif\\OpenWithProgIds\\NCH.MixPad.aif",
                "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\apjfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rcd\\OpenWithProgIds\\NCH.MixPad.rcd",
                "HKEY_CURRENT_USER\\drpfile\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\FXPresetsFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\Version",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.3gp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.sd2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.avi",
                "HKEY_CURRENT_USER\\cr2file\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\TIFImage.Document\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\neffile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.sd2\\OpenWithProgIds\\NCH.MixPad.sd2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\.tgz\\(Default)",
                "HKEY_CURRENT_USER\\.mrw\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ds2",
                "HKEY_CURRENT_USER\\pgffile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wma\\OpenWithProgIds\\NCH.MixPad.wma",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.flv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ram\\OpenWithProgIds\\NCH.MixPad.ram",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.3gp\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.mpeg2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpdp\\OpenWithProgIds\\NCH.MixPad.mpdp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aif\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\nppfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dss",
                "HKEY_CURRENT_USER\\srffile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\mpeg2file\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rcd",
                "HKEY_CURRENT_USER\\ddpfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.moh",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ogg\\OpenWithProgIds\\NCH.MixPad.ogg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dvf\\OpenWithProgIds\\NCH.MixPad.dvf",
                "HKEY_CURRENT_USER\\tar.gzfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\deprojfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mov",
                "HKEY_CURRENT_USER\\.mpga\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.avi\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ape",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\CurrentVersion",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MIDI\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.shn",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\exrfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.ape\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.msv\\OpenWithProgIds\\NCH.MixPad.msv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_CURRENT_USER\\.7z\\(Default)",
                "HKEY_CURRENT_USER\\.nrw\\(Default)",
                "HKEY_CURRENT_USER\\mrwfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.cda\\OpenWithProgIds\\NCH.MixPad.cda",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallerPath",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\(Default)",
                "HKEY_CURRENT_USER\\wpdfile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.vox",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.oga\\OpenWithProgIds\\NCH.MixPad.oga",
                "HKEY_CURRENT_USER\\.wpd\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\tgzfile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.voc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\(Default)",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\erffile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wma\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.flac",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.deproj\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aiff\\OpenWithProgIds\\NCH.MixPad.aiff",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.cda\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.cda",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\(Default)",
                "HKEY_CURRENT_USER\\mrwfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\bz2file\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rec\\OpenWithProgIds\\NCH.MixPad.rec",
                "HKEY_CURRENT_USER\\.dvs\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\shell\\(Default)",
                "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mp4",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.gsm",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Cloud\\FileFormat",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.flac\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\shell\\(Default)",
                "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.shn",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mid\\OpenWithProgIds\\NCH.MixPad.mid",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.raw\\OpenWithProgIds\\NCH.MixPad.raw",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aac",
                "HKEY_CURRENT_USER\\.gz\\(Default)",
                "HKEY_CURRENT_USER\\.wps\\(Default)",
                "HKEY_CURRENT_USER\\.vob\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.sr2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\webpfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.asf",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_CURRENT_USER\\.bz2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.raw\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wma\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\TIFImage.Document\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.m4a",
                "HKEY_CURRENT_USER\\.dng\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\tarfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.mpc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.MOD\\OpenWithProgIds\\NCH.MixPad.mod",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstalledByAdmin",
                "HKEY_CURRENT_USER\\spjfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\.raw\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4r\\OpenWithProgIds\\NCH.MixPad.m4r",
                "HKEY_CURRENT_USER\\erffile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.m4b\\(Default)",
                "HKEY_CURRENT_USER\\.dart\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aifc\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ogg\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpeg",
                "HKEY_CURRENT_USER\\rw2file\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.au\\OpenWithProgIds\\NCH.MixPad.au",
                "HKEY_CURRENT_USER\\bz2file\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mod\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.dart",
                "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\(Default)",
                "HKEY_CURRENT_USER\\.act\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallDateFirst",
                "HKEY_CURRENT_USER\\divxfile\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.qcp\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ogg\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.act\\OpenWithProgIds\\NCH.MixPad.act",
                "HKEY_CURRENT_USER\\gzfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.moh",
                "HKEY_CURRENT_USER\\.divx\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aif\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.ra\\(Default)",
                "HKEY_CURRENT_USER\\ddpfile\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mod",
                "HKEY_CURRENT_USER\\sr2file\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\.srw\\(Default)",
                "HKEY_CURRENT_USER\\7zfile\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aifc\\OpenWithProgIds\\NCH.MixPad.aifc",
                "HKEY_CURRENT_USER\\.cr2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.amr\\OpenWithProgIds\\NCH.MixPad.amr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mov",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wav\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.avi\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\sr2file\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\.mpdp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wmv\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rmj\\OpenWithProgIds\\NCH.MixPad.rmj",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.m4a\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\pgffile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\tarfile\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.opus\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.oga\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dct",
                "HKEY_CURRENT_USER\\wpfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flv\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_CURRENT_USER\\.jp2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\deprojfile\\(Default)",
                "HKEY_CURRENT_USER\\tar.gzfile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4a\\OpenWithProgIds\\NCH.MixPad.m4a",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpeg\\OpenWithProgIds\\NCH.MixPad.mpeg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\ApplicationDescription",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpga\\OpenWithProgIds\\NCH.MixPad.mpga",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mov\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wav\\OpenWithProgIds\\NCH.MixPad.wav",
                "HKEY_CURRENT_USER\\docxfile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mkv",
                "HKEY_CURRENT_USER\\NCH.MixPad.dss\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_CURRENT_USER\\bz2file\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rcd",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp4\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\docfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.gsm\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\tgzfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\cr2file\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\EstimatedSize",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\giffile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.smf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\URL Protocol",
                "HKEY_CURRENT_USER\\.wp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\RegisteredApplications\\MixPad",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp3\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\docfile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\(Default)",
                "HKEY_CURRENT_USER\\neffile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.act\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.rm",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.oga",
                "HKEY_CURRENT_USER\\.erf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ogg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.ra",
                "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\(Default)",
                "HKEY_CURRENT_USER\\tgzfile\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.AAC\\OpenWithProgIds\\NCH.MixPad.aac",
                "HKEY_CURRENT_USER\\.spx\\(Default)",
                "HKEY_CURRENT_USER\\CABFolder\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpeg\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.tga\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ape",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\dvfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\gzfile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_CURRENT_USER\\.rec\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wma",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.aac",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.m4b",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\vobfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.m4r",
                "HKEY_CURRENT_USER\\.crw\\(Default)",
                "HKEY_CURRENT_USER\\raffile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.wmv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.m4r",
                "HKEY_CURRENT_USER\\xvidfile\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mp2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mp3",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.m4b",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.m4a",
                "HKEY_CURRENT_USER\\raffile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mp4\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dvf\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\wpfile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_CURRENT_USER\\vobfile\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.asf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mp2\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\exrfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.rmj\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.qcp",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\UsageStatsChoice\\llinad",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.wmv\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.rmj",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.3gp\\OpenWithProgIds\\NCH.MixPad.3gp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rm\\OpenWithProgIds\\NCH.MixPad.rm",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rec\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\vpjfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp2\\OpenWithProgIds\\NCH.MixPad.mp2",
                "HKEY_CURRENT_USER\\srffile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\odtfile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WMV\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpc\\OpenWithProgIds\\NCH.MixPad.mpc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ram\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.ds2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.aif",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.caf\\OpenWithProgIds\\NCH.MixPad.caf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.flac\\OpenWithProgIds\\NCH.MixPad.flac",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.opus\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpc\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mkv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.asf\\OpenWithProgIds\\NCH.MixPad.asf",
                "HKEY_CURRENT_USER\\drpfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\RunsSinceLastInstall",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Software\\Installer",
                "HKEY_CURRENT_USER\\.srf\\(Default)",
                "HKEY_CURRENT_USER\\wpfile\\Shell\\NCHconvertdoc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.msv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.moh\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vox\\OpenWithProgIds\\NCH.MixPad.vox",
                "HKEY_CURRENT_USER\\vpjfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.vpj\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\spjfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dvs\\OpenWithProgIds\\NCH.MixPad.dvs",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.gsm\\OpenWithProgIds\\NCH.MixPad.gsm",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.spj\\(Default)",
                "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\pngfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.spx",
                "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_CURRENT_USER\\.dv\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\IID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\VersionMinor",
                "HKEY_CURRENT_USER\\jpegfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo\\(Default)",
                "HKEY_CURRENT_USER\\rtffile\\Shell\\NCHconvertdoc\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4a\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\(Default)",
                "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_CURRENT_USER\\mpeg2file\\Shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHeditsound\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.oga\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\srwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ape\\OpenWithProgIds\\NCH.MixPad.ape",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4b\\OpenWithProgIds\\NCH.MixPad.m4b",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mid\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.sd2\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.au\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.aac\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\DisplayVersion",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_CURRENT_USER\\dvfile\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.moh\\OpenWithProgIds\\NCH.MixPad.moh",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\NCHburn\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\dngfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.au",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.opus\\OpenWithProgIds\\NCH.MixPad.opus",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aac\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.gsm\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.smf\\OpenWithProgIds\\NCH.MixPad.smf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpg\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.caf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\VersionMajor",
                "HKEY_CURRENT_USER\\exrfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.smf\\(Default)",
                "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_CURRENT_USER\\gzfile\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\NCHeditsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.sd2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.mpdp",
                "HKEY_CURRENT_USER\\rw2file\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.mkv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.cda\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mod\\shell\\(Default)",
                "HKEY_CURRENT_USER\\srwfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_CURRENT_USER\\tarfile\\Shell\\NCHextract\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.ram",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4b\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.raw",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_CURRENT_USER\\ddpfile\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.au\\shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\giffile\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\URLUpdateInfo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.asf\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.rm\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mod",
                "HKEY_CURRENT_USER\\drpfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.dvs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.cda",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.amr\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\CABFolder\\Shell\\NCHextract\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ra\\(Default)",
                "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHslideshow\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.amr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.caf",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.m4r\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mp2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mp3",
                "HKEY_CURRENT_USER\\nrwfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_CURRENT_USER\\nrwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mp4",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\nch.mixpad\\(Default)",
                "HKEY_CURRENT_USER\\.amr\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mov\\OpenWithProgIds\\NCH.MixPad.mov",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.wav\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\open\\command\\(Default)",
                "HKEY_CURRENT_USER\\rarfile\\Shell\\NCHextract\\(Default)",
                "HKEY_CURRENT_USER\\.tar.gz\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.avi\\OpenWithProgIds\\NCH.MixPad.avi",
                "HKEY_CURRENT_USER\\jp2file\\Shell\\NCHconvertimage\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.shn\\Shell\\NCHconvertsound\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpga\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileTypes\\.raw",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\NCHeditsound\\(Default)",
                "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\NCHslideshow\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound\\(Default)",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.mov\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_CURRENT_USER\\.npp\\(Default)",
                "HKEY_CURRENT_USER\\cdofile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.arw\\(Default)",
                "HKEY_CURRENT_USER\\.msv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.msv\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ds2\\OpenWithProgIds\\NCH.MixPad.ds2",
                "HKEY_CURRENT_USER\\.tar\\(Default)",
                "HKEY_CURRENT_USER\\crwfile\\Shell\\NCHconvertimage\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.flv",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpg",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Registration\\CurrentVersion",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.aiff\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.sd2\\(Default)",
                "HKEY_CURRENT_USER\\.rar\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\NCH Software\\MixPad\\Capabilities\\FileAssociations\\.mpga"
            ],
            "dll_loaded": [
                "gdiplus.dll",
                "urlmon.dll",
                "API-MS-Win-Security-LSALookup-L1-1-0.dll",
                "srvcli.dll",
                "apphelp.dll",
                "LINKINFO.dll",
                "Advapi32.dll",
                "C:\\Windows\\system32\\DUser.dll",
                "UxTheme.dll",
                "C:\\Windows\\system32\\ole32.dll",
                "dwmapi.dll",
                "ntdll.dll",
                "C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll",
                "slc.dll",
                "ntmarta.dll",
                "PROPSYS.dll",
                "C:\\Windows\\syswow64\\MSCTF.dll",
                "API-MS-Win-Core-LocalRegistry-L1-1-0.dll",
                "OLEAUT32.DLL",
                "SspiCli.dll",
                "comctl32",
                "ole32.dll",
                "SHLWAPI.dll",
                "USER32.dll",
                "IMM32.dll",
                "API-MS-Win-Security-SDDL-L1-1-0.dll",
                "C:\\Windows\\system32\\xmllite.dll",
                "Wer.dll",
                "OLEAUT32.dll",
                "netutils.dll",
                "SHELL32.dll",
                "User32.dll",
                "comctl32.dll",
                "DUser.dll",
                "VERSION.dll",
                "kernel32.dll",
                "ADVAPI32.dll",
                "SETUPAPI.dll",
                "ntshrui.dll",
                "user32.dll",
                "OLEACC.dll"
            ],
            "file_opened": [
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker",
                "C:\\Windows\\AppPatch\\sysmain.sdb",
                "C:\\",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
                "C:\\Windows\\SysWOW64\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe",
                "C:\\Program Files (x86)\\NCH Software",
                "C:\\ProgramData\\NCH Software\\MixPad",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat",
                "C:\\Users\\cuck\\Desktop\\desktop.ini",
                "C:\\Windows\\SysWOW64\\ieframe.dll",
                "C:\\Program Files (x86)",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds",
                "C:\\ProgramData\\NCH Software",
                "C:\\Windows\\System32\\oleaccrc.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
                "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db",
                "C:\\Program Files (x86)\\NCH Software\\MixPad",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\",
                "C:\\Program Files (x86)\\desktop.ini"
            ],
            "file_copied": [
                [
                    "C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin",
                    "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpadsetup_v5.36.exe"
                ],
                [
                    "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                    "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe"
                ]
            ],
            "regkey_opened": [
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.xvid\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flac",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressPoints",
                "HKEY_CURRENT_USER\\software\\classes\\.ram",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpga",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\software\\classes\\.raw",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4\\shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mid\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.gz\\userchoice",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\.mod",
                "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell\\Convert file type",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Cloud",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressBurn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\vobfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHeditvideo\\command",
                "HKEY_CLASSES_ROOT\\.qcp",
                "HKEY_CLASSES_ROOT\\.dss",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\.exr",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cda",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cdo",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.AU\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.apj",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\DrawPad",
                "HKEY_CURRENT_USER\\Software\\Classes\\wdpfile\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.shn\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ape",
                "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.rar\\userchoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpeg2",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\bz2file\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Switch",
                "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PropertyBag",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.ape",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHeditsound",
                "HKEY_CLASSES_ROOT\\.arw",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\ShellEx\\IconHandler",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell\\NCHconvertdoc",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Switch",
                "HKEY_CURRENT_USER\\Software\\Classes\\.ape",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.apj",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Doxillion",
                "HKEY_CURRENT_USER\\software\\classes\\.mpc",
                "HKEY_CLASSES_ROOT\\.rar",
                "HKEY_CLASSES_ROOT\\.raw",
                "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\shell",
                "HKEY_CLASSES_ROOT\\.raf",
                "HKEY_CURRENT_USER\\software\\classes\\.act",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.ram",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.ts",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\exrfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell\\NCHconvertdoc\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mpeg",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE",
                "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\.3gp",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ape\\UserChoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dart",
                "HKEY_CLASSES_ROOT\\.wpd",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.wps",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Classes\\.3g2",
                "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell\\NCHextract\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ape\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tiff",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvsfile",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mpdp",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.cda\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Edit sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\drpfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\.nrw",
                "HKEY_CLASSES_ROOT\\Folder",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aiff\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\PhotoStage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\xvidfile\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MIDI",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.shn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.png",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpeg\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.m4b\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mohfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rw2file\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\.aac",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.bmp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.cdo\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell\\NCHslideshow",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wma\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Prism",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.oga\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\.ddp",
                "HKEY_CLASSES_ROOT\\.divx",
                "HKEY_CURRENT_USER\\Software\\Classes\\.doc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpdfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell\\NCHslideshow\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rarfile\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}",
                "HKEY_CURRENT_USER\\software\\classes\\.flv",
                "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tga\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.oga",
                "HKEY_CURRENT_USER\\Software\\Classes\\.ogg",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cab",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m2ts",
                "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi\\shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.srf\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHeditvideo\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mid",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.wp\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss",
                "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.srw\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.gsm\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\7zfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_INTERNET_SHELL_FOLDERS",
                "HKEY_CURRENT_USER\\software\\classes\\.ape",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Disketch",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.exr",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.divx\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound",
                "HKEY_CLASSES_ROOT\\.tar.gz",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ram\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rar",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.raf",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ram",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wav",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}",
                "HKEY_CLASSES_ROOT\\.asf",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpga\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Switch",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wmv\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\crwfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\sd2file",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressPoints",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\VideoPad",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dng",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressAnimate",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.iso",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell\\NCHextract",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
                "HKEY_CURRENT_USER\\Software\\Classes\\.wdp",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tga\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad",
                "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\shell\\open",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{04731B67-D933-450a-90E6-4ACD2E9408FE}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe",
                "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell\\NCHextract\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHconvertsound",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertdoc",
                "HKEY_CURRENT_USER\\Software\\Classes\\.iso",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tar\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.divx",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.avi\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.erf\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}",
                "HKEY_CLASSES_ROOT\\.smf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\.wmv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.cr2\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nch.mixpad",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.mpeg2\\userchoice",
                "HKEY_CLASSES_ROOT\\.wma",
                "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\shell\\NCHextract",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\crwfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHeditsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.nrw",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.dss\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.voc",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\Edit sound file",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHeditvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.avi",
                "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell\\Convert file type",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.au",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Pixillion",
                "HKEY_CURRENT_USER\\software\\classes\\.opus",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHeditvideo",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.AIFF\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\software\\classes\\.rmj",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf",
                "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\Desktop\\NameSpace\\DelegateFolders",
                "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\vocfile",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ram\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\ddpfile",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressZip",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.exr",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.nef\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\ds2file",
                "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.tar.gz",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\shnfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\.avi",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\cr2file\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell\\Extract with Express Zip",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\divxfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvs\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw\\shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\software\\classes\\.sd2",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.nrw\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Settings",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\CABFolder\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aifc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wv\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dctfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rtffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\odtfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.dv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flac\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.vox",
                "HKEY_CURRENT_USER\\Software\\Classes\\.7z",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\qcpfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wav\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressBurn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\neffile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressZip",
                "HKEY_CURRENT_USER\\Software\\Classes\\.vob",
                "HKEY_CURRENT_USER\\Software\\Classes\\.voc",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.7z\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\.bz2",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\jp2file\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ds2\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.asf\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\vpjfile\\shell",
                "HKEY_CLASSES_ROOT\\.bmp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{e345f35f-9397-435c-8f95-4e922c26259e}",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software",
                "HKEY_CLASSES_ROOT\\.dv",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\Extract with Express Zip",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell\\NCHconvertdoc\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.npp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dartfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\vpjfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm\\shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.wpd\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\xvidfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dart\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.doc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\Create slideshow",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mod\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dct",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.mkv",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.opus\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.pdf",
                "HKEY_CURRENT_USER\\Software\\Classes\\.jpeg",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\apjfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ts",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvffile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nppfile\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tar.gz\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell\\NCHextract",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\Desktop\\NameSpace",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PropertyBag",
                "HKEY_CLASSES_ROOT\\.opus",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.wp\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\.htm",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf",
                "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mod\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.odt",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\DelegateFolders",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.shn\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell\\NCHextract",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\ShellEx\\IconHandler",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\spjfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.gsm",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.act",
                "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\Edit video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.dv\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\wdpfile\\shell\\open",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.moh\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.iso",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.flac\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.bmp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.amr\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{450D8FBA-AD25-11D0-98A8-0800361B1103}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aif",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHeditsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHeditsound\\command",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.CDA\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\Edit sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHeditvideo",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aif\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mp4\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\TIFImage.Document\\shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc\\shell\\open\\command",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.tgz\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wp",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj\\shell",
                "HKEY_CURRENT_USER\\software\\classes\\.vox",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}",
                "HKEY_LOCAL_MACHINE\\Software\\RegisteredApplications",
                "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wma",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mpeg2\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\software\\classes\\.voc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wmv",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.smf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.smf\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Class\\{4D36E96C-E325-11CE-BFC1-08002BE10318}",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.WAV\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wma\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{645FF040-5081-101B-9F08-00AA002F954E}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Software",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\srwfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\.wpd",
                "HKEY_CURRENT_USER\\Software\\Classes\\.pdf",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\(Default)",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.wps",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\.shn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.bz2",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.dng\\userchoice",
                "HKEY_CLASSES_ROOT\\.dng",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\MixPad",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\DirectUI",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\Clsid",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgzfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Scribe",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell\\NCHconvertdoc\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell",
                "HKEY_CLASSES_ROOT\\.flv",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHburn\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tga",
                "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\CurVer",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\docfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.vob\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.npp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.3gp\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\.ra",
                "HKEY_CLASSES_ROOT\\.rw2",
                "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell",
                "HKEY_CLASSES_ROOT\\.rm",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.jp2\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgafile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\Shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell\\Extract with Express Zip",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell\\NCHextract",
                "HKEY_CLASSES_ROOT\\https",
                "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nrwfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell",
                "HKEY_CLASSES_ROOT\\.pgf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd\\shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.dv\\UserChoice",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.3gp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tar.gzfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\amrfile",
                "HKEY_CLASSES_ROOT\\.htm",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHeditsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.flv\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mkv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wps",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rar\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wpd",
                "HKEY_CLASSES_ROOT\\.flac",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\drpfile\\shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\cdofile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r\\shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.ADTS\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{59031a47-3f72-44a7-89c5-5595fe6b30ee}",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHconvertvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.webp\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mov\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvf\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.rec",
                "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Doxillion",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\arwfile\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
                "HKEY_CURRENT_USER\\Software\\Classes\\.erf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\srffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHconvertimage\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell\\NCHextract",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\TIFImage.Document\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rw2file\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{4336a54d-038b-4685-ab02-99bb52d3fb8b}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.vox\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{daf95313-e44d-46af-be1b-cbacea2c3065}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rmj",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vpj",
                "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\.spx",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\Edit video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mkvfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.caf\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.rm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHextract",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mp3\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.wv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nrwfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.wav",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell\\NCHconvertdoc",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.dct\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rtffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CLASSES_ROOT\\.mid",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\VideoPad",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\webpfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ogg\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.ra\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\vpjfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga\\shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.rec\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressAnimate",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\WavePad",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\bz2file\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.caf\\UserChoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{031E4825-7B94-4dc3-B131-E946B44C8DD5}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gz",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.aac",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tar.gzfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Disketch",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.msv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gsm",
                "HKEY_CURRENT_USER\\Software\\Classes\\.gsm",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rm\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.srw\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mov\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tar.gz\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\pgffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\drpfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.rw2\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.doc\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dct\\shell",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.ASF\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.docx",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\Convert sound file",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.ape\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\ddpfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\erffile\\Shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.exr\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\deprojfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\pgffile\\Shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.dss\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv\\shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\Edit sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\.caf",
                "HKEY_CURRENT_USER\\Software\\Classes\\.cab",
                "HKEY_CURRENT_USER\\Software\\Classes\\.webp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wdpfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wdpfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dngfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.webm",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Convert file type",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aiff\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Registration",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mid\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Scribe",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.vpj\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.voc\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHeditvideo\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mov",
                "HKEY_CURRENT_USER\\Software\\Classes\\.vpj",
                "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ddp",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\flacfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\spjfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\srwfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHeditvideo\\command",
                "HKEY_CLASSES_ROOT\\.jpg",
                "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.bz2\\UserChoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\.rcd",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.erf\\userchoice",
                "HKEY_CLASSES_ROOT\\AllFilesystemObjects",
                "HKEY_CLASSES_ROOT\\.tga",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Capabilities\\FileAssociations",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell",
                "HKEY_CLASSES_ROOT\\.tgz",
                "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.xvid",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\caffile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.jp2",
                "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\actfile",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tar",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell\\NCHconvertdoc\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.CDA",
                "HKEY_CLASSES_ROOT\\.dvf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dss\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tar.gz",
                "HKEY_CLASSES_ROOT\\.dvs",
                "HKEY_CURRENT_USER\\Software\\Classes\\nppfile",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.mrw\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvf",
                "HKEY_CURRENT_USER\\Software\\Classes\\.sr2",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.oga\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dvs",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.au\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\DreamPlan",
                "HKEY_CURRENT_USER\\software\\classes\\.gsm",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\Edit video file",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a\\shell",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressAnimate",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.CDA\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rarfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell\\NCHconvertdoc",
                "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.msv\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressAnimate",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mpdp\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Doxillion",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\VideoPad",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\CurVer",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mrw",
                "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell\\NCHextract\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\cr2file\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\shell\\NCHconvertdoc",
                "HKEY_CURRENT_USER\\Software\\Classes\\.srf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mrw",
                "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.sr2\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dngfile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.crw",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\SessionInfo\\1\\KnownFolders",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\Directory\\OpenWithProgids",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHeditsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.opus",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aac\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\Edit sound file",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressZip",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHconvertvideo",
                "HKEY_CLASSES_ROOT\\.erf",
                "HKEY_CLASSES_ROOT\\.cr2",
                "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\nchsetup.exe",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Windows Error Reporting\\ExcludedApplications",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\software\\classes\\.shn",
                "HKEY_CURRENT_USER\\software\\classes\\.msv",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\Edit video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell\\NCHconvertdoc",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.srf\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHeditvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpg\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\.srf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell\\NCHextract",
                "HKEY_CLASSES_ROOT\\.srw",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP",
                "HKEY_CURRENT_USER\\software\\classes\\.moh",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.jp2\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\.deproj",
                "HKEY_CLASSES_ROOT\\.sr2",
                "HKEY_CURRENT_USER\\Software\\Classes\\.srw",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\smffile",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Scribe",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.act\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv",
                "HKEY_CLASSES_ROOT\\.moh",
                "HKEY_CURRENT_USER\\Software\\Classes\\arwfile\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.raw\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4a\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHconvertvideo\\command",
                "HKEY_CLASSES_ROOT\\.mov",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\DelegateFolders",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.moh\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Crescendo",
                "HKEY_CLASSES_ROOT\\.au",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell\\NCHconvertsound\\command",
                "HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions",
                "HKEY_CURRENT_USER\\software\\classes\\.caf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\LSA\\AccessProviders",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WAV\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.pgf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.wma",
                "HKEY_CLASSES_ROOT\\.dart",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mrw\\UserChoice",
                "HKEY_CLASSES_ROOT\\.sd2",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tar\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHburn",
                "HKEY_CURRENT_USER\\Software\\Classes\\cdofile",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.pgf\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Disketch",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.aif",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\classes\\.dvs",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\Edit video file",
                "HKEY_CLASSES_ROOT\\.dct",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\NCHeditvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\software\\classes\\.dvf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.nef",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Scribe",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS",
                "HKEY_CLASSES_ROOT\\.wp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CLASSES_ROOT\\.wv",
                "HKEY_CURRENT_USER\\Software\\Classes\\apjfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rmjfile",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\gzfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.rw2",
                "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\recfile",
                "HKEY_CLASSES_ROOT\\.rtf",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.gsm\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\PhotoStage",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHeditsound\\command",
                "HKEY_CLASSES_ROOT\\.m4v",
                "HKEY_CURRENT_USER\\Software\\Classes\\.gif",
                "HKEY_CLASSES_ROOT\\.m4r",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\spjfile",
                "HKEY_CLASSES_ROOT\\.m4a",
                "HKEY_CLASSES_ROOT\\.m4b",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\Convert image file",
                "HKEY_CLASSES_ROOT\\.caf",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.cab",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.amr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Applications\\nchsetup.exe",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\Edit sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\shell\\NCHconvertimage",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MP3\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\srffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\spxfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\DrawPad",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wdpfile\\shell\\open",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.asf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\cdofile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.sr2\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\docxfile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\vpjfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.raf\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\Shell",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.spj\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.gz\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.arw\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rafile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\Shell",
                "HKEY_CURRENT_USER\\software\\classes\\.rm",
                "HKEY_CURRENT_USER\\Software\\Classes\\.dct",
                "HKEY_CURRENT_USER\\software\\classes\\.ra",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\jpegfile\\shell\\NCHconvertimage",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rw2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpdp\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.ogv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.aac\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\tar.gzfile\\Shell\\Extract with Express Zip",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MIDI\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.tar",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\msvfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell\\Convert video file",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.M4A\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.spx\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.jpeg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\nchsetup.exe",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\Shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.shn\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.wps\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell\\Convert file type",
                "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp3\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mrwfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nppfile",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
                "HKEY_CURRENT_USER\\Software\\Classes\\.gz",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.webp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart",
                "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.nrw\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mp3",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mp4",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp4",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gsm\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp3",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp2",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MOV\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell\\Extract with Express Zip",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Prism",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec\\shell",
                "HKEY_CURRENT_USER\\software\\classes\\.m4r",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp4\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpg",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpc",
                "HKEY_CURRENT_USER\\Software\\Classes\\.spj",
                "HKEY_CLASSES_ROOT\\.3g2",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\WavePad",
                "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell\\NCHconvertimage",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.WMV\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MP4\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.mrw",
                "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mpg",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.flac\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\ExpressPoints",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpeg2file\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rmj",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\apjfile\\shell\\open",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvf\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\raffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\Shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.3GP\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.amr\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vox\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.3gp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\gsmfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHslideshow",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wmv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.sr2",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.crw\\userchoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.smf\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.bz2\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mov\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.raw",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF",
                "HKEY_CLASSES_ROOT\\.nef",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.drp",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\Edit sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
                "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell\\Extract with Express Zip",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rtf",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\Edit sound file",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMV",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\Clsid",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Capabilities\\FileTypes",
                "HKEY_CURRENT_USER\\Software\\Classes\\.tgz",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wvfile",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FolderDescriptions",
                "HKEY_CURRENT_USER\\Software\\Classes\\gzfile\\Shell\\NCHextract",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.divx",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\ShellEx\\IconHandler",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG",
                "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell\\NCHextract",
                "HKEY_CURRENT_USER\\Software\\Classes\\.tga",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.spx",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\shell\\NCHburn",
                "HKEY_CURRENT_USER\\software\\classes\\.spx",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell\\Convert file type",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.spj",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.7z\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\Shell\\RegisteredApplications\\UrlAssociations\\https\\OpenWithProgids",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpeg\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\apefile",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Pixillion",
                "HKEY_CLASSES_ROOT\\.gz",
                "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.vox\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\apjfile\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.html",
                "HKEY_CLASSES_ROOT\\Interface\\{618736E0-3C3D-11CF-810C-00AA00389B71}\\ProxyStubClsid32",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\ddpfile\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\spjfile\\shell",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Switch",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgzfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.spx",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.wav\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.webp\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\Shell\\NCHconvertvideo\\command",
                "HKEY_CLASSES_ROOT\\.amr",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHconvertvideo",
                "HKEY_CLASSES_ROOT\\.ds2",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressBurn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mov",
                "HKEY_CLASSES_ROOT\\.gif",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.moh",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\webpfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CLASSES_ROOT\\.msv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mod",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.avi\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.dss\\Shell\\NCHconvertsound\\command",
                "HKEY_CLASSES_ROOT\\.webp",
                "HKEY_CLASSES_ROOT\\.webm",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\vobfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rmfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\software\\classes\\.dart",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac\\shell",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ra\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.rmj\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Capabilities\\FileTypes",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.act",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\software\\classes\\.smf",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\Edit video file",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.sd2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpsfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\apjfile\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.raw",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\.docx",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace",
                "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell\\NCHconvertdoc\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.caf",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.ddp\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell\\Extract with Express Zip",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\docfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.moh\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\webpfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell\\NCHconvertvideo",
                "HKEY_CLASSES_ROOT\\.docx",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHeditsound\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\NCHeditsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\odtfile\\shell\\NCHconvertdoc",
                "HKEY_CURRENT_USER\\Software\\Classes\\.nef",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.rtf",
                "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\Paint.Picture\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.pgf",
                "HKEY_CLASSES_ROOT\\.m2ts",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nch.mixpad\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell\\Extract with Express Zip",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tgz\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\ExpressBurn",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mkv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\opusfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\giffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.wp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.divx\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\.ds2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\UsageStatsChoice",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\VideoPad",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder",
                "HKEY_CURRENT_USER\\Software\\Classes\\.m4v",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.sd2\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHconvertvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.dss",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.tiff",
                "HKEY_CURRENT_USER\\software\\classes\\.rec",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\Edit video file",
                "HKEY_CLASSES_ROOT\\.ts",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld",
                "HKEY_CLASSES_ROOT\\.xvid",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
                "HKEY_CURRENT_USER\\Software\\Classes\\dvfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp4",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\PhotoStage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.7z",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4r\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mkv\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\voxfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\DreamPlan",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.dng\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\.jp2",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\pngfile\\shell\\NCHslideshow",
                "HKEY_CLASSES_ROOT\\.bz2",
                "HKEY_CLASSES_ROOT\\.aiff",
                "HKEY_CLASSES_ROOT\\.aifc",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.drp",
                "HKEY_CLASSES_ROOT\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\InProcServer32",
                "HKEY_CLASSES_ROOT\\.nrw",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\cdofile",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\Edit sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4v",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rcdfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\.xvid",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc",
                "HKEY_CURRENT_USER\\Software\\Classes\\deprojfile\\shell\\open",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.3g2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mod\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\jp2file\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dart\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\m4rfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\mpeg2file\\Shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PropertyBag",
                "HKEY_CLASSES_ROOT\\.mp2",
                "HKEY_CLASSES_ROOT\\.mp3",
                "HKEY_CLASSES_ROOT\\.mp4",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rtffile\\shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.3gp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\FirefoxHTML-E7CF176E110C211B\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.odt",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpdfile\\Shell\\Convert file type",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.voc\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.mpc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dssfile",
                "HKEY_CLASSES_ROOT\\.vox",
                "HKEY_CLASSES_ROOT\\.mpg",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Scheduler",
                "HKEY_CLASSES_ROOT\\.vob",
                "HKEY_CLASSES_ROOT\\.voc",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\shell\\NCHburn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\Edit sound file",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dvf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\Directory",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rcd",
                "HKEY_CLASSES_ROOT\\.avi",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.qcp",
                "HKEY_CLASSES_ROOT\\.mpeg2",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.avi\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.cr2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.jpg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cr2",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache",
                "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\Shell\\Convert image file",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Crescendo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}",
                "HKEY_CURRENT_USER\\Software\\Classes\\drpfile\\shell\\open",
                "HKEY_CURRENT_USER\\software\\classes\\.dct",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.au\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aifc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aiff",
                "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.qcp\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rmj\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b\\shell\\open\\command",
                "HKEY_CLASSES_ROOT\\.mpga",
                "HKEY_CURRENT_USER\\Software\\Classes\\wdpfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.crw",
                "HKEY_CLASSES_ROOT\\.cda",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.crw",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\rawfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.gsm\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.gsm\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tarfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\arwfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\nchsetup.exe",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\sr2file\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertdoc",
                "HKEY_CURRENT_USER\\software\\classes\\.mkv",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PropertyBag",
                "HKEY_CURRENT_USER\\Software\\Classes\\.cdo",
                "HKEY_CURRENT_USER\\Software\\Classes\\.tar",
                "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.voc\\Shell\\Edit sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.caf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.srw",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mp2\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.srf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.odt",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\NCHextract\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.jp2",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpga\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Disketch",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.sd2",
                "HKEY_CLASSES_ROOT\\.shn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4a",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4b",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dss",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv",
                "HKEY_CURRENT_USER\\Software\\Classes\\.m4a",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4r",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpga\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\rarfile\\Shell\\NCHextract\\command",
                "HKEY_CURRENT_USER\\software\\classes\\.mpdp",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
                "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\.dng",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\.jpg",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ds2",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\Create slideshow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{11016101-E366-4D22-BC06-4ADA335C892B}",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpg\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wav\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.tgz",
                "HKEY_CLASSES_ROOT\\.png",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.voc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\.doc",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\Edit video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.qcp\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.voc\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dart\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHeditsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc\\shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\SuiteUsage",
                "HKEY_CURRENT_USER\\Software\\Classes\\TIFImage.Document\\shell\\NCHconvertimage",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.gif",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\CABFolder\\shell\\NCHextract",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Paint.Picture\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.amr",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.mpdp\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\srffile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ShellCompatibility\\Objects\\{871C5380-42A0-1069-A2EA-08002B30309D}",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell\\NCHconvertsound\\command",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\DreamPlan",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\flvfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\oggfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell",
                "HKEY_CLASSES_ROOT\\.mpdp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flv\\DefaultIcon",
                "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\shell\\",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wma\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell\\NCHslideshow\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mrwfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\Convert video file",
                "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aac",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MPEG\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.cda\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{89D83576-6BD1-4c86-9454-BEB04E94C819}",
                "HKEY_CLASSES_ROOT\\.html",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.asf",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.flv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpgafile",
                "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\Explorer",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ds2\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ogg\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\.asf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aif\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.crw\\UserChoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{9343812e-1c37-4a49-a12e-4b2d810d956b}",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\DrawPad",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\Edit sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aif\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MPEG\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ogg",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.asf\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.oga",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\ogafile",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rec",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg\\shell\\open\\command",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.xvid\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Crescendo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.msv\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\Prism",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\NCHconvertsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\jp2file\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\m4bfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.shn\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ape\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PropertyBag",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\software\\classes\\.mpga",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.mpeg2",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.apj\\userchoice",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PropertyBag",
                "HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.mkv\\UserChoice",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.rcd\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpdfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dct\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AIFF\\shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\TIFImage.Document\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dct\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.m4r\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\docxfile\\Shell\\NCHconvertdoc\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.raf\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rcd",
                "HKEY_CURRENT_USER\\Software\\Classes\\rtffile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\neffile\\Shell",
                "HKEY_CURRENT_USER\\software\\classes\\.qcp",
                "HKEY_CURRENT_USER\\Software\\Classes\\erffile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked",
                "HKEY_CURRENT_USER\\software\\classes\\.rcd",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vob",
                "HKEY_CURRENT_USER\\Software\\Classes\\vobfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\raffile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WMA\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\docxfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpeg",
                "HKEY_CURRENT_USER\\Software\\Classes\\rw2file\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.vox",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\spjfile\\shell\\open",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\sr2file\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.aifc\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nch.mixpad\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aiff\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.vox\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.TTS\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Pixillion",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3G2\\shell\\NCHconvertvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M4A\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\.png",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList",
                "HKEY_CURRENT_USER\\software\\classes\\.dss",
                "HKEY_CURRENT_USER\\software\\classes\\.flac",
                "HKEY_CURRENT_USER\\Software\\Classes\\srwfile\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\Shell\\NCHeditvideo\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgafile\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\ExpressPoints",
                "HKEY_CURRENT_USER\\Software\\Classes\\.arw",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.arw",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\DefaultIcon",
                "HKEY_CURRENT_USER\\software\\classes\\.ds2",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpc\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wmv\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.wv\\shell",
                "HKEY_CLASSES_ROOT\\.rmj",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\deprojfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.ogg\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MOV",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\Shell\\Convert sound file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dss",
                "HKEY_CURRENT_USER\\Software\\Classes\\bz2file\\Shell\\Extract with Express Zip",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.doc\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\ramfile",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rm",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rec",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.ra",
                "HKEY_CLASSES_ROOT\\.3gp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\exrfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au\\shell\\open\\command",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.nef\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpcfile",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\ExpressZip",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.deproj\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M2TS\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHconvertsound\\command",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.ds2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.3G2\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.raw\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\.mpeg",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\Directory",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\Crescendo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ds2",
                "HKEY_CURRENT_USER\\Software\\Classes\\.flac",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.exr\\UserChoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.oga\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\7zfile\\Shell\\NCHextract\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Applications\\mixpad.exe\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.3GP\\shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.arw\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpg\\shell",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\software\\classes\\.amr",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\sr2file\\Shell\\NCHslideshow",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ram\\shell",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mp2\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\dngfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.rm",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.sd2\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AVI\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\nppfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tarfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rcd\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.wdp",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.rec\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\xvidfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\Classes\\ddpfile\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.ape\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MOV\\Shell\\Convert video file",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\MixPad\\Capabilities",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{26EE0668-A00A-44D7-9371-BEB064C98683}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.tiff",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.m4b\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpsfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\pngfile\\Shell\\NCHconvertimage\\command",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.m4a\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\divxfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.WMA\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\odtfile\\Shell\\Convert file type",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpc\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.rw2\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ASF\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpc\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.caf\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.opus\\OpenWithProgIds",
                "HKEY_CURRENT_USER\\Software\\Classes\\neffile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.mkv\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\odtfile\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\Classes\\giffile\\Shell\\Convert image file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.act\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.act\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\wpfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\mrwfile\\Shell\\NCHconvertimage\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Classes\\.raf",
                "HKEY_CURRENT_USER\\software\\classes\\.wv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\dvfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\nrwfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\tarfile\\Shell\\NCHextract\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\.rar",
                "HKEY_CURRENT_USER\\Software\\Classes\\tgzfile\\Shell\\NCHextract\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\Shell\\Edit video file",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mkv\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\Shell\\Burn with Express Burn",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpdp\\OpenWithProgIds",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpeg2file\\Shell",
                "HKEY_CURRENT_USER\\software\\classes\\.m4b",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp3\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.dct",
                "HKEY_CLASSES_ROOT\\NCH.MixPad.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHeditvideo",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.TTS\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\.ogg",
                "HKEY_CLASSES_ROOT\\.aif",
                "HKEY_CLASSES_ROOT\\.oga",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.msv\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CLASSES_ROOT\\FirefoxURL-E7CF176E110C211B",
                "HKEY_CLASSES_ROOT\\.ogv",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mkv",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Pixillion",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell\\NCHconvertdoc\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.drp\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.shn",
                "HKEY_CURRENT_USER\\Software\\Classes\\cr2file\\Shell\\Create slideshow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.mpdp",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.erf",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders",
                "HKEY_CURRENT_USER\\Software\\Classes\\.aiff",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mpeg\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.WMA\\shell\\NCHeditsound",
                "HKEY_CLASSES_ROOT\\.jpeg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.M2TS\\shell\\NCHeditvideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\Clsid",
                "HKEY_CURRENT_USER\\Software\\Classes\\crwfile\\Shell\\NCHslideshow\\command",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.wpd\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.ADTS\\shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.au",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.caf\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4r",
                "HKEY_CURRENT_USER\\Software\\Classes\\pgffile\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mid\\shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4a",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.m4b",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\gzfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\docxfile\\shell\\NCHconvertdoc",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\CABFolder\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\jpegfile\\Shell\\NCHconvertimage",
                "HKEY_CURRENT_USER\\Software\\Classes\\wpsfile\\Shell\\Convert file type",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aac",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\deprojfile",
                "HKEY_CURRENT_USER\\Software\\Classes\\raffile\\Shell\\NCHslideshow",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\WavePad",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\Prism",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.AU\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.ds2\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.WAV\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\7zfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.M4A\\shell\\NCHeditsound",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHconvertsound",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.cr2\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\.m2ts",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.npp\\userchoice",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\mpdpfile",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.wps\\UserChoice",
                "HKEY_CURRENT_USER\\software\\microsoft\\windows\\currentversion\\explorer\\fileexts\\.pgf\\userchoice",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.cda",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.mpdp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.ra\\shell\\open\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\Windows.IsoFile\\shell\\NCHextract",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Software\\DrawPad",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.deproj",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.flac\\Shell\\NCHconvertsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\WMP11.AssocFile.MP4\\shell\\NCHconvertvideo",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.opus\\shell\\open\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\erffile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\NCH Swift Sound\\PhotoStage",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.dvs\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP4\\Shell\\NCHconvertvideo\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.flac\\Shell",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.dvs\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\nppfile\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\NCH.MixPad.vox\\Shell\\NCHconvertsound\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\drpfile\\shell\\open",
                "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\exrfile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\Convert sound file",
                "HKEY_CURRENT_USER\\Software\\Classes\\cdofile\\DefaultIcon",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell\\NCHconvertvideo\\command",
                "HKEY_CLASSES_ROOT\\.7z",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.vob\\UserChoice",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.MP3\\Shell\\NCHeditsound",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Windows.IsoFile\\shell\\NCHextract",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.smf\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.au",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.aifc\\DefaultIcon",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\NCH.MixPad.mp2\\shell",
                "HKEY_CURRENT_USER\\Software\\Classes\\docfile\\Shell",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\tgafile\\DefaultIcon",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.AVI\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\FirefoxHTML-E7CF176E110C211B\\Shell\\NCHconvertdoc\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}",
                "HKEY_CURRENT_USER\\Software\\Classes\\WMP11.AssocFile.AU\\Shell\\NCHeditsound",
                "HKEY_CLASSES_ROOT\\.wav",
                "HKEY_LOCAL_MACHINE\\Software\\NCH Swift Sound\\WavePad",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\Doxillion",
                "HKEY_CLASSES_ROOT\\SystemFileAssociations\\.qcp\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\.spx\\OpenWithProgIds",
                "HKEY_CLASSES_ROOT\\WMP11.AssocFile.MPEG\\Shell\\Mix with MixPad Multitrack Recording Software\\command",
                "HKEY_CURRENT_USER\\Software\\Classes\\divxfile\\Shell",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\DreamPlan",
                "HKEY_CURRENT_USER\\Software\\Classes\\CABFolder\\Shell\\NCHextract\\command",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}"
            ],
            "file_written": [
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\empty.MID",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\accent.wav",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\beat.wav",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\patterns.mpdlib",
                "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\categories.mpdcat"
            ],
            "regkey_deleted": [
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\_ShowSurveyNow",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\_ShowSurvey",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\InstalledBy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\MixPadInstall",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\ShowSurvey",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\ShowSurveyNow",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\_InstalledBy"
            ],
            "file_deleted": [
                "",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\MixPadCounts.txt",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs.lnk"
            ],
            "directory_removed": [
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\testfolder"
            ],
            "file_exists": [
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker",
                "",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "C:\\Program Files (x86)\\NCH Software",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\",
                "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
                "C:\\ProgramData\\NCH Software\\MixPad",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\",
                "C:\\Users\\cuck\\Documents",
                "C:\\Users\\Public\\Desktop\\NCH Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "C:\\Windows\\SysWOW64\\ieframe.dll",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History",
                "C:\\Users\\cuck\\Documents\\Mixpad Projects\\VST",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds",
                "C:\\ProgramData\\NCH Software",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "C:\\Program Files (x86)\\NCH Software\\MixPad",
                "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "C:\\Users\\cuck\\Documents\\Mixpad Projects",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\"
            ],
            "mutex": [
                "Local\\c:!users!cuck!appdata!roaming!microsoft!windows!ietldcache!"
            ],
            "file_failed": [
                "C:\\Program Files (x86)\\NCH Software\\MixPad",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\Users\\cuck\\Desktop\\NCH Suite.lnk\\desktop.ini",
                "C:\\Users\\Public\\Desktop\\NCH Software.lnk",
                "C:\\Users\\Public\\Desktop\\NCH Software.lnk\\desktop.ini",
                "C:\\Users\\cuck\\Desktop\\NCH Suite.lnk",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk\\desktop.ini",
                "C:\\Users\\cuck\\Desktop\\NCH Software.lnk",
                "C:\\Users\\cuck\\Desktop\\NCH Software.lnk\\desktop.ini"
            ],
            "guid": [
                "{5762f2a7-4658-4c7a-a4ac-bdabfe154e0d}",
                "{000214f9-0000-0000-c000-000000000046}",
                "{00021401-0000-0000-c000-000000000046}",
                "{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}",
                "{2faba4c7-4da9-4013-9697-20cc3fd40f85}",
                "{871c5380-42a0-1069-a2ea-08002b30309d}",
                "{000214e6-0000-0000-c000-000000000046}",
                "{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}"
            ],
            "file_read": [
                "C:\\Users\\cuck\\Desktop\\desktop.ini",
                "C:\\Program Files (x86)\\desktop.ini",
                "C:\\Windows\\SysWOW64\\ieframe.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat"
            ],
            "regkey_read": [
                "HKEY_CURRENT_USER\\mrwfile\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rec\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HideFolderVerbs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalRedirectOnly",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParsingName",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M4A\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\InProcServer32\\LoadWithoutCOM",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{daf95313-e44d-46af-be1b-cbacea2c3065}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\tarfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aiff\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\odtfile\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.jpeg\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParsingName",
                "HKEY_CURRENT_USER\\tgzfile\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CABFolder\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResourceType",
                "HKEY_CURRENT_USER\\neffile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\shell\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Favorites",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp4\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Attributes",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CacheOptions",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InfoTip",
                "HKEY_CURRENT_USER\\.mpdp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PublishExpandedPath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons",
                "HKEY_CURRENT_USER\\dngfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AutoCheckSelect",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Stream",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\FolderTypeID",
                "HKEY_CURRENT_USER\\jpegfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\wdpfile\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Icon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CacheLimit",
                "HKEY_CURRENT_USER\\.pdf\\(Default)",
                "HKEY_CURRENT_USER\\wpsfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\QueryForOverlay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.iso\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
                "HKEY_CURRENT_USER\\.dng\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InfoTip",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CacheRepair",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mpdp\\Shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InfoTip",
                "HKEY_CURRENT_USER\\crwfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.TTS\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4v\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
                "HKEY_CURRENT_USER\\NCH.MixPad.gsm\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.bmp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\PerUserItem",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Security",
                "HKEY_CURRENT_USER\\rarfile\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\.ogg\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\wdpfile\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PreCreate",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\PerUserItem",
                "HKEY_CURRENT_USER\\divxfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Roamable",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CacheRepair",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Icon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Signature",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\jpegfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.htm\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpg\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mov\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wav\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowFileCLSIDJunctions",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MIDI\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PublishExpandedPath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Category",
                "HKEY_CURRENT_USER\\.dct\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir",
                "HKEY_CURRENT_USER\\docxfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\ParentFolder",
                "HKEY_CURRENT_USER\\vobfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\LdapClientIntegrity",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Security",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldVersionLow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Attributes",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Name",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.srf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ADTS\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResourceType",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
                "HKEY_CURRENT_USER\\.cr2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_INTERNET_SHELL_FOLDERS\\*",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
                "HKEY_CURRENT_USER\\.vox\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Attributes",
                "HKEY_CURRENT_USER\\pgffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\DevicePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PreCreate",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowTypeOverlay",
                "HKEY_CURRENT_USER\\nrwfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\RelativePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Icon",
                "HKEY_CURRENT_USER\\neffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{871C5380-42A0-1069-A2EA-08002B30309D}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InfoTip",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Icon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CacheRepair",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResource",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Pictures",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{208D2C60-3AEA-1069-A2D7-08002B30309D}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
                "HKEY_CURRENT_USER\\NCH.MixPad.dss\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dss\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\QueryForOverlay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\giffile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalizedName",
                "HKEY_CURRENT_USER\\mrwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.cab\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Name",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}",
                "HKEY_CURRENT_USER\\tgafile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\InProcServer32\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InitFolderHandler",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3GP\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\RestrictedAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Description",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{374DE290-123F-4565-9164-39C4925E467B}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CABFolder\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseOldHostResolutionOrder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4a\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{89D83576-6BD1-4c86-9454-BEB04E94C819}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\cr2file\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rtf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Roamable",
                "HKEY_CURRENT_USER\\.voc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.jpg\\(Default)",
                "HKEY_CURRENT_USER\\crwfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldDllVersionHigh",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mid\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\QueryForInfoTip",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WMA\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.odt\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
                "HKEY_CURRENT_USER\\.shn\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.tar\\(Default)",
                "HKEY_CURRENT_USER\\.spx\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Attributes",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AIFF\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\UseDropHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{e345f35f-9397-435c-8f95-4e922c26259e}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonVideo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Description",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Software\\SVar",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\rtffile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.png\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.TS\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.dct\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PreCreate",
                "HKEY_CURRENT_USER\\.rcd\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.vob\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PublishExpandedPath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CacheOptions",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.TTS\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ape\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\giffile\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Attributes",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Music",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CacheOptions",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.tiff\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\My Video",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TIFImage.Document\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORPARSING",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wmv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonMusic",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
                "HKEY_CURRENT_USER\\xvidfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.flac\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.voc\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.m4b\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\GlobalAssocChangedCounter",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\UseDropHandler",
                "HKEY_CURRENT_USER\\docfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Description",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\CLASS\\{4D36E96C-E325-11CE-BFC1-08002BE10318}\\UpperFilters",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Stream",
                "HKEY_CURRENT_USER\\.webm\\(Default)",
                "HKEY_CURRENT_USER\\webpfile\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\.srw\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\\*",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.caf\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\PerUserItem",
                "HKEY_CURRENT_USER\\jp2file\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\PreCreate",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Startup",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Category",
                "HKEY_CURRENT_USER\\TIFImage.Document\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
                "HKEY_CURRENT_USER\\wpfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesRecycleBin",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\CallForAttributes",
                "HKEY_CURRENT_USER\\.flac\\(Default)",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\AccessProviders\\MartaExtension",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\InfoTip",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CachePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\PublishExpandedPath",
                "HKEY_CURRENT_USER\\jp2file\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.rcd\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpeg\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\FXPresetsFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.flac\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\RestrictedAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Security",
                "HKEY_CURRENT_USER\\.xvid\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Icon",
                "HKEY_CURRENT_USER\\cr2file\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\NoFileFolderJunction",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\StreamResource",
                "HKEY_CURRENT_USER\\.divx\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\mpeg2file\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\.rec\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Stream",
                "HKEY_CURRENT_USER\\.mrw\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HasNavigationEnum",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParentFolder",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CacheOptions",
                "HKEY_CURRENT_USER\\srffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Security",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP3\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Security",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\CallForAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.gz\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.shn\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ADTS\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalizedName",
                "HKEY_CURRENT_USER\\mpeg2file\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.M2TS\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3G2\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{04731B67-D933-450a-90E6-4ACD2E9408FE}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3G2\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResource",
                "HKEY_CURRENT_USER\\exrfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Stream",
                "HKEY_CURRENT_USER\\bz2file\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.voc\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\RelativePath",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\CurrentVersion",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InfoTip",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{56784854-C6CB-462B-8169-88E350ACB882}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\PerUserItem",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Stream",
                "HKEY_CURRENT_USER\\rtffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PreCreate",
                "HKEY_CURRENT_USER\\.dss\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.voc\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter",
                "HKEY_CURRENT_USER\\.nrw\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY",
                "HKEY_CURRENT_USER\\.html\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.vox\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\RelativePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\FolderTypeID",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SyncMode5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.spx\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Stream",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.act\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ape\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HideInWebView",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\ParentFolder",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstallDateFirst",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsFORPARSING",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Attributes",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MP4\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Attributes",
                "HKEY_CURRENT_USER\\xvidfile\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\.mpeg2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Programs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\MapNetDriveVerbs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForInfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M2TS\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.3gp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.AAC\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.shn\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WAV\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PreCreate",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\StreamResource",
                "HKEY_CURRENT_USER\\https\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{9343812e-1c37-4a49-a12e-4b2d810d956b}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalRedirectOnly",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Roamable",
                "HKEY_CURRENT_USER\\.vob\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.vox\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\UseDropHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.3g2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.docx\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\PreCreate",
                "HKEY_CURRENT_USER\\FirefoxURL-E7CF176E110C211B\\ShellFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
                "HKEY_CURRENT_USER\\7zfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dct\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.WMV\\(Default)",
                "HKEY_CURRENT_USER\\CABFolder\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Category",
                "HKEY_CURRENT_USER\\NCH.MixPad.shn\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M2TS\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\PublishExpandedPath",
                "HKEY_CURRENT_USER\\.mpc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\Software\\NCH Software\\MixPad\\Settings\\InstalledByAdmin",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\StreamResource",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CacheRepair",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AU\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PreCreate",
                "HKEY_CURRENT_USER\\vobfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.asf\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.caf\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalizedName",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Programs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aifc\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\RelativePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wdp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Name",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.M2TS\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideInWebView",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Attributes",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MPEG\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\ParsingName",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Category",
                "HKEY_CURRENT_USER\\raffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mp3\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\TurnOffSPIAnimations",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Windows.IsoFile\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalizedName",
                "HKEY_CURRENT_USER\\Windows.IsoFile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.gsm\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Name",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CachePrefix",
                "HKEY_CURRENT_USER\\.nef\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalRedirectOnly",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.3G2\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\InitFolderHandler",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Windows.IsoFile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\FolderTypeID",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\(Default)",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
                "HKEY_CURRENT_USER\\.wv\\(Default)",
                "HKEY_CURRENT_USER\\sr2file\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HideFolderVerbs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.gif\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AVI\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HasNavigationEnum",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_INTERNET_SHELL_FOLDERS\\nchsetup.exe",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\CommonPictures",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\LocalRedirectOnly",
                "HKEY_CURRENT_USER\\tar.gzfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\LocalizedName",
                "HKEY_CURRENT_USER\\.oga\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalizedName",
                "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.M4A\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\ParsingName",
                "HKEY_CURRENT_USER\\NCH.MixPad.ds2\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\rtffile\\shell\\(Default)",
                "HKEY_CURRENT_USER\\Paint.Picture\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\SessionStartTimeDefaultDeltaSecs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.MOD\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.ape\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.MOV\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.mpc\\(Default)",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AU\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LDAP\\UseHostnameAsAlias",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\StreamResourceType",
                "HKEY_CURRENT_USER\\dvfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsFORPARSING",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\docxfile\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.crw\\(Default)",
                "HKEY_CURRENT_USER\\erffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{618736E0-3C3D-11CF-810C-00AA00389B71}\\ProxyStubClsid32\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\InitFolderHandler",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CachePath",
                "HKEY_CURRENT_USER\\giffile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MPEG\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.amr\\(Default)",
                "HKEY_CURRENT_USER\\.jp2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad\\UninstallString",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\MAIN\\FeatureControl\\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\\nchsetup.exe",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\LocalRedirectOnly",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CachePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
                "HKEY_CURRENT_USER\\gzfile\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\NCH.MixPad.mkv\\Shell\\(Default)",
                "HKEY_CURRENT_USER\\dngfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\QueryForInfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\QueryForOverlay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell",
                "HKEY_CURRENT_USER\\pngfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Category",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Stream",
                "HKEY_CURRENT_USER\\.ogv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsParseDisplayName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.mkv\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP3\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012019040920190410\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\PerUserItem",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
                "HKEY_CURRENT_USER\\srwfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\Roamable",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\IconsOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MP4\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.ds2\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.CDA\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.wma\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\RestrictedAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\Public",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0xFFFF",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\FolderTypeID",
                "HKEY_CURRENT_USER\\divxfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.dv\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\feedplat\\CachePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\Description",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CachePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.dss\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\DOMStore\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\LocalRedirectOnly",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\ietld\\CacheOptions",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\StreamResource",
                "HKEY_CURRENT_USER\\srwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.AIFF\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\HasNavigationEnum",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\PrivacIE:\\CacheRepair",
                "HKEY_CURRENT_USER\\.act\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{33E28130-4E1E-4676-835A-98395C3BC3BB}\\Stream",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.AVI\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Startup",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DFDF76A2-C82A-4D63-906A-5644AC457385}\\Description",
                "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CreateUriCacheSize",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\StreamResource",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsUniversalDelegate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Category",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.ASF\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\odtfile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\.gsm\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B97D20BB-F46A-4C97-BA10-5E3608430854}\\StreamResourceType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.doc\\(Default)",
                "HKEY_CURRENT_USER\\wpdfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\docxfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Roamable",
                "HKEY_CURRENT_USER\\.caf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Stream",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\NCH.MixPad.caf\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.avi\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\LocalizedName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.MOV\\shell\\(Default)",
                "HKEY_CURRENT_USER\\.mkv\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\InitFolderHandler",
                "HKEY_CURRENT_USER\\.ds2\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.aif\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Roamable",
                "HKEY_CURRENT_USER\\FirefoxHTML-E7CF176E110C211B\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\User Shell Folders\\Common Documents",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.wma\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE974D24-D9C6-4D3E-BF91-F4455120B917}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\ParsingName",
                "HKEY_CURRENT_USER\\rw2file\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Security_HKLM_only",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.ASF\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{82A5EA35-D9CD-47C5-9629-E15D2F714E6E}\\Icon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\Description",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\InitFolderHandler",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F7F1ED05-9F6D-47A2-AAAE-29D317C6F066}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HideOnDesktopPerUser",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\CachePrefix",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{DE92C1C7-837F-4F69-A3BB-86E631204A23}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}\\InfoTip",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\WantsAliasedNotifications",
                "HKEY_CURRENT_USER\\.ape\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\PerUserItem",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnablePunycode",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{3214FAB5-9757-4298-BB61-92A9DEAA44FF}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\FolderTypeID",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\https\\UserChoice\\Progid",
                "HKEY_CURRENT_USER\\dvfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1777F761-68AD-4D8A-87BD-30B759FA33DD}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{208D2C60-3AEA-1069-A2D7-08002B30309D}\\ShellFolder\\PinToNameSpaceTree",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\PreCreate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{0762D272-C50A-4BB0-A382-697DCD729B80}\\Icon",
                "HKEY_CURRENT_USER\\.amr\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TIFImage.Document\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\PublishExpandedPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.tgz\\(Default)",
                "HKEY_CURRENT_USER\\arwfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{2400183A-6185-49FB-A2D8-4A392A602BA3}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.au\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldDllVersionLow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\Desktop\\NameSpace\\{645FF040-5081-101B-9F08-00AA002F954E}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{374DE290-123F-4565-9164-39C4925E467B}\\ParsingName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\Security",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{B6EBFB86-6907-413C-9AF7-4FC2ABF07CC5}\\LocalRedirectOnly",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.TTS\\shell\\(Default)",
                "HKEY_CURRENT_USER\\odtfile\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\CLSID\\{871C5380-42A0-1069-A2EA-08002B30309D}\\ShellFolder\\HideInWebView",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\\Description",
                "HKEY_CURRENT_USER\\nrwfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{56784854-C6CB-462B-8169-88E350ACB882}\\InitFolderHandler",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\CacheLimit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.cda\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{ED4824AF-DCE4-45A8-81E2-FC7965083634}\\FolderTypeID",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{4BD8D571-6D19-48D3-BE97-422220080E43}\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\\Roamable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\PublishExpandedPath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\IETld\\IETldVersionHigh",
                "HKEY_CURRENT_USER\\WMP11.AssocFile.WAV\\Shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\WMP11.AssocFile.3GP\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{18989B1D-99B5-455B-841C-AB7C74E4DDFC}\\ParentFolder",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{5E6C858F-0E22-4760-9AFE-EA3317B67173}\\Attributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\jpegfile\\shell\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\\RelativePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\explorer\\FolderDescriptions\\{D65231B0-B2F1-4857-A4CE-A8E7C6EA7D27}\\Category"
            ],
            "directory_enumerated": [
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker\\*.*",
                "C:\\Windows\\SysWOW64",
                "C:\\Windows\\SysWOW64\\ieframe.dll",
                "C:\\Windows\\SysWOW64\\*.*",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\*.*",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\*.*",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds\\*.*",
                "C:\\Windows",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\*.*",
                "C:\\ProgramData\\NCH Software\\MixPad\\*.*",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\*.*",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\*.*"
            ],
            "directory_created": [
                "C:\\ProgramData\\NCH Software\\MixPad\\beatmaker",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Caches",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\testfolder",
                "C:\\Program Files (x86)\\NCH Software\\MixPad",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
                "C:\\Program Files (x86)\\NCH Software",
                "C:\\Users\\cuck\\Documents\\Mixpad Projects\\VST",
                "C:\\ProgramData\\NCH Software\\MixPad\\sounds",
                "C:\\ProgramData\\NCH Software\\MixPad",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
                "C:\\Users\\cuck\\Documents\\Mixpad Projects",
                "C:\\ProgramData\\NCH Software"
            ]
        },
        "first_seen": 1588963987.968,
        "ppid": 2740
    },
    {
        "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin",
        "process_name": "b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin",
        "pid": 2740,
        "summary": {
            "file_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat"
            ],
            "directory_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s"
            ],
            "dll_loaded": [
                "rpcrt4.dll",
                "kernel32.dll",
                "SETUPAPI.dll",
                "Cabinet.dll",
                "DEVRTL.dll"
            ],
            "file_failed": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe"
            ],
            "regkey_opened": [
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\",
                "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Rpc",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\",
                "HKEY_LOCAL_MACHINE\\System\\Setup"
            ],
            "file_written": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat"
            ],
            "file_deleted": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat"
            ],
            "directory_removed": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s"
            ],
            "file_exists": [
                "C:\\Windows\\inf\\"
            ],
            "file_opened": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab",
                "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls"
            ],
            "command_line": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe -installer \"C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin\" -instdata \"C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat\"",
                "\"C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe\" -installer \"C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin\" -instdata \"C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat\""
            ],
            "file_read": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.cab",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.cab"
            ],
            "regkey_read": [
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Generation",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Generation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\MaxRpcSize",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\ComputerName\\ActiveComputerName\\ComputerName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogLevel",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b5-70f9-11e8-b07b-806e6f6e6963}\\Data",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{3f5cc1b6-70f9-11e8-b07b-806e6f6e6963}\\Data",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogMaxFileSize",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OOBEInProgress",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogMask"
            ]
        },
        "first_seen": 1588963986.578125,
        "ppid": 2780
    },
    {
        "process_path": "C:\\Windows\\explorer.exe",
        "process_name": "explorer.exe",
        "pid": 1788,
        "summary": {
            "regkey_written": [
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:FMTID",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\IconSize",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\FFlags",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Sort",
                "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\IconStreams",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ColInfo",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\HRZR_PGYFRFFVBA",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCache",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByDirection",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\LanguageList",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\LastAdvertisement",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-1012",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PastIconsStream",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupView",
                "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\UserStartTime",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2\\Settings",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupByKey:PID",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\LogicalViewMode",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\Mode",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Streams\\Desktop\\TaskbarWinXP",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Hfref\\phpx\\NccQngn\\Ybpny\\Grzc\\a1f\\apufrghc.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts\\C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk"
            ],
            "dll_loaded": [
                "MsftEdit.dll",
                "C:\\Windows\\system32\\xmllite.dll",
                "C:\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll",
                "CRYPTSP.dll",
                "POWRPROF.DLL"
            ],
            "file_opened": [
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "C:\\Windows\\System32\\calc.exe",
                "C:\\ProgramData",
                "C:\\",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
                "c:\\program files (x86)\\internet explorer\\iexplore.exe",
                "c:\\program files (x86)\\mozilla firefox\\firefox.exe",
                "C:\\Users\\Public\\Pictures\\desktop.ini",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
                "C:\\Windows\\System32\\displayswitch.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
                "C:\\Program Files (x86)\\Mozilla Firefox\\",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows",
                "C:\\Users\\cuck\\Desktop\\desktop.ini",
                "C:\\Users\\Public\\Pictures",
                "C:\\Program Files (x86)\\windows media player\\wmplayer.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "C:\\Windows\\explorer.exe",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Firefox.lnk",
                "C:\\Windows\\System32\\en-US\\wfsr.dll.mui",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
                "C:\\Windows\\System32\\snippingtool.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\Users\\Public\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "C:\\Windows\\System32\\imageres.dll",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "C:\\Windows\\AppPatch\\sysmain.sdb",
                "\\\\?\\PIPE\\samr",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "C:\\Windows\\System32\\WFS.exe",
                "C:\\Users\\cuck\\Pictures",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming",
                "C:\\Program Files (x86)\\windows media player\\en-US\\wmplayer.exe.mui",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk",
                "C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\",
                "C:\\ProgramData\\Microsoft\\Windows",
                "C:\\Windows\\System32\\DeviceCenter.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "C:\\Users\\Public\\Desktop",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db",
                "C:\\Program Files (x86)\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk",
                "C:\\Program Files (x86)\\NCH Software\\",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "C:\\Users\\Public\\Desktop\\desktop.ini",
                "C:\\Users\\Public\\Documents\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk",
                "C:\\Program Files (x86)\\nch software\\MixPad\\mixpad.exe",
                "C:\\Program Files\\Windows Sidebar\\sidebar.exe",
                "C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe",
                "C:\\Windows\\resources\\Themes\\Aero\\Shell\\NormalColor\\ShellStyle.dll",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk",
                "C:\\Users",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db",
                "C:\\Windows\\System32\\xpsrchvw.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "C:\\Users\\desktop.ini",
                "C:\\Windows\\System32\\mspaint.exe",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk",
                "C:\\Users\\cuck",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories",
                "C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db",
                "C:\\Windows\\System32\\SnippingTool.exe",
                "C:\\Windows\\System32\\WFSR.dll",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Python 2.7",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs",
                "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
                "c:\\program files (x86)\\nch software\\MixPad\\mixpad.exe",
                "C:\\Windows\\System32\\rundll32.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
                "C:\\Users\\cuck\\AppData",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
                "C:\\Users\\cuck\\Desktop",
                "C:\\Windows\\System32\\en-US\\calc.exe.mui",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC",
                "C:\\Windows\\System32\\en-US\\DeviceCenter.dll.mui",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries",
                "C:\\Windows\\System32\\cmd.exe",
                "C:\\Users\\Public",
                "C:\\ProgramData\\Microsoft",
                "C:\\Windows\\System32\\StikyNot.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
                "C:\\Windows\\Branding\\ShellBrd\\shellbrd.dll",
                "C:\\Users\\cuck\\Pictures\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
                "c:\\program files (x86)\\internet explorer\\en-US\\iexplore.exe.mui",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk",
                "C:\\Windows\\System32\\mstsc.exe"
            ],
            "regkey_opened": [
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\cmd.exe\\TaskbarExceptionsIcons",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.ini",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104",
                "HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanmanServer\\DefaultSecurity",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.lnk",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\Products\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\explorer.exe\\TaskbarExceptionsIcons",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E",
                "HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ThumbnailCache",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\KindMap",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.library-ms",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\TaskbarExceptionsIcons",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.png",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Sharing",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StuckRects2",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\NewShortcuts",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.bmp",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8"
            ],
            "file_written": [
                "\\\\?\\PIPE\\samr"
            ],
            "regkey_deleted": [
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\GroupCollapseState",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemOrder",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Bags\\1\\Desktop\\ItemPos800x600x96(1)"
            ],
            "file_exists": [
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "C:\\Users\\cuck\\Desktop",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "C:\\Program Files (x86)\\NCH Software\\MixPad\\mixpad.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
                "C:\\Python27\\python.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms",
                "C:\\Users\\Public",
                "C:\\Users",
                "C:\\Users\\cuck\\Documents",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "C:\\Windows\\explorer.exe",
                "C:\\Users\\Public\\Documents",
                "C:\\Users\\cuck",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ThumbCacheToDelete",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "C:\\Users\\Public\\Desktop",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms",
                "C:\\Program Files (x86)\\NCH Software\\MixPad",
                "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db",
                "C:\\Python27\\pythonw.exe"
            ],
            "mutex": [
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwReaderRefs",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_32.db!dfMaintainer",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_256.db!dfMaintainer",
                "Local\\Shell.CMruPidlList",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_sr.db!dfMaintainer",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_1024.db!dfMaintainer",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!ThumbnailCacheInit",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_96.db!dfMaintainer",
                "Global\\C::Users:cuck:AppData:Local:Microsoft:Windows:Explorer:thumbcache_idx.db!rwWriterMutex"
            ],
            "file_failed": [
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db",
                "C:\\ProgramData\\Microsoft\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\desktop.ini"
            ],
            "guid": [
                "{6ccb7be0-6807-11d0-b810-00c04fd706ec}",
                "{4f6bcd94-c2a5-42ce-8dbc-31e794be4630}",
                "{7cc7aed8-290e-49bc-8945-c1401cc9306c}",
                "{14ce31dc-abc2-484c-b061-cf3416aed8ff}",
                "{a4341687-7593-47aa-9554-4b0ffc8b2214}",
                "{688c934d-0c26-40f6-8d29-d56d72c76b48}",
                "{3ce74de4-53d3-4d74-8b83-431b3828ba53}",
                "{ea69859a-db5b-4c4a-8a8f-ae9759027534}",
                "{05a232fd-2bfb-4349-9d48-4787f317f50a}",
                "{000214fa-0000-0000-c000-000000000046}",
                "{529a9e6b-6587-4f23-ab9e-9c7d683e3c50}",
                "{660b90c8-73a9-4b58-8cae-355b7f55341b}",
                "{4657278a-411b-11d2-839a-00c04fd918d0}",
                "{ae054212-3535-4430-83ed-d501aa6680e6}",
                "{9b63616c-36b2-46bc-959f-c1593952d19b}",
                "{1a1f4206-0688-4e7f-be03-d82ec69df9a5}",
                "{c3acefb5-f69d-4905-938f-fcadcf4be830}",
                "{42aedc87-2188-41fd-b9a3-0c966feabec1}",
                "{71d222e1-432f-429e-8c13-b6dafde5077a}",
                "{00000000-0000-0000-c000-000000000046}",
                "{b8967f85-58ae-4f46-9fb2-5d7904798f4b}",
                "{00000146-0000-0000-c000-000000000046}",
                "{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}",
                "{76765b11-3f95-4af2-ac9d-ea55d8994f1a}",
                "{8be2d872-86aa-4d47-b776-32cca40c7018}",
                "{de5bf786-477a-11d2-839d-00c04fd918d0}",
                "{0c733a8a-2a1c-11ce-ade5-00aa0044773d}",
                "{33c53a50-f456-4884-b049-85fd643ecfed}",
                "{2fb499a3-cfce-480f-a5f3-2453db7a2b7a}",
                "{111f7c32-0546-4227-8b7f-c53a0b114a0f}",
                "{00000323-0000-0000-c000-000000000046}",
                "{5e078e03-8265-4bbe-9487-d242edbef910}",
                "{7d39402f-5b52-4b34-b528-b95f66927e1d}",
                "{75121952-e0d0-43e5-9380-1d80483acf72}",
                "{a4b544a1-438d-4b41-9325-869523e2d6c7}",
                "{603d3800-bd81-11d0-a3a5-00c04fd706ec}",
                "{14074e0b-7216-4862-96e6-53cada442a56}",
                "{ab8902b4-09ca-4bb6-b78d-a8f59079a8d5}",
                "{8ded7393-5db1-475c-9e71-a39111b0ff67}",
                "{1f02b6c5-7842-4ee6-8a0b-9a24183a95ca}",
                "{f678fcde-eb44-4b6e-9b75-cc4a661f5263}",
                "{bbd20037-bc0e-42f1-913f-e2936bb0ea0c}",
                "{934d4698-6a59-48f8-9f29-9fb30670320e}",
                "{64bc32b5-4eec-4de7-972d-bd8bd0324537}",
                "{4df0c730-df9d-4ae3-9153-aa6b82e9795a}",
                "{3c708557-c99d-4fa3-9231-56518418b4e4}",
                "{1f3427c8-5c10-4210-aa03-2ee45287d668}",
                "{9cfc2df3-6ba3-46ef-a836-e519e81f0ec4}",
                "{aa80e801-2021-11d2-93e0-0060b067b86e}",
                "{f676c15d-596a-4ce2-8234-33996f445db1}",
                "{4657278b-411b-11d2-839a-00c04fd918d0}",
                "{49f371e1-8c5c-4d9c-9a3b-54a6827f513c}",
                "{46a6eeff-908e-4dc6-92a6-64be9177b41c}",
                "{ed6ae9cf-ad35-46b7-ac30-3f8b9eb5349f}",
                "{000214e6-0000-0000-c000-000000000046}",
                "{50ef4544-ac9f-4a8e-b21b-8a26180db13f}",
                "{edb5f444-cb8d-445a-a523-ec5ab6ea33c7}",
                "{807c1e6c-1d00-453f-b920-b61bb7cdd997}",
                "{db6efb73-5153-43b7-8078-c6ffc4c0238c}",
                "{1685d4ab-a51b-4af1-a4e5-cee87002431d}"
            ],
            "file_read": [
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini",
                "\\\\?\\PIPE\\samr",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk",
                "C:\\Users\\Public\\Desktop\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk",
                "C:\\Users\\Public\\Pictures\\desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk",
                "C:\\Users\\cuck\\Desktop\\desktop.ini",
                "C:\\Users\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Firefox.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk",
                "C:\\Users\\cuck\\Pictures\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini",
                "C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "C:\\Users\\Public\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini",
                "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini",
                "C:\\Program Files (x86)\\desktop.ini",
                "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk",
                "C:\\Users\\Public\\Documents\\desktop.ini"
            ],
            "regkey_read": [
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRecentDocsMenu",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0A191B45599EEB74CA305184EA3C2A94\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\PinToNameSpaceTree",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\67C12EF40671B7342A2F990919031A57\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\90860AAA7BD3DE34EB32330DD29CAD62\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{O229QR1P-N467-ON30-0O40-4OQN36QR0NQ5}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_PowerButtonAction",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\InProcServer32\\ThreadingModel",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\rhqprqvg.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\QueryForOverlay",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Erzbgr Qrfxgbc Pbaarpgvba.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowPrinters_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-699399860-4089948139-3198924279-1001\\ProfileImagePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.Qrsnhyg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\UseDropHandler",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecordedTV",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CF65AB832507EDB4BB357F9D8E0431BD\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E85E64F0A7FC58E47A87E5AB98A6F2DD\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\StartMenuFavorites",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D04063BE69797D4D8505462827A0D19\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HideFolderVerbs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.lnk\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\LocalizedString",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.library-ms\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\IsHostApp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf Sverjnyy jvgu Nqinaprq Frphevgl.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\NoFileFolderJunction",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.bmp\\Content Type",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Erzbgr Nffvfgnapr.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\cbfgzvt.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{14074E0B-7216-4862-96E6-53CADA442A56} {000214FA-0000-0000-C000-000000000046} 0xFFFF",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Genafpevcgvba Fbsgjner.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\NeverShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\AccListViewV6",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zntavsl.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\vFPFV Vavgvngbe.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-19\\ProfileImagePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FavccvatGbby.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Ivqrb Pncgher Fbsgjner.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Rkcerff Ohea PQ, QIQ be Oyh-Enl.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\System.HideOnDesktop",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\DisableProcessIsolation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\LocalizedString",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Nhqvb Rqvgvat Fbsgjner.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{15067OP1-P5N8-425R-37P6-SN0O891674S9}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\863CA21BBA4DFCE489FDF96EAB898616\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1E82F31DC0D05AA4CB291B7BAA23FC8E\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Zhygvgenpx Erpbeqvat Fbsgjner.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B4BBDDC88CEE4DD439E8BB261CE222A8\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Zrqvn Cynlre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSMHelp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyMusic_ShouldShow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{6P8R83OO-12R1-934R-R703-RR23S8S87742}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.FgvpxlAbgrf",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AdminToolsRoot",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jbeqcnq.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeOut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0411990C889EE9B47BB0B5D356564877\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\Content Type",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider Types\\Type 001\\Name",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D3541DFF9B79C584284E8981624C04CB\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\FavoritesRemovedChanges",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zngu Vachg Cnary.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.SFGAOFlags",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.IconPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesChanges",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeDelay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.bmp\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyDocs_ShouldShow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{PPR15160-R9R0-8NPN-3ON3-587QPQ389RO3}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\System.DateModified",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{53123611-QN37-S8QN-SNP9-03R76QO9Q64Q}",
                "HKEY_CURRENT_USER\\Paint.Picture\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7BF7ABF4D25C03F4582D4BC3082FB208\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\services\\LanmanServer\\DefaultSecurity\\SrvsvcDefaultShareInfo",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A7E9995902A24964C9C5D461E1C86F19\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplayNarrow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8691BCC36FF121849A90B085BFAF5E5E\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\shell\\open\\NeverDefault",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetConn_ShouldShow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesChanges",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\IsShortcut",
                "HKEY_CURRENT_USER\\pngfile\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemFolderNameDisplay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\NoOplock",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FE056816E41FD2F4CACD03E7A2CA2E6E\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\PerceivedType",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.TrggvatFgnegrq",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\DefaultIcon\\OpenIcon",
                "HKEY_CURRENT_USER\\Paint.Picture\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoFavoritesMenu",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowSetProgramAccessAndDefaults",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Gnfx Fpurqhyre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 13",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Auto Update\\UAS\\UpdateCount",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\qsethv.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\ArgjbexCebwrpgvba.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\103857F24A2EDA54A800A41FA570861F\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\IsShortcut",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P1P6S8NP-40N3-0S5P-146S-65N9QP70OOO4}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AE5A0040C41ACA642AF6DB16F4D2F638\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.FileName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecordedTV",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\freivprf.zfp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Taskband\\FavoritesRemovedChanges",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartMenu_Balloon_Time",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\GlobalAssocChangedCounter",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuMyMusic",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\UseInProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1F3427C8-5C10-4210-AA03-2EE45287D668}\\InProcServer32\\LoadWithoutCOM",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95E2C34402A93A14FA8CB3420B85375C\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\unregmp2.exe,-4",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84BBAC70FB00B6046881B55CB3122F0F\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_TopMatch",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\shell\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{2427PQ55-7R36-2QS4-5570-077N30544ON0}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FF9FDEA72CD9DDC47A6DAB85F9F76B81\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU Size",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoChangeStartMenu",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\System.HideOnDesktop",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Pnyphyngbe.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OO044OSQ-25O7-2SNN-22N8-6371N93R0456}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Qvfx Pyrnahc.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\296744B7EBFEB2741A47781AE6E32269\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere (64-ovg).yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnCynlre32",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Jvaqbjf Rkcybere.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetHood",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\UseDefaultTile",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecentDocs_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Search\\Preferences\\WriteLog",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\62293D511DB84E5489074C5AFA18E882\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{S6Q2N6N5-8NPO-9Q22-1R2O-O2P42251S9NO}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{89D83576-6BD1-4c86-9454-BEB04E94C819}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7636A94AA21EDBB48B6AFFB17E5907B8\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{98D99750-0B8A-4c59-9151-589053683D73}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Rkcybere.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\FuncrPbyyrpgbe.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8ECC347096FA78C4E8291F449F71E16E\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\IsShortcut",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Jvaqbjf CbjreFuryy Zbqhyrf.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\DisableProcessIsolation",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{OQ3S924R-55SO-N1ON-9QR6-O50S9S2460NP}",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\DeviceCenter.dll,-1000",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E429E5BC27530F4786481EC687D9EC9\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\UseOutOfProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\shellex\\LibraryDescriptionHandler\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-20\\ProfileImagePath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89DF671CDA74E9D4EB10275B10D5CF3F\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfcnvag.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\Jvaqbjf Wbheany.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\NeverShowExt",
                "HKEY_CURRENT_USER\\pngfile\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCacheSMP",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\System.FileAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\IsShortcut",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pnyp.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy VFR (k86).yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemNameDisplay",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Znvagranapr\\Perngr Erpbirel Qvfp.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\895805CC90C04694887EF6BD140A622D\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfen.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\DefaultIcon\\OpenIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemPathDisplay",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzcbarag Freivprf.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Jvaqbjf Zrqvn Cynlre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\89BBBC8A0D32B014696C4BA3C20CDD34\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\QueryForInfoTip",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHomegroup_ShouldShow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\VQYR (Clguba THV).yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\17E23EF6C775D324DB90E0E2B7D1CA72\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4626147D107665540A84D43A5908E74D\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\DefaultFeature",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Fvqrone.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F3F5824C-AD58-4728-AF59-A1EBE3392799}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4486F7CE8F022FB4EB0154C5226C27A0\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Vagrearg Rkcybere.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qsethv.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F05C8358C56DAD54BB81D0A11DD52F41\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Nhqvb Svyr Pbairegre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{94R7SNQ0-ROP6-50Q3-SR2R-83849404R34O}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zboflap.rkr",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SNTSearch.dll,-505",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9D22CD4619F5DBC499A083AAD70FE7B3\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9DD74C0626DC33C479C1929714AB5295\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\DefaultIcon\\OpenIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\FbhaqErpbeqre.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{84BA9C75-6C22-4590-9BDC-5584EADE039E}\\ProxyStubClsid32\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9BA984AD4F03E284382FFBB7A68BEE27\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\002F6EFFA8A0A40498F3035BD153685A\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecordedTV_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\NeverShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\efgehv.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\zvc.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\DefaultIcon\\OpenIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\717591555BCB1604BA9777E8A55D0E41\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\shell\\open\\command\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\CLSID\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\UseInProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsUniversalDelegate",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bqopnq32.rkr",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\displayswitch.exe,-320",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemNameDisplay",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_MinMFU",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuMyGames",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.library-ms\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9753E3A35E3BDFB468DF95B5D19C8A04\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\R7PS176R110P211O",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemPathDisplayNarrow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\System.HideOnDesktop",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\InProcServer32\\InprocServer32",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{Q4N262QQ-PR44-Q105-S36O-9Q77N8PO65N4}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\DefaultFeature",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\Content Type",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE462B32EFD81040A184ED17E00452B\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AutoCascade",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecentDocs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{98D99750-0B8A-4C59-9151-589053683D73}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3C68656E520593A45925ADFB41F821B5\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowUser",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsAliasedNotifications",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\KCF Ivrjre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D725CB8E57307E64EB574E04214D8B5F\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Vagrearg Rkcybere.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.png\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClearRecentDocsOnExit",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4514EC211C8947C4B9BA24F353AFFD50\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{1F3427C8-5C10-4210-AA03-2EE45287D668} {000214E6-0000-0000-C000-000000000046} 0xFFFF",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_CURRENT_USER\\pngfile\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8020CF43278B2644190F51544810251E\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\KindMap\\.bmp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Punenpgre Znc.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Zrqvn Pragre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowDownloads_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\UseOutOfProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A0256FF64030E0746A4AA95D3FFD0BE4\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C4040CC509FB0DC4886F590DDF6B6132\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Sharing\\UsersShareName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{e345f35f-9397-435c-8f95-4e922c26259e}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\System.HideOnDesktop",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHelp_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0EF52818FCE3E7B488427C1F8266654E\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyMusic",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7C0477DE66D1A6749864FCE02A6DCB6C\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_SortByName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\NoOplock",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\{35786D3C-B075-49b9-88DD-029876E11C01}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{645FF040-5081-101B-9F08-00AA002F954E}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{NN198O3P-PQ8P-7QR1-98Q1-O460S637193O}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0F4DC93AAA8AD1D448BC4E6A207F4FE0\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{04731B67-D933-450A-90E6-4ACD2E9408FE}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{27P77Q2R-7216-P38P-487P-9OR63P7NS32P}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\erpqvfp.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\HomeGroup\\UIStatusCache\\UIStatus",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ArgCebw.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\EnableShareDenyNone",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\{B725F130-47EF-101A-A5F1-02608C9EEBAC} 14",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeIn",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.lnk\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\UseOutOfProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CE5B971A0DBB8FD4F83AE0DADC348104\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\DisableProcessIsolation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\InProcServer32\\LoadWithoutCOM",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHelp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.library-ms\\Content Type",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{031E4825-7B94-4DC3-B131-E946B44C8DD5}\\System.HideOnDesktop",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.VagreargRkcybere.64Ovg",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\InProcServer32\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Rirag Ivrjre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\inifile\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Gnoyrg CP\\GnoGvc.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowPrinters",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\LocalizedString",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\freivprf.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.bmp\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\FavoritesRemovedChanges",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{9R3995NO-1S9P-4S13-O827-48O24O6P7174}\\GnfxOne\\Sversbk.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\315C767EFC72D8445B1D2D16F72653F0\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetPlaces",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{7SR8Q22N-SO1Q-N8OR-01R3-6P8693961R6R}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\NeverShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\FuncrPbyyrpgbe.rkr",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\mstsc.exe,-4000",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Sversbk.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\DefaultIcon\\OpenIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{89D83576-6BD1-4C86-9454-BEB04E94C819}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Clguba (pbzznaq yvar).yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.FileName",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Vaibvpr Fbsgjner.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\System.HideOnDesktop",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jrypbzr Pragre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\NoOplock",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Directory\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\UseInProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\UseOutOfProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MyComputer\\NameSpace\\DelegateFolders\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\rkcybere.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Zhygvgenpx Erpbeqvat Fbsgjner.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_EnableDragDrop",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyMusic",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsParseDisplayName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1A0857155A8EF604FA5D1648CF382DC7\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlots",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\StartMenuFavorites",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\QIQ Znxre\\QIQZnxre.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetPlaces_ShouldShow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{0N1NQ1P3-Q571-1494-P0OP-O2SR80509993}",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\WindowsAnytimeUpgradeUI.exe,-1",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\MUI\\StringCacheSettings\\StringCacheGeneration",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JS.zfp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Nalgvzr Hctenqr.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\Attributes",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Pbzzba Svyrf\\Zvpebfbsg Funerq\\Vax\\GnoGvc.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.png\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider\\Microsoft Strong Cryptographic Provider\\Type",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyDocs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRun",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\FXSRESM.dll,-114",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\System.HideOnDesktop",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Ivqrb Svyr Pbairegre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_NotifyNewApps",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\NodeSlot",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\63B1AF366905AF641BA514CCBAE803C4\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows Search\\SystemIndexNormalization",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B06071FE021ECB04E8B3BF1E39AD5BB3\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flap Pragre.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Clguba27\\clguba.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowControlPanel",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Flfgrz Gbbyf\\Cevingr Punenpgre Rqvgbe.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{9343812e-1c37-4a49-a12e-4b2d810d956b}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}\\InProcServer32\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowUser",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowControlPanel",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\InProcServer32\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRun",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\UseExecutableForTaskbarGroupIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\BE0BD5097A638224EB0DAAE870267F03\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fgvpxl Abgrf.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JSF.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage2\\ProgramsCacheTBP",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.ini\\Content Type",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\040E2A370D6DB2F45AE45A0032BC2179\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B04950B5EC5C924B8F428B5484A2720\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSMMyDocs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\DefaultIcon\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pzq.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\P:\\Hfref\\Choyvp\\Qrfxgbc\\ZvkCnq Zhygvgenpx Erpbeqvat Fbsgjner.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowControlPanel_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E40FDF839772BEB41AC977860DBB4853\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Cnvag.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Npprffvovyvgl\\Fcrrpu Erpbtavgvba.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\CLSID\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyPics",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetConn",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Nhqvb Svyr Pbairegre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.library-ms\\PerceivedType",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemPathDisplay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FBEAAA6C37E8AF24B87AAEA0047433BD\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{daf95313-e44d-46af-be1b-cbacea2c3065}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Abgrcnq.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\84C584688CFC74A4E9D36E5EE2E02FA7\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Nhqvb Rqvgvat Fbsgjner.yax",
                "HKEY_CURRENT_USER\\pngfile\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowVideos",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cresbeznapr Zbavgbe.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Qngn Fbheprf (BQOP).yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\53F08364FFD17F14B8FD7CA7F52FAE76\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\StartMenuFavorites_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A38B883C-1682-497E-97B0-0A3A9E801682}\\DisableProcessIsolation",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfNalgvzrHctenqrHV.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsFORDISPLAY",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\cevagznantrzrag.zfp",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{7P5N40RS-N0SO-4OSP-874N-P0S2R0O9SN8R}\\APU Fbsgjner\\ZvkCnq\\zvkcnq.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\CLSID\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ErzbgrQrfxgbc",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\ZvkCnq Zhygvgenpx Erpbeqvat Fbsgjner.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Fbhaq Erpbeqre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\285499F23409ED14FB4A01230F5DFA91\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{450D8FBA-AD25-11D0-98A8-0800361B1103}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\bfx.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_TrackProgs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\3D197E722531D614AB40C182904D9A31\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Paint.Picture\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Paint.Picture\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre Ercbegf.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuMorePrograms",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_LargeMFUIcons",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.IsPinnedToNameSpaceTree",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9F5ED6B416EF0A1448D94799D0FF20BA\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Flfgrz Pbasvthengvba.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\04C56B5D827A9194FA2CBFD014EAD0DA\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\puneznc.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\MapNetDriveVerbs",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{2N3SOQ22-PN4P-1656-08N9-84S586O334RN}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyComputer",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyPics_ShouldShow",
                "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PromotedIconCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{FE5AFCF2-E681-4ADA-9703-EF39B8ECB9BF}\\UseInProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{59D6F31B-FA6B-4FBA-8AF3-197FF140C714}\\ProxyStubClsid32\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHelp",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E44E5D18-0652-4508-A4E2-8A090067BCB0}\\DefaultIcon\\OpenIcon",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyComputer",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\abgrcnq.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\qvfcynlfjvgpu.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AutoCascade",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{F3F5824C-AD58-4728-AF59-A1EBE3392799}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\LocalizedString",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\NoOplock",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PropertySystem\\PropertyHandlers\\.lnk\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Favccvat Gbby.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowPrinters",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowSetProgramAccessAndDefaults",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\Upgrade",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{P804OON7-SN5S-POS7-8O55-2096R5S972PO}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetPlaces",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Cevag Znantrzrag.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\UseDoubleClickTimer",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Erfgber.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}\\InProcServer32\\LoadWithoutCOM",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\System32\\ie4uinit.exe,-734",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\958C4A0DE6C8D5C428C6E9D875BC33B6\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F356843B045CC0A4BA0D83C1D85AAAFD\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.NamespaceCLSID",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Zntavsl.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\C1EF68F348457B246A0AD0C18B3079AF\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\ShellEx\\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf Wbheany\\Wbheany.rkr",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\SnippingTool.exe,-15051",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf Snk naq Fpna.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.png\\Content Type",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F591EF48DE97A00428A5BC1AFFFAA868\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.Kind",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowDownloads",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\4FE19F224928A59468049F045950CB08\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\UseInProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\669C9DC1419C0F240B35B36B99AAB50C\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.IconPath",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\NoOplock",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\kcfepuij.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\2FA90A429E82313489DAA2E2C2F0872C\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Pbzznaq Cebzcg.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowSetProgramAccessAndDefaults_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemFolderNameDisplay",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\aneengbe.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NN47365-O2O3-1961-69RO-S866R376O12S}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\87C48B95924E3294FBC1766C9225DD0C\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\92F9143E715DEF045A539256438E41FB\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Clguba 2.7\\Zbqhyr Qbpf.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F2-21D7-11D4-BDAF-00C04F60B9F0}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.Jvaqbjf.ZrqvnPragre",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Gnfx Fpurqhyre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B1D5EA6004F809D48B117CE563261011\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\UseOutOfProcHandlerCache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\335F6F64CD461D9469519574D34757EB\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\cbjrefuryy.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AdminToolsRoot",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyDocs",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.ItemPathDisplayNarrow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfvasb32.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F41A458014D57E54E8DBD0B0CBC361A2\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.ItemFolderPathDisplayNarrow",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Ivqrb Rqvgvat Fbsgjner.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{11016101-E366-4D22-BC06-4ADA335C892B}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\ZqFpurq.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\WantsFORPARSING",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\shellex\\IconHandler\\(Default)",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{8NOQ94SO-R7Q6-84N6-N997-P918RQQR0NR5}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Frphevgl Pbasvthengvba Znantrzrag.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\CLSID\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_TopMatch",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 34",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoUserFolderInStartMenu",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ForceRunOnStartMenu",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7814D91294731FF4DBBB840810BEB3BB\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\OobeFldr.dll,-33056",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRun_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FE547D6F0D72534A80F89C4AB727618\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyGames",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{QNN168QR-4306-P8OP-8P11-O596240OQQRQ}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowNetConn",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\pngfile\\IsShortcut",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\Fgernzvat Nhqvb Erpbeqre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}\\DefaultIcon\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\33AB3CD4D27277545B5A93CD4ECB96B4\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Program Files\\Windows Sidebar\\sidebar.exe,-1005",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Applications\\mixpad.exe\\NoStartPage",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\B690B72A999998C47B5F93C94A8D43B2\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\DontLoadAuthUIInExplorer",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{645FF040-5081-101B-9F08-00AA002F954E}",
                "HKEY_CURRENT_USER\\pngfile\\IsShortcut",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_AdminToolsRoot_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HideOnDesktopPerUser",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\30FAECE2400494D4FB69207288EB5B73\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.SFGAOFlags",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyPics",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_PowerButtonAction",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nhqvb Eryngrq Cebtenzf\\PQ Evccre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D0CBB37A94C46943A90AC5008CF1CC9\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHomegroup",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5E3DAE67887931944BCD7171908FA775\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowVideos_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\D5FD8239A83FE564F97379EA15CE8CB6\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Jvaqbjf CbjreFuryy\\Jvaqbjf CbjreFuryy (k86).yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Aneengbe.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{00021401-0000-0000-C000-000000000046}\\OverrideFileSystemProperties\\System.Kind",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\FontSubstitutes\\Segoe UI",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\System.HideOnDesktop",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\HomeGroup\\UIStatusCache\\OnlyMember",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Paint.Picture\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\\DefaultIcon\\OpenIcon",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\BrowseInPlace",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowMyComputer_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\HideDesktopIcons\\NewStartPanel\\{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}",
                "HKEY_CURRENT_USER\\Paint.Picture\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNTSecurity",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{6Q809377-6NS0-444O-8957-N3773S02200R}\\Jvaqbjf AG\\Npprffbevrf\\jbeqcnq.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{Q65231O0-O2S1-4857-N4PR-N8R7P6RN7Q27}\\JvaqbjfCbjreFuryy\\i1.0\\CbjreFuryy_VFR.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\System.DateModified",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{EEA0C191-DDA8-4656-8FC4-72BDEDBA8A78}\\OverrideFileSystemProperties\\System.IsPinnedToNameSpaceTree",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowDownloads",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{E345F35F-9397-435C-8F95-4E922C26259E}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\0FD387D006FD9734FA65B249F36DE42A\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\P:\\Hfref\\Choyvp\\Qrfxgbc\\APU Fhvgr.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSMMyPictures",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\E116C831A95AB5B4787CE3086FE83631\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\FFFA6DF7EA9EDFC45A1F02FE6DF8F067\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\search\\NoStaticDefaultVerb",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\8D38A6F5FC8262149A9FAAE8C621EE3F\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\A558E619ABC4CE5479C1DA5070EFBF81\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{9343812E-1C37-4A49-A12E-4B2D810D956B}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Installer\\Features\\586A8930D8DF3B6489614C37910BFCF5\\TclTk",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\95EE473833000D6409127D1B85882AC9\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\586A8930D8DF3B6489614C37910BFCF5\\Features\\TclTk",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\LocalizedString",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Zbovyvgl Pragre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\IsShortcut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\965742E8F65116F4BB2CB01341464FA7\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeOut",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{14074E0B-7216-4862-96E6-53CADA442A56}\\DisableProcessIsolation",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\73964AA699D5B5140ADC41ED3F7DB38A\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pyrnazte.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartMenu_Balloon_Time",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_NotifyNewApps",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowRecentDocs",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\explorer.exe,-7021",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowVideos",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\text\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{N77S5Q77-2R2O-44P3-N6N2-NON601054N51}\\Npprffbevrf\\Npprffvovyvgl\\Ba-Fperra Xrlobneq.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\RestrictedAttributes",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\CLSID\\{59031A47-3F72-44A7-89C5-5595FE6B30EE}\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.lnk\\ShellEx\\{000214F9-0000-0000-C000-000000000046}\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-18\\ProfileImagePath",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Pbzchgre Znantrzrag.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\qvfcynlfjvgpu.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HasNavigationEnum",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\EEF8AA9EB45B5DB4BBE46B8634C910CD\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.png\\AlwaysShowExt",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Jvaqbjf Rnfl Genafsre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\AD21E12039BB3BC47B1938BC4ABDFEE2\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{04731B67-D933-450a-90E6-4ACD2E9408FE}\\SuppressionPolicy",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18F5DB38C45303843B06B1B5025E4820\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoStartMenuNetworkPlaces",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{1F3427C8-5C10-4210-AA03-2EE45287D668}\\InProcServer32\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowHomegroup",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\034A8F8E06031EF46BCB4C10469098E5\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\HideInWebView",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\\SortOrderIndex",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_SortByName",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CDBF699A8F2EAC2438564C3D50E9E638\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_ShowUser_ShouldShow",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\LibraryFolder\\shellex\\IconHandler\\(Default)",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@\"%windir%\\System32\\ie4uinit.exe\",-732",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\sud.dll,-1",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_SearchFiles",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{16709PSR-1Q53-82PQ-32N5-3ORN44577N7O}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\APU Fbsgjner Fhvgr\\Nppbhagvat Fbsgjner.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.lnk\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Nqzvavfgengvir Gbbyf\\Zrzbel Qvntabfgvpf Gbby.yax",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\vfpfvpcy.rkr",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeIn",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\AlwaysShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\9E40FDB6330EBA242A4BD5F4FDD0B803\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Desktop\\NameSpace\\{26EE0668-A00A-44D7-9371-BEB064C98683}\\SuppressionPolicy",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\BagMRU\\MRUListEx",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Flfgrz Vasbezngvba.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\lnkfile\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\.exe\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}\\ShellFolder\\CallForAttributes",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\16AC40BE991DF1643B2800729063B2F9\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\1C1ED53B8F25FD248955C15232E46886\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zvtjvm\\zvtjvm.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{7OO28ORO-Q4NN-033N-Q47P-30007S98P1PO}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetworkConnections",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\\SortOrderIndex",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\zfpbasvt.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Jvaqbjf QIQ Znxre.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\CB2182A03B6B11341A1F09A021991CE1\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\AllFilesystemObjects\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\F21868A51A175874BB819DCA5FAA40A3\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartPage\\StartPanel_FadeDelay",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@%ProgramFiles%\\Windows Sidebar\\sidebar.exe,-1012",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.bmp\\DocObject",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\Zvpebfbsg.NhgbTrarengrq.{S039R83P-O81R-O6QR-S04P-7S67S6Q0N140}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Defaults\\Provider\\Microsoft Strong Cryptographic Provider\\Image Path",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Unknown\\NeverShowExt",
                "HKEY_CURRENT_USER\\Local Settings\\MuiCache\\2\\52C64B7E\\@C:\\Windows\\system32\\XpsRchVw.exe,-102",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\75B368B60C908BA4E87C31F66B02F3F0\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\5B5C8B2FB95B57147954C18085D53ACE\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\7FEB01D34D0F67E4F9CD810B432C1B91\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\18D84E9490A485948A17A1F02CDAA62A\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Components\\11E2BA15171FE704B98E7505E58D7749\\586A8930D8DF3B6489614C37910BFCF5",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\\Count\\{0139Q44R-6NSR-49S2-8690-3QNSPNR6SSO8}\\Npprffbevrf\\Flfgrz Gbbyf\\Erfbhepr Zbavgbe.yax",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete\\Client\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Folder\\BrowseInPlace",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\exefile\\DocObject",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\.exe\\NeverShowExt",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\SystemFileAssociations\\image\\IsShortcut",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\P:\\Hfref\\phpx\\NccQngn\\Ybpny\\Grzc\\a1f\\apufrghc.rkr",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist\\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\\Count\\{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\\pbzrkc.zfp"
            ],
            "directory_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer"
            ]
        },
        "first_seen": 1588963989.921125,
        "ppid": 1740
    },
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1588963986.34375,
        "ppid": 376
    }
]

Signatures

[
    {
        "markcount": 24,
        "families": [],
        "description": "Queries for the computername",
        "severity": 1,
        "marks": [
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963988.062,
                    "tid": 1948,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 202
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963989.75,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 2166
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963989.859,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 3220
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963989.875,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 3350
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.281,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 10260
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.281,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 10416
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.281,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 10571
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.296,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 10726
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.296,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 10881
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.312,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11045
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.312,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11201
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.328,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11356
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.328,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11511
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.343,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11666
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.343,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11821
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.343,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 11976
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.359,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 12131
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.359,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 12286
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963990.406,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 12441
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963994.203,
                    "tid": 1948,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 13486
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963992.968125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 2394
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963993.015125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 2443
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963996.906125,
                    "tid": 2508,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 6547
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetComputerNameW",
                    "return_value": 1,
                    "arguments": {
                        "computer_name": "CUCKPC"
                    },
                    "time": 1588963997.968125,
                    "tid": 2508,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 8070
            }
        ],
        "references": [],
        "name": "antivm_queries_computername"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Collects information to fingerprint the system (MachineGuid, DigitalProductId, SystemBiosDate)",
        "severity": 1,
        "marks": [
            {
                "category": "registry",
                "ioc": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\MachineGuid",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "recon_fingerprint"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Tries to locate where the browsers are installed",
        "severity": 1,
        "marks": [
            {
                "category": "file",
                "ioc": "C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "locates_browser"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available",
        "severity": 1,
        "marks": [
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GlobalMemoryStatusEx",
                    "return_value": 1,
                    "arguments": {},
                    "time": 1588963987.531125,
                    "tid": 2500,
                    "flags": {}
                },
                "pid": 2740,
                "type": "call",
                "cid": 551
            }
        ],
        "references": [],
        "name": "antivm_memory_available"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "The file contains an unknown PE resource name possibly indicative of a packer",
        "severity": 1,
        "marks": [
            {
                "category": "resource name",
                "ioc": "None",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "pe_unknown_resource_name"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "One or more processes crashed",
        "severity": 1,
        "marks": [
            {
                "call": {
                    "category": "__notification__",
                    "status": 1,
                    "stacktrace": [],
                    "raw": [
                        "stacktrace"
                    ],
                    "api": "__exception__",
                    "return_value": 0,
                    "arguments": {
                        "stacktrace": "0\nx\n2\nc\n1\n1\n9\n0\n4\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0\n\n\n0\nx\n3\n0",
                        "registers": {
                            "r14": 237106680,
                            "r9": 0,
                            "rcx": 48,
                            "rsi": 237106680,
                            "r10": 0,
                            "rbx": 98185776,
                            "rdi": 236567232,
                            "r11": 192936176,
                            "r8": 2007859596,
                            "rdx": 8796092404304,
                            "rbp": 192933520,
                            "r15": 262145,
                            "r12": 262144,
                            "rsp": 192933400,
                            "rax": 46209280,
                            "r13": 192934913
                        },
                        "exception": {
                            "instruction_r": "83 3d 8d d1 02 00 00 68 53 12 69 fb c7 44 24 04",
                            "instruction": "cmp dword ptr [rip + 0x2d18d], 0",
                            "exception_code": "0xc0000005",
                            "symbol": "",
                            "address": "0x2c11904"
                        }
                    },
                    "time": 1588964000.765125,
                    "tid": 1296,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 12973
            }
        ],
        "references": [],
        "name": "raises_exception"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Allocates read-write-execute memory (usually to unpack itself)",
        "severity": 2,
        "marks": [
            {
                "call": {
                    "category": "process",
                    "status": 1,
                    "stacktrace": [],
                    "api": "NtAllocateVirtualMemory",
                    "return_value": 0,
                    "arguments": {
                        "process_identifier": 964,
                        "region_size": 4096,
                        "stack_dep_bypass": 0,
                        "stack_pivoted": 0,
                        "heap_dep_bypass": 0,
                        "protection": 64,
                        "process_handle": "0xffffffff",
                        "allocation_type": 4096,
                        "base_address": "0x00520000"
                    },
                    "time": 1588963988.093,
                    "tid": 1948,
                    "flags": {
                        "protection": "PAGE_EXECUTE_READWRITE",
                        "allocation_type": "MEM_COMMIT"
                    }
                },
                "pid": 964,
                "type": "call",
                "cid": 290
            }
        ],
        "references": [],
        "name": "allocates_rwx"
    },
    {
        "markcount": 3,
        "families": [],
        "description": "Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation",
        "severity": 2,
        "marks": [
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetDiskFreeSpaceExW",
                    "return_value": 1,
                    "arguments": {
                        "root_path": "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer",
                        "free_bytes_available": 23506427904,
                        "total_number_of_free_bytes": 0,
                        "total_number_of_bytes": 0
                    },
                    "time": 1588964001.171125,
                    "tid": 2808,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 14193
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetDiskFreeSpaceExW",
                    "return_value": 1,
                    "arguments": {
                        "root_path": "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer",
                        "free_bytes_available": 23506427904,
                        "total_number_of_free_bytes": 0,
                        "total_number_of_bytes": 0
                    },
                    "time": 1588964003.343125,
                    "tid": 588,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 17063
            },
            {
                "call": {
                    "category": "misc",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GetDiskFreeSpaceExW",
                    "return_value": 1,
                    "arguments": {
                        "root_path": "C:\\Users\\cuck\\AppData\\Local\\Microsoft\\Windows\\Explorer",
                        "free_bytes_available": 23506427904,
                        "total_number_of_free_bytes": 0,
                        "total_number_of_bytes": 0
                    },
                    "time": 1588964003.437125,
                    "tid": 588,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 17189
            }
        ],
        "references": [],
        "name": "antivm_disk_size"
    },
    {
        "markcount": 41,
        "families": [],
        "description": "Creates a shortcut to an executable file",
        "severity": 2,
        "marks": [
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Multitrack Recording Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Streaming Audio Recorder.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\Public\\Desktop\\NCH Suite.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Capture Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video Editing Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Video File Converter.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio Editing Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Invoice Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio File Converter.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\Desktop\\NCH Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\Public\\Desktop\\NCH Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Audio File Converter.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\MixPad Multitrack Recording Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Firefox.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Multitrack Recording Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\Favorites\\NCH Software Download Site.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Transcription Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\Audio Editing Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Express Burn CD, DVD or Blu-Ray.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\NCH Software Suite\\Accounting Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\Desktop\\NCH Suite.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\Public\\Desktop\\MixPad Multitrack Recording Software.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Audio Related Programs\\CD Ripper.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "creates_shortcut"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Drops a binary and executes it",
        "severity": 2,
        "marks": [
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "dropper"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Drops an executable to the user AppData folder",
        "severity": 2,
        "marks": [
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "exe_appdata"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Checks adapter addresses which can be used to detect virtual network interfaces",
        "severity": 2,
        "marks": [
            {
                "call": {
                    "category": "network",
                    "status": 0,
                    "stacktrace": [],
                    "last_error": 0,
                    "nt_status": -1073741275,
                    "api": "GetAdaptersAddresses",
                    "return_value": 111,
                    "arguments": {
                        "flags": 0,
                        "family": 2
                    },
                    "time": 1588963990.546,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 13267
            }
        ],
        "references": [],
        "name": "antivm_network_adapters"
    },
    {
        "markcount": 2,
        "families": [],
        "description": "The binary likely contains encrypted or compressed data indicative of a packer",
        "severity": 2,
        "marks": [
            {
                "entropy": 7.999278034897316,
                "section": {
                    "size_of_data": "0x0017c400",
                    "virtual_address": "0x00004000",
                    "entropy": 7.999278034897316,
                    "name": ".rsrc",
                    "virtual_size": "0x0017c29c"
                },
                "type": "generic",
                "description": "A section with a high entropy has been found"
            },
            {
                "entropy": 0.9960707269155207,
                "type": "generic",
                "description": "Overall entropy of this PE file is high"
            }
        ],
        "references": [
            "http:\/\/www.forensickb.com\/2013\/03\/file-entropy-explained.html",
            "http:\/\/virii.es\/U\/Using%20Entropy%20Analysis%20to%20Find%20Encrypted%20and%20Packed%20Malware.pdf"
        ],
        "name": "packer_entropy"
    },
    {
        "markcount": 8,
        "families": [],
        "description": "Checks for the Locally Unique Identifier on the system for a suspicious privilege",
        "severity": 2,
        "marks": [
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963997.390125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 6955
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963997.562125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 7118
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963997.609125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 7219
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963997.718125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 7384
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963997.921125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 7955
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963998.140125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 8315
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963998.156125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 8418
            },
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "LookupPrivilegeValueW",
                    "return_value": 1,
                    "arguments": {
                        "system_name": "",
                        "privilege_name": "SeShutdownPrivilege"
                    },
                    "time": 1588963998.265125,
                    "tid": 1828,
                    "flags": {}
                },
                "pid": 1788,
                "type": "call",
                "cid": 8478
            }
        ],
        "references": [],
        "name": "privilege_luid_check"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Queries for potentially installed applications",
        "severity": 2,
        "marks": [
            {
                "call": {
                    "category": "registry",
                    "status": 1,
                    "stacktrace": [],
                    "api": "RegOpenKeyExW",
                    "return_value": 0,
                    "arguments": {
                        "access": "0x00000001",
                        "base_handle": "0x80000002",
                        "key_handle": "0x00000e8c",
                        "regkey": "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad",
                        "regkey_r": "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MixPad",
                        "options": 0
                    },
                    "time": 1588963990.562,
                    "tid": 344,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 13328
            }
        ],
        "references": [],
        "name": "queries_programs"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Installs itself for autorun at Windows startup",
        "severity": 3,
        "marks": [
            {
                "type": "generic",
                "reg_key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce\\MixPadInstall",
                "reg_value": "C:\\Users\\cuck\\AppData\\Local\\Temp\\b1c5487bc658ed443ec06887c9e0f572d90faeb10e53ce2e86126dd09297d0ca.bin"
            }
        ],
        "references": [],
        "name": "persistence_autorun"
    },
    {
        "markcount": 2,
        "families": [],
        "description": "Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config",
        "severity": 3,
        "marks": [
            {
                "call": {
                    "category": "registry",
                    "status": 1,
                    "stacktrace": [],
                    "api": "NtSetValueKey",
                    "return_value": 0,
                    "arguments": {
                        "index": 0,
                        "key_handle": "0x00000000000014c0",
                        "value": "\u0014\u0000\u0000\u0000\u0005\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0010\u0000\u0000\u0000\u0014\u0000\u0000\u0000IL \u0006\u0010\u0000$\u0000\u0018\u0000\u0010\u0000\u0010\u0000\u00ff\u00ff\u00ff\u00ff!\u0010\u00ff\u00ff\u00ff\u00ff\u00ff\u00ff\u00ff\u00ffBM6\u0000\u0000\u0000\u0000\u0000\u0000\u00006\u0000\u0000\u0000(\u0000\u0000\u0000\u0010\u0000\u0000\u0000@\u0002\u0000\u0000\u0001\u0000 \u0000\u0000\u0000\u0000\u0000\u0000\u0090\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
                        "reg_type": 3,
                        "regkey": "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\PastIconsStream"
                    },
                    "time": 1588963998.156125,
                    "tid": 1828,
                    "flags": {
                        "reg_type": "REG_BINARY"
                    }
                },
                "pid": 1788,
                "type": "call",
                "cid": 8345
            },
            {
                "call": {
                    "category": "registry",
                    "status": 1,
                    "stacktrace": [],
                    "api": "NtSetValueKey",
                    "return_value": 0,
                    "arguments": {
                        "index": 0,
                        "key_handle": "0x00000000000012f4",
                        "value": "\u0014\u0000\u0000\u0000\u0007\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0004\u0000\u0000\u0000\u0014\u0000\u0000\u0000{\u0000S\u00003\u00008\u0000O\u0000S\u00004\u00000\u00004\u0000-\u00001\u0000Q\u00004\u00003\u0000-\u00004\u00002\u0000S\u00002\u0000-\u00009\u00003\u00000\u00005\u0000-\u00006\u00007\u0000Q\u0000R\u00000\u0000O\u00002\u00008\u0000S\u0000P\u00002\u00003\u0000}\u0000\\\u0000r\u0000k\u0000c\u0000y\u0000b\u0000e\u0000r\u0000e\u0000.\u0000r\u0000k\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u00e4\u0007\u0005\u0000F\u0000b\u0000y\u0000i\u0000r\u0000 \u0000C\u0000P\u0000 \u0000v\u0000f\u0000f\u0000h\u0000r\u0000f\u0000:\u0000 \u00001\u0000 \u0000z\u0000r\u0000f\u0000f\u0000n\u0000t\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u000e\u0000\u0000\u0000v\u00ae x\u00e3#)B\u0082\u00c1\u00e4\u001c\u00b6}[\u009c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00b3\u0086;4\u00e6\u00ee\u00d4\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\r !\u008f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\u0000S\u00003\u00008\u0000O\u0000S\u00004\u00000\u00004\u0000-\u00001\u0000Q\u00004\u00003\u0000-\u00004\u00002\u0000S\u00002\u0000-\u00009\u00003\u00000\u00005\u0000-\u00006\u00007\u0000Q\u0000R\u00000\u0000O\u00002\u00008\u0000S\u0000P\u00002\u00003\u0000}\u0000\\\u0000r\u0000k\u0000c\u0000y\u0000b\u0000e\u0000r\u0000e\u0000.\u0000r\u0000k\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000d\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u00e4\u0007\u0005\u0000F\u0000c\u0000r\u0000n\u0000x\u0000r\u0000e\u0000f\u0000:\u0000 \u00006\u00007\u0000%\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u000f\u0000\u0000\u0000s\u00ae x\u00e3#)B\u0082\u00c1\u00e4\u001c\u00b6}[\u009c\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0086\u00e2\u009e\u00956\u0005\u00d4\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\r !\u008f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000{\u0000S\u00003\u00008\u0000O\u0000S\u00004\u00000\u00004\u0000-\u00001\u0000Q\u00004\u00003\u0000-\u00004\u00002\u0000S\u00002\u0000-\u00009\u00003\u00000\u00005\u0000-\u00006\u00007\u0000Q\u0000R\u00000\u0000O\u00002\u00008\u0000S\u0000P\u00002\u00003\u0000}\u0000\\\u0000r\u0000k\u0000c\u0000y\u0000b\u0000e\u0000r\u0000e\u0000.\u0000r\u0000k\u0000r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\u00c0\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u00e4\u0007\u0005\u0000H\u0000a\u0000v\u0000q\u0000r\u0000a\u0000g\u0000v\u0000s\u0000v\u0000r\u0000q\u0000 \u0000a\u0000r\u0000g\u0000j\u0000b\u0000e\u0000x\u0000 \u0000A\u0000b\u0000 \u0000V\u0000a\u0000g\u0000r\u0000e\u0000a\u0000r\u0000g\u0000 \u0000n\u0000p\u0000p\u0000r\u0000f\u0000f\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000",
                        "reg_type": 3,
                        "regkey": "HKEY_CURRENT_USER\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\TrayNotify\\IconStreams"
                    },
                    "time": 1588963998.156125,
                    "tid": 1828,
                    "flags": {
                        "reg_type": "REG_BINARY"
                    }
                },
                "pid": 1788,
                "type": "call",
                "cid": 8347
            }
        ],
        "references": [],
        "name": "creates_largekey"
    },
    {
        "markcount": 3,
        "families": [],
        "description": "Deletes executed files from disk",
        "severity": 3,
        "marks": [
            {
                "category": "file",
                "ioc": "",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchsetup.exe",
                "type": "ioc",
                "description": null
            },
            {
                "category": "file",
                "ioc": "C:\\Users\\cuck\\AppData\\Local\\Temp\\n1s\\nchdata.dat",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "deletes_executed_files"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Expresses interest in specific running processes",
        "severity": 3,
        "marks": [
            {
                "category": "process: potential process injection target",
                "ioc": "explorer.exe",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "process_interest"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Detects the presence of Wine emulator",
        "severity": 3,
        "marks": [
            {
                "call": {
                    "category": "system",
                    "status": 0,
                    "stacktrace": [],
                    "last_error": 0,
                    "nt_status": -1073741515,
                    "api": "LdrGetProcedureAddress",
                    "return_value": 3221225785,
                    "arguments": {
                        "ordinal": 0,
                        "module": "kernel32",
                        "module_address": "0x75bb0000",
                        "function_address": "0x01298c08",
                        "function_name": "wine_get_unix_file_name"
                    },
                    "time": 1588963988.062,
                    "tid": 1948,
                    "flags": {}
                },
                "pid": 964,
                "type": "call",
                "cid": 165
            }
        ],
        "references": [],
        "name": "antiemu_wine"
    }
]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 546,
            "time": 3.0791289806365967,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 7602,
            "time": 9.375730991363525,
            "dport": 138,
            "sport": 138
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 9446,
            "time": 3.0120489597320557,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 9774,
            "time": 1.0446619987487793,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 10102,
            "time": 3.020009994506836,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 10430,
            "time": 1.6655759811401367,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 10758,
            "time": -0.09635090827941895,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 11086,
            "time": 21.073303937911987,
            "dport": 5355,
            "sport": 55880
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 11406,
            "time": 1.5800259113311768,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 30816,
            "time": 1.065938949584961,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 39200,
            "time": 3.112494945526123,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "1891f148a5517a4e31a96cd87b86ac12e6d1a9009d138586a0efafb7e43cad51",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "b9c1c5cca662c2abbda2cb45765b36155e9e7a37c49a36433bee452363638143",
    "irc": [],
    "https_ex": []
}

Screenshots

Error Messages

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

And now some shameless self promotion ;)

Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

• Privacy Policy