---

HKEY_CLASSES_ROOT\Local Settings\MuiCache\3b\B1A07F78\	mod
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-300	REG_SZ	Windows Defender Antivirus	add
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-380	REG_SZ	Некритические файлы, используемые программой Windows Defender Antivirus	add
@%SystemRoot%\System32\DATACLEN.DLL,-1010	REG_SZ	Файлы журнала установки	add
@%SystemRoot%\System32\DATACLEN.DLL,-1011	REG_SZ	Файлы, созданные Windows	add
@%SystemRoot%\System32\DATACLEN.DLL,-1045	REG_SZ	Внимание! Это файлы из вашей личной папки "Загрузки". Выберите этот вариант, если необходимо удалить все. При этом не учитывается ваша конфигурация функции "Контроль памяти".	add
@%systemroot%\system32\domgmt.dll,-103	REG_SZ	Файлы оптимизации доставки	add
@%systemroot%\system32\domgmt.dll,-104	REG_SZ	Файлы оптимизации доставки — это файлы, которые ранее были загружены на компьютер и которые могут быть удалены, если не используются службой оптимизации доставки.	add
@%systemroot%\system32\scavengeui.dll,-1000	REG_SZ	Файлы резервной копии пакета обновления	add
@%systemroot%\system32\scavengeui.dll,-1001	REG_SZ	Windows сохраняет старые версии файлов, обновленных с помощью пакета обновления. В случае удаления этих файлов пакет обновления затем будет невозможно удалить.	add
@%systemroot%\system32\scavengeui.dll,-1002	REG_SZ	Очистка обновлений Windows	add
@%systemroot%\system32\scavengeui.dll,-1003	REG_SZ	Windows хранит копии всех установленных обновлений из Центра обновления Windows даже после установки их новых версий. При очистке старые и ненужные версии обновлений удаляются или сжимаются. (Возможно, вам потребуется перезагрузить компьютер.)	add
@%systemroot%\system32\setupcln.dll,-1000	REG_SZ	Временные файлы установки Windows	add
@%systemroot%\system32\setupcln.dll,-1001	REG_SZ	Файлы установки, которые использует программа установки Windows.  Эти файлы остаются после процесса установки и могут быть удалены без последствий.	add
@%SystemRoot%\system32\utcutil.dll,-301	REG_SZ	Файлы базы данных средства просмотра диагностических данных	add
@%SystemRoot%\system32\utcutil.dll,-302	REG_SZ	Файлы, используемые для средства просмотра диагностических данных.	add
@%SystemRoot%\system32\wer.dll,-305	REG_SZ	Диагностические данные, полученные на основе отчетов об ошибках системы Windows и отзывов о ней	add
@%SystemRoot%\system32\wer.dll,-306	REG_SZ	Файлы с диагностическими данными, созданные на основе ошибок системы Windows и отзывов пользователей о ней.	add
@%SystemRoot%\system32\werfault.exe,-100	REG_SZ	Файлы дампа памяти для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-101	REG_SZ	Удаление файлов дампа памяти для системных ошибок.	add
@%SystemRoot%\system32\werfault.exe,-102	REG_SZ	Файлы мини-дампа для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-103	REG_SZ	Удаление файлов мини-дампа для системных ошибок.	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-120	REG_SZ	Документ Microsoft Word 97–2003	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-205	REG_SZ	Word 2016	add
@C:\Program Files\Common Files\system\wab32res.dll,-10100	REG_SZ	Контакты	add
@C:\Windows\System32\fsquirt.exe,-2343	REG_SZ	Устройство Bluetooth	add
@C:\Windows\system32\FXSRESM.dll,-120	REG_SZ	Получатель факса	add
@C:\Windows\System32\ieframe.dll,-12385	REG_SZ	Панель избранного	add
@C:\Windows\system32\netshell.dll,-1200	REG_SZ	Сетевые подключения 	add
@C:\Windows\System32\occache.dll,-1070	REG_SZ	Загруженные файлы программ	add
@C:\Windows\System32\occache.dll,-1071	REG_SZ	В папке "Загруженные файлы программ" временно сохраняются элементы ActiveX и приложения Java, автоматически загружаемые из Интернета при просмотре некоторых страниц.	add
@C:\Windows\System32\occache.dll,-1072	REG_SZ	&Просмотреть файлы	add
@C:\Windows\system32\zipfldr.dll,-10195	REG_SZ	Сжатая ZIP-папка	add
@efscore.dll,-101	REG_SZ	Владение файлами	add
@sendmail.dll,-21	REG_SZ	Рабочий стол (создать ярлык)	add
@sendmail.dll,-4	REG_SZ	Адресат	add
@windows.storage.dll,-21825	REG_SZ	Объемные объекты	add
@windows.storage.dll,-34575	REG_SZ	Документы	add
@windows.storage.dll,-34582	REG_SZ	Пленка	add
@windows.storage.dll,-34583	REG_SZ	Сохраненные фотографии	add
@windows.storage.dll,-34584	REG_SZ	Музыка	add
@windows.storage.dll,-34595	REG_SZ	Изображения	add
@windows.storage.dll,-34620	REG_SZ	Видео	add
@zipfldr.dll,-10148	REG_SZ	Сжатая ZIP-папка	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastein.ru\	add
(Default)	REG_DWORD	0x000001e6 (486)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000001e6 (486)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x000000b8 (184)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\	mod
(Default)	REG_DWORD	0x000024e9 (9449)	old
	REG_DWORD	0x00002787 (10119)	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000000b8 (184)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastein.ru\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Voices\	add
DefaultTokenId	REG_SZ	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Voices\Tokens\MSTTS_V110_ruRU_IrinaM	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\ACGStatus\	add
ACGPolicyState	REG_DWORD	0x00000008 (8)	add
DynamicCodePolicy	REG_BINARY	05 00 00 00 	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus\	add
CIPolicyState	REG_DWORD	0x00000000 (0)	add
SignaturePolicy	REG_BINARY	06 00 00 00 	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\	mod
d3	a4	70	27	c8	55	dd	01								
e0	65	69	ec	ca											
CIStatusTimestamp	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\Favorites\	mod
ea	07	0a	00	02	00	06	00	13	00	12	00	32	00	4d	02
										2b		0c		03	
LastCounted	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\	mod
StoreFormMetaData	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 	old
	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 2365079081218371163 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\	mod
01	00	00	00	c6	c8	15	3b	70	dc	8b	72	68	0d	64	64
				c4	b0	bb	12	76	9c	33	b5	46	65	80	6b
73	36	dc	8e	6e	87	61	75	84	30	38	1e	35	61	f0	23
a9	66	ac	08	cc	4e		e5	6a	d2	47	15	83	93	74	4b
23	4b	c3	91	4e	19	48	0c	db	0a	f1	4d	28	22	c0	3d
39	6c	7d	cf	0c	8e	25	27	9d	24	95	2e	f6	6c	fe	7f
73	5d											 ... (64)
79	35											 ... (64)
ProtectedGlobalExtensionSetting	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\	mod
{B10C3329-75C8-465B-9C8E-B02770065715}	REG_DWORD	0x00000000 (0)	add
{FC3DACBE-D0F4-4E51-BCBB-19C26EB3625B}	REG_DWORD	0x00000000 (0)	del
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingDelete\	mod
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{48DD6C35-827D-4AD3-B01A-DF89E1EBE060}.dat	REG_DWORD	0x00000000 (0)	del
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{EABF2BEA-3F6E-4ECC-92ED-496DC4C6C714}.dat	REG_DWORD	0x00000000 (0)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI\	mod
NewTabPageFlightMUID	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac54e0b84404cb49699262cf9ef678d	new
e0	96	09	1f	c7	55	dd	01								
00	a7	10	72	ca											
NewTabPageFlightReceivedTime	REG_BINARY		mod
NewTabPageFlightWebIG	REG_SZ	6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	6ac54e0b84404cb49699262cf9ef678d	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\WebRuntimeExtensions\EventStore\	mod
Session	REG_QWORD	1c 00 00 00 00 00 00 00 	old
	REG_QWORD	1e 00 00 00 00 00 00 00 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\AppExtension\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\InputApp_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
ICT	REG_QWORD	4e bc c4 32 08 55 dd 01 	old
	REG_QWORD	1f de 73 27 ca 55 dd 01 	new
ITT	REG_QWORD	9e b8 d8 32 08 55 dd 01 	old
	REG_QWORD	b3 7d 86 27 ca 55 dd 01 	new
PCT	REG_QWORD	5c 1a ae 32 08 55 dd 01 	old
	REG_QWORD	8e 3d 60 27 ca 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\ApplicationFrame\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
2c	00	00	00	02	00	00	00	03	00	00	00	00	83	ff	ff
												ff	ff		
00	83	ff	ff	ff	ff	ff	ff	ff	ff	ff	ff	28	00	00	00
ff	ff											50			
20	00	00	00	58	03	00	00	a1	02	00	00				
40				80				c1							
Positions	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\HAM\AUI\MicrosoftEdge\V1\LU\	mod
ICT	REG_QWORD	d0 76 70 81 c7 55 dd 01 	old
	REG_QWORD	68 41 62 69 ca 55 dd 01 	new
PCT	REG_QWORD	a5 1d 13 27 c8 55 dd 01 	old
	REG_QWORD	d7 fa 4c ec ca 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\PersistedTitleBarData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
BackgroundColor	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
BackgroundColorInactive	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonBackgroundColor	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
ButtonBackgroundColorInactive	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
ButtonHoverBackgroundColor	REG_DWORD	0x19000000 (419430400)	old
	REG_DWORD	0xffbbbbbb (4290493371)	new
ButtonPressedBackgroundColor	REG_DWORD	0x33000000 (855638016)	old
	REG_DWORD	0xffa6a6a6 (4289111718)	new
ForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\HAM\AUI\Microsoft.MicrosoftOfficeHub\V1\LU\	mod
PCT	REG_QWORD	4e 87 71 0e 14 55 dd 01 	old
	REG_QWORD	c3 69 db 6d cc 55 dd 01 	new
PTT	REG_QWORD	37 7f c0 1e 14 55 dd 01 	old
	REG_QWORD	6d f3 c4 91 cc 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Wallet_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	d2 54 41 9e 06 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	0b c3 17 c2 06 55 dd 01 	old
	REG_QWORD	d7 48 e8 7c cc 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	c6 6a 50 42 c8 55 dd 01 	old
	REG_QWORD	cd c0 eb 56 cd 55 dd 01 	new
PTT	REG_QWORD	28 0b 74 42 c8 55 dd 01 	old
	REG_QWORD	3c 54 fc 56 cd 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\HAM\AUI\ppleae38af2e007f4358a809ac99a64a67c1\V1\LU\	mod
PCT	REG_QWORD	81 ed 4d 42 c8 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	c6 64 77 51 c8 55 dd 01 	old
	REG_QWORD	00 ef 29 59 cc 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsStore_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	a4 c0 0b 27 c8 55 dd 01 	old
	REG_QWORD	9a 71 b0 55 cc 55 dd 01 	new
PTT	REG_QWORD	21 02 15 66 c8 55 dd 01 	old
	REG_QWORD	bb 26 89 79 cc 55 dd 01 	new
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\	mod
09	00	00	00	00	00	00	00	01	00	00	00	05	00	00	00
				01				00							
06	00	00	00	08	00	00	00	07	00	00	00	02	00	00	00
															
04	00	00	00	03	00	00	00	ff	ff	ff	ff				
															
MRUListEx	REG_BINARY		mod
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02											 ... (94)
												 ... (96)
NodeSlots	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\	mod
03	00	00	00	02	00	00	00	01	00	00	00	04	00	00	00
01				03				02							
00	00	00	00	ff	ff	ff	ff								
															
MRUListEx	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\	mod
5	REG_BINARY	66 00 31 00 00 00 00 00 cc 56 7d 66 10 00 50 52 4f 43 45 53 7e 31 00 00 4e 00 09 00 04 00 ef be cc 56 7c 66 46 5d c3 99 2e 00 00 00 96 a2 01 00 00 00  ... (104)	add
01	00	00	00	03	00	00	00	04	00	00	00	02	00	00	00
05				01				03				04			
00	00	00	00	ff	ff	ff	ff								
02				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\5\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x0000005f (95)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\	mod
1	REG_BINARY	56 00 31 00 00 00 00 00 45 5d 14 99 10 00 72 65 73 75 6c 74 73 00 40 00 09 00 04 00 ef be 45 5d 14 99 46 5d c3 99 2e 00 00 00 e9 64 01 00 00 00 09 00  ... (88)	add
00	00	00	00	ff	ff	ff	ff								
01				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\1\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x00000060 (96)	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\9\	mod
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
01				02											
MRUListEx	REG_BINARY		mod
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\3b\B1A07F78\	mod
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-300	REG_SZ	Windows Defender Antivirus	add
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-380	REG_SZ	Некритические файлы, используемые программой Windows Defender Antivirus	add
@%SystemRoot%\System32\DATACLEN.DLL,-1010	REG_SZ	Файлы журнала установки	add
@%SystemRoot%\System32\DATACLEN.DLL,-1011	REG_SZ	Файлы, созданные Windows	add
@%SystemRoot%\System32\DATACLEN.DLL,-1045	REG_SZ	Внимание! Это файлы из вашей личной папки "Загрузки". Выберите этот вариант, если необходимо удалить все. При этом не учитывается ваша конфигурация функции "Контроль памяти".	add
@%systemroot%\system32\domgmt.dll,-103	REG_SZ	Файлы оптимизации доставки	add
@%systemroot%\system32\domgmt.dll,-104	REG_SZ	Файлы оптимизации доставки — это файлы, которые ранее были загружены на компьютер и которые могут быть удалены, если не используются службой оптимизации доставки.	add
@%systemroot%\system32\scavengeui.dll,-1000	REG_SZ	Файлы резервной копии пакета обновления	add
@%systemroot%\system32\scavengeui.dll,-1001	REG_SZ	Windows сохраняет старые версии файлов, обновленных с помощью пакета обновления. В случае удаления этих файлов пакет обновления затем будет невозможно удалить.	add
@%systemroot%\system32\scavengeui.dll,-1002	REG_SZ	Очистка обновлений Windows	add
@%systemroot%\system32\scavengeui.dll,-1003	REG_SZ	Windows хранит копии всех установленных обновлений из Центра обновления Windows даже после установки их новых версий. При очистке старые и ненужные версии обновлений удаляются или сжимаются. (Возможно, вам потребуется перезагрузить компьютер.)	add
@%systemroot%\system32\setupcln.dll,-1000	REG_SZ	Временные файлы установки Windows	add
@%systemroot%\system32\setupcln.dll,-1001	REG_SZ	Файлы установки, которые использует программа установки Windows.  Эти файлы остаются после процесса установки и могут быть удалены без последствий.	add
@%SystemRoot%\system32\utcutil.dll,-301	REG_SZ	Файлы базы данных средства просмотра диагностических данных	add
@%SystemRoot%\system32\utcutil.dll,-302	REG_SZ	Файлы, используемые для средства просмотра диагностических данных.	add
@%SystemRoot%\system32\wer.dll,-305	REG_SZ	Диагностические данные, полученные на основе отчетов об ошибках системы Windows и отзывов о ней	add
@%SystemRoot%\system32\wer.dll,-306	REG_SZ	Файлы с диагностическими данными, созданные на основе ошибок системы Windows и отзывов пользователей о ней.	add
@%SystemRoot%\system32\werfault.exe,-100	REG_SZ	Файлы дампа памяти для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-101	REG_SZ	Удаление файлов дампа памяти для системных ошибок.	add
@%SystemRoot%\system32\werfault.exe,-102	REG_SZ	Файлы мини-дампа для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-103	REG_SZ	Удаление файлов мини-дампа для системных ошибок.	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-120	REG_SZ	Документ Microsoft Word 97–2003	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-205	REG_SZ	Word 2016	add
@C:\Program Files\Common Files\system\wab32res.dll,-10100	REG_SZ	Контакты	add
@C:\Windows\System32\fsquirt.exe,-2343	REG_SZ	Устройство Bluetooth	add
@C:\Windows\system32\FXSRESM.dll,-120	REG_SZ	Получатель факса	add
@C:\Windows\System32\ieframe.dll,-12385	REG_SZ	Панель избранного	add
@C:\Windows\system32\netshell.dll,-1200	REG_SZ	Сетевые подключения 	add
@C:\Windows\System32\occache.dll,-1070	REG_SZ	Загруженные файлы программ	add
@C:\Windows\System32\occache.dll,-1071	REG_SZ	В папке "Загруженные файлы программ" временно сохраняются элементы ActiveX и приложения Java, автоматически загружаемые из Интернета при просмотре некоторых страниц.	add
@C:\Windows\System32\occache.dll,-1072	REG_SZ	&Просмотреть файлы	add
@C:\Windows\system32\zipfldr.dll,-10195	REG_SZ	Сжатая ZIP-папка	add
@efscore.dll,-101	REG_SZ	Владение файлами	add
@sendmail.dll,-21	REG_SZ	Рабочий стол (создать ярлык)	add
@sendmail.dll,-4	REG_SZ	Адресат	add
@windows.storage.dll,-21825	REG_SZ	Объемные объекты	add
@windows.storage.dll,-34575	REG_SZ	Документы	add
@windows.storage.dll,-34582	REG_SZ	Пленка	add
@windows.storage.dll,-34583	REG_SZ	Сохраненные фотографии	add
@windows.storage.dll,-34584	REG_SZ	Музыка	add
@windows.storage.dll,-34595	REG_SZ	Изображения	add
@windows.storage.dll,-34620	REG_SZ	Видео	add
@zipfldr.dll,-10148	REG_SZ	Сжатая ZIP-папка	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastein.ru\	add
(Default)	REG_DWORD	0x000001e6 (486)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000001e6 (486)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x000000b8 (184)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\	mod
(Default)	REG_DWORD	0x000024e9 (9449)	old
	REG_DWORD	0x00002787 (10119)	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000000b8 (184)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastein.ru\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Voices\	add
DefaultTokenId	REG_SZ	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Voices\Tokens\MSTTS_V110_ruRU_IrinaM	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\ACGStatus\	add
ACGPolicyState	REG_DWORD	0x00000008 (8)	add
DynamicCodePolicy	REG_BINARY	05 00 00 00 	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus\	add
CIPolicyState	REG_DWORD	0x00000000 (0)	add
SignaturePolicy	REG_BINARY	06 00 00 00 	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\	mod
d3	a4	70	27	c8	55	dd	01								
e0	65	69	ec	ca											
CIStatusTimestamp	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\Favorites\	mod
ea	07	0a	00	02	00	06	00	13	00	12	00	32	00	4d	02
										2b		0c		03	
LastCounted	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\	mod
StoreFormMetaData	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 	old
	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 2365079081218371163 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\	mod
01	00	00	00	c6	c8	15	3b	70	dc	8b	72	68	0d	64	64
				c4	b0	bb	12	76	9c	33	b5	46	65	80	6b
73	36	dc	8e	6e	87	61	75	84	30	38	1e	35	61	f0	23
a9	66	ac	08	cc	4e		e5	6a	d2	47	15	83	93	74	4b
23	4b	c3	91	4e	19	48	0c	db	0a	f1	4d	28	22	c0	3d
39	6c	7d	cf	0c	8e	25	27	9d	24	95	2e	f6	6c	fe	7f
73	5d											 ... (64)
79	35											 ... (64)
ProtectedGlobalExtensionSetting	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\	mod
{B10C3329-75C8-465B-9C8E-B02770065715}	REG_DWORD	0x00000000 (0)	add
{FC3DACBE-D0F4-4E51-BCBB-19C26EB3625B}	REG_DWORD	0x00000000 (0)	del
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingDelete\	mod
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{48DD6C35-827D-4AD3-B01A-DF89E1EBE060}.dat	REG_DWORD	0x00000000 (0)	del
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{EABF2BEA-3F6E-4ECC-92ED-496DC4C6C714}.dat	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI\	mod
NewTabPageFlightMUID	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac54e0b84404cb49699262cf9ef678d	new
e0	96	09	1f	c7	55	dd	01								
00	a7	10	72	ca											
NewTabPageFlightReceivedTime	REG_BINARY		mod
NewTabPageFlightWebIG	REG_SZ	6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	6ac54e0b84404cb49699262cf9ef678d	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\WebRuntimeExtensions\EventStore\	mod
Session	REG_QWORD	1c 00 00 00 00 00 00 00 	old
	REG_QWORD	1e 00 00 00 00 00 00 00 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\InputApp_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
ICT	REG_QWORD	4e bc c4 32 08 55 dd 01 	old
	REG_QWORD	1f de 73 27 ca 55 dd 01 	new
ITT	REG_QWORD	9e b8 d8 32 08 55 dd 01 	old
	REG_QWORD	b3 7d 86 27 ca 55 dd 01 	new
PCT	REG_QWORD	5c 1a ae 32 08 55 dd 01 	old
	REG_QWORD	8e 3d 60 27 ca 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\ApplicationFrame\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
2c	00	00	00	02	00	00	00	03	00	00	00	00	83	ff	ff
												ff	ff		
00	83	ff	ff	ff	ff	ff	ff	ff	ff	ff	ff	28	00	00	00
ff	ff											50			
20	00	00	00	58	03	00	00	a1	02	00	00				
40				80				c1							
Positions	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\HAM\AUI\MicrosoftEdge\V1\LU\	mod
ICT	REG_QWORD	d0 76 70 81 c7 55 dd 01 	old
	REG_QWORD	68 41 62 69 ca 55 dd 01 	new
PCT	REG_QWORD	a5 1d 13 27 c8 55 dd 01 	old
	REG_QWORD	d7 fa 4c ec ca 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\PersistedTitleBarData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
BackgroundColor	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
BackgroundColorInactive	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonBackgroundColor	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
ButtonBackgroundColorInactive	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
ButtonHoverBackgroundColor	REG_DWORD	0x19000000 (419430400)	old
	REG_DWORD	0xffbbbbbb (4290493371)	new
ButtonPressedBackgroundColor	REG_DWORD	0x33000000 (855638016)	old
	REG_DWORD	0xffa6a6a6 (4289111718)	new
ForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\HAM\AUI\Microsoft.MicrosoftOfficeHub\V1\LU\	mod
PCT	REG_QWORD	4e 87 71 0e 14 55 dd 01 	old
	REG_QWORD	c3 69 db 6d cc 55 dd 01 	new
PTT	REG_QWORD	37 7f c0 1e 14 55 dd 01 	old
	REG_QWORD	6d f3 c4 91 cc 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Wallet_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	d2 54 41 9e 06 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	0b c3 17 c2 06 55 dd 01 	old
	REG_QWORD	d7 48 e8 7c cc 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	c6 6a 50 42 c8 55 dd 01 	old
	REG_QWORD	cd c0 eb 56 cd 55 dd 01 	new
PTT	REG_QWORD	28 0b 74 42 c8 55 dd 01 	old
	REG_QWORD	3c 54 fc 56 cd 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\HAM\AUI\ppleae38af2e007f4358a809ac99a64a67c1\V1\LU\	mod
PCT	REG_QWORD	81 ed 4d 42 c8 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	c6 64 77 51 c8 55 dd 01 	old
	REG_QWORD	00 ef 29 59 cc 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsStore_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	a4 c0 0b 27 c8 55 dd 01 	old
	REG_QWORD	9a 71 b0 55 cc 55 dd 01 	new
PTT	REG_QWORD	21 02 15 66 c8 55 dd 01 	old
	REG_QWORD	bb 26 89 79 cc 55 dd 01 	new
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\	mod
09	00	00	00	00	00	00	00	01	00	00	00	05	00	00	00
				01				00							
06	00	00	00	08	00	00	00	07	00	00	00	02	00	00	00
															
04	00	00	00	03	00	00	00	ff	ff	ff	ff				
															
MRUListEx	REG_BINARY		mod
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02											 ... (94)
												 ... (96)
NodeSlots	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\	mod
03	00	00	00	02	00	00	00	01	00	00	00	04	00	00	00
01				03				02							
00	00	00	00	ff	ff	ff	ff								
															
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\	mod
5	REG_BINARY	66 00 31 00 00 00 00 00 cc 56 7d 66 10 00 50 52 4f 43 45 53 7e 31 00 00 4e 00 09 00 04 00 ef be cc 56 7c 66 46 5d c3 99 2e 00 00 00 96 a2 01 00 00 00  ... (104)	add
01	00	00	00	03	00	00	00	04	00	00	00	02	00	00	00
05				01				03				04			
00	00	00	00	ff	ff	ff	ff								
02				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\5\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x0000005f (95)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\	mod
1	REG_BINARY	56 00 31 00 00 00 00 00 45 5d 14 99 10 00 72 65 73 75 6c 74 73 00 40 00 09 00 04 00 ef be 45 5d 14 99 46 5d c3 99 2e 00 00 00 e9 64 01 00 00 00 09 00  ... (88)	add
00	00	00	00	ff	ff	ff	ff								
01				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\1\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x00000060 (96)	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\9\	mod
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
01				02											
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_CURRENT_USER\Software\Microsoft\MicrosoftEdge\BrowserEmulation\	mod
ea	07	0a	00	02	00	06	00	13	00	0f	00	38	00	19	03
										27		2e		1f	01
CVListPingLastYMD	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Notepad\	mod
iWindowPosX	REG_DWORD	0x000001b5 (437)	old
	REG_DWORD	0x00000015 (21)	new
iWindowPosY	REG_DWORD	0x0000021a (538)	old
	REG_DWORD	0x00000028 (40)	new
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General\	mod
LastAutoSavePurgeTime	REG_DWORD	0x01c78e2f (29855279)	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LCCache\SmartArt\1049\	mod
LastUpdate	REG_BINARY	38 ac e8 94 cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LCCache\Themes\1049\	mod
LastUpdate	REG_BINARY	cc c6 0d be cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
TM02807606	REG_SZ	[A:TM02807606][F:Титульный лист факса (точки)][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02807606.cab][G:][L:0]	add
TM03090430	REG_SZ	[A:TM03090430][F:Окаймление][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/67ccd84a-90ee-4a1b-b51b-a1f3d0c1a2e3/TF67ccd84a-90ee-4a1b-b51b-a1f3d0c1a2e35cbe9342-3b658902c7dd.cab][G:][L:0]	add
TM03090434	REG_SZ	[A:TM03090434][F:Дерево][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/2ec419c9-97c3-4958-b02a-0886397d33af/TF2ec419c9-97c3-4958-b02a-0886397d33af3e563288-7d19f587befd.cab][G:][L:0]	add
TM03457444	REG_SZ	[A:TM03457444][F:Базис][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/a161d085-4bd2-4957-a8b6-743fda478b32/TFa161d085-4bd2-4957-a8b6-743fda478b328e3ae53f-9eee5e8e7986.cab][G:][L:0]	add
TM03457464	REG_SZ	[A:TM03457464][F:Дивиденд][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/319cfb39-eeba-4af5-a5a2-03d53d037516/TF319cfb39-eeba-4af5-a5a2-03d53d037516c586c5f4-9c8e0b5a9ed2.cab][G:][L:0]	add
TM03457485	REG_SZ	[A:TM03457485][F:Сетка][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/5e103eea-be93-4576-ae9c-3ecc0de701e7/TF5e103eea-be93-4576-ae9c-3ecc0de701e71dd529ac-400b47d3614c.cab][G:][L:0]	add
TM03457491	REG_SZ	[A:TM03457491][F:Метрополия][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/044d2a23-aa10-496c-aa4d-94a1ae3cb532/TF044d2a23-aa10-496c-aa4d-94a1ae3cb5329c277ba3-4f22d104a5ef.cab][G:][L:0]	add
TM03457503	REG_SZ	[A:TM03457503][F:Цитаты][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp0345750301.cab][G:][L:0]	add
TM03457510	REG_SZ	[A:TM03457510][F:Савон][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/77a67a13-02ae-4296-8148-f26bdaaf38f1/TF77a67a13-02ae-4296-8148-f26bdaaf38f1002384ce-834f8b002a56.cab][G:][L:0]	add
TM03457515	REG_SZ	[A:TM03457515][F:Вид][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/5c688389-7a64-4394-81c4-1004c27ee1ae/TF5c688389-7a64-4394-81c4-1004c27ee1ae60e3ce79-e5161b71c961.cab][G:][L:0]	add
TM04033917	REG_SZ	[A:TM04033917][F:Берлин][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/6e1c0bd6-43b7-4cba-aa12-42a644606054/TF6e1c0bd6-43b7-4cba-aa12-42a6446060540f055808-ae8ddcb07fb6.cab][G:][L:0]	add
TM04033919	REG_SZ	[A:TM04033919][F:Контур][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/6d5feb1e-e145-43f1-b745-cb4b54c5ee97/TF6d5feb1e-e145-43f1-b745-cb4b54c5ee9740db8417-5ffc6e4fd33d.cab][G:][L:0]	add
TM04033921	REG_SZ	[A:TM04033921][F:Дамаск][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/48777c5d-d455-4797-85d4-26aa00053079/TF48777c5d-d455-4797-85d4-26aa00053079b8d92c9b-fce257331f16.cab][G:][L:0]	add
TM04033925	REG_SZ	[A:TM04033925][F:Капля][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/62d0d592-7ac2-4846-a919-75806e8bead4/TF62d0d592-7ac2-4846-a919-75806e8bead4fb8f9c8a-8d8af84254a6.cab][G:][L:0]	add
TM04033927	REG_SZ	[A:TM04033927][F:Главное мероприятие][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/d2a5b225-4fc9-4980-9a6f-07059fb984a2/TFd2a5b225-4fc9-4980-9a6f-07059fb984a2687055ba-f96a6edc958d.cab][G:][L:0]	add
TM04033929	REG_SZ	[A:TM04033929][F:Сланец][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/7377c363-6439-480f-94f1-39714d297aa9/TF7377c363-6439-480f-94f1-39714d297aa9e53103cd-dad8d6824b13.cab][G:][L:0]	add
TM04033937	REG_SZ	[A:TM04033937][F:След самолета][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/49310879-45c6-4d72-870a-c20bc0dca332/TF49310879-45c6-4d72-870a-c20bc0dca332b5616324-5b5b48efcd38.cab][G:][L:0]	add
TM10001105	REG_SZ	[A:TM10001105][F:Уголки][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp1000110502.cab][G:][L:0]	add
TM10001106	REG_SZ	[A:TM10001106][F:Эмблема][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp1000110602.cab][G:][L:0]	add
TM10001114	REG_SZ	[A:TM10001114][F:Галерея][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/c986dd65-aaf0-4d5c-bef9-9c391ee05f7b/TFc986dd65-aaf0-4d5c-bef9-9c391ee05f7b910973e2-e57291613aca.cab][G:][L:0]	add
TM10001115	REG_SZ	[A:TM10001115][F:Посылка][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/fb9a325e-b4a8-473d-b025-df086f5ae493/TFfb9a325e-b4a8-473d-b025-df086f5ae4930822ff89-25c71274dc8d.cab][G:][L:0]	add
TM10271166	REG_SZ	[A:TM10271166][F:Тема "Простая абстракция"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271166.cab][G:][L:2]	add
TM10271167	REG_SZ	[A:TM10271167][F:Тема "Синий металл"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271167.cab][G:][L:2]	add
TM10271168	REG_SZ	[A:TM10271168][F:Тема "Цифровой мир"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271168.cab][G:][L:2]	add
TM10271169	REG_SZ	[A:TM10271169][F:Тема "Узел"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271169.cab][G:][L:2]	add
TM10271170	REG_SZ	[A:TM10271170][F:Тема "Голубая волна"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271170.cab][G:][L:2]	add
TM10271171	REG_SZ	[A:TM10271171][F:Тема "Универсальная"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271171.cab][G:][L:2]	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1049\	mod
LastUpdate	REG_BINARY	cb 15 dd 96 cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
TM02851216	REG_SZ	[A:TM02851216][F:apasixtheditionofficeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851216.cab][G:][L:0]	add
TM02851217	REG_SZ	[A:TM02851217][F:chicago][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851217.cab][G:][L:0]	add
TM02851218	REG_SZ	[A:TM02851218][F:gb][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851218.cab][G:][L:0]	add
TM02851219	REG_SZ	[A:TM02851219][F:gostname][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851219.cab][G:][L:0]	add
TM02851220	REG_SZ	[A:TM02851220][F:gosttitle][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851220.cab][G:][L:0]	add
TM02851221	REG_SZ	[A:TM02851221][F:harvardanglia2008officeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851221.cab][G:][L:0]	add
TM02851222	REG_SZ	[A:TM02851222][F:ieee2006officeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851222.cab][G:][L:0]	add
TM02851223	REG_SZ	[A:TM02851223][F:iso690][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851223.cab][G:][L:0]	add
TM02851224	REG_SZ	[A:TM02851224][F:iso690nmerical][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851224.cab][G:][L:0]	add
TM02851225	REG_SZ	[A:TM02851225][F:mlaseventheditionofficeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851225.cab][G:][L:0]	add
TM02851226	REG_SZ	[A:TM02851226][F:turabian][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851226.cab][G:][L:0]	add
TM02851227	REG_SZ	[A:TM02851227][F:sist02][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851227.cab][G:][L:0]	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1049\	mod
LastUpdate	REG_BINARY	34 08 56 95 cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
TM01840907	REG_SZ	[A:TM01840907][F:Формулы][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/c09d44c8-fc7d-48b2-bf51-520c04674f16/TFc09d44c8-fc7d-48b2-bf51-520c04674f16fa02b95f-eee69c6dd92f.cab][G:][L:0]	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming\	mod
ea	07	0a	00	02	00	06	00	13	00	1a	00	35	00	90	01
										3b		23		a7	03
RoamingLastSyncTime	REG_BINARY		mod
ea	07	0a	00	02	00	06	00	13	00	1a	00	35	00	90	01
										3b		23		a7	03
RoamingLastWriteTime	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU\	mod
Item 1	REG_SZ	[F00000000][T01DD5524482571A2][O00000000]*C:\Users\user\Desktop\Документ Microsoft Word.docx	old
	REG_SZ	[F00000000][T01DD55CC6671B442][O00000000]*C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc	new
Item 2	REG_SZ	[F00000000][T01DD5524482571A2][O00000000]*C:\Users\user\Desktop\Документ Microsoft Word.docx	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU\Change\	mod
ChangeId	REG_DWORD	0x4d983e06 (1301822982)	old
	REG_DWORD	0x5db03e3d (1571831357)	new
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Place MRU\	mod
Item 1	REG_SZ	[F00000000][T01DD5524482571A0][O00000000]*C:\Users\user\Desktop\	old
	REG_SZ	[F00000000][T01DD55CC6671B440][O00000000]*C:\Users\user\Desktop\lab1\src\	new
Item 2	REG_SZ	[F00000000][T01DD5524482571A0][O00000000]*C:\Users\user\Desktop\	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Place MRU\Change\	mod
ChangeId	REG_DWORD	0x078d72e9 (126710505)	old
	REG_DWORD	0x1bbd3f3e (465387326)	new
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\1C19AB\	add
1C19AB	REG_BINARY	04 00 00 00 7c 0f 00 00 34 00 00 00 43 00 3a 00 5c 00 55 00 73 00 65 00 72 00 73 00 5c 00 75 00 73 00 65 00 72 00 5c 00 44 00 65 00 73 00 6b 00 74 00  ... (1449)	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems\	add
*$$	REG_BINARY	2a 24 24 00 7c 0f 00 00 00 00 04 40 01 00 00 00 75 7f ba 65 cc 55 dd 01 28 00 00 00 29 7f 3c 23 8f 01 7b 41 ad 58 b5 a0 fe f7 59 cc 75 7f ba 65 cc 55  ... (68)	add
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Security\Trusted Documents\	add
LastPurgeTime	REG_DWORD	0x01c78e2b (29855275)	add
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Panose\	mod
@MS Gothic	REG_BINARY	02 0b 06 09 07 02 05 08 02 04 	add
@SimSun	REG_BINARY	02 01 06 00 03 01 01 01 01 01 	add
@Yu Gothic	REG_BINARY	02 0b 04 00 00 00 00 00 00 00 	add
Arial	REG_BINARY	02 0b 06 04 02 02 02 02 02 04 	add
Arial Black	REG_BINARY	02 0b 0a 04 02 01 02 02 02 04 	add
Arial Narrow	REG_BINARY	02 0b 06 06 02 02 02 03 02 04 	add
Bahnschrift	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Light Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Light SemiCondensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiBold	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiBold Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiBold SemiConden	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiCondensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiLight	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiLight Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiLight SemiConde	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Book Antiqua	REG_BINARY	02 04 06 02 05 03 05 03 03 04 	add
Bookman Old Style	REG_BINARY	02 05 06 04 05 05 05 02 02 04 	add
Bookshelf Symbol 7	REG_BINARY	05 01 01 01 01 01 01 01 01 01 	add
Cambria	REG_BINARY	02 04 05 03 05 04 06 03 02 04 	add
Cambria Math	REG_BINARY	02 04 05 03 05 04 06 03 02 04 	add
Candara	REG_BINARY	02 0e 05 02 03 03 03 02 02 04 	add
Candara Light	REG_BINARY	02 0e 05 02 03 03 03 02 02 04 	add
Century	REG_BINARY	02 04 06 04 05 05 05 02 03 04 	add
Century Gothic	REG_BINARY	02 0b 05 02 02 02 02 02 02 04 	add
Comic Sans MS	REG_BINARY	03 0f 07 02 03 03 02 02 02 04 	add
Consolas	REG_BINARY	02 0b 06 09 02 02 04 03 02 04 	add
Constantia	REG_BINARY	02 03 06 02 05 03 06 03 03 03 	add
Corbel	REG_BINARY	02 0b 05 03 02 02 04 02 02 04 	add
Corbel Light	REG_BINARY	02 0b 03 03 02 02 04 02 02 04 	add
Courier New	REG_BINARY	02 07 03 09 02 02 05 02 04 04 	add
Ebrima	REG_BINARY	02 00 00 00 00 00 00 00 00 00 	add
Franklin Gothic Medium	REG_BINARY	02 0b 06 03 02 01 02 02 02 04 	add
Gabriola	REG_BINARY	04 04 06 05 05 10 02 02 0d 02 	add
Gadugi	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Garamond	REG_BINARY	02 02 04 04 03 03 01 01 08 03 	add
Georgia	REG_BINARY	02 04 05 02 05 04 05 02 03 03 	add
HoloLens MDL2 Assets	REG_BINARY	05 0a 01 02 01 01 01 01 01 01 	add
Impact	REG_BINARY	02 0b 08 06 03 09 02 05 02 04 	add
Ink Free	REG_BINARY	03 08 04 02 00 05 00 00 00 00 	add
Javanese Text	REG_BINARY	02 00 00 00 00 00 00 00 00 00 	add
Leelawadee	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Leelawadee UI	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Leelawadee UI Semilight	REG_BINARY	02 0b 04 02 04 02 04 02 02 03 	add
Lucida Console	REG_BINARY	02 0b 06 09 04 05 04 02 02 04 	add
Lucida Sans Unicode	REG_BINARY	02 0b 06 02 03 05 04 02 02 04 	add
Malgun Gothic	REG_BINARY	02 0b 05 03 02 00 00 02 00 04 	add
Malgun Gothic Semilight	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Mangal	REG_BINARY	00 00 04 00 00 00 00 00 00 00 	add
Marlett	REG_BINARY	00 00 00 00 00 00 00 00 00 00 	add
Microsoft Himalaya	REG_BINARY	01 01 01 00 01 01 01 01 01 01 	add
Microsoft JhengHei	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Microsoft JhengHei Light	REG_BINARY	02 0b 03 04 03 05 04 04 02 04 	add
Microsoft JhengHei UI	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Microsoft JhengHei UI Light	REG_BINARY	02 0b 03 04 03 05 04 04 02 04 	add
Microsoft New Tai Lue	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft PhagsPa	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft Sans Serif	REG_BINARY	02 0b 06 04 02 02 02 02 02 04 	add
Microsoft Tai Le	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft Uighur	REG_BINARY	02 00 00 00 00 00 00 00 00 00 	add
Microsoft YaHei	REG_BINARY	02 0b 05 03 02 02 04 02 02 04 	add
Microsoft YaHei Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft YaHei UI	REG_BINARY	02 0b 05 03 02 02 04 02 02 04 	add
Microsoft YaHei UI Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft Yi Baiti	REG_BINARY	03 00 05 00 00 00 00 00 00 00 	add
MingLiU-ExtB	REG_BINARY	02 02 05 00 00 00 00 00 00 00 	add
MingLiU_HKSCS-ExtB	REG_BINARY	02 02 05 00 00 00 00 00 00 00 	add
Mongolian Baiti	REG_BINARY	03 00 05 00 00 00 00 00 00 00 	add
MS Gothic	REG_BINARY	02 0b 06 09 07 02 05 08 02 04 	add
MS PGothic	REG_BINARY	02 0b 06 00 07 02 05 08 02 04 	add
MS Reference Sans Serif	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
MS Reference Specialty	REG_BINARY	05 00 05 00 00 00 00 00 00 00 	add
MS UI Gothic	REG_BINARY	02 0b 06 00 07 02 05 08 02 04 	add
MT Extra	REG_BINARY	05 05 01 02 01 02 05 02 02 02 	add
MV Boli	REG_BINARY	02 00 05 00 03 02 00 09 00 00 	add
Myanmar Text	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Nirmala UI	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Nirmala UI Semilight	REG_BINARY	02 0b 04 02 04 02 04 02 02 03 	add
NSimSun	REG_BINARY	02 01 06 09 03 01 01 01 01 01 	add
Palatino Linotype	REG_BINARY	02 04 05 02 05 05 05 03 03 04 	add
PMingLiU-ExtB	REG_BINARY	02 02 05 00 00 00 00 00 00 00 	add
Segoe MDL2 Assets	REG_BINARY	05 0a 01 02 01 01 01 01 01 01 	add
Segoe Print	REG_BINARY	02 00 06 00 00 00 00 00 00 00 	add
Segoe Script	REG_BINARY	03 0b 05 04 02 00 00 00 00 03 	add
Segoe UI Black	REG_BINARY	02 0b 0a 02 04 02 04 02 02 03 	add
Segoe UI Emoji	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Segoe UI Historic	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Segoe UI Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Segoe UI Semibold	REG_BINARY	02 0b 07 02 04 02 04 02 02 03 	add
Segoe UI Semilight	REG_BINARY	02 0b 04 02 04 02 04 02 02 03 	add
Segoe UI Symbol	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
SimSun	REG_BINARY	02 01 06 00 03 01 01 01 01 01 	add
SimSun-ExtB	REG_BINARY	02 01 06 09 06 01 01 01 01 01 	add
Sitka Banner	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Display	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Heading	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Small	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Subheading	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Text	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sylfaen	REG_BINARY	01 0a 05 02 05 03 06 03 03 03 	add
Symbol	REG_BINARY	05 05 01 02 01 07 06 02 05 07 	add
Tahoma	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Trebuchet MS	REG_BINARY	02 0b 06 03 02 02 02 02 02 04 	add
Verdana	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Webdings	REG_BINARY	05 03 01 02 01 05 09 06 07 03 	add
Wingdings 2	REG_BINARY	05 02 01 02 01 05 07 07 07 07 	add
Wingdings 3	REG_BINARY	05 04 01 02 01 08 07 07 07 07 	add
Yu Gothic	REG_BINARY	02 0b 04 00 00 00 00 00 00 00 	add
Yu Gothic Light	REG_BINARY	02 0b 03 00 00 00 00 00 00 00 	add
Yu Gothic Medium	REG_BINARY	02 0b 05 00 00 00 00 00 00 00 	add
Yu Gothic UI	REG_BINARY	02 0b 05 00 00 00 00 00 00 00 	add
Yu Gothic UI Light	REG_BINARY	02 0b 03 00 00 00 00 00 00 00 	add
Yu Gothic UI Semibold	REG_BINARY	02 0b 07 00 00 00 00 00 00 00 	add
Yu Gothic UI Semilight	REG_BINARY	02 0b 04 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Spelling\	add
HKEY_CURRENT_USER\Software\Microsoft\Spelling\Dictionaries\	add
HKEY_CURRENT_USER\Software\Microsoft\Spelling\Options\	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ActivityDataModel\ReaderRevisionInfo\	mod
2259DE09-A10D-947E-641F-56694FF2531D	REG_MULTI_SZ	1〶10੻†∠慄慴慢敳湉瑳湡散摉•›㤵ㄶⰶ †匢煥敵据≥㨠㌠㐷ⰵ †愢瑣癩瑩卹潴敲摉•›㈢㔲䐹ぅⴹㅁ䐰㤭㜴ⵅ㐶䘱㔭㘶㐹䙆㔲ㄳ≄ਬ†∠楦瑬牥•›੻†††椢剳慥䙤汩整≲㨠〠ਬ†††漢楲楧䙮汩整䭲祥•›ⰰ ††∠瑳瑡䙥汩整䭲祥•›ⰰ ††∠獵牥捁楴湯瑓瑡䙥汩整≲㨠〠 †੽੽	old
	REG_MULTI_SZ	1㔶90੻†∠慄慴慢敳湉瑳湡散摉•›㤵ㄶⰶ †匢煥敵据≥㨠㌠㈹ⰹ †愢瑣癩瑩卹潴敲摉•›㈢㔲䐹ぅⴹㅁ䐰㤭㜴ⵅ㐶䘱㔭㘶㐹䙆㔲ㄳ≄ਬ†∠楦瑬牥•›੻†††椢剳慥䙤汩整≲㨠〠ਬ†††漢楲楧䙮汩整䭲祥•›ⰰ ††∠瑳瑡䙥汩整䭲祥•›ⰰ ††∠獵牥捁楴湯瑓瑡䙥汩整≲㨠〠 †੽੽	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts\	mod
Applications\WINWORD.EXE_.doc	REG_DWORD	0x00000000 (0)	add
Word.Document.8_.doc	REG_DWORD	0x00000000 (0)	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstarttilepropertiesmap\Current\	mod
02	00	00	00	e1	da	c7	26	c8	55	dd	01	00	00	00	00
				e0	b7	69	59	cc							
43	42	01	00	0d	12	0a	ad	01	51	50	00	7e	00	31	00
															
35	00	32	00	37	00	63	00	37	00	30	00	35	00	2d	00
															
38	00											 ... (21881)
												 ... (21881)
Data	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current\	mod
02	00	00	00	cf	b5	ae	a1	c8	55	dd	01	00	00	00	00
				28	e1	a4	65	cc							
43	42	01	00	0d	12	0a	15	28	50	00	7e	00	4d	00	49
															
00	43	00	52	00	4f	00	53	00	4f	00	46	00	54	00	2e
															
00	47											 ... (2629)
												 ... (2629)
Data	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-10\	mod
04	00	00	00	00	00	00	00	bf	fa	a9	cc	03	55	dd	01
								ae	90	3a	44	cd			
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	6e	00	74	00	be	0b	84	f2	c6	55	dd	01
															
02	00	02	00	00	00	00	00	5a	7b	1c	5b	fb	54	dd	01
															
04	04	00	00												
06															
HealthEvaluation	REG_BINARY		mod
04	00	00	00	00	00	00	00	e4	44	c6	ca	03	55	dd	01
								84	96	3a	42	cd			
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
00	00	00	00												
															
PlacementReported	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-202914\	mod
04	00	00	00	00	00	00	00	0f	8f	fd	f3	a2	9c	d9	01
															
85	d1	93	1e	23	a2	d9	01	0a	e5	af	c9	81	79	e7	01
								96	f0	32					
00	00	00	00	00	00	00	00	18	64	35	0b	a3	9c	d9	01
															
7a	c0											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	9f	8f	de	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	1e	03	b1	39	a1	9c	d9	01
															
0d	03	00	00												
0f															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280810\	mod
04	00	00	00	00	00	00	00	55	ce	58	bd	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	99	21	bf	82	ec	af	e7	01
								0d	59	55					
00	00	00	00	00	00	00	00	07	27	d0	bd	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	9f	8f	de	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	9c	06	c4	39	a1	9c	d9	01
															
17	03	00	00												
19															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280811\	mod
04	00	00	00	00	00	00	00	07	22	d2	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	e5	15	ac	82	ec	af	e7	01
								b5	ef	5e					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	9f	8f	de	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	d5	89	cd	39	a1	9c	d9	01
															
17	03	00	00												
19															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280815\	mod
04	00	00	00	0d	00	00	00	7c	cb	cf	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	3e	c0	9d	82	ec	af	e7	01
								c5	f8	65					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	fe	7f	00	00	fa	a8	df	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	e8	dc	6e	9a	a0	9c	d9	01
															
10	03	00	00												
12															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-310091\	mod
04	00	00	00	fe	7f	00	00	55	ce	58	bd	fe	54	dd	01
															
4f	bc	b5	e2	7e	5a	dd	01	e2	d7	8a	82	ec	af	e7	01
								12	2d	6d					
00	00	00	00	00	00	00	00	a1	e9	e7	d0	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	4b	a6	76	f1	c6	55	dd	01
															
02	00	02	00	00	00	00	00	18	90	df	59	fb	54	dd	01
															
07	04	00	00												
09															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-310093\	mod
04	00	00	00	00	00	00	00	ed	03	bc	99	a0	9c	d9	01
															
55	66	92	bd	a0	9c	d9	01	a9	7d	f4	24	05	55	dd	01
								a3	fd	8e	9c	ce			
00	00	00	00	00	00	00	00	e7	22	ed	36	05	55	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	84	16	e2	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	55	20	cf	99	a0	9c	d9	01
															
12	03	00	00												
14															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-314559\	mod
04	00	00	00	fe	7f	00	00	9b	f5	ff	f3	a2	9c	d9	01
															
85	d1	93	1e	23	a2	d9	01	07	64	43	fd	c6	55	dd	01
								ba	72	d6	43	cd			
00	00	00	00	00	00	00	00	63	3f	fb	0b	a3	9c	d9	01
															
88	47											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	84	16	e2	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	5b	9d	73	9a	a0	9c	d9	01
															
22	03	00	00												
26															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338387\	mod
04	00	00	00	fe	7f	00	00	e5	2b	ae	f1	c6	55	dd	01
															
fb	9b	d4	78	e8	55	dd	01	fb	fb	c2	f1	c6	55	dd	01
								2b	dd	5b	25	ce			
00	00	00	00	00	00	00	00	70	f5	f2	f9	c6	55	dd	01
								22	da	4f	42	cd			
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	fb	fb	c2	f1	c6	55	dd	01
															
02	00	02	00	00	00	00	00	57	fb	cd	5a	fb	54	dd	01
															
12	04	00	00												
15															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388\	mod
04	00	00	00	fe	7f	00	00	73	f7	70	f2	c6	55	dd	01
															
1b	ee	8f	1c	47	5b	dd	01	fa	ef	e7	57	23	af	e7	01
								41	ad	30	58				
9f	9a	78	ff	21	55	dd	01	3f	43	93	f1	c6	55	dd	01
															
3f	0a											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	ed	d2	0c	f2	c6	55	dd	01
															
02	00	02	00	00	00	00	00	3e	49	d3	5a	fb	54	dd	01
															
12	04	00	00												
14															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338389\	mod
04	00	00	00	fe	7f	00	00	67	79	6a	e4	fe	54	dd	01
															
80	67	be	bd	a9	58	dd	01	ce	20	ec	20	7f	5a	dd	01
								c0	a2	4a	21				
00	00	00	00	00	00	00	00	28	77	71	f8	fe	54	dd	01
															
00	7e											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	e2	01	76	9a	a0	9c	d9	01
															
10	03	00	00												
12															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-353694\	mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	53	e0	db	39	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-353698\	mod
04	00	00	00	00	00	00	00	72	34	2b	09	a3	9c	d9	01
															
6a	28	96	1e	23	a2	d9	01	b0	02	3c	82	ec	af	e7	01
								3d	47	ab					
00	00	00	00	00	00	00	00	78	ff	a3	0a	a3	9c	d9	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	61	55	f1	39	a1	9c	d9	01
															
0c	03	00	00												
0e															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000045\	mod
04	00	00	00	fe	7f	00	00	67	79	6a	e4	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	12	80	c6	82	ec	af	e7	01
								c1	aa	b4					
00	00	00	00	00	00	00	00	2f	da	64	f8	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	76	60	78	9a	a0	9c	d9	01
															
10	03	00	00												
12															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000161\	mod
04	00	00	00	00	00	00	00	7c	cb	cf	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	83	bd	bc	82	ec	af	e7	01
								2a	6a	b9					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	0e	d6	fa	39	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000163\	mod
04	00	00	00	00	00	00	00	7c	cb	cf	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	20	84	b3	82	ec	af	e7	01
								2e	bd	c0					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	c8	c5	e6	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	5a	c2	06	3a	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000165\	mod
04	00	00	00	00	00	00	00	67	79	6a	e4	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	2b	7f	a8	82	ec	af	e7	01
								3f	81	c5					
00	00	00	00	00	00	00	00	2f	da	64	f8	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	c8	c5	e6	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	a1	7b	17	3a	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\310091\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\310093\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\88000163\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\88000165\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\Modules\	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\Modules\GlobalSettings\	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\Modules\GlobalSettings\ProperTreeModuleInner\	add
ProperTreeModuleInner	REG_BINARY	9c 00 00 00 98 00 00 00 31 53 50 53 05 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 3b 00 00 00 2a 00 00 00 00 4e 00 61 00 76 00 50 00 61 00 6e 00 65  ... (160)	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\CIDSizeMRU\	mod
3	REG_BINARY	50 00 72 00 6f 00 63 00 6d 00 6f 00 6e 00 36 00 34 00 2e 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... (592)	add
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
03				02				01				00	00	00	00
															
ff	ff	ff	ff												
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU\	mod
3	REG_BINARY	50 00 72 00 6f 00 63 00 6d 00 6f 00 6e 00 36 00 34 00 2e 00 65 00 78 00 65 00 00 00 14 00 1f 50 e0 4f d0 20 ea 3a 69 10 a2 d8 08 00 2b 30 30 9d 14 00  ... (234)	add
01	00	00	00	02	00	00	00	00	00	00	00	ff	ff	ff	ff
03				01				02				00	00	00	00
															
ff	ff	ff	ff												
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\*\	mod
3	REG_BINARY	14 00 1f 50 e0 4f d0 20 ea 3a 69 10 a2 d8 08 00 2b 30 30 9d 14 00 2e 80 3a cc bf b4 2c db 4c 42 b0 29 7f e9 9a 87 c6 41 4e 00 31 00 00 00 00 00 46 5d  ... (374)	add
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
03				02				01				00	00	00	00
															
ff	ff	ff	ff												
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\PML\	add
0	REG_BINARY	14 00 1f 50 e0 4f d0 20 ea 3a 69 10 a2 d8 08 00 2b 30 30 9d 14 00 2e 80 3a cc bf b4 2c db 4c 42 b0 29 7f e9 9a 87 c6 41 4e 00 31 00 00 00 00 00 46 5d  ... (374)	add
MRUListEx	REG_BINARY	00 00 00 00 ff ff ff ff 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppLaunch\	mod
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge	REG_DWORD	0x0000000b (11)	old
	REG_DWORD	0x0000000d (13)	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched\	mod
C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe	REG_DWORD	0x00000008 (8)	add
C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe	REG_DWORD	0x00000001 (1)	add
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000004 (4)	new
Microsoft.Windows.Explorer	REG_DWORD	0x0000001a (26)	old
	REG_DWORD	0x0000001b (27)	new
wj32.ProcessHacker2	REG_DWORD	0x00000007 (7)	old
	REG_DWORD	0x00000008 (8)	new
{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
{6D809377-6AF0-444B-8957-A3773F02200E}\Microsoft Office\Office16\WINWORD.EXE	REG_DWORD	0x00000002 (2)	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList\	mod
a	REG_SZ	WINWORD.EXE	add
MRUList	REG_SZ	a	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PML\	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PML\OpenWithList\	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PML\OpenWithProgids\	add
ProcMon.Logfile.1	REG_NONE		add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\	mod
45	REG_BINARY	64 00 6f 00 63 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 2e 00 74 00 78 00 74 00 00 00 78 00 32 00 00 00 00 00 00 00 00 00 00 00 64 6f 63 5f 6d 61  ... (152)	add
46	REG_BINARY	47 00 72 00 65 00 79 00 45 00 6e 00 65 00 72 00 67 00 79 00 44 00 72 00 6f 00 70 00 70 00 65 00 72 00 2e 00 64 00 6f 00 63 00 00 00 8c 00 32 00 00 00  ... (186)	add
47	REG_BINARY	64 00 6f 00 63 00 5f 00 6f 00 70 00 65 00 6e 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 5f 00 6f 00 66 00 66 00 5f 00 6e 00 65 00 74 00 77 00 6f 00  ... (252)	add
2c	00	00	00	01	00	00	00	2b	00	00	00	2a	00	00	00
25				2f				1e				2e			
29	00	00	00	23	00	00	00	00	00	00	00	1e	00	00	00
1d				2d				2c				01			
28	00	00	00	27	00	00	00	26	00	00	00	18	00	00	00
2b				2a				29				23			
1d	00											 ... (184)
00												 ... (196)
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.doc\	add
0	REG_BINARY	47 00 72 00 65 00 79 00 45 00 6e 00 65 00 72 00 67 00 79 00 44 00 72 00 6f 00 70 00 70 00 65 00 72 00 2e 00 64 00 6f 00 63 00 00 00 8c 00 32 00 00 00  ... (186)	add
MRUListEx	REG_BINARY	00 00 00 00 ff ff ff ff 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.PML\	add
0	REG_BINARY	64 00 6f 00 63 00 5f 00 6f 00 70 00 65 00 6e 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 5f 00 6f 00 66 00 66 00 5f 00 6e 00 65 00 74 00 77 00 6f 00  ... (252)	add
MRUListEx	REG_BINARY	00 00 00 00 ff ff ff ff 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.txt\	mod
6	REG_BINARY	64 00 6f 00 63 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 2e 00 74 00 78 00 74 00 00 00 78 00 32 00 00 00 00 00 00 00 00 00 00 00 64 6f 63 5f 6d 61  ... (152)	add
05	00	00	00	00	00	00	00	01	00	00	00	04	00	00	00
06				05				00				01			
03	00	00	00	02	00	00	00	ff	ff	ff	ff				
04				03				02	00	00	00	ff	ff	ff	ff
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\Folder\	mod
13	REG_BINARY	72 00 65 00 73 00 75 00 6c 00 74 00 73 00 00 00 62 00 32 00 00 00 00 00 00 00 00 00 00 00 72 65 73 75 6c 74 73 2e 6c 6e 6b 00 48 00 09 00 04 00 ef be  ... (116)	add
00	00	00	00	0c	00	00	00	0b	00	00	00	0a	00	00	00
0d												00			
09	00	00	00	08	00	00	00	01	00	00	00	07	00	00	00
0a				09				08				01			
06	00	00	00	03	00	00	00	04	00	00	00	05	00	00	00
07				06				03				04			
02	00											 ... (56)
05												 ... (60)
MRUListEx	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000204E6\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000020524\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000002061E\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000301EA\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000302E0\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000030514\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000305DE\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000402E4\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000501E2\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000050432\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000005046A\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000505E8\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000006028C\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000060692\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000805E0\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000009028C\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000A06E2\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000B0422\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000B06D8\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000100710\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000011071A\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\WRT:Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge+1+00000000000101DC\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\WRT:Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge+1+00000000000505D4\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\	mod
00	00	00	00	27	01	00	00	f3	02	00	00	24	3d	3b	01
				2d				07	03			34	da	4e	
42	00	00	00	33	00	00	00	08	85	0f	00	7b	00	31	00
43				37				e5	3a	11					
41	00	43	00	31	00	34	00	45	00	37	00	37	00	2d	00
															
30	00											 ... (1612)
												 ... (1612)
HRZR_PGYFRFFVBA	REG_BINARY		mod
00	00	00	00	08	00	00	00	25	00	00	00	6f	97	17	00
				09				29				22	10	1d	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
jw32.CebprffUnpxre2	REG_BINARY		mod
00	00	00	00	02	00	00	00	03	00	00	00	99	6f	02	00
				03				06				0d	14	05	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\gbbyf\CebprffZbavgbe\Cebpzba64.rkr	REG_BINARY		mod
00	00	00	00	04	00	00	00	05	00	00	00	7d	09	02	00
								06				06	02	03	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\gbbyf\FlfGenpre k64\FlfGenpre.rkr	REG_BINARY		mod
00	00	00	00	31	00	00	00	e7	00	00	00	a2	6d	63	00
								ea				a7	4d	66	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
Zvpebfbsg.Jvaqbjf.Rkcybere	REG_BINARY		mod
00	00	00	00	0b	00	00	00	1a	00	00	00	bc	8d	16	00
				0d				1d				7c	29	1b	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
Zvpebfbsg.ZvpebfbsgRqtr_8jrxlo3q8oojr!ZvpebfbsgRqtr	REG_BINARY		mod
00	00	00	00	42	00	00	00	33	00	00	00	08	85	0f	00
				43				37				e5	3a	11	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\abgrcnq.rkr	REG_BINARY		mod
00	00	00	00	0e	00	00	00	59	00	00	00	5f	2c	18	00
								5a				eb	48	19	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\pzq.rkr	REG_BINARY		mod
00	00	00	00	02	00	00	00	02	00	00	00	f8	66	00	00
				03				03				2a	a0		
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
{6Q809377-6NS0-444O-8957-N3773S02200R}\Zvpebfbsg Bssvpr\Bssvpr16\JVAJBEQ.RKR	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count\	mod
00	00	00	00	68	00	00	00	00	00	00	00	68	00	00	00
				6a								6a			
1c	00	00	00	00	00	00	00	1c	00	00	00	7b	00	39	00
															
45	00	33	00	39	00	39	00	35	00	41	00	42	00	2d	00
															
31	00											 ... (1612)
												 ... (1612)
HRZR_PGYFRFFVBA	REG_BINARY		mod
00	00	00	00	08	00	00	00	00	00	00	00	08	00	00	00
				09								09			
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\Cebprff Unpxre 2.yax	REG_BINARY		mod
00	00	00	00	02	00	00	00	00	00	00	00	02	00	00	00
				03								03			
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\Cebpzba64.rkr.yax	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\PolicyApplicationState\	mod
PolicyState	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\	mod
InstalledWin32AppsRevision	REG_SZ	{92F77DD2-A7D5-4B2B-B411-561D068DF111}	old
	REG_SZ	{905AEFAF-C040-4C0E-BED9-C9C3586A2E1C}	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\Flighting\	mod
CachedFeatureString	REG_SZ	SBSTR0103	add
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\JumplistData\	del
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel	REG_QWORD	3f d5 26 43 c8 55 dd 01 	del
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppsConstraintIndex\	mod
LatestConstraintIndexFolder	REG_SZ	C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{388387b3-61d0-48f4-8c51-061db5f67955}	old
	REG_SZ	C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2da363c5-0df3-4537-8958-d78768bfc43a}	new
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}.check.800\	mod
23	00	41	00	43	00	42	00	6c	00	6f	00	62	00	00	00
															
00	00	00	00	00	00	00	00	01	00	00	00	64	00	00	00
												00			
06	00	00	00												
00															
CheckSetting	REG_BINARY		mod
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\CommitHistory\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
Mixed	REG_QWORD	08 0f d4 03 00 00 00 00 	old
	REG_QWORD	c2 03 c5 03 00 00 00 00 	new
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\CommitHistory\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge#\	mod
Mixed	REG_QWORD	47 e2 3a 01 00 00 00 00 	old
	REG_QWORD	37 2c 99 02 00 00 00 00 	new
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\CommitHistory\Microsoft.WindowsStore_8wekyb3d8bbwe!App\	mod
Pure	REG_QWORD	00 a0 e0 01 00 00 00 00 	old
	REG_QWORD	00 50 90 01 00 00 00 00 	new
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\Volatile\	mod
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge	REG_DWORD	0x00000100 (256)	add
HKEY_CURRENT_USER\Software\Sysinternals\Process Monitor\	mod
SaveDialog	REG_BINARY	2c 00 00 00 00 00 00 00 01 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 58 00 00 00 75 00 00 00 38 02 00 00 06 02 00 00 	add
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\AppExtension\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\ListenedState\	mod
RootstoreDirty	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\	mod
WorkPending	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Accessibility, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Accessibility, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Accessibility, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\CustomMarshalers, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\CustomMarshalers, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\CustomMarshalers, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\EventViewer, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\EventViewer, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\EventViewer, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.CertificateServices.PKIClient.Cmdlets, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.CertificateServices.PKIClient.Cmdlets, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.CertificateServices.PKIClient.Cmdlets, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Dtc.PowerShell, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Dtc.PowerShell, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Dtc.PowerShell, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Ink, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Ink, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.InternationalSettings.Commands, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.InternationalSettings.Commands, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
09	00	00	00	01	c0	e4	9a	f9	ab	0d	be	fb	af	3d	71
															
c9	e1	1a	f1	78	05	00	00	00	10	01	00	00	4d	00	69
															
00	63	00	72	00	6f	00	73	00	6f	00	66	00	74	00	2e
															
00	49											 ... (2084)
												 ... (2080)
ImageList	REG_BINARY		mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.InternationalSettings.Commands, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop.wsa, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop.wsa, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop.wsa, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.KeyDistributionService.Cmdlets, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.KeyDistributionService.Cmdlets, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.KeyDistributionService.Cmdlets, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure.CimCmdlets, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure.CimCmdlets, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure.CimCmdlets, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure.Native, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure.Native, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure.Native, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.ManagementConsole, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.ManagementConsole, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.ManagementConsole, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
KeepRuntimeVersion	REG_DWORD	0x00000001 (1)	del
RuntimeVersion	REG_SZ	v4.0.30319	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	02 00 00 00 01 3a 30 69 32 b9 ec bd c8 7c 46 a4 d1 38 09 7c 01 05 00 00 00 be 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (604)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 6e 03 65 c6 a3 92 ec a5 dc 3e ca ba f8 a5 ed 5d 05 00 00 00 cc 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (1786)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	10 00 00 00 01 49 15 01 d7 9c 52 3f 65 91 97 61 72 75 b5 8c 79 05 00 00 00 ea 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3524)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 03 40 19 19 11 4b d9 d6 43 49 dd dc 2f d6 6b d7 05 00 00 00 ca 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (1814)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	11 00 00 00 01 9f 36 5e c6 4c 34 6b d5 a2 67 cb d6 8e 9c 2e e0 05 00 00 00 e8 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3784)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	09 00 00 00 01 1d 83 be 24 bc e6 2f a3 bf e4 c0 96 dd 7a 61 bd 05 00 00 00 ce 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (2012)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	0f 00 00 00 01 4a 83 36 08 c0 c3 7e 40 3d 9e 68 e0 a5 5f d2 b0 05 00 00 00 ec 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3358)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	06 00 00 00 01 7e 2d 81 89 5f d7 cf f4 38 d9 93 56 dc c5 d3 f2 05 00 00 00 dc 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (1488)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	09 00 00 00 01 94 8d 4a f4 9f 79 d5 73 d5 e0 8f 8f 58 8c 46 af 05 00 00 00 c8 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (2000)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	10 00 00 00 01 eb 16 33 22 65 fd ec b3 2b a6 82 21 a8 fd 0e db 05 00 00 00 e6 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3598)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Cmdletization.OData, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Cmdletization.OData, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Cmdletization.OData, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Core.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Core.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Core.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Diagnostics.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Diagnostics.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Diagnostics.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Editor, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Editor, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Editor, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.GPowerShell, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.GPowerShell, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.GPowerShell, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.GraphicalHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.GraphicalHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.GraphicalHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ISECommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ISECommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ISECommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ScheduledJob, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ScheduledJob, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ScheduledJob, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Utility.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Utility.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Utility.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.SecureBoot.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.SecureBoot.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.SecureBoot.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Tpm.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Tpm.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Tpm.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualBasic, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualBasic, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualBasic, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	0b 00 00 00 01 e6 b8 af 58 6a 61 8c 92 a4 90 36 75 97 b4 3f 8d 05 00 00 00 f4 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (2508)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 91 da 3a 7c 42 ee 7e 4a 1d 97 0b 44 3e 9a e8 69 05 00 00 00 f4 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (1862)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 e9 39 a1 eb ab f4 69 b7 fb e1 ba 5e 12 90 a5 79 05 00 00 00 02 01 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (1928)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.ContainerControl, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.ContainerControl, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	07 00 00 00 01 99 5a cf be cc 0f d2 ba 21 0f 92 10 f4 32 44 94 05 00 00 00 fa 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (1674)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	11 00 00 00 01 c2 57 50 65 ee 70 45 31 91 26 59 d7 29 41 78 18 05 00 00 00 e8 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (3782)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	09 00 00 00 01 1e c3 e9 10 a7 08 07 de 4c db d4 42 ab d5 80 6f 05 00 00 00 fa 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (2208)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDEngine, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDEngine, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDEngine, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.DSC.CoreConfProviders, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.DSC.CoreConfProviders, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.DSC.CoreConfProviders, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsAuthenticationProtocols.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsAuthenticationProtocols.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsAuthenticationProtocols.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MiguiControls, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MiguiControls, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MiguiControls, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCEx, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCEx, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCEx, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
KeepRuntimeVersion	REG_DWORD	0x00000001 (1)	del
RuntimeVersion	REG_SZ	v4.0.30319	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCFxCommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCFxCommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCFxCommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
KeepRuntimeVersion	REG_DWORD	0x00000001 (1)	del
RuntimeVersion	REG_SZ	v4.0.30319	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\mscorlib, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\mscorlib, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\mscorlib, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napcrypt, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napcrypt, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napcrypt, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napinit, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napinit, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napinit, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationCore, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationCore, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\0\	mod
0f	00	00	00	01	11	e7	5a	7d	37	32	5c	d9	e3	a7	f7
															
b9	31	61	66	6e	05	00	00	00	e2	00	00	00	50	00	72
															
00	65	00	73	00	65	00	6e	00	74	00	61	00	74	00	69
															
00	6f											 ... (3180)
												 ... (3176)
ImageList	REG_BINARY		mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationCore, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
13	00	00	00	01	d3	a2	cb	96	82	d2	e9	e9	18	cc	b2
															
b3	86	cb	cc	23	05	00	00	00	ea	00	00	00	50	00	72
															
00	65	00	73	00	65	00	6e	00	74	00	61	00	74	00	69
															
00	6f											 ... (4004)
												 ... (4004)
ImageList	REG_BINARY		mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework.Aero2, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework.Aero2, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework.Aero2, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration.Install, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration.Install, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration.Install, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Core, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Core, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Core, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Data, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Data, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Data, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.DirectoryServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.DirectoryServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.DirectoryServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Drawing, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Drawing, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Drawing, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management.Automation, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management.Automation, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management.Automation, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management.Automation, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Management.Automation, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Net.Http, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Net.Http, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Net.Http, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Remoting, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Remoting, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Remoting, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Serialization, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Serialization, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Serialization, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.ServiceModel, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.ServiceModel, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.ServiceModel, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.ServiceProcess, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.ServiceProcess, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.ServiceProcess, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Transactions, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Transactions, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Transactions, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=amd64\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Web.Services, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Web.Services, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Web.Services, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Windows.Forms, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Windows.Forms, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Windows.Forms, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml.Linq, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml.Linq, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml.Linq, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\TaskScheduler, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\TaskScheduler, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\TaskScheduler, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\State\	mod
LastSuccess	REG_QWORD	3e b9 c9 ae 2b 23 df 08 	old
	REG_QWORD	21 aa d7 d6 fb 23 df 08 	new
TaskHighPriorityMode	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\	mod
ClockTimeSeconds	REG_QWORD	d8 4a c5 6a 00 00 00 00 	old
	REG_QWORD	3c 53 c5 6a 00 00 00 00 	new
TickCount	REG_QWORD	ec 04 01 00 00 00 00 00 	old
	REG_QWORD	92 bd 21 00 00 00 00 00 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\0018801921667C6E_S-1-5-21-2292890337-69778762-837601055-1001\	add
LastAccountPersistentFailureTimestamp	REG_QWORD	00 00 00 00 00 00 00 00 	add
LastSuccessfulRequestTimestamp	REG_QWORD	d8 51 69 27 c8 55 dd 01 	add
NegativeCacheState	REG_DWORD	0x00000000 (0)	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\0018801921667C6E_S-1-5-21-2292890337-69778762-837601055-1001\S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\0018801921667C6E_S-1-5-21-2292890337-69778762-837601055-1001\S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742\cortana.bing.com_MBI_SSL\	add
ErrorCode	REG_DWORD	0x8004a98a (2147789194)	add
FailureType	REG_DWORD	0x00000000 (0)	add
RequestCount	REG_DWORD	0x00000002 (2)	add
StartedTime	REG_QWORD	17 dc 8e 27 c8 55 dd 01 	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\0018801921667C6E_S-1-5-21-2292890337-69778762-837601055-1001\{DF60E2DF-88AD-4526-AE21-83D130EF0F68}\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\0018801921667C6E_S-1-5-21-2292890337-69778762-837601055-1001\{DF60E2DF-88AD-4526-AE21-83D130EF0F68}\http://Passport.NET/tb_\	add
ErrorCode	REG_DWORD	0x00000000 (0)	add
FailureType	REG_DWORD	0x00000000 (0)	add
RequestCount	REG_DWORD	0x00000000 (0)	add
StartedTime	REG_QWORD	d8 51 69 27 c8 55 dd 01 	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\1\	add
LastAccountPersistentFailureTimestamp	REG_QWORD	00 00 00 00 00 00 00 00 	add
LastSuccessfulRequestTimestamp	REG_QWORD	d8 51 69 27 c8 55 dd 01 	add
NegativeCacheState	REG_DWORD	0x00000000 (0)	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\1\S-1-5-21-2292890337-69778762-837601055-1001\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\NegativeCache\1\S-1-5-21-2292890337-69778762-837601055-1001\1\	add
ErrorCode	REG_DWORD	0x00000000 (0)	add
FailureType	REG_DWORD	0x00000000 (0)	add
RequestCount	REG_DWORD	0x00000000 (0)	add
StartedTime	REG_QWORD	d8 51 69 27 c8 55 dd 01 	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ThrottleCache\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ThrottleCache\S-1-5-21-2292890337-69778762-837601055-1001_S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742\	add
ThrottleCount	REG_DWORD	0x00000002 (2)	add
ThrottleStartedTime	REG_QWORD	a0 42 6b 27 c8 55 dd 01 	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ThrottleCache\S-1-5-21-2292890337-69778762-837601055-1001_{DF60E2DF-88AD-4526-AE21-83D130EF0F68}\	add
ThrottleCount	REG_DWORD	0x00000001 (1)	add
ThrottleStartedTime	REG_QWORD	e7 27 24 27 c8 55 dd 01 	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\FirstBootRun\	add
(Default)	REG_DWORD	0x00000001 (1)	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Sessions\	mod
LastSession	REG_SZ	CWnbFK7fIUu92LDL.0	old
	REG_SZ	1rfhqoe99kiflChb.0	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Sessions\1rfhqoe99kiflChb.0\	add
BeginTime	REG_SZ	2026-10-06 19:47:19	add
LastRunTime	REG_SZ	2026-10-06 19:47:40	add
RebootCount	REG_DWORD	0x00000000 (0)	add
State	REG_SZ	Completed	add
StateValue	REG_DWORD	0x00000003 (3)	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Sessions\CWnbFK7fIUu92LDL.0\	mod
NextSession	REG_SZ	1rfhqoe99kiflChb.0	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMB1Uninstall\	mod
SMB1ClientCounter	REG_DWORD	0x00000029 (41)	old
	REG_DWORD	0x0000002a (42)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\	mod
19	00	00	00	01	00	00	00	10	00	00	00	9f	68	75	81
5c								04				00	10	00	00
f7	ef	74	4e	cf	c1	2b	9c	ee	62	38	f1	03	00	00	00
19	00	00	00	01	00	00	00	10	00	00	00	9f	68	75	81
01	00	00	00	14	00	00	00	f4	00	42	e2	e5	f7	e8	ef
f7	ef	74	4e	cf	c1	2b	9c	ee	62	38	f1	03	00	00	00
81	89											 ... (1898)
01	00											 ... (1942)
Blob	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepositoryStatus\	mod
DeploymentDatabaseStatisticsLastUpdated	REG_QWORD	89 8d e8 25 c8 55 dd 01 	old
	REG_QWORD	f4 8d 8a 7f cb 55 dd 01 	new
MachineDatabaseStatisticsLastUpdated	REG_QWORD	21 a5 e5 5d c7 55 dd 01 	old
	REG_QWORD	e0 0c 7a 7f cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\	mod
SessionIdHigh	REG_DWORD	0x01dd55c6 (31282630)	old
	REG_DWORD	0x01dd55cb (31282635)	new
SessionIdLow	REG_DWORD	0xe8b8b881 (3904419969)	old
	REG_DWORD	0x88c4c59b (2294597019)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\	mod
LastSuccessfulRealtimeUploadTime	REG_QWORD	d8 94 2d 27 c8 55 dd 01 	old
	REG_QWORD	2d 69 c9 2a ca 55 dd 01 	new
LastSuccessfulUploadTime	REG_QWORD	70 e9 6d 41 c8 55 dd 01 	old
	REG_QWORD	2d 69 c9 2a ca 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\HeartBeats\Default\	mod
EventsPersistedCounter	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000001 (1)	new
HeartBeatSequenceNumber	REG_DWORD	0x0000002f (47)	old
	REG_DWORD	0x00000030 (48)	new
LastHeartBeatTime	REG_QWORD	37 be 11 26 c8 55 dd 01 	old
	REG_QWORD	20 4f fc 56 cc 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\	mod
LastDownloadTime	REG_QWORD	f8 1e 65 2b c8 55 dd 01 	old
	REG_QWORD	80 44 7b 5e cc 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\	mod
GlobalAssocChangedCounter	REG_DWORD	0x00000007 (7)	old
	REG_DWORD	0x00000008 (8)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\PolicyApplicationState\	mod
PolicyState	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances\	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances\ac0486e5-c6d8-47ea-8609-2608d9e92139\	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109B10000000100000000F01FEC\Usage\	mod
ProductFiles	REG_DWORD	0x5d46000a (1564868618)	old
	REG_DWORD	0x5d46000e (1564868622)	new
VBAFiles	REG_DWORD	0x5d460002 (1564868610)	add
WORDFiles	REG_DWORD	0x5d46000b (1564868619)	old
	REG_DWORD	0x5d46000d (1564868621)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60091400100000000F01FEC\Usage\	mod
TCWP5FilesIntl_1049	REG_DWORD	0x5d460002 (1564868610)	add
TCWP6FilesIntl_1049	REG_DWORD	0x5d460002 (1564868610)	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10022400100000000F01FEC\Usage\	mod
SpellingAndGrammarFilesExp2_1058	REG_DWORD	0x5d460002 (1564868610)	old
	REG_DWORD	0x5d460003 (1564868611)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10070400100000000F01FEC\Usage\	mod
SpellingAndGrammarFiles_1031	REG_DWORD	0x5d460006 (1564868614)	old
	REG_DWORD	0x5d460009 (1564868617)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400100000000F01FEC\Usage\	mod
SpellingAndGrammarFiles_1033	REG_DWORD	0x5d46000a (1564868618)	old
	REG_DWORD	0x5d46000d (1564868621)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10091400100000000F01FEC\Usage\	mod
SpellingAndGrammarFiles_1049	REG_DWORD	0x5d460007 (1564868615)	old
	REG_DWORD	0x5d460008 (1564868616)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Store\Configuration\	mod
Hardware	REG_SZ	arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m040,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v011,v021,v041,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0	add
OEMDiscoveryTTL	REG_QWORD	3c 0a a2 7e 4c 5b dd 01 	add
OEMID	REG_SZ	Public	add
SCMID	REG_SZ	Public	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\VFUProvider\	mod
StartTime	REG_QWORD	e8 38 85 a8 c8 55 dd 01 	old
	REG_QWORD	50 d5 b1 44 cd 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\	mod
LastTaskOperationHandle	REG_DWORD	0x0000009e (158)	old
	REG_DWORD	0x0000005a (90)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RequestedAppCategories\855E8A7C-ECB4-4CA3-B045-1DFA50104289\	mod
B99AEF9A-1685-4798-B4B1-3D94EE6D7184	REG_SZ	2026-10-06 19:17:47	old
	REG_SZ	2026-10-06 19:37:45	new
EAAC6C6B-10A4-4659-815B-44F151ECA61A	REG_SZ	2026-10-06 19:17:48	old
	REG_SZ	2026-10-06 19:37:44	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\	mod
LastRefreshAttempted	REG_QWORD	05 8d 28 43 c7 55 dd 01 	old
	REG_QWORD	79 53 ba 7f cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\	mod
LastRefreshAttempted	REG_QWORD	05 8d 28 43 c7 55 dd 01 	old
	REG_QWORD	79 53 ba 7f cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\	mod
ETag	REG_SZ	"CBF6003693C930E2::2F2C80313E"	old
	REG_SZ	"CBF6003693C930E2::2F2C805927"	new
LastHTTPCode	REG_DWORD	0x000000c8 (200)	old
	REG_DWORD	0x00000130 (304)	new
LastRefreshAttempted	REG_QWORD	05 8d 28 43 c7 55 dd 01 	old
	REG_QWORD	79 53 ba 7f cb 55 dd 01 	new
LastUpdated	REG_QWORD	e8 1b 3a 47 ef 54 dd 01 	old
	REG_QWORD	79 53 ba 7f cb 55 dd 01 	new
a7	62	05	78	34	06	5a	ac	33	66	66	05	a2	5f	0e	d6
78	5e	ff	93	04	f7	08	c2	42	5e	cc	d1	fd	c7	be	24
ab	b6	2e	c2	40	e8	29	a2	a7	4d	1e	06	09	a8	cd	c8
db	70	7b	ac	05	33	4f	10	25	d1	e5	38	ce	79	2a	bb
QueryStringHash	REG_BINARY		mod
RefreshInterval	REG_DWORD	0x00000623 (1571)	old
	REG_DWORD	0x00000404 (1028)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\	mod
LastRefreshAttempted	REG_QWORD	0a 8e 2a 43 c7 55 dd 01 	old
	REG_QWORD	b5 f6 27 80 cb 55 dd 01 	new
LastUpdated	REG_QWORD	db a1 62 47 ef 54 dd 01 	old
	REG_QWORD	b5 f6 27 80 cb 55 dd 01 	new
RefreshInterval	REG_DWORD	0x00000617 (1559)	old
	REG_DWORD	0x0000068f (1679)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\	mod
LastRefreshAttempted	REG_QWORD	0a 8e 2a 43 c7 55 dd 01 	old
	REG_QWORD	cc 0b 58 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\	mod
LastRefreshAttempted	REG_QWORD	50 d4 57 43 c7 55 dd 01 	old
	REG_QWORD	aa c3 93 80 cb 55 dd 01 	new
LastRefreshByApp	REG_QWORD	50 d4 57 43 c7 55 dd 01 	old
	REG_QWORD	aa c3 93 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GAMEINPUT\	mod
LastRefreshAttempted	REG_QWORD	0a 8e 2a 43 c7 55 dd 01 	old
	REG_QWORD	a9 28 5a 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\	mod
LastRefreshAttempted	REG_QWORD	0a 8e 2a 43 c7 55 dd 01 	old
	REG_QWORD	a9 28 5a 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\	mod
LastRefreshAttempted	REG_QWORD	0a 8e 2a 43 c7 55 dd 01 	old
	REG_QWORD	a9 28 5a 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\	mod
LastRefreshAttempted	REG_QWORD	0a 8e 2a 43 c7 55 dd 01 	old
	REG_QWORD	a9 28 5a 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\	mod
LastRefreshAttempted	REG_QWORD	16 62 2f 43 c7 55 dd 01 	old
	REG_QWORD	fa e5 65 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\	mod
LastRefreshAttempted	REG_QWORD	16 62 2f 43 c7 55 dd 01 	old
	REG_QWORD	fa e5 65 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\	mod
LastRefreshAttempted	REG_QWORD	16 62 2f 43 c7 55 dd 01 	old
	REG_QWORD	fa e5 65 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\	mod
LastRefreshAttempted	REG_QWORD	fb 53 53 43 c7 55 dd 01 	old
	REG_QWORD	23 d8 8e 80 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\1488\	add
CreationTime	REG_QWORD	cd 8b 27 59 cc 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\3528\	add
CreationTime	REG_QWORD	42 b1 fb 56 cd 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4356\	add
CreationTime	REG_QWORD	24 ce 47 ec ca 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4560\	add
CreationTime	REG_QWORD	d7 48 e8 7c cc 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4752\	add
CreationTime	REG_QWORD	b8 04 50 44 cd 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4960\	add
CreationTime	REG_QWORD	a1 0f 21 5b cc 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\5872\	add
CreationTime	REG_QWORD	21 63 3f 5f ca 55 dd 01 	add
Reason	REG_DWORD	0x00000000 (0)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6332\	add
CreationTime	REG_QWORD	6d f3 c4 91 cc 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6540\	add
CreationTime	REG_QWORD	91 ad 42 5f ca 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6752\	add
CreationTime	REG_QWORD	85 b1 23 5f ca 55 dd 01 	add
Reason	REG_DWORD	0x00000000 (0)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6756\	add
CreationTime	REG_QWORD	fe fb 88 79 cc 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6896\	add
CreationTime	REG_QWORD	89 1e 08 6e cc 55 dd 01 	add
Reason	REG_DWORD	0x00000004 (4)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\8148\	add
CreationTime	REG_QWORD	f8 69 45 ec ca 55 dd 01 	add
Reason	REG_DWORD	0x00000000 (0)	add
Terminator	REG_SZ	HAM	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\	mod
ServiceStartStates	REG_DWORD	0x00000001 (1)	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan\	mod
0f	20	c4	1b	ee	54	dd	01								
b4	9c	58	8e	c9	55										
LastAggressiveCheck	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Signature Updates\	mod
d5	ac	7e	4a	23	55	dd	01								
d4	f4	73	8e	c9											
LastFallbackTime	REG_BINARY		mod
89	97	7c	4a	23	55	dd	01								
d2	fc	6d	8e	c9											
SignatureUpdateLastAttempted	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TelemetryController\	mod
LastMaintenanceRun	REG_QWORD	76 13 96 5e fb 54 dd 01 	old
	REG_QWORD	30 40 94 7f cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{A177875A-41AD-4825-97BF-87579A0D802C}\	mod
ea	07	0a	00	02	00	06	00	16	00	17	00	12	00	80	03
										2f		15		c8	02
DateLastConnected	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data\	mod
98	03	00	00	00	00	00	00	04	00	04	00	01	00	06	00
c7														16	
01	01	00	00	02	12	f8	00	12	6f	ae	00	a5	ad	cf	00
02	00			0d	a1	81			e5	f8		15	ce	eb	
cd	ad	05	01	db	b4	ef	00	f1	d9	a3	00	37	01	02	00
2f	39	d5	00	31	48	4f		48	f9	a6		56	0a	85	
00	00											 ... (2428)
71	40											 ... (132)
418A073AA3BC1C75	REG_BINARY		mod
07	05	00	00	00	00	00	00	04	00	04	00	01	02	0a	00
41														02	
00	00	00	00	22	00	00	00	0d	78	79	00	10	00	00	00
				1c								07			
59	b5	05	01	02	00	00	00	6b	50	7e	00	02	00	00	00
a1	9f	5e	00	01		04		00	00	21		00		1a	9c
81	06											 ... (532)
b2	00											 ... (106)
418A073AA3BC3475	REG_BINARY		mod
06	00	00	00												
08															
418A073AA3BC4C75	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileService\References\S-1-5-21-2292890337-69778762-837601055-1001\	mod
04	00	00	00												
06															
RefCount	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8FC94B03-C8D3-43FA-A2DF-A7A8E71D589B}\	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E2B8D3BD-FAAF-496E-BC39-3121A178C6AC}\	del
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8FC94B03-C8D3-43FA-A2DF-A7A8E71D589B}\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E2B8D3BD-FAAF-496E-BC39-3121A178C6AC}\	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{01C5B377-A7EB-4FF3-9C6C-86852FACB348}\	mod
03	00	00	00	eb	56	0d	5d	9c	9c	d9	01	49	7c	d8	aa
												b7	30	c7	7e
00	55	dd	01	00	00	00	00	00	00	00	00	07	bd	7e	ac
cb												17	99	c2	8b
00	55	dd	01												
cb															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{04C10A9D-5360-47B2-9C96-2DDBCE8EC3F7}\	mod
03	00	00	00	07	8c	97	5d	9c	9c	d9	01	6b	5d	97	44
												88	04	62	7f
ef	54	dd	01	00	00	00	00	00	00	00	00	4c	3c	82	49
cb	55											ee	63	83	7f
ef	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A149C55-0138-453B-94B5-F89EF5C3EB8C}\	mod
03	00	00	00	f7	4c	a8	5d	9c	9c	d9	01	db	55	85	5d
												88	04	62	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	80	3f	ee	5d
cb	55											ef	6a	8f	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{19051521-1085-4928-B136-FE816BB39A2A}\	mod
e2	9c	1e	7c	f3	21	05	68	9e	84	4a	e1	2c	a9	98	02
87	15	e1	5c	47	d6		3a	a1	c2	db	bd	0d	ed	38	2d
d4	8c	7d	c6	c3	24	9b	22	c3	43	7c	75	21	2d	a2	13
75	5d	a0	d3	33	5d	23	b4	25		30	76	83	a5	11	c2
Hash	REG_BINARY		mod
17	00	00	00	00	00	00	00	00	07	0a	00	00	00	06	00
														07	
00	a0	af	44	cd	55	dd	01	00	07	0a	00	00	00	06	00
80	f8	79	14	f1										07	
ff	ff	ff	ff	ff	ff	ff	ff	80	21	42	42	48	48	48	48
															
7c	80											 ... (312)
9b	c2											 ... (312)
Triggers	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B813E0C-2BBF-4EFE-9108-D9D020D465F2}\	mod
03	00	00	00	c8	43	4b	5d	9c	9c	d9	01	cd	92	8b	88
												7a	83	f5	d8
c7	55	dd	01	00	00	00	00	00	00	00	00	73	07	8e	88
c8												f4	3f	f7	d8
c7	55	dd	01												
c8															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30526E35-00F9-4BED-9846-7BBC937831E9}\	mod
03	00	00	00	55	51	bb	5d	9c	9c	d9	01	1d	a5	91	5d
												24	a2	69	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	4d	17	06	5e
cb	55											28	a3	7e	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3472D253-581F-4480-8539-784D74361402}\	mod
03	00	00	00	4b	b1	bd	5d	9c	9c	d9	01	db	55	85	5d
												d4	ad	64	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	fc	ce	73	5e
cb	55											79	53	ba	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3810C063-8759-4D54-A834-4BEA5D6BFBE4}\	mod
03	00	00	00	4b	b1	bd	5d	9c	9c	d9	01	36	88	ea	5c
												b7	30	c7	7e
fb	54	dd	01	00	00	00	00	00	00	00	00	57	4f	f6	5c
cb	55											90	35	ce	7e
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D8E83D8-967E-44AC-8896-42CDEC763404}\	mod
03	00	00	00	4b	b1	bd	5d	9c	9c	d9	01	db	55	85	5d
												d4	ad	64	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	35	1b	8a	5d
cb	55											26	ed	66	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E71A4DC-DDCE-4C14-A634-884145381F98}\	mod
03	00	00	00	2e	e9	4b	00	2d	e2	d9	01	aa	f4	df	6a
												24	a2	69	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	0e	00	62	7e
cb	55											3a	02	7e	a5
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47B89A79-53D2-485E-AD87-148165B28519}\	mod
03	00	00	00	e7	d5	c4	5d	9c	9c	d9	01	90	fa	ef	3e
												1a	96	3f	fb
c7	55	dd	01	00	00	00	00	00	00	00	00	da	e6	11	3f
c8												50	39	49	fb
c7	55	dd	01												
c8															
DynamicInfo	REG_BINARY		mod
2b	b2	87	6a	42	1f	71	0f	4b	8e	3c	0e	6a	d9	3c	44
e4	dc	ef	a6	65	f5	05	d0	43	af	0d	6b	e4	dd	f2	e9
17	f2	24	65	b3	6a	b5	b3	7a	6e	2a	33	68	0a	2a	02
e5	66	95	da	39	5a	ac	a0	79	f3	b9	5c	fd	e8	02	44
Hash	REG_BINARY		mod
17	00	00	00	00	00	00	00	00	da	e7	4c	c6	00	00	00
									d7	bf	14	fb			
00	00	00	00	00	00	00	00	00	07	0a	00	00	00	06	00
															
ff	ff	ff	ff	ff	ff	ff	ff	c8	21	42	47	48	48	48	48
															
95	7d											 ... (417)
36	53											 ... (417)
Triggers	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55412461-F053-4583-A6BF-19F36DAAD46D}\	mod
03	00	00	00	12	22	d3	5d	9c	9c	d9	01	90	fa	ef	3e
												b8	fb	97	3d
c7	55	dd	01	00	00	00	00	00	00	00	00	0b	74	fb	5f
ca												59	57	9a	3d
c7	55	dd	01												
ca															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CD70278-3C30-4E8E-A585-8D9E5CAB415F}\	mod
03	00	00	00	e6	54	69	5e	9c	9c	d9	01	b5	2a	c7	fa
												dd	6a	aa	3e
23	55	dd	01	00	00	00	00	00	00	00	00	1a	d7	de	fa
ca												02	2c	ad	3e
23	55	dd	01												
ca															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{798DB582-30ED-4D82-974F-12178BC4D55A}\	mod
03	00	00	00	70	4f	99	5e	9c	9c	d9	01	80	bf	ec	5c
												b7	30	c7	7e
fb	54	dd	01	00	00	00	00	00	00	00	00	97	16	8d	5f
cb	55											ae	3d	1e	86
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F7C7B24-A90F-4BC4-A2AD-F65B70BD54C3}\	mod
03	00	00	00	e9	d2	76	00	2d	e2	d9	01	0e	06	5e	43
												88	04	62	7f
ec	54	dd	01	00	00	00	00	03	01	00	00	2a	9b	55	4a
cb	55							00	00			e8	e4	7d	a5
ec	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7FBDDC9A-D7DB-4F90-B8CE-4973E5018DF5}\	mod
03	00	00	00	6e	b7	60	5d	9c	9c	d9	01	9f	ca	b4	4e
												07	e6	e1	99
23	55	dd	01	00	00	00	00	30	00	09	80	12	f9	b6	4e
c9												36	19	e3	99
23	55	dd	01												
c9															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8B93EBFE-3FF4-40B0-9DC0-2FAE2652DBFB}\	mod
03	00	00	00	34	d9	7a	82	23	55	dd	01	00	00	00	00
												86	15	0f	57
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
cc	55	dd	01									8f	43	11	57
00	00	00	00												
cc	55	dd	01												
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FC94B03-C8D3-43FA-A2DF-A7A8E71D589B}\	mod
03	00	00	00	fc	4e	d2	5e	9c	9c	d9	01	33	45	43	00
												01	af	93	83
24	55	dd	01	00	00	00	00	00	00	00	00	84	3d	0f	67
cb												00	c4	15	8f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
b3	62	7b	01	9c	c6	23	08	63	4c	f8	87	6b	15	3f	17
fb	91	ee	8f	9f	ae	c9	9e	cb	00	a9	32	f9	5b	1b	ac
66	e9	d3	a9	02	c9	b8	77	d0	c7	1b	fb	20	e5	44	91
50	dc	3f	79	33	3f	de	41	cb	bc	52	24	83	09	86	94
Hash	REG_BINARY		mod
17	00	00	00	00	00	00	00	00	db	a7	10	16	00	00	00
									ff	ff	ff	ff	ff	ff	ff
00	00	00	00	00	00	00	00	00	db	a7	10	16	00	00	00
ff	ff	ff	ff	ff	ff	ff	ff		ff	ff	ff	ff	ff	ff	ff
ff	ff	ff	ff	ff	ff	ff	ff	08	21	c2	42	48	48	48	48
00	00	00	00	00	00	00	00	38							
1e	d5											 ... (352)
16	2d											 ... (240)
Triggers	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90C28B5C-2A50-48E1-9579-EEE75F1B1F2E}\	mod
03	00	00	00	d3	5c	de	5e	9c	9c	d9	01	35	1b	8a	5d
												d4	ad	64	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	3e	62	e9	5d
cb	55											e4	18	92	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A1A4F90B-9598-45B7-85D2-AE21B341085D}\	mod
03	00	00	00	72	b4	06	5f	9c	9c	d9	01	23	8d	98	a0
												fa	54	ca	7e
13	55	dd	01	00	00	00	00	e0	10	07	80	76	83	f1	5c
cb															
fb	54	dd	01												
															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A6432082-89BD-434D-9C61-D7FE6D91CCB9}\	mod
8a	3a	6c	03	fe	90	1c	e4	fb	72	45	87	af	2f	44	79
38	86	8b	3a	05	6c	8b	4c	a0	10	c4	77	02	13	66	62
64	38	6f	61	43	60	26	7c	30	36	bb	58	1c	b1	49	26
93	84	6d	ea	b2	5f	ef	a7	67	5c	f4	7f	6b	a8	3d	fb
Hash	REG_BINARY		mod
17	00	00	00	00	00	00	00	00	07	0a	00	00	00	06	00
															
80	7d	52	e8	d8	55	dd	01	00	07	0a	00	00	00	06	00
00	77	08	42	dc											
ff	ff	ff	ff	ff	ff	ff	ff	48	21	c2	02	48	48	48	48
															
7e	a6											 ... (320)
69	5a											 ... (320)
Triggers	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB5C9F82-7A27-4979-82BD-45739449A876}\	mod
03	00	00	00	fa	4a	80	5f	9c	9c	d9	01	ec	a3	8c	5d
												26	ed	66	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	ef	0d	ff	5d
cb	55											30	40	94	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEF19949-EFA3-412C-8B8E-BC3B749C325D}\	mod
03	00	00	00	45	73	87	5f	9c	9c	d9	01	a9	e3	8e	5d
												26	ed	66	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	85	9d	ca	5d
cb	55											0c	7f	15	81
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0B065A7-75E9-4CF8-B9D3-54E630EA447A}\	mod
03	00	00	00	45	73	87	5f	9c	9c	d9	01	a9	e3	8e	5d
												26	ed	66	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	ac	f7	f7	5d
cb	55											0c	4d	88	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C391351C-0F98-447E-B3F3-F932910C72FD}\	mod
03	00	00	00	6b	bd	95	5f	9c	9c	d9	01	a9	e3	8e	5d
												26	ed	66	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	56	41	f5	5d
cb	55											30	40	94	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7BEACF3-363F-42F9-A68C-203392B534AA}\	mod
03	00	00	00	6b	bd	95	5f	9c	9c	d9	01	a9	e3	8e	5d
												26	ed	66	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	cc	a6	98	5d
cb	55											1a	4e	6e	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2B8D3BD-FAAF-496E-BC39-3121A178C6AC}\	mod
03	00	00	00	a8	72	c5	5f	9c	9c	d9	01	1b	3b	3c	00
												01	af	93	83
24	55	dd	01	00	00	00	00	00	00	00	00	2c	e9	4e	66
cb												e0	88	5a	8f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
4e	51	27	d1	50	51	0f	c9	c9	99	8d	9a	66	97	2b	6e
cd	7e	ee	29	43	10	94	8c	6f	fc	b8	37	30	0b	db	45
b5	c3	da	14	48	07	41	da	fa	48	d6	3e	61	bd	6f	b0
8d	f0	b5	03	3b	a5	5d	ec	58	5e	99		58	ae	6a	4c
Hash	REG_BINARY		mod
17	00	00	00	00	00	00	00	00	dc	a7	10	16	00	00	00
									ff	ff	ff	ff	ff	ff	ff
00	00	00	00	00	00	00	00	00	dc	a7	10	16	00	00	00
ff	ff	ff	ff	ff	ff	ff	ff		ff	ff	ff	ff	ff	ff	ff
ff	ff	ff	ff	ff	ff	ff	ff	08	21	c2	42	48	48	48	48
00	00	00	00	00	00	00	00	38							
3f	ce											 ... (352)
ce	49											 ... (240)
Triggers	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4AEB720-7F18-419F-A20E-6E0B5C4ED968}\	mod
03	00	00	00	a8	72	c5	5f	9c	9c	d9	01	f4	cd	08	91
												82	44	42	d5
23	55	dd	01	00	00	00	00	00	00	00	00	b1	3f	3d	91
c9												bd	d7	71	d5
23	55	dd	01												
c9															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9584198-7911-470F-A652-045B6281107C}\	mod
03	00	00	00	47	20	d6	5f	9c	9c	d9	01	23	8d	98	a0
												24	a2	69	7f
13	55	dd	01	00	00	00	00	e0	10	07	80	d5	b7	b7	70
cb								00	00	00	00	bb	d1	c0	8d
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F02B389F-2CC0-47DE-B0A6-F99BA3FCC5F4}\	mod
03	00	00	00	4f	aa	df	5f	9c	9c	d9	01	bb	aa	01	25
												09	38	3a	81
c8	55	dd	01	00	00	00	00	00	00	00	00	5b	d8	c4	25
cb												98	81	3c	81
c8	55	dd	01												
cb															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2FCCCBA-0DA2-43B1-8383-00F0D84C51F0}\	mod
03	00	00	00	e2	94	eb	5f	9c	9c	d9	01	a9	e3	8e	5d
												24	a2	69	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	50	62	e5	65
cb	55											52	08	60	84
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F369958F-78A7-4AF3-9208-D840060ECE2F}\	mod
03	00	00	00	08	bf	f2	5f	9c	9c	d9	01	a9	e3	8e	5d
												24	a2	69	7f
fb	54	dd	01	00	00	00	00	00	00	00	00	cc	a6	98	5d
cb	55											1a	4e	6e	7f
fb	54	dd	01												
cb	55														
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F380C283-F2BA-4E42-95DB-2BC0C6CFFF86}\	mod
03	00	00	00	4c	b0	21	0b	0a	9b	d9	01	23	8d	98	a0
												fa	54	ca	7e
13	55	dd	01	00	00	00	00	e0	10	07	80	70	c6	2d	34
cb															
01	55	dd	01												
															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FA103B2E-5EB2-499F-9443-9765F29C7B5B}\	mod
03	00	00	00	6d	44	89	5d	9c	9c	d9	01	35	60	b1	fa
												fa	54	ca	7e
23	55	dd	01	00	00	00	00	00	00	00	00	24	c2	f1	fa
cb												51	7f	fb	7e
23	55	dd	01												
cb															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD99B9AA-26F4-41C8-A511-227192E65CF5}\	mod
03	00	00	00	84	b1	8b	5d	9c	9c	d9	01	46	4b	c2	fa
												af	e9	a7	3e
23	55	dd	01	00	00	00	00	00	00	00	00	b1	65	c9	fa
ca												dd	6a	aa	3e
23	55	dd	01												
ca															
DynamicInfo	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319\	mod
Index	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000003 (3)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64\	mod
Index	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000003 (3)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan\	mod
01	00	04	80	d8	00	00	00	e4	00	00	00	00	00	00	00
															
14	00	00	00	02	00	c4	00	09	00	00	00	00	00	14	00
															
ff	01	1f	00	01	01	00	00	00	00	00	05	12	00	00	00
															
00	00											 ... (240)
												 ... (240)
SD	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\	mod
66	0c	24	97	04	00	00	00	44	00	00	00	b8	03	00	00
80	49	d1	0a												
6d	00	73	00	66	00	74	00	3a	00	73	00	70	00	70	00
															
2f	00	61	00	63	00	74	00	69	00	6f	00	6e	00	2f	00
															
63	00											 ... (2656)
												 ... (2656)
actionlist	REG_BINARY		mod
6b	c2	61	5f	18	17	0b	43	b6	a4	3d	4b	44	21	e7	ef
42	12	48	1a	68	1b	da	49	88	f4	9f	84	e2	78	52	79
ServiceSessionId	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\VolatileNotifications\	mod
41C64E6DA389E855	REG_BINARY	01 00 04 80 44 00 00 00 50 00 00 00 00 00 00 00 14 00 00 00 02 00 30 00 02 00 00 00 00 00 14 00 03 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00  ... (96)	del
41C64E6DA3E74855	REG_BINARY	01 00 04 80 44 00 00 00 50 00 00 00 00 00 00 00 14 00 00 00 02 00 30 00 02 00 00 00 00 00 14 00 03 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00  ... (96)	add
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\	mod
NewClientID	REG_DWORD	0x00000056 (86)	old
	REG_DWORD	0x0000005d (93)	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Security Health\	mod
LastHeartbeat	REG_QWORD	d1 44 b4 d7 f8 54 dd 01 	old
	REG_QWORD	bd 0b 42 d5 c9 55 dd 01 	new
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState\	mod
CurrentCallsPerDayCount	REG_DWORD	0x00000004 (4)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\ListenedState\	mod
RootstoreDirty	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\	mod
WorkPending	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\EventViewer, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\EventViewer, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\EventViewer, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Dtc.PowerShell, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Dtc.PowerShell, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Dtc.PowerShell, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop.wsa, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop.wsa, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\microsoft.isam.esent.interop.wsa, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Management.Infrastructure, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.ManagementConsole, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.ManagementConsole, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.ManagementConsole, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
KeepRuntimeVersion	REG_DWORD	0x00000001 (1)	del
RuntimeVersion	REG_SZ	v4.0.30319	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	02 00 00 00 01 81 77 a4 e0 e2 ef f4 36 76 09 2a 7a cd f0 a3 7e 05 00 00 00 be 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (604)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 f8 d4 9d 94 bb 32 0d e1 2f 4e 9d ad 7e bd 90 02 05 00 00 00 cc 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (1786)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	10 00 00 00 01 71 de 22 b9 43 d5 eb f5 87 fd 42 68 93 32 c2 af 05 00 00 00 ea 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3524)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Common.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 27 97 99 25 fc 74 69 ff 84 81 e3 56 24 48 d6 43 05 00 00 00 ca 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (1814)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	11 00 00 00 01 85 32 74 ef ec b1 de 1f c0 66 4d c9 de 0b d7 97 05 00 00 00 e8 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3784)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Excel.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	09 00 00 00 01 ed 4d 2a a1 19 c9 06 02 cc 33 61 e0 3d 90 de 5d 05 00 00 00 ce 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (2012)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	0f 00 00 00 01 5d 06 41 57 ad e3 39 28 5b 30 d6 0e 02 94 23 93 05 00 00 00 ec 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3358)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Outlook.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	06 00 00 00 01 fe 3f 6e 45 4a e1 14 ec 64 49 58 62 1b 5c 58 09 05 00 00 00 dc 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (1488)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.v4.0.Framework.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	09 00 00 00 01 62 e6 3f 52 1c 4f 5c e8 3d 28 20 99 3c b0 0a 4a 05 00 00 00 c8 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (2000)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	10 00 00 00 01 17 33 67 ce 56 69 26 b4 db 2c 0e 84 54 4b 82 36 05 00 00 00 e6 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 4f  ... (3598)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Office.Tools.Word.Implementation.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Diagnostics, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Commands.Utility, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Core.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Core.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Core.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Diagnostics.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Diagnostics.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Diagnostics.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Security.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Utility.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Utility.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Utility.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	0b 00 00 00 01 ba e9 ae 2b 7f f2 3f a6 29 49 ab a4 01 fd 35 89 05 00 00 00 f4 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (2508)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Hosting.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 54 9a 52 bf bc 1a 32 f2 c8 bf 0f c6 28 7b 89 60 05 00 00 00 f4 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (1862)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	08 00 00 00 01 bc 52 b2 8f 7a ea 20 bf 64 da dd 93 29 03 04 ef 05 00 00 00 02 01 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (1928)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Applications.ServerDocument.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.ContainerControl, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.ContainerControl, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	07 00 00 00 01 e4 4a 6a b3 6e d0 c3 05 3a db 0e 59 0a ae c4 ce 05 00 00 00 fa 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (1674)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	11 00 00 00 01 75 6a 08 28 0e d8 a5 a4 f4 cc 90 d5 6e cd 4b c0 05 00 00 00 e8 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (3782)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal, Version=10.0.0.00000, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
ImageList	REG_BINARY	09 00 00 00 01 d9 71 71 c9 dc 5f f7 bb ff 1b 80 b1 f5 8e fd e2 05 00 00 00 fa 00 00 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 56  ... (2208)	add
RuntimeVersion	REG_SZ	v4.0.30319	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.VisualStudio.Tools.Office.Runtime.resources, Version=10.0.0.00000, Culture=ru, PublicKeyToken=B03F5F7F11D50A3A\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.GetDiagInput, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.Commands.WriteDiagTelemetry, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDCommon, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.SDHost, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.Windows.Diagnosis.TroubleshootingPack, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WindowsSearch.Commands, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Management.Activities, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=1.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
RuntimeMissing	REG_DWORD	0x00000001 (1)	add
Status	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\Microsoft.WSMan.Runtime, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCEx, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCEx, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCEx, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
KeepRuntimeVersion	REG_DWORD	0x00000001 (1)	del
RuntimeVersion	REG_SZ	v4.0.30319	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCFxCommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCFxCommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\MMCFxCommon, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
KeepRuntimeVersion	REG_DWORD	0x00000001 (1)	del
RuntimeVersion	REG_SZ	v4.0.30319	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\mscorlib, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=x86\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\mscorlib, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=x86\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\mscorlib, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=x86\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napinit, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napinit, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\napinit, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationCore, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=x86\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationCore, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=x86\0\	mod
0f	00	00	00	01	5d	86	a1	0f	97	e1	3c	33	52	34	7c
															
e4	21	3f	78	f5	05	00	00	00	de	00	00	00	50	00	72
															
00	65	00	73	00	65	00	6e	00	74	00	61	00	74	00	69
															
00	6f											 ... (3176)
												 ... (3172)
ImageList	REG_BINARY		mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationCore, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=x86\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
13	00	00	00	01	cc	aa	de	b8	de	05	48	f3	6c	f0	70
															
cf	d3	7c	e4	91	05	00	00	00	ea	00	00	00	50	00	72
															
00	65	00	73	00	65	00	6e	00	74	00	61	00	74	00	69
															
00	6f											 ... (4004)
												 ... (4004)
ImageList	REG_BINARY		mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework.Aero2, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework.Aero2, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\PresentationFramework.Aero2, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Configuration, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Core, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Core, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Core, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Net.Http, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Net.Http, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Net.Http, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Serialization, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Serialization, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.Serialization, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml.Linq, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml.Linq, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\System.Xml.Linq, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\TaskScheduler, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\TaskScheduler, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\TaskScheduler, Version=10.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\	mod
Status	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\0\	mod
Status	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0x00000005 (5)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\Roots\WindowsBase, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil\1\	del
Scenario	REG_DWORD	0x00000020 (32)	del
Status	REG_DWORD	0x00000002 (2)	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727\NGenService\State\	mod
LastSuccess	REG_QWORD	f3 bf fc ad 2b 23 df 08 	old
	REG_QWORD	35 1f 1d d7 fb 23 df 08 	new
TaskHighPriorityMode	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\	mod
19	00	00	00	01	00	00	00	10	00	00	00	9f	68	75	81
5c								04				00	10	00	00
f7	ef	74	4e	cf	c1	2b	9c	ee	62	38	f1	03	00	00	00
19	00	00	00	01	00	00	00	10	00	00	00	9f	68	75	81
01	00	00	00	14	00	00	00	f4	00	42	e2	e5	f7	e8	ef
f7	ef	74	4e	cf	c1	2b	9c	ee	62	38	f1	03	00	00	00
81	89											 ... (1898)
01	00											 ... (1942)
Blob	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Group Policy\PolicyApplicationState\	mod
PolicyState	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances\	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances\ac0486e5-c6d8-47ea-8609-2608d9e92139\	del
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows Search\Gather\Windows\SystemIndex\	mod
NewClientID	REG_DWORD	0x00000056 (86)	old
	REG_DWORD	0x0000005d (93)	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ProductOptions\	mod
d8	da	00	00	c0	da	00	00	04	00	00	00	00	00	00	00
															
01	00	00	00	94	00	48	00	03	00	3a	00	00	00	00	00
															
00	00	00	00	34	00	41	00	30	00	43	00	36	00	30	00
															
36	00											 ... (56024)
												 ... (56024)
ProductPolicy	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\bam\State\UserSettings\S-1-5-21-2292890337-69778762-837601055-1001\	mod
d7	83	ba	a7	c8	55	dd	01	00	00	00	00	00	00	00	00
21	ee	c5	65	cc											
00	00	00	00	02	00	00	00								
															
\Device\HarddiskVolume4\Program Files\Microsoft Office\Office16\WINWORD.EXE	REG_BINARY		mod
\Device\HarddiskVolume4\Program Files\Process Hacker 2\ProcessHacker.exe	REG_BINARY	d8 db 80 5c c9 55 dd 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 	add
\Device\HarddiskVolume4\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe	REG_BINARY	5d 46 3f 2f c9 55 dd 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 	add
f5	9e	28	27	c8	55	dd	01	00	00	00	00	00	00	00	00
9d	ce	58	ec	ca											
00	00	00	00	02	00	00	00								
															
\Device\HarddiskVolume4\Windows\System32\browser_broker.exe	REG_BINARY		mod
b8	ba	3c	f1	c7	55	dd	01	00	00	00	00	00	00	00	00
28	ea	42	e7	c9											
00	00	00	00	02	00	00	00								
															
\Device\HarddiskVolume4\Windows\System32\cmd.exe	REG_BINARY		mod
\Device\HarddiskVolume4\Windows\System32\notepad.exe	REG_BINARY	df ac 87 60 cc 55 dd 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 	add
de	27	f4	1e	14	55	dd	01	00	00	00	00	00	00	00	00
57	8b	6e	27	ca											
01	00	00	00	02	00	00	00								
															
InputApp_cw5n1h2txyewy	REG_BINARY		mod
95	74	d3	27	c8	55	dd	01	00	00	00	00	00	00	00	00
c8	11	81	ec	ca											
01	00	00	00	02	00	00	00								
															
Microsoft.MicrosoftEdge_8wekyb3d8bbwe	REG_BINARY		mod
a8	f3	31	97	c8	55	dd	01	00	00	00	00	00	00	00	00
85	91	30	42	cd											
01	00	00	00	02	00	00	00								
															
Microsoft.Windows.Cortana_cw5n1h2txyewy	REG_BINARY		mod
21	02	15	66	c8	55	dd	01	00	00	00	00	00	00	00	00
47	ce	6a	8b	cc											
01	00	00	00	02	00	00	00								
															
Microsoft.WindowsStore_8wekyb3d8bbwe	REG_BINARY		mod
SequenceNumber	REG_DWORD	0x0000000e (14)	old
	REG_DWORD	0x00000022 (34)	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KProcessHacker3\	add
DeleteFlag	REG_DWORD	0x00000001 (1)	add
DisplayName	REG_SZ	KProcessHacker3	add
ErrorControl	REG_DWORD	0x00000000 (0)	add
ImagePath	REG_EXPAND_SZ	\??\C:\Program Files\Process Hacker 2\kprocesshacker.sys	add
Start	REG_DWORD	0x00000004 (4)	add
Type	REG_DWORD	0x00000001 (1)	add
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KProcessHacker3\Parameters\	add
SecurityLevel	REG_DWORD	0x00000001 (1)	add
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch\	mod
Epoch	REG_DWORD	0x0000029a (666)	old
	REG_DWORD	0x000002af (687)	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch2\	mod
Epoch	REG_DWORD	0x00000065 (101)	old
	REG_DWORD	0x00000067 (103)	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SmsRouter\State\Registration\Ids\{81ADF3E5-CA49-476E-978F-D309F03B822E}\	del
ApplicationName	REG_SZ	SmsRouter	del
CreationTime	REG_QWORD	fd fb c3 6a 00 00 00 00 	del
DeliveryType	REG_DWORD	0x00000002 (2)	del
FilterXML	REG_SZ	<SmsMessageFilter Action="Drop" Flags="1"><FilterRule></FilterRule></SmsMessageFilter>	del
IsPackaged	REG_DWORD	0x00000000 (0)	del
LastAccessedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	del
LastNotifiedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	del
NotifyCount	REG_DWORD	0x00000000 (0)	del
Priority	REG_DWORD	0x01000000 (16777216)	del
RegistrationName	REG_SZ	SmsDropAcceptImmediate	del
Transient	REG_DWORD	0x00000001 (1)	del
UserSid	REG_SZ	S-1-5-19	del
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SmsRouter\State\Registration\Ids\{E4557F2F-B45B-43C5-8C5D-DABEE652BA85}\	add
ApplicationName	REG_SZ	SmsRouter	add
CreationTime	REG_QWORD	47 50 c5 6a 00 00 00 00 	add
DeliveryType	REG_DWORD	0x00000002 (2)	add
FilterXML	REG_SZ	<SmsMessageFilter Action="Drop" Flags="1"><FilterRule></FilterRule></SmsMessageFilter>	add
IsPackaged	REG_DWORD	0x00000000 (0)	add
LastAccessedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	add
LastNotifiedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	add
NotifyCount	REG_DWORD	0x00000000 (0)	add
Priority	REG_DWORD	0x01000000 (16777216)	add
RegistrationName	REG_SZ	SmsDropAcceptImmediate	add
Transient	REG_DWORD	0x00000001 (1)	add
UserSid	REG_SZ	S-1-5-19	add
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SmsRouter\State\Registration\Map\	mod
S-1-5-19#SmsRouter#SmsDropAcceptImmediate	REG_SZ	{81ADF3E5-CA49-476E-978F-D309F03B822E}	old
	REG_SZ	{E4557F2F-B45B-43C5-8C5D-DABEE652BA85}	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{7ae324a0-a673-4ee6-b5f2-ce86d62c3eab}\	mod
fc	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
d0	a8	00	00	79	00	00	00	00	00	00	00	00	00	00	00
73	ae														
00	00	00	00	d0	a8	00	00	77	00	00	00	00	00	00	00
				73	ae										
00	00											 ... (368)
												 ... (368)
DhcpInterfaceOptions	REG_BINARY		mod
LeaseObtainedTime	REG_DWORD	0x6ac54aa6 (1791314598)	old
	REG_DWORD	0x6ac55049 (1791316041)	new
LeaseTerminatesTime	REG_DWORD	0x6ac69c26 (1791400998)	old
	REG_DWORD	0x6ac6a1c9 (1791402441)	new
T1	REG_DWORD	0x6ac5f366 (1791357798)	old
	REG_DWORD	0x6ac5f909 (1791359241)	new
T2	REG_DWORD	0x6ac671f6 (1791390198)	old
	REG_DWORD	0x6ac67799 (1791391641)	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\Config\	mod
LastKnownGoodTime	REG_QWORD	0e 8f 51 67 fb 54 dd 01 	old
	REG_QWORD	fe 07 38 89 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\SecureTimeLimits\	mod
SecureTimeEstimated	REG_QWORD	cd bf ca 28 c8 55 dd 01 	old
	REG_QWORD	15 4a 8b 0c cd 55 dd 01 	new
SecureTimeHigh	REG_QWORD	cd 27 8f 8a d0 55 dd 01 	old
	REG_QWORD	15 b2 4f 6e d5 55 dd 01 	new
SecureTimeLow	REG_QWORD	cd 57 06 c7 bf 55 dd 01 	old
	REG_QWORD	15 e2 c6 aa c4 55 dd 01 	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\SecureTimeLimits\RunTime\	mod
SecureTimeTickCount	REG_QWORD	a0 50 00 00 00 00 00 00 	old
	REG_QWORD	3d 5c 20 00 00 00 00 00 	new
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\W32Time\TimeProviders\NtpClient\	mod
SpecialPollTimeRemaining	REG_MULTI_SZ	time.windows.com,802200a









	old
	REG_MULTI_SZ	time.windows.com,8022388









	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions\	mod
d8	da	00	00	c0	da	00	00	04	00	00	00	00	00	00	00
															
01	00	00	00	94	00	48	00	03	00	3a	00	00	00	00	00
															
00	00	00	00	34	00	41	00	30	00	43	00	36	00	30	00
															
36	00											 ... (56024)
												 ... (56024)
ProductPolicy	REG_BINARY		mod
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-2292890337-69778762-837601055-1001\	mod
d7	83	ba	a7	c8	55	dd	01	00	00	00	00	00	00	00	00
21	ee	c5	65	cc											
00	00	00	00	02	00	00	00								
															
\Device\HarddiskVolume4\Program Files\Microsoft Office\Office16\WINWORD.EXE	REG_BINARY		mod
\Device\HarddiskVolume4\Program Files\Process Hacker 2\ProcessHacker.exe	REG_BINARY	d8 db 80 5c c9 55 dd 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 	add
\Device\HarddiskVolume4\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe	REG_BINARY	5d 46 3f 2f c9 55 dd 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 	add
f5	9e	28	27	c8	55	dd	01	00	00	00	00	00	00	00	00
9d	ce	58	ec	ca											
00	00	00	00	02	00	00	00								
															
\Device\HarddiskVolume4\Windows\System32\browser_broker.exe	REG_BINARY		mod
b8	ba	3c	f1	c7	55	dd	01	00	00	00	00	00	00	00	00
28	ea	42	e7	c9											
00	00	00	00	02	00	00	00								
															
\Device\HarddiskVolume4\Windows\System32\cmd.exe	REG_BINARY		mod
\Device\HarddiskVolume4\Windows\System32\notepad.exe	REG_BINARY	df ac 87 60 cc 55 dd 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 	add
de	27	f4	1e	14	55	dd	01	00	00	00	00	00	00	00	00
57	8b	6e	27	ca											
01	00	00	00	02	00	00	00								
															
InputApp_cw5n1h2txyewy	REG_BINARY		mod
95	74	d3	27	c8	55	dd	01	00	00	00	00	00	00	00	00
c8	11	81	ec	ca											
01	00	00	00	02	00	00	00								
															
Microsoft.MicrosoftEdge_8wekyb3d8bbwe	REG_BINARY		mod
a8	f3	31	97	c8	55	dd	01	00	00	00	00	00	00	00	00
85	91	30	42	cd											
01	00	00	00	02	00	00	00								
															
Microsoft.Windows.Cortana_cw5n1h2txyewy	REG_BINARY		mod
21	02	15	66	c8	55	dd	01	00	00	00	00	00	00	00	00
47	ce	6a	8b	cc											
01	00	00	00	02	00	00	00								
															
Microsoft.WindowsStore_8wekyb3d8bbwe	REG_BINARY		mod
SequenceNumber	REG_DWORD	0x0000000e (14)	old
	REG_DWORD	0x00000022 (34)	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KProcessHacker3\	add
DeleteFlag	REG_DWORD	0x00000001 (1)	add
DisplayName	REG_SZ	KProcessHacker3	add
ErrorControl	REG_DWORD	0x00000000 (0)	add
ImagePath	REG_EXPAND_SZ	\??\C:\Program Files\Process Hacker 2\kprocesshacker.sys	add
Start	REG_DWORD	0x00000004 (4)	add
Type	REG_DWORD	0x00000001 (1)	add
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KProcessHacker3\Parameters\	add
SecurityLevel	REG_DWORD	0x00000001 (1)	add
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch\	mod
Epoch	REG_DWORD	0x0000029a (666)	old
	REG_DWORD	0x000002af (687)	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2\	mod
Epoch	REG_DWORD	0x00000065 (101)	old
	REG_DWORD	0x00000067 (103)	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter\State\Registration\Ids\{81ADF3E5-CA49-476E-978F-D309F03B822E}\	del
ApplicationName	REG_SZ	SmsRouter	del
CreationTime	REG_QWORD	fd fb c3 6a 00 00 00 00 	del
DeliveryType	REG_DWORD	0x00000002 (2)	del
FilterXML	REG_SZ	<SmsMessageFilter Action="Drop" Flags="1"><FilterRule></FilterRule></SmsMessageFilter>	del
IsPackaged	REG_DWORD	0x00000000 (0)	del
LastAccessedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	del
LastNotifiedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	del
NotifyCount	REG_DWORD	0x00000000 (0)	del
Priority	REG_DWORD	0x01000000 (16777216)	del
RegistrationName	REG_SZ	SmsDropAcceptImmediate	del
Transient	REG_DWORD	0x00000001 (1)	del
UserSid	REG_SZ	S-1-5-19	del
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter\State\Registration\Ids\{E4557F2F-B45B-43C5-8C5D-DABEE652BA85}\	add
ApplicationName	REG_SZ	SmsRouter	add
CreationTime	REG_QWORD	47 50 c5 6a 00 00 00 00 	add
DeliveryType	REG_DWORD	0x00000002 (2)	add
FilterXML	REG_SZ	<SmsMessageFilter Action="Drop" Flags="1"><FilterRule></FilterRule></SmsMessageFilter>	add
IsPackaged	REG_DWORD	0x00000000 (0)	add
LastAccessedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	add
LastNotifiedMessageId	REG_QWORD	ff ff ff ff ff ff ff ff 	add
NotifyCount	REG_DWORD	0x00000000 (0)	add
Priority	REG_DWORD	0x01000000 (16777216)	add
RegistrationName	REG_SZ	SmsDropAcceptImmediate	add
Transient	REG_DWORD	0x00000001 (1)	add
UserSid	REG_SZ	S-1-5-19	add
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter\State\Registration\Map\	mod
S-1-5-19#SmsRouter#SmsDropAcceptImmediate	REG_SZ	{81ADF3E5-CA49-476E-978F-D309F03B822E}	old
	REG_SZ	{E4557F2F-B45B-43C5-8C5D-DABEE652BA85}	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7ae324a0-a673-4ee6-b5f2-ce86d62c3eab}\	mod
fc	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
d0	a8	00	00	79	00	00	00	00	00	00	00	00	00	00	00
73	ae														
00	00	00	00	d0	a8	00	00	77	00	00	00	00	00	00	00
				73	ae										
00	00											 ... (368)
												 ... (368)
DhcpInterfaceOptions	REG_BINARY		mod
LeaseObtainedTime	REG_DWORD	0x6ac54aa6 (1791314598)	old
	REG_DWORD	0x6ac55049 (1791316041)	new
LeaseTerminatesTime	REG_DWORD	0x6ac69c26 (1791400998)	old
	REG_DWORD	0x6ac6a1c9 (1791402441)	new
T1	REG_DWORD	0x6ac5f366 (1791357798)	old
	REG_DWORD	0x6ac5f909 (1791359241)	new
T2	REG_DWORD	0x6ac671f6 (1791390198)	old
	REG_DWORD	0x6ac67799 (1791391641)	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\	mod
LastKnownGoodTime	REG_QWORD	0e 8f 51 67 fb 54 dd 01 	old
	REG_QWORD	fe 07 38 89 cb 55 dd 01 	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits\	mod
SecureTimeEstimated	REG_QWORD	cd bf ca 28 c8 55 dd 01 	old
	REG_QWORD	15 4a 8b 0c cd 55 dd 01 	new
SecureTimeHigh	REG_QWORD	cd 27 8f 8a d0 55 dd 01 	old
	REG_QWORD	15 b2 4f 6e d5 55 dd 01 	new
SecureTimeLow	REG_QWORD	cd 57 06 c7 bf 55 dd 01 	old
	REG_QWORD	15 e2 c6 aa c4 55 dd 01 	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\SecureTimeLimits\RunTime\	mod
SecureTimeTickCount	REG_QWORD	a0 50 00 00 00 00 00 00 	old
	REG_QWORD	3d 5c 20 00 00 00 00 00 	new
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\	mod
SpecialPollTimeRemaining	REG_MULTI_SZ	time.windows.com,802200a









	old
	REG_MULTI_SZ	time.windows.com,8022388









	new
HKEY_LOCAL_MACHINE\SYSTEM\WPA\8DEC0AF1-0341-4b93-85CD-72606C2DF94C-7P-45\	add
(Default)	REG_BINARY	ee 52 c6 bd 24 f5 94 4e 49 ba 5b a3 2f 69 f6 6d 25 c7 5c 26 4c 3b d7 07 b8 d4 27 ed 09 34 26 9d ff 46 69 65 f7 2e 4b f5 6b e5 dc 0f 56 78 b4 c0 d8 7e  ... (112)	add
HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\3b\B1A07F78\	mod
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-120	REG_SZ	Документ Microsoft Word 97–2003	add
@C:\Windows\system32\notepad.exe,-469	REG_SZ	Текстовый документ	add
HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\MuiCache\3b\B1A07F78\	mod
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-120	REG_SZ	Документ Microsoft Word 97–2003	add
@C:\Windows\system32\notepad.exe,-469	REG_SZ	Текстовый документ	add
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\52-55-0a-00-02-02_52-56-00-00-00-02\	mod
e6	78	ca	24	c8	55	dd	01								
b5	b9	92	81	cb											
WpadDecisionTime	REG_BINARY		mod
HKEY_USERS\S-1-5-20\Software\Microsoft\Speech_OneCore\ModelDownload\	mod
RefreshAfter	REG_QWORD	c4 4f 19 89 c4 55 dd 01 	old
	REG_QWORD	f1 25 85 b0 94 56 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\MuiCache\3b\B1A07F78\	mod
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-300	REG_SZ	Windows Defender Antivirus	add
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-380	REG_SZ	Некритические файлы, используемые программой Windows Defender Antivirus	add
@%SystemRoot%\System32\DATACLEN.DLL,-1010	REG_SZ	Файлы журнала установки	add
@%SystemRoot%\System32\DATACLEN.DLL,-1011	REG_SZ	Файлы, созданные Windows	add
@%SystemRoot%\System32\DATACLEN.DLL,-1045	REG_SZ	Внимание! Это файлы из вашей личной папки "Загрузки". Выберите этот вариант, если необходимо удалить все. При этом не учитывается ваша конфигурация функции "Контроль памяти".	add
@%systemroot%\system32\domgmt.dll,-103	REG_SZ	Файлы оптимизации доставки	add
@%systemroot%\system32\domgmt.dll,-104	REG_SZ	Файлы оптимизации доставки — это файлы, которые ранее были загружены на компьютер и которые могут быть удалены, если не используются службой оптимизации доставки.	add
@%systemroot%\system32\scavengeui.dll,-1000	REG_SZ	Файлы резервной копии пакета обновления	add
@%systemroot%\system32\scavengeui.dll,-1001	REG_SZ	Windows сохраняет старые версии файлов, обновленных с помощью пакета обновления. В случае удаления этих файлов пакет обновления затем будет невозможно удалить.	add
@%systemroot%\system32\scavengeui.dll,-1002	REG_SZ	Очистка обновлений Windows	add
@%systemroot%\system32\scavengeui.dll,-1003	REG_SZ	Windows хранит копии всех установленных обновлений из Центра обновления Windows даже после установки их новых версий. При очистке старые и ненужные версии обновлений удаляются или сжимаются. (Возможно, вам потребуется перезагрузить компьютер.)	add
@%systemroot%\system32\setupcln.dll,-1000	REG_SZ	Временные файлы установки Windows	add
@%systemroot%\system32\setupcln.dll,-1001	REG_SZ	Файлы установки, которые использует программа установки Windows.  Эти файлы остаются после процесса установки и могут быть удалены без последствий.	add
@%SystemRoot%\system32\utcutil.dll,-301	REG_SZ	Файлы базы данных средства просмотра диагностических данных	add
@%SystemRoot%\system32\utcutil.dll,-302	REG_SZ	Файлы, используемые для средства просмотра диагностических данных.	add
@%SystemRoot%\system32\wer.dll,-305	REG_SZ	Диагностические данные, полученные на основе отчетов об ошибках системы Windows и отзывов о ней	add
@%SystemRoot%\system32\wer.dll,-306	REG_SZ	Файлы с диагностическими данными, созданные на основе ошибок системы Windows и отзывов пользователей о ней.	add
@%SystemRoot%\system32\werfault.exe,-100	REG_SZ	Файлы дампа памяти для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-101	REG_SZ	Удаление файлов дампа памяти для системных ошибок.	add
@%SystemRoot%\system32\werfault.exe,-102	REG_SZ	Файлы мини-дампа для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-103	REG_SZ	Удаление файлов мини-дампа для системных ошибок.	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-120	REG_SZ	Документ Microsoft Word 97–2003	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-205	REG_SZ	Word 2016	add
@C:\Program Files\Common Files\system\wab32res.dll,-10100	REG_SZ	Контакты	add
@C:\Windows\System32\fsquirt.exe,-2343	REG_SZ	Устройство Bluetooth	add
@C:\Windows\system32\FXSRESM.dll,-120	REG_SZ	Получатель факса	add
@C:\Windows\System32\ieframe.dll,-12385	REG_SZ	Панель избранного	add
@C:\Windows\system32\netshell.dll,-1200	REG_SZ	Сетевые подключения 	add
@C:\Windows\System32\occache.dll,-1070	REG_SZ	Загруженные файлы программ	add
@C:\Windows\System32\occache.dll,-1071	REG_SZ	В папке "Загруженные файлы программ" временно сохраняются элементы ActiveX и приложения Java, автоматически загружаемые из Интернета при просмотре некоторых страниц.	add
@C:\Windows\System32\occache.dll,-1072	REG_SZ	&Просмотреть файлы	add
@C:\Windows\system32\zipfldr.dll,-10195	REG_SZ	Сжатая ZIP-папка	add
@efscore.dll,-101	REG_SZ	Владение файлами	add
@sendmail.dll,-21	REG_SZ	Рабочий стол (создать ярлык)	add
@sendmail.dll,-4	REG_SZ	Адресат	add
@windows.storage.dll,-21825	REG_SZ	Объемные объекты	add
@windows.storage.dll,-34575	REG_SZ	Документы	add
@windows.storage.dll,-34582	REG_SZ	Пленка	add
@windows.storage.dll,-34583	REG_SZ	Сохраненные фотографии	add
@windows.storage.dll,-34584	REG_SZ	Музыка	add
@windows.storage.dll,-34595	REG_SZ	Изображения	add
@windows.storage.dll,-34620	REG_SZ	Видео	add
@zipfldr.dll,-10148	REG_SZ	Сжатая ZIP-папка	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastein.ru\	add
(Default)	REG_DWORD	0x000001e6 (486)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000001e6 (486)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x000000b8 (184)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\	mod
(Default)	REG_DWORD	0x000024e9 (9449)	old
	REG_DWORD	0x00002787 (10119)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000000b8 (184)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastein.ru\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Voices\	add
DefaultTokenId	REG_SZ	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Voices\Tokens\MSTTS_V110_ruRU_IrinaM	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\ACGStatus\	add
ACGPolicyState	REG_DWORD	0x00000008 (8)	add
DynamicCodePolicy	REG_BINARY	05 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus\	add
CIPolicyState	REG_DWORD	0x00000000 (0)	add
SignaturePolicy	REG_BINARY	06 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\	mod
d3	a4	70	27	c8	55	dd	01								
e0	65	69	ec	ca											
CIStatusTimestamp	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\Favorites\	mod
ea	07	0a	00	02	00	06	00	13	00	12	00	32	00	4d	02
										2b		0c		03	
LastCounted	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\	mod
StoreFormMetaData	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 	old
	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 2365079081218371163 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\	mod
01	00	00	00	c6	c8	15	3b	70	dc	8b	72	68	0d	64	64
				c4	b0	bb	12	76	9c	33	b5	46	65	80	6b
73	36	dc	8e	6e	87	61	75	84	30	38	1e	35	61	f0	23
a9	66	ac	08	cc	4e		e5	6a	d2	47	15	83	93	74	4b
23	4b	c3	91	4e	19	48	0c	db	0a	f1	4d	28	22	c0	3d
39	6c	7d	cf	0c	8e	25	27	9d	24	95	2e	f6	6c	fe	7f
73	5d											 ... (64)
79	35											 ... (64)
ProtectedGlobalExtensionSetting	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\	mod
{B10C3329-75C8-465B-9C8E-B02770065715}	REG_DWORD	0x00000000 (0)	add
{FC3DACBE-D0F4-4E51-BCBB-19C26EB3625B}	REG_DWORD	0x00000000 (0)	del
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingDelete\	mod
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{48DD6C35-827D-4AD3-B01A-DF89E1EBE060}.dat	REG_DWORD	0x00000000 (0)	del
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{EABF2BEA-3F6E-4ECC-92ED-496DC4C6C714}.dat	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI\	mod
NewTabPageFlightMUID	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac54e0b84404cb49699262cf9ef678d	new
e0	96	09	1f	c7	55	dd	01								
00	a7	10	72	ca											
NewTabPageFlightReceivedTime	REG_BINARY		mod
NewTabPageFlightWebIG	REG_SZ	6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	6ac54e0b84404cb49699262cf9ef678d	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\WebRuntimeExtensions\EventStore\	mod
Session	REG_QWORD	1c 00 00 00 00 00 00 00 	old
	REG_QWORD	1e 00 00 00 00 00 00 00 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\InputApp_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
ICT	REG_QWORD	4e bc c4 32 08 55 dd 01 	old
	REG_QWORD	1f de 73 27 ca 55 dd 01 	new
ITT	REG_QWORD	9e b8 d8 32 08 55 dd 01 	old
	REG_QWORD	b3 7d 86 27 ca 55 dd 01 	new
PCT	REG_QWORD	5c 1a ae 32 08 55 dd 01 	old
	REG_QWORD	8e 3d 60 27 ca 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\ApplicationFrame\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
2c	00	00	00	02	00	00	00	03	00	00	00	00	83	ff	ff
												ff	ff		
00	83	ff	ff	ff	ff	ff	ff	ff	ff	ff	ff	28	00	00	00
ff	ff											50			
20	00	00	00	58	03	00	00	a1	02	00	00				
40				80				c1							
Positions	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\HAM\AUI\MicrosoftEdge\V1\LU\	mod
ICT	REG_QWORD	d0 76 70 81 c7 55 dd 01 	old
	REG_QWORD	68 41 62 69 ca 55 dd 01 	new
PCT	REG_QWORD	a5 1d 13 27 c8 55 dd 01 	old
	REG_QWORD	d7 fa 4c ec ca 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\PersistedTitleBarData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
BackgroundColor	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
BackgroundColorInactive	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonBackgroundColor	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
ButtonBackgroundColorInactive	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
ButtonHoverBackgroundColor	REG_DWORD	0x19000000 (419430400)	old
	REG_DWORD	0xffbbbbbb (4290493371)	new
ButtonPressedBackgroundColor	REG_DWORD	0x33000000 (855638016)	old
	REG_DWORD	0xffa6a6a6 (4289111718)	new
ForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\HAM\AUI\Microsoft.MicrosoftOfficeHub\V1\LU\	mod
PCT	REG_QWORD	4e 87 71 0e 14 55 dd 01 	old
	REG_QWORD	c3 69 db 6d cc 55 dd 01 	new
PTT	REG_QWORD	37 7f c0 1e 14 55 dd 01 	old
	REG_QWORD	6d f3 c4 91 cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Wallet_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	d2 54 41 9e 06 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	0b c3 17 c2 06 55 dd 01 	old
	REG_QWORD	d7 48 e8 7c cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	c6 6a 50 42 c8 55 dd 01 	old
	REG_QWORD	cd c0 eb 56 cd 55 dd 01 	new
PTT	REG_QWORD	28 0b 74 42 c8 55 dd 01 	old
	REG_QWORD	3c 54 fc 56 cd 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\HAM\AUI\ppleae38af2e007f4358a809ac99a64a67c1\V1\LU\	mod
PCT	REG_QWORD	81 ed 4d 42 c8 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	c6 64 77 51 c8 55 dd 01 	old
	REG_QWORD	00 ef 29 59 cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsStore_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	a4 c0 0b 27 c8 55 dd 01 	old
	REG_QWORD	9a 71 b0 55 cc 55 dd 01 	new
PTT	REG_QWORD	21 02 15 66 c8 55 dd 01 	old
	REG_QWORD	bb 26 89 79 cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\	mod
09	00	00	00	00	00	00	00	01	00	00	00	05	00	00	00
				01				00							
06	00	00	00	08	00	00	00	07	00	00	00	02	00	00	00
															
04	00	00	00	03	00	00	00	ff	ff	ff	ff				
															
MRUListEx	REG_BINARY		mod
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02											 ... (94)
												 ... (96)
NodeSlots	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\	mod
03	00	00	00	02	00	00	00	01	00	00	00	04	00	00	00
01				03				02							
00	00	00	00	ff	ff	ff	ff								
															
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\	mod
5	REG_BINARY	66 00 31 00 00 00 00 00 cc 56 7d 66 10 00 50 52 4f 43 45 53 7e 31 00 00 4e 00 09 00 04 00 ef be cc 56 7c 66 46 5d c3 99 2e 00 00 00 96 a2 01 00 00 00  ... (104)	add
01	00	00	00	03	00	00	00	04	00	00	00	02	00	00	00
05				01				03				04			
00	00	00	00	ff	ff	ff	ff								
02				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\5\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x0000005f (95)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\	mod
1	REG_BINARY	56 00 31 00 00 00 00 00 45 5d 14 99 10 00 72 65 73 75 6c 74 73 00 40 00 09 00 04 00 ef be 45 5d 14 99 46 5d c3 99 2e 00 00 00 e9 64 01 00 00 00 09 00  ... (88)	add
00	00	00	00	ff	ff	ff	ff								
01				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\1\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x00000060 (96)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\9\	mod
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
01				02											
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\MicrosoftEdge\BrowserEmulation\	mod
ea	07	0a	00	02	00	06	00	13	00	0f	00	38	00	19	03
										27		2e		1f	01
CVListPingLastYMD	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Notepad\	mod
iWindowPosX	REG_DWORD	0x000001b5 (437)	old
	REG_DWORD	0x00000015 (21)	new
iWindowPosY	REG_DWORD	0x0000021a (538)	old
	REG_DWORD	0x00000028 (40)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\General\	mod
LastAutoSavePurgeTime	REG_DWORD	0x01c78e2f (29855279)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\LCCache\SmartArt\1049\	mod
LastUpdate	REG_BINARY	38 ac e8 94 cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\LCCache\Themes\1049\	mod
LastUpdate	REG_BINARY	cc c6 0d be cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
TM02807606	REG_SZ	[A:TM02807606][F:Титульный лист факса (точки)][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02807606.cab][G:][L:0]	add
TM03090430	REG_SZ	[A:TM03090430][F:Окаймление][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/67ccd84a-90ee-4a1b-b51b-a1f3d0c1a2e3/TF67ccd84a-90ee-4a1b-b51b-a1f3d0c1a2e35cbe9342-3b658902c7dd.cab][G:][L:0]	add
TM03090434	REG_SZ	[A:TM03090434][F:Дерево][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/2ec419c9-97c3-4958-b02a-0886397d33af/TF2ec419c9-97c3-4958-b02a-0886397d33af3e563288-7d19f587befd.cab][G:][L:0]	add
TM03457444	REG_SZ	[A:TM03457444][F:Базис][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/a161d085-4bd2-4957-a8b6-743fda478b32/TFa161d085-4bd2-4957-a8b6-743fda478b328e3ae53f-9eee5e8e7986.cab][G:][L:0]	add
TM03457464	REG_SZ	[A:TM03457464][F:Дивиденд][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/319cfb39-eeba-4af5-a5a2-03d53d037516/TF319cfb39-eeba-4af5-a5a2-03d53d037516c586c5f4-9c8e0b5a9ed2.cab][G:][L:0]	add
TM03457485	REG_SZ	[A:TM03457485][F:Сетка][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/5e103eea-be93-4576-ae9c-3ecc0de701e7/TF5e103eea-be93-4576-ae9c-3ecc0de701e71dd529ac-400b47d3614c.cab][G:][L:0]	add
TM03457491	REG_SZ	[A:TM03457491][F:Метрополия][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/044d2a23-aa10-496c-aa4d-94a1ae3cb532/TF044d2a23-aa10-496c-aa4d-94a1ae3cb5329c277ba3-4f22d104a5ef.cab][G:][L:0]	add
TM03457503	REG_SZ	[A:TM03457503][F:Цитаты][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp0345750301.cab][G:][L:0]	add
TM03457510	REG_SZ	[A:TM03457510][F:Савон][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/77a67a13-02ae-4296-8148-f26bdaaf38f1/TF77a67a13-02ae-4296-8148-f26bdaaf38f1002384ce-834f8b002a56.cab][G:][L:0]	add
TM03457515	REG_SZ	[A:TM03457515][F:Вид][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/5c688389-7a64-4394-81c4-1004c27ee1ae/TF5c688389-7a64-4394-81c4-1004c27ee1ae60e3ce79-e5161b71c961.cab][G:][L:0]	add
TM04033917	REG_SZ	[A:TM04033917][F:Берлин][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/6e1c0bd6-43b7-4cba-aa12-42a644606054/TF6e1c0bd6-43b7-4cba-aa12-42a6446060540f055808-ae8ddcb07fb6.cab][G:][L:0]	add
TM04033919	REG_SZ	[A:TM04033919][F:Контур][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/6d5feb1e-e145-43f1-b745-cb4b54c5ee97/TF6d5feb1e-e145-43f1-b745-cb4b54c5ee9740db8417-5ffc6e4fd33d.cab][G:][L:0]	add
TM04033921	REG_SZ	[A:TM04033921][F:Дамаск][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/48777c5d-d455-4797-85d4-26aa00053079/TF48777c5d-d455-4797-85d4-26aa00053079b8d92c9b-fce257331f16.cab][G:][L:0]	add
TM04033925	REG_SZ	[A:TM04033925][F:Капля][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/62d0d592-7ac2-4846-a919-75806e8bead4/TF62d0d592-7ac2-4846-a919-75806e8bead4fb8f9c8a-8d8af84254a6.cab][G:][L:0]	add
TM04033927	REG_SZ	[A:TM04033927][F:Главное мероприятие][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/d2a5b225-4fc9-4980-9a6f-07059fb984a2/TFd2a5b225-4fc9-4980-9a6f-07059fb984a2687055ba-f96a6edc958d.cab][G:][L:0]	add
TM04033929	REG_SZ	[A:TM04033929][F:Сланец][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/7377c363-6439-480f-94f1-39714d297aa9/TF7377c363-6439-480f-94f1-39714d297aa9e53103cd-dad8d6824b13.cab][G:][L:0]	add
TM04033937	REG_SZ	[A:TM04033937][F:След самолета][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/49310879-45c6-4d72-870a-c20bc0dca332/TF49310879-45c6-4d72-870a-c20bc0dca332b5616324-5b5b48efcd38.cab][G:][L:0]	add
TM10001105	REG_SZ	[A:TM10001105][F:Уголки][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp1000110502.cab][G:][L:0]	add
TM10001106	REG_SZ	[A:TM10001106][F:Эмблема][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp1000110602.cab][G:][L:0]	add
TM10001114	REG_SZ	[A:TM10001114][F:Галерея][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/c986dd65-aaf0-4d5c-bef9-9c391ee05f7b/TFc986dd65-aaf0-4d5c-bef9-9c391ee05f7b910973e2-e57291613aca.cab][G:][L:0]	add
TM10001115	REG_SZ	[A:TM10001115][F:Посылка][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/fb9a325e-b4a8-473d-b025-df086f5ae493/TFfb9a325e-b4a8-473d-b025-df086f5ae4930822ff89-25c71274dc8d.cab][G:][L:0]	add
TM10271166	REG_SZ	[A:TM10271166][F:Тема "Простая абстракция"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271166.cab][G:][L:2]	add
TM10271167	REG_SZ	[A:TM10271167][F:Тема "Синий металл"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271167.cab][G:][L:2]	add
TM10271168	REG_SZ	[A:TM10271168][F:Тема "Цифровой мир"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271168.cab][G:][L:2]	add
TM10271169	REG_SZ	[A:TM10271169][F:Тема "Узел"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271169.cab][G:][L:2]	add
TM10271170	REG_SZ	[A:TM10271170][F:Тема "Голубая волна"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271170.cab][G:][L:2]	add
TM10271171	REG_SZ	[A:TM10271171][F:Тема "Универсальная"][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp10271171.cab][G:][L:2]	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\LCCache\WordDocBibs\1049\	mod
LastUpdate	REG_BINARY	cb 15 dd 96 cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
TM02851216	REG_SZ	[A:TM02851216][F:apasixtheditionofficeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851216.cab][G:][L:0]	add
TM02851217	REG_SZ	[A:TM02851217][F:chicago][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851217.cab][G:][L:0]	add
TM02851218	REG_SZ	[A:TM02851218][F:gb][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851218.cab][G:][L:0]	add
TM02851219	REG_SZ	[A:TM02851219][F:gostname][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851219.cab][G:][L:0]	add
TM02851220	REG_SZ	[A:TM02851220][F:gosttitle][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851220.cab][G:][L:0]	add
TM02851221	REG_SZ	[A:TM02851221][F:harvardanglia2008officeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851221.cab][G:][L:0]	add
TM02851222	REG_SZ	[A:TM02851222][F:ieee2006officeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851222.cab][G:][L:0]	add
TM02851223	REG_SZ	[A:TM02851223][F:iso690][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851223.cab][G:][L:0]	add
TM02851224	REG_SZ	[A:TM02851224][F:iso690nmerical][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851224.cab][G:][L:0]	add
TM02851225	REG_SZ	[A:TM02851225][F:mlaseventheditionofficeonline][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851225.cab][G:][L:0]	add
TM02851226	REG_SZ	[A:TM02851226][F:turabian][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851226.cab][G:][L:0]	add
TM02851227	REG_SZ	[A:TM02851227][F:sist02][M:1/30/2007 00:00:00 AM][U:https://binaries.templates.cdn.office.net/support/templates/ru-ru/tp02851227.cab][G:][L:0]	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\LCCache\WordDocParts\1049\	mod
LastUpdate	REG_BINARY	34 08 56 95 cc 55 dd 01 	add
NextUpdate	REG_BINARY	d0 e1 5b 4a 62 57 dd 01 	add
TM01840907	REG_SZ	[A:TM01840907][F:Формулы][M:1/30/2007 00:00:00 AM][U:https://createcatalog.public.onecdn.static.microsoft/catalog-assets/ru-ru/c09d44c8-fc7d-48b2-bf51-520c04674f16/TFc09d44c8-fc7d-48b2-bf51-520c04674f16fa02b95f-eee69c6dd92f.cab][G:][L:0]	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Common\Roaming\	mod
ea	07	0a	00	02	00	06	00	13	00	1a	00	35	00	90	01
										3b		23		a7	03
RoamingLastSyncTime	REG_BINARY		mod
ea	07	0a	00	02	00	06	00	13	00	1a	00	35	00	90	01
										3b		23		a7	03
RoamingLastWriteTime	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\File MRU\	mod
Item 1	REG_SZ	[F00000000][T01DD5524482571A2][O00000000]*C:\Users\user\Desktop\Документ Microsoft Word.docx	old
	REG_SZ	[F00000000][T01DD55CC6671B442][O00000000]*C:\Users\user\Desktop\lab1\src\GreyEnergyDropper.doc	new
Item 2	REG_SZ	[F00000000][T01DD5524482571A2][O00000000]*C:\Users\user\Desktop\Документ Microsoft Word.docx	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\File MRU\Change\	mod
ChangeId	REG_DWORD	0x4d983e06 (1301822982)	old
	REG_DWORD	0x5db03e3d (1571831357)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Place MRU\	mod
Item 1	REG_SZ	[F00000000][T01DD5524482571A0][O00000000]*C:\Users\user\Desktop\	old
	REG_SZ	[F00000000][T01DD55CC6671B440][O00000000]*C:\Users\user\Desktop\lab1\src\	new
Item 2	REG_SZ	[F00000000][T01DD5524482571A0][O00000000]*C:\Users\user\Desktop\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Place MRU\Change\	mod
ChangeId	REG_DWORD	0x078d72e9 (126710505)	old
	REG_DWORD	0x1bbd3f3e (465387326)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Resiliency\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\1C19AB\	add
1C19AB	REG_BINARY	04 00 00 00 7c 0f 00 00 34 00 00 00 43 00 3a 00 5c 00 55 00 73 00 65 00 72 00 73 00 5c 00 75 00 73 00 65 00 72 00 5c 00 44 00 65 00 73 00 6b 00 74 00  ... (1449)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems\	add
*$$	REG_BINARY	2a 24 24 00 7c 0f 00 00 00 00 04 40 01 00 00 00 75 7f ba 65 cc 55 dd 01 28 00 00 00 29 7f 3c 23 8f 01 7b 41 ad 58 b5 a0 fe f7 59 cc 75 7f ba 65 cc 55  ... (68)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Office\16.0\Word\Security\Trusted Documents\	add
LastPurgeTime	REG_DWORD	0x01c78e2b (29855275)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Shared Tools\Panose\	mod
@MS Gothic	REG_BINARY	02 0b 06 09 07 02 05 08 02 04 	add
@SimSun	REG_BINARY	02 01 06 00 03 01 01 01 01 01 	add
@Yu Gothic	REG_BINARY	02 0b 04 00 00 00 00 00 00 00 	add
Arial	REG_BINARY	02 0b 06 04 02 02 02 02 02 04 	add
Arial Black	REG_BINARY	02 0b 0a 04 02 01 02 02 02 04 	add
Arial Narrow	REG_BINARY	02 0b 06 06 02 02 02 03 02 04 	add
Bahnschrift	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Light Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift Light SemiCondensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiBold	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiBold Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiBold SemiConden	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiCondensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiLight	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiLight Condensed	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Bahnschrift SemiLight SemiConde	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Book Antiqua	REG_BINARY	02 04 06 02 05 03 05 03 03 04 	add
Bookman Old Style	REG_BINARY	02 05 06 04 05 05 05 02 02 04 	add
Bookshelf Symbol 7	REG_BINARY	05 01 01 01 01 01 01 01 01 01 	add
Cambria	REG_BINARY	02 04 05 03 05 04 06 03 02 04 	add
Cambria Math	REG_BINARY	02 04 05 03 05 04 06 03 02 04 	add
Candara	REG_BINARY	02 0e 05 02 03 03 03 02 02 04 	add
Candara Light	REG_BINARY	02 0e 05 02 03 03 03 02 02 04 	add
Century	REG_BINARY	02 04 06 04 05 05 05 02 03 04 	add
Century Gothic	REG_BINARY	02 0b 05 02 02 02 02 02 02 04 	add
Comic Sans MS	REG_BINARY	03 0f 07 02 03 03 02 02 02 04 	add
Consolas	REG_BINARY	02 0b 06 09 02 02 04 03 02 04 	add
Constantia	REG_BINARY	02 03 06 02 05 03 06 03 03 03 	add
Corbel	REG_BINARY	02 0b 05 03 02 02 04 02 02 04 	add
Corbel Light	REG_BINARY	02 0b 03 03 02 02 04 02 02 04 	add
Courier New	REG_BINARY	02 07 03 09 02 02 05 02 04 04 	add
Ebrima	REG_BINARY	02 00 00 00 00 00 00 00 00 00 	add
Franklin Gothic Medium	REG_BINARY	02 0b 06 03 02 01 02 02 02 04 	add
Gabriola	REG_BINARY	04 04 06 05 05 10 02 02 0d 02 	add
Gadugi	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Garamond	REG_BINARY	02 02 04 04 03 03 01 01 08 03 	add
Georgia	REG_BINARY	02 04 05 02 05 04 05 02 03 03 	add
HoloLens MDL2 Assets	REG_BINARY	05 0a 01 02 01 01 01 01 01 01 	add
Impact	REG_BINARY	02 0b 08 06 03 09 02 05 02 04 	add
Ink Free	REG_BINARY	03 08 04 02 00 05 00 00 00 00 	add
Javanese Text	REG_BINARY	02 00 00 00 00 00 00 00 00 00 	add
Leelawadee	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Leelawadee UI	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Leelawadee UI Semilight	REG_BINARY	02 0b 04 02 04 02 04 02 02 03 	add
Lucida Console	REG_BINARY	02 0b 06 09 04 05 04 02 02 04 	add
Lucida Sans Unicode	REG_BINARY	02 0b 06 02 03 05 04 02 02 04 	add
Malgun Gothic	REG_BINARY	02 0b 05 03 02 00 00 02 00 04 	add
Malgun Gothic Semilight	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Mangal	REG_BINARY	00 00 04 00 00 00 00 00 00 00 	add
Marlett	REG_BINARY	00 00 00 00 00 00 00 00 00 00 	add
Microsoft Himalaya	REG_BINARY	01 01 01 00 01 01 01 01 01 01 	add
Microsoft JhengHei	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Microsoft JhengHei Light	REG_BINARY	02 0b 03 04 03 05 04 04 02 04 	add
Microsoft JhengHei UI	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Microsoft JhengHei UI Light	REG_BINARY	02 0b 03 04 03 05 04 04 02 04 	add
Microsoft New Tai Lue	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft PhagsPa	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft Sans Serif	REG_BINARY	02 0b 06 04 02 02 02 02 02 04 	add
Microsoft Tai Le	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft Uighur	REG_BINARY	02 00 00 00 00 00 00 00 00 00 	add
Microsoft YaHei	REG_BINARY	02 0b 05 03 02 02 04 02 02 04 	add
Microsoft YaHei Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft YaHei UI	REG_BINARY	02 0b 05 03 02 02 04 02 02 04 	add
Microsoft YaHei UI Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Microsoft Yi Baiti	REG_BINARY	03 00 05 00 00 00 00 00 00 00 	add
MingLiU-ExtB	REG_BINARY	02 02 05 00 00 00 00 00 00 00 	add
MingLiU_HKSCS-ExtB	REG_BINARY	02 02 05 00 00 00 00 00 00 00 	add
Mongolian Baiti	REG_BINARY	03 00 05 00 00 00 00 00 00 00 	add
MS Gothic	REG_BINARY	02 0b 06 09 07 02 05 08 02 04 	add
MS PGothic	REG_BINARY	02 0b 06 00 07 02 05 08 02 04 	add
MS Reference Sans Serif	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
MS Reference Specialty	REG_BINARY	05 00 05 00 00 00 00 00 00 00 	add
MS UI Gothic	REG_BINARY	02 0b 06 00 07 02 05 08 02 04 	add
MT Extra	REG_BINARY	05 05 01 02 01 02 05 02 02 02 	add
MV Boli	REG_BINARY	02 00 05 00 03 02 00 09 00 00 	add
Myanmar Text	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Nirmala UI	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Nirmala UI Semilight	REG_BINARY	02 0b 04 02 04 02 04 02 02 03 	add
NSimSun	REG_BINARY	02 01 06 09 03 01 01 01 01 01 	add
Palatino Linotype	REG_BINARY	02 04 05 02 05 05 05 03 03 04 	add
PMingLiU-ExtB	REG_BINARY	02 02 05 00 00 00 00 00 00 00 	add
Segoe MDL2 Assets	REG_BINARY	05 0a 01 02 01 01 01 01 01 01 	add
Segoe Print	REG_BINARY	02 00 06 00 00 00 00 00 00 00 	add
Segoe Script	REG_BINARY	03 0b 05 04 02 00 00 00 00 03 	add
Segoe UI Black	REG_BINARY	02 0b 0a 02 04 02 04 02 02 03 	add
Segoe UI Emoji	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Segoe UI Historic	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Segoe UI Light	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
Segoe UI Semibold	REG_BINARY	02 0b 07 02 04 02 04 02 02 03 	add
Segoe UI Semilight	REG_BINARY	02 0b 04 02 04 02 04 02 02 03 	add
Segoe UI Symbol	REG_BINARY	02 0b 05 02 04 02 04 02 02 03 	add
SimSun	REG_BINARY	02 01 06 00 03 01 01 01 01 01 	add
SimSun-ExtB	REG_BINARY	02 01 06 09 06 01 01 01 01 01 	add
Sitka Banner	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Display	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Heading	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Small	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Subheading	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sitka Text	REG_BINARY	02 00 05 05 00 00 00 02 00 04 	add
Sylfaen	REG_BINARY	01 0a 05 02 05 03 06 03 03 03 	add
Symbol	REG_BINARY	05 05 01 02 01 07 06 02 05 07 	add
Tahoma	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Trebuchet MS	REG_BINARY	02 0b 06 03 02 02 02 02 02 04 	add
Verdana	REG_BINARY	02 0b 06 04 03 05 04 04 02 04 	add
Webdings	REG_BINARY	05 03 01 02 01 05 09 06 07 03 	add
Wingdings 2	REG_BINARY	05 02 01 02 01 05 07 07 07 07 	add
Wingdings 3	REG_BINARY	05 04 01 02 01 08 07 07 07 07 	add
Yu Gothic	REG_BINARY	02 0b 04 00 00 00 00 00 00 00 	add
Yu Gothic Light	REG_BINARY	02 0b 03 00 00 00 00 00 00 00 	add
Yu Gothic Medium	REG_BINARY	02 0b 05 00 00 00 00 00 00 00 	add
Yu Gothic UI	REG_BINARY	02 0b 05 00 00 00 00 00 00 00 	add
Yu Gothic UI Light	REG_BINARY	02 0b 03 00 00 00 00 00 00 00 	add
Yu Gothic UI Semibold	REG_BINARY	02 0b 07 00 00 00 00 00 00 00 	add
Yu Gothic UI Semilight	REG_BINARY	02 0b 04 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Spelling\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Spelling\Dictionaries\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Spelling\Options\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ActivityDataModel\ReaderRevisionInfo\	mod
2259DE09-A10D-947E-641F-56694FF2531D	REG_MULTI_SZ	1〶10੻†∠慄慴慢敳湉瑳湡散摉•›㤵ㄶⰶ †匢煥敵据≥㨠㌠㐷ⰵ †愢瑣癩瑩卹潴敲摉•›㈢㔲䐹ぅⴹㅁ䐰㤭㜴ⵅ㐶䘱㔭㘶㐹䙆㔲ㄳ≄ਬ†∠楦瑬牥•›੻†††椢剳慥䙤汩整≲㨠〠ਬ†††漢楲楧䙮汩整䭲祥•›ⰰ ††∠瑳瑡䙥汩整䭲祥•›ⰰ ††∠獵牥捁楴湯瑓瑡䙥汩整≲㨠〠 †੽੽	old
	REG_MULTI_SZ	1㔶90੻†∠慄慴慢敳湉瑳湡散摉•›㤵ㄶⰶ †匢煥敵据≥㨠㌠㈹ⰹ †愢瑣癩瑩卹潴敲摉•›㈢㔲䐹ぅⴹㅁ䐰㤭㜴ⵅ㐶䘱㔭㘶㐹䙆㔲ㄳ≄ਬ†∠楦瑬牥•›੻†††椢剳慥䙤汩整≲㨠〠ਬ†††漢楲楧䙮汩整䭲祥•›ⰰ ††∠瑳瑡䙥汩整䭲祥•›ⰰ ††∠獵牥捁楴湯瑓瑡䙥汩整≲㨠〠 †੽੽	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts\	mod
Applications\WINWORD.EXE_.doc	REG_DWORD	0x00000000 (0)	add
Word.Document.8_.doc	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstarttilepropertiesmap\Current\	mod
02	00	00	00	e1	da	c7	26	c8	55	dd	01	00	00	00	00
				e0	b7	69	59	cc							
43	42	01	00	0d	12	0a	ad	01	51	50	00	7e	00	31	00
															
35	00	32	00	37	00	63	00	37	00	30	00	35	00	2d	00
															
38	00											 ... (21881)
												 ... (21881)
Data	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${acee881c-40d8-4c2f-b63e-fcc3351fd8e4}$$windows.data.unifiedtile.localstartvolatiletilepropertiesmap\Current\	mod
02	00	00	00	cf	b5	ae	a1	c8	55	dd	01	00	00	00	00
				28	e1	a4	65	cc							
43	42	01	00	0d	12	0a	15	28	50	00	7e	00	4d	00	49
															
00	43	00	52	00	4f	00	53	00	4f	00	46	00	54	00	2e
															
00	47											 ... (2629)
												 ... (2629)
Data	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-10\	mod
04	00	00	00	00	00	00	00	bf	fa	a9	cc	03	55	dd	01
								ae	90	3a	44	cd			
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	6e	00	74	00	be	0b	84	f2	c6	55	dd	01
															
02	00	02	00	00	00	00	00	5a	7b	1c	5b	fb	54	dd	01
															
04	04	00	00												
06															
HealthEvaluation	REG_BINARY		mod
04	00	00	00	00	00	00	00	e4	44	c6	ca	03	55	dd	01
								84	96	3a	42	cd			
00	00	00	00	00	00	00	00	00	00	00	00	00	00	00	00
															
00	00	00	00												
															
PlacementReported	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-202914\	mod
04	00	00	00	00	00	00	00	0f	8f	fd	f3	a2	9c	d9	01
															
85	d1	93	1e	23	a2	d9	01	0a	e5	af	c9	81	79	e7	01
								96	f0	32					
00	00	00	00	00	00	00	00	18	64	35	0b	a3	9c	d9	01
															
7a	c0											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	9f	8f	de	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	1e	03	b1	39	a1	9c	d9	01
															
0d	03	00	00												
0f															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280810\	mod
04	00	00	00	00	00	00	00	55	ce	58	bd	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	99	21	bf	82	ec	af	e7	01
								0d	59	55					
00	00	00	00	00	00	00	00	07	27	d0	bd	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	9f	8f	de	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	9c	06	c4	39	a1	9c	d9	01
															
17	03	00	00												
19															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280811\	mod
04	00	00	00	00	00	00	00	07	22	d2	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	e5	15	ac	82	ec	af	e7	01
								b5	ef	5e					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	9f	8f	de	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	d5	89	cd	39	a1	9c	d9	01
															
17	03	00	00												
19															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280815\	mod
04	00	00	00	0d	00	00	00	7c	cb	cf	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	3e	c0	9d	82	ec	af	e7	01
								c5	f8	65					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	fe	7f	00	00	fa	a8	df	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	e8	dc	6e	9a	a0	9c	d9	01
															
10	03	00	00												
12															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-310091\	mod
04	00	00	00	fe	7f	00	00	55	ce	58	bd	fe	54	dd	01
															
4f	bc	b5	e2	7e	5a	dd	01	e2	d7	8a	82	ec	af	e7	01
								12	2d	6d					
00	00	00	00	00	00	00	00	a1	e9	e7	d0	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	4b	a6	76	f1	c6	55	dd	01
															
02	00	02	00	00	00	00	00	18	90	df	59	fb	54	dd	01
															
07	04	00	00												
09															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-310093\	mod
04	00	00	00	00	00	00	00	ed	03	bc	99	a0	9c	d9	01
															
55	66	92	bd	a0	9c	d9	01	a9	7d	f4	24	05	55	dd	01
								a3	fd	8e	9c	ce			
00	00	00	00	00	00	00	00	e7	22	ed	36	05	55	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	84	16	e2	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	55	20	cf	99	a0	9c	d9	01
															
12	03	00	00												
14															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-314559\	mod
04	00	00	00	fe	7f	00	00	9b	f5	ff	f3	a2	9c	d9	01
															
85	d1	93	1e	23	a2	d9	01	07	64	43	fd	c6	55	dd	01
								ba	72	d6	43	cd			
00	00	00	00	00	00	00	00	63	3f	fb	0b	a3	9c	d9	01
															
88	47											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	84	16	e2	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	5b	9d	73	9a	a0	9c	d9	01
															
22	03	00	00												
26															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338387\	mod
04	00	00	00	fe	7f	00	00	e5	2b	ae	f1	c6	55	dd	01
															
fb	9b	d4	78	e8	55	dd	01	fb	fb	c2	f1	c6	55	dd	01
								2b	dd	5b	25	ce			
00	00	00	00	00	00	00	00	70	f5	f2	f9	c6	55	dd	01
								22	da	4f	42	cd			
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	fb	fb	c2	f1	c6	55	dd	01
															
02	00	02	00	00	00	00	00	57	fb	cd	5a	fb	54	dd	01
															
12	04	00	00												
15															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388\	mod
04	00	00	00	fe	7f	00	00	73	f7	70	f2	c6	55	dd	01
															
1b	ee	8f	1c	47	5b	dd	01	fa	ef	e7	57	23	af	e7	01
								41	ad	30	58				
9f	9a	78	ff	21	55	dd	01	3f	43	93	f1	c6	55	dd	01
															
3f	0a											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	ed	d2	0c	f2	c6	55	dd	01
															
02	00	02	00	00	00	00	00	3e	49	d3	5a	fb	54	dd	01
															
12	04	00	00												
14															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338389\	mod
04	00	00	00	fe	7f	00	00	67	79	6a	e4	fe	54	dd	01
															
80	67	be	bd	a9	58	dd	01	ce	20	ec	20	7f	5a	dd	01
								c0	a2	4a	21				
00	00	00	00	00	00	00	00	28	77	71	f8	fe	54	dd	01
															
00	7e											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	e2	01	76	9a	a0	9c	d9	01
															
10	03	00	00												
12															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-353694\	mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	53	e0	db	39	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-353698\	mod
04	00	00	00	00	00	00	00	72	34	2b	09	a3	9c	d9	01
															
6a	28	96	1e	23	a2	d9	01	b0	02	3c	82	ec	af	e7	01
								3d	47	ab					
00	00	00	00	00	00	00	00	78	ff	a3	0a	a3	9c	d9	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	61	55	f1	39	a1	9c	d9	01
															
0c	03	00	00												
0e															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000045\	mod
04	00	00	00	fe	7f	00	00	67	79	6a	e4	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	12	80	c6	82	ec	af	e7	01
								c1	aa	b4					
00	00	00	00	00	00	00	00	2f	da	64	f8	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	76	60	78	9a	a0	9c	d9	01
															
10	03	00	00												
12															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000161\	mod
04	00	00	00	00	00	00	00	7c	cb	cf	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	83	bd	bc	82	ec	af	e7	01
								2a	6a	b9					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	43	69	e4	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	0e	d6	fa	39	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000163\	mod
04	00	00	00	00	00	00	00	7c	cb	cf	d0	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	20	84	b3	82	ec	af	e7	01
								2e	bd	c0					
00	00	00	00	00	00	00	00	7c	36	80	e4	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	c8	c5	e6	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	5a	c2	06	3a	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000165\	mod
04	00	00	00	00	00	00	00	67	79	6a	e4	fe	54	dd	01
															
62	3c	ba	e2	7e	5a	dd	01	2b	7f	a8	82	ec	af	e7	01
								3f	81	c5					
00	00	00	00	00	00	00	00	2f	da	64	f8	fe	54	dd	01
															
00	00											 ... (92)
												 ... (92)
(Default)	REG_BINARY		mod
04	00	00	00	00	00	00	00	c8	c5	e6	58	fb	54	dd	01
															
02	00	02	00	00	00	00	00	a1	7b	17	3a	a1	9c	d9	01
															
18	03	00	00												
1a															
HealthEvaluation	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\310091\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\310093\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\88000163\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\88000165\	mod
UpdateDrivenByExpiration	REG_DWORD	0x00000001 (1)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\Modules\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\Modules\GlobalSettings\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\CIDSave\Modules\GlobalSettings\ProperTreeModuleInner\	add
ProperTreeModuleInner	REG_BINARY	9c 00 00 00 98 00 00 00 31 53 50 53 05 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 3b 00 00 00 2a 00 00 00 00 4e 00 61 00 76 00 50 00 61 00 6e 00 65  ... (160)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\CIDSizeMRU\	mod
3	REG_BINARY	50 00 72 00 6f 00 63 00 6d 00 6f 00 6e 00 36 00 34 00 2e 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ... (592)	add
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
03				02				01				00	00	00	00
															
ff	ff	ff	ff												
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedPidlMRU\	mod
3	REG_BINARY	50 00 72 00 6f 00 63 00 6d 00 6f 00 6e 00 36 00 34 00 2e 00 65 00 78 00 65 00 00 00 14 00 1f 50 e0 4f d0 20 ea 3a 69 10 a2 d8 08 00 2b 30 30 9d 14 00  ... (234)	add
01	00	00	00	02	00	00	00	00	00	00	00	ff	ff	ff	ff
03				01				02				00	00	00	00
															
ff	ff	ff	ff												
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\*\	mod
3	REG_BINARY	14 00 1f 50 e0 4f d0 20 ea 3a 69 10 a2 d8 08 00 2b 30 30 9d 14 00 2e 80 3a cc bf b4 2c db 4c 42 b0 29 7f e9 9a 87 c6 41 4e 00 31 00 00 00 00 00 46 5d  ... (374)	add
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
03				02				01				00	00	00	00
															
ff	ff	ff	ff												
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU\PML\	add
0	REG_BINARY	14 00 1f 50 e0 4f d0 20 ea 3a 69 10 a2 d8 08 00 2b 30 30 9d 14 00 2e 80 3a cc bf b4 2c db 4c 42 b0 29 7f e9 9a 87 c6 41 4e 00 31 00 00 00 00 00 46 5d  ... (374)	add
MRUListEx	REG_BINARY	00 00 00 00 ff ff ff ff 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppLaunch\	mod
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge	REG_DWORD	0x0000000b (11)	old
	REG_DWORD	0x0000000d (13)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched\	mod
C:\Users\user\Desktop\tools\ProcessMonitor\Procmon64.exe	REG_DWORD	0x00000008 (8)	add
C:\Users\user\Desktop\tools\SysTracer x64\SysTracer.exe	REG_DWORD	0x00000001 (1)	add
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000004 (4)	new
Microsoft.Windows.Explorer	REG_DWORD	0x0000001a (26)	old
	REG_DWORD	0x0000001b (27)	new
wj32.ProcessHacker2	REG_DWORD	0x00000007 (7)	old
	REG_DWORD	0x00000008 (8)	new
{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\notepad.exe	REG_DWORD	0x00000003 (3)	old
	REG_DWORD	0x00000005 (5)	new
{6D809377-6AF0-444B-8957-A3773F02200E}\Microsoft Office\Office16\WINWORD.EXE	REG_DWORD	0x00000002 (2)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList\	mod
a	REG_SZ	WINWORD.EXE	add
MRUList	REG_SZ	a	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PML\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PML\OpenWithList\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PML\OpenWithProgids\	add
ProcMon.Logfile.1	REG_NONE		add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\	mod
45	REG_BINARY	64 00 6f 00 63 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 2e 00 74 00 78 00 74 00 00 00 78 00 32 00 00 00 00 00 00 00 00 00 00 00 64 6f 63 5f 6d 61  ... (152)	add
46	REG_BINARY	47 00 72 00 65 00 79 00 45 00 6e 00 65 00 72 00 67 00 79 00 44 00 72 00 6f 00 70 00 70 00 65 00 72 00 2e 00 64 00 6f 00 63 00 00 00 8c 00 32 00 00 00  ... (186)	add
47	REG_BINARY	64 00 6f 00 63 00 5f 00 6f 00 70 00 65 00 6e 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 5f 00 6f 00 66 00 66 00 5f 00 6e 00 65 00 74 00 77 00 6f 00  ... (252)	add
2c	00	00	00	01	00	00	00	2b	00	00	00	2a	00	00	00
25				2f				1e				2e			
29	00	00	00	23	00	00	00	00	00	00	00	1e	00	00	00
1d				2d				2c				01			
28	00	00	00	27	00	00	00	26	00	00	00	18	00	00	00
2b				2a				29				23			
1d	00											 ... (184)
00												 ... (196)
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.doc\	add
0	REG_BINARY	47 00 72 00 65 00 79 00 45 00 6e 00 65 00 72 00 67 00 79 00 44 00 72 00 6f 00 70 00 70 00 65 00 72 00 2e 00 64 00 6f 00 63 00 00 00 8c 00 32 00 00 00  ... (186)	add
MRUListEx	REG_BINARY	00 00 00 00 ff ff ff ff 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.PML\	add
0	REG_BINARY	64 00 6f 00 63 00 5f 00 6f 00 70 00 65 00 6e 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 5f 00 6f 00 66 00 66 00 5f 00 6e 00 65 00 74 00 77 00 6f 00  ... (252)	add
MRUListEx	REG_BINARY	00 00 00 00 ff ff ff ff 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.txt\	mod
6	REG_BINARY	64 00 6f 00 63 00 5f 00 6d 00 61 00 63 00 72 00 6f 00 73 00 2e 00 74 00 78 00 74 00 00 00 78 00 32 00 00 00 00 00 00 00 00 00 00 00 64 6f 63 5f 6d 61  ... (152)	add
05	00	00	00	00	00	00	00	01	00	00	00	04	00	00	00
06				05				00				01			
03	00	00	00	02	00	00	00	ff	ff	ff	ff				
04				03				02	00	00	00	ff	ff	ff	ff
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\Folder\	mod
13	REG_BINARY	72 00 65 00 73 00 75 00 6c 00 74 00 73 00 00 00 62 00 32 00 00 00 00 00 00 00 00 00 00 00 72 65 73 75 6c 74 73 2e 6c 6e 6b 00 48 00 09 00 04 00 ef be  ... (116)	add
00	00	00	00	0c	00	00	00	0b	00	00	00	0a	00	00	00
0d												00			
09	00	00	00	08	00	00	00	01	00	00	00	07	00	00	00
0a				09				08				01			
06	00	00	00	03	00	00	00	04	00	00	00	05	00	00	00
07				06				03				04			
02	00											 ... (56)
05												 ... (60)
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000204E6\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000020524\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000002061E\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000301EA\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000302E0\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000030514\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000305DE\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000402E4\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000501E2\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000050432\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000005046A\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 8f 65 47 e4 2a ac 75 4a b8 65 6f 0d 8e 57 23 d0 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000505E8\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000006028C\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000060692\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000805E0\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000009028C\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000A06E2\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000B0422\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:00000000000B06D8\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:0000000000100710\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\W32:000000000011071A\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\WRT:Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge+1+00000000000101DC\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\ApplicationViewManagement\WRT:Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge+1+00000000000505D4\	add
VirtualDesktop	REG_BINARY	10 00 00 00 30 30 44 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\	mod
00	00	00	00	27	01	00	00	f3	02	00	00	24	3d	3b	01
				2d				07	03			34	da	4e	
42	00	00	00	33	00	00	00	08	85	0f	00	7b	00	31	00
43				37				e5	3a	11					
41	00	43	00	31	00	34	00	45	00	37	00	37	00	2d	00
															
30	00											 ... (1612)
												 ... (1612)
HRZR_PGYFRFFVBA	REG_BINARY		mod
00	00	00	00	08	00	00	00	25	00	00	00	6f	97	17	00
				09				29				22	10	1d	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
jw32.CebprffUnpxre2	REG_BINARY		mod
00	00	00	00	02	00	00	00	03	00	00	00	99	6f	02	00
				03				06				0d	14	05	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\gbbyf\CebprffZbavgbe\Cebpzba64.rkr	REG_BINARY		mod
00	00	00	00	04	00	00	00	05	00	00	00	7d	09	02	00
								06				06	02	03	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\gbbyf\FlfGenpre k64\FlfGenpre.rkr	REG_BINARY		mod
00	00	00	00	31	00	00	00	e7	00	00	00	a2	6d	63	00
								ea				a7	4d	66	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
Zvpebfbsg.Jvaqbjf.Rkcybere	REG_BINARY		mod
00	00	00	00	0b	00	00	00	1a	00	00	00	bc	8d	16	00
				0d				1d				7c	29	1b	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
Zvpebfbsg.ZvpebfbsgRqtr_8jrxlo3q8oojr!ZvpebfbsgRqtr	REG_BINARY		mod
00	00	00	00	42	00	00	00	33	00	00	00	08	85	0f	00
				43				37				e5	3a	11	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\abgrcnq.rkr	REG_BINARY		mod
00	00	00	00	0e	00	00	00	59	00	00	00	5f	2c	18	00
								5a				eb	48	19	
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
{1NP14R77-02R7-4R5Q-O744-2RO1NR5198O7}\pzq.rkr	REG_BINARY		mod
00	00	00	00	02	00	00	00	02	00	00	00	f8	66	00	00
				03				03				2a	a0		
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
{6Q809377-6NS0-444O-8957-N3773S02200R}\Zvpebfbsg Bssvpr\Bssvpr16\JVAJBEQ.RKR	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count\	mod
00	00	00	00	68	00	00	00	00	00	00	00	68	00	00	00
				6a								6a			
1c	00	00	00	00	00	00	00	1c	00	00	00	7b	00	39	00
															
45	00	33	00	39	00	39	00	35	00	41	00	42	00	2d	00
															
31	00											 ... (1612)
												 ... (1612)
HRZR_PGYFRFFVBA	REG_BINARY		mod
00	00	00	00	08	00	00	00	00	00	00	00	08	00	00	00
				09								09			
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\Cebprff Unpxre 2.yax	REG_BINARY		mod
00	00	00	00	02	00	00	00	00	00	00	00	02	00	00	00
				03								03			
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00	80	bf	00	00	80	bf	00	00	80	bf	00	00	80	bf
															
00	00											 ... (72)
												 ... (72)
P:\Hfref\hfre\Qrfxgbc\Cebpzba64.rkr.yax	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Group Policy\PolicyApplicationState\	mod
PolicyState	REG_DWORD	0x00000002 (2)	old
	REG_DWORD	0x00000000 (0)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Search\	mod
InstalledWin32AppsRevision	REG_SZ	{92F77DD2-A7D5-4B2B-B411-561D068DF111}	old
	REG_SZ	{905AEFAF-C040-4C0E-BED9-C9C3586A2E1C}	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Search\Flighting\	mod
CachedFeatureString	REG_SZ	SBSTR0103	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Search\JumplistData\	del
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel	REG_QWORD	3f d5 26 43 c8 55 dd 01 	del
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Search\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppsConstraintIndex\	mod
LatestConstraintIndexFolder	REG_SZ	C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{388387b3-61d0-48f4-8c51-061db5f67955}	old
	REG_SZ	C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2da363c5-0df3-4537-8958-d78768bfc43a}	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}.check.800\	mod
23	00	41	00	43	00	42	00	6c	00	6f	00	62	00	00	00
															
00	00	00	00	00	00	00	00	01	00	00	00	64	00	00	00
												00			
06	00	00	00												
00															
CheckSetting	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\CommitHistory\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
Mixed	REG_QWORD	08 0f d4 03 00 00 00 00 	old
	REG_QWORD	c2 03 c5 03 00 00 00 00 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\CommitHistory\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge#\	mod
Mixed	REG_QWORD	47 e2 3a 01 00 00 00 00 	old
	REG_QWORD	37 2c 99 02 00 00 00 00 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\CommitHistory\Microsoft.WindowsStore_8wekyb3d8bbwe!App\	mod
Pure	REG_QWORD	00 a0 e0 01 00 00 00 00 	old
	REG_QWORD	00 50 90 01 00 00 00 00 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Microsoft\Windows NT\CurrentVersion\HostActivityManager\Volatile\	mod
Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge	REG_DWORD	0x00000100 (256)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001\Software\Sysinternals\Process Monitor\	mod
SaveDialog	REG_BINARY	2c 00 00 00 00 00 00 00 01 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 58 00 00 00 75 00 00 00 38 02 00 00 06 02 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\MuiCache\3b\B1A07F78\	mod
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-300	REG_SZ	Windows Defender Antivirus	add
@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-380	REG_SZ	Некритические файлы, используемые программой Windows Defender Antivirus	add
@%SystemRoot%\System32\DATACLEN.DLL,-1010	REG_SZ	Файлы журнала установки	add
@%SystemRoot%\System32\DATACLEN.DLL,-1011	REG_SZ	Файлы, созданные Windows	add
@%SystemRoot%\System32\DATACLEN.DLL,-1045	REG_SZ	Внимание! Это файлы из вашей личной папки "Загрузки". Выберите этот вариант, если необходимо удалить все. При этом не учитывается ваша конфигурация функции "Контроль памяти".	add
@%systemroot%\system32\domgmt.dll,-103	REG_SZ	Файлы оптимизации доставки	add
@%systemroot%\system32\domgmt.dll,-104	REG_SZ	Файлы оптимизации доставки — это файлы, которые ранее были загружены на компьютер и которые могут быть удалены, если не используются службой оптимизации доставки.	add
@%systemroot%\system32\scavengeui.dll,-1000	REG_SZ	Файлы резервной копии пакета обновления	add
@%systemroot%\system32\scavengeui.dll,-1001	REG_SZ	Windows сохраняет старые версии файлов, обновленных с помощью пакета обновления. В случае удаления этих файлов пакет обновления затем будет невозможно удалить.	add
@%systemroot%\system32\scavengeui.dll,-1002	REG_SZ	Очистка обновлений Windows	add
@%systemroot%\system32\scavengeui.dll,-1003	REG_SZ	Windows хранит копии всех установленных обновлений из Центра обновления Windows даже после установки их новых версий. При очистке старые и ненужные версии обновлений удаляются или сжимаются. (Возможно, вам потребуется перезагрузить компьютер.)	add
@%systemroot%\system32\setupcln.dll,-1000	REG_SZ	Временные файлы установки Windows	add
@%systemroot%\system32\setupcln.dll,-1001	REG_SZ	Файлы установки, которые использует программа установки Windows.  Эти файлы остаются после процесса установки и могут быть удалены без последствий.	add
@%SystemRoot%\system32\utcutil.dll,-301	REG_SZ	Файлы базы данных средства просмотра диагностических данных	add
@%SystemRoot%\system32\utcutil.dll,-302	REG_SZ	Файлы, используемые для средства просмотра диагностических данных.	add
@%SystemRoot%\system32\wer.dll,-305	REG_SZ	Диагностические данные, полученные на основе отчетов об ошибках системы Windows и отзывов о ней	add
@%SystemRoot%\system32\wer.dll,-306	REG_SZ	Файлы с диагностическими данными, созданные на основе ошибок системы Windows и отзывов пользователей о ней.	add
@%SystemRoot%\system32\werfault.exe,-100	REG_SZ	Файлы дампа памяти для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-101	REG_SZ	Удаление файлов дампа памяти для системных ошибок.	add
@%SystemRoot%\system32\werfault.exe,-102	REG_SZ	Файлы мини-дампа для системных ошибок	add
@%SystemRoot%\system32\werfault.exe,-103	REG_SZ	Удаление файлов мини-дампа для системных ошибок.	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-120	REG_SZ	Документ Microsoft Word 97–2003	add
@C:\Program Files\Common Files\Microsoft Shared\Office16\oregres.dll,-205	REG_SZ	Word 2016	add
@C:\Program Files\Common Files\system\wab32res.dll,-10100	REG_SZ	Контакты	add
@C:\Windows\System32\fsquirt.exe,-2343	REG_SZ	Устройство Bluetooth	add
@C:\Windows\system32\FXSRESM.dll,-120	REG_SZ	Получатель факса	add
@C:\Windows\System32\ieframe.dll,-12385	REG_SZ	Панель избранного	add
@C:\Windows\system32\netshell.dll,-1200	REG_SZ	Сетевые подключения 	add
@C:\Windows\System32\occache.dll,-1070	REG_SZ	Загруженные файлы программ	add
@C:\Windows\System32\occache.dll,-1071	REG_SZ	В папке "Загруженные файлы программ" временно сохраняются элементы ActiveX и приложения Java, автоматически загружаемые из Интернета при просмотре некоторых страниц.	add
@C:\Windows\System32\occache.dll,-1072	REG_SZ	&Просмотреть файлы	add
@C:\Windows\system32\zipfldr.dll,-10195	REG_SZ	Сжатая ZIP-папка	add
@efscore.dll,-101	REG_SZ	Владение файлами	add
@sendmail.dll,-21	REG_SZ	Рабочий стол (создать ярлык)	add
@sendmail.dll,-4	REG_SZ	Адресат	add
@windows.storage.dll,-21825	REG_SZ	Объемные объекты	add
@windows.storage.dll,-34575	REG_SZ	Документы	add
@windows.storage.dll,-34582	REG_SZ	Пленка	add
@windows.storage.dll,-34583	REG_SZ	Сохраненные фотографии	add
@windows.storage.dll,-34584	REG_SZ	Музыка	add
@windows.storage.dll,-34595	REG_SZ	Изображения	add
@windows.storage.dll,-34620	REG_SZ	Видео	add
@zipfldr.dll,-10148	REG_SZ	Сжатая ZIP-папка	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pastein.ru\	add
(Default)	REG_DWORD	0x000001e6 (486)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000001e6 (486)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x000000b8 (184)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\Total\	mod
(Default)	REG_DWORD	0x000024e9 (9449)	old
	REG_DWORD	0x00002787 (10119)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000001 (1)	add
Total	REG_DWORD	0x000000b8 (184)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\clipboard-online.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastebin.com\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pastein.ru\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\smartcaptcha.yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\yandexcloud.net\	add
(Default)	REG_DWORD	0x00000000 (0)	add
NumberOfSubdomains	REG_DWORD	0x00000000 (0)	add
Total	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Software\Microsoft\Speech_OneCore\Isolated\k6BwW5fty3XWMlmQDjzUq77TXIsLVjJGt268p8btklc\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Voices\	add
DefaultTokenId	REG_SZ	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Voices\Tokens\MSTTS_V110_ruRU_IrinaM	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\ACGStatus\	add
ACGPolicyState	REG_DWORD	0x00000008 (8)	add
DynamicCodePolicy	REG_BINARY	05 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus\	add
CIPolicyState	REG_DWORD	0x00000000 (0)	add
SignaturePolicy	REG_BINARY	06 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\	mod
d3	a4	70	27	c8	55	dd	01								
e0	65	69	ec	ca											
CIStatusTimestamp	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\Favorites\	mod
ea	07	0a	00	02	00	06	00	13	00	12	00	32	00	4d	02
										2b		0c		03	
LastCounted	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\	mod
StoreFormMetaData	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 	old
	REG_SZ	11609506718008964583 920131839032470101 1143345854187233969 2721139977925952592 2365079081218371163 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy\	mod
01	00	00	00	c6	c8	15	3b	70	dc	8b	72	68	0d	64	64
				c4	b0	bb	12	76	9c	33	b5	46	65	80	6b
73	36	dc	8e	6e	87	61	75	84	30	38	1e	35	61	f0	23
a9	66	ac	08	cc	4e		e5	6a	d2	47	15	83	93	74	4b
23	4b	c3	91	4e	19	48	0c	db	0a	f1	4d	28	22	c0	3d
39	6c	7d	cf	0c	8e	25	27	9d	24	95	2e	f6	6c	fe	7f
73	5d											 ... (64)
79	35											 ... (64)
ProtectedGlobalExtensionSetting	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\	mod
{B10C3329-75C8-465B-9C8E-B02770065715}	REG_DWORD	0x00000000 (0)	add
{FC3DACBE-D0F4-4E51-BCBB-19C26EB3625B}	REG_DWORD	0x00000000 (0)	del
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingDelete\	mod
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{48DD6C35-827D-4AD3-B01A-DF89E1EBE060}.dat	REG_DWORD	0x00000000 (0)	del
C:\Users\user\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\{EABF2BEA-3F6E-4ECC-92ED-496DC4C6C714}.dat	REG_DWORD	0x00000000 (0)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI\	mod
NewTabPageFlightMUID	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	081098CD4388634C2E7A8F2442196256;6ac54e0b84404cb49699262cf9ef678d	new
e0	96	09	1f	c7	55	dd	01								
00	a7	10	72	ca											
NewTabPageFlightReceivedTime	REG_BINARY		mod
NewTabPageFlightWebIG	REG_SZ	6ac433d4783641d58c5421f256aabc62	old
	REG_SZ	6ac54e0b84404cb49699262cf9ef678d	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\WebRuntimeExtensions\EventStore\	mod
Session	REG_QWORD	1c 00 00 00 00 00 00 00 	old
	REG_QWORD	1e 00 00 00 00 00 00 00 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\InputApp_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
ICT	REG_QWORD	4e bc c4 32 08 55 dd 01 	old
	REG_QWORD	1f de 73 27 ca 55 dd 01 	new
ITT	REG_QWORD	9e b8 d8 32 08 55 dd 01 	old
	REG_QWORD	b3 7d 86 27 ca 55 dd 01 	new
PCT	REG_QWORD	5c 1a ae 32 08 55 dd 01 	old
	REG_QWORD	8e 3d 60 27 ca 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\ApplicationFrame\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
2c	00	00	00	02	00	00	00	03	00	00	00	00	83	ff	ff
												ff	ff		
00	83	ff	ff	ff	ff	ff	ff	ff	ff	ff	ff	28	00	00	00
ff	ff											50			
20	00	00	00	58	03	00	00	a1	02	00	00				
40				80				c1							
Positions	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\HAM\AUI\MicrosoftEdge\V1\LU\	mod
ICT	REG_QWORD	d0 76 70 81 c7 55 dd 01 	old
	REG_QWORD	68 41 62 69 ca 55 dd 01 	new
PCT	REG_QWORD	a5 1d 13 27 c8 55 dd 01 	old
	REG_QWORD	d7 fa 4c ec ca 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\PersistedTitleBarData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\	mod
BackgroundColor	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
BackgroundColorInactive	REG_DWORD	0xffcccccc (4291611852)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonBackgroundColor	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffd0d0d0 (4291875024)	new
ButtonBackgroundColorInactive	REG_DWORD	0x00000000 (0)	old
	REG_DWORD	0xffffffff (4294967295)	new
ButtonForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
ButtonHoverBackgroundColor	REG_DWORD	0x19000000 (419430400)	old
	REG_DWORD	0xffbbbbbb (4290493371)	new
ButtonPressedBackgroundColor	REG_DWORD	0x33000000 (855638016)	old
	REG_DWORD	0xffa6a6a6 (4289111718)	new
ForegroundColorInactive	REG_DWORD	0xff7a7a7a (4286216826)	old
	REG_DWORD	0xff999999 (4288256409)	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\HAM\AUI\Microsoft.MicrosoftOfficeHub\V1\LU\	mod
PCT	REG_QWORD	4e 87 71 0e 14 55 dd 01 	old
	REG_QWORD	c3 69 db 6d cc 55 dd 01 	new
PTT	REG_QWORD	37 7f c0 1e 14 55 dd 01 	old
	REG_QWORD	6d f3 c4 91 cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Wallet_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	d2 54 41 9e 06 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	0b c3 17 c2 06 55 dd 01 	old
	REG_QWORD	d7 48 e8 7c cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	c6 6a 50 42 c8 55 dd 01 	old
	REG_QWORD	cd c0 eb 56 cd 55 dd 01 	new
PTT	REG_QWORD	28 0b 74 42 c8 55 dd 01 	old
	REG_QWORD	3c 54 fc 56 cd 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\HAM\AUI\ppleae38af2e007f4358a809ac99a64a67c1\V1\LU\	mod
PCT	REG_QWORD	81 ed 4d 42 c8 55 dd 01 	old
	REG_QWORD	e1 07 0b 59 cc 55 dd 01 	new
PTT	REG_QWORD	c6 64 77 51 c8 55 dd 01 	old
	REG_QWORD	00 ef 29 59 cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsStore_8wekyb3d8bbwe\HAM\AUI\App\V1\LU\	mod
PCT	REG_QWORD	a4 c0 0b 27 c8 55 dd 01 	old
	REG_QWORD	9a 71 b0 55 cc 55 dd 01 	new
PTT	REG_QWORD	21 02 15 66 c8 55 dd 01 	old
	REG_QWORD	bb 26 89 79 cc 55 dd 01 	new
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\	mod
09	00	00	00	00	00	00	00	01	00	00	00	05	00	00	00
				01				00							
06	00	00	00	08	00	00	00	07	00	00	00	02	00	00	00
															
04	00	00	00	03	00	00	00	ff	ff	ff	ff				
															
MRUListEx	REG_BINARY		mod
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02	02	02	02	02	02	02	02	02	02	02	02	02	02	02
															
02	02											 ... (94)
												 ... (96)
NodeSlots	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\	mod
03	00	00	00	02	00	00	00	01	00	00	00	04	00	00	00
01				03				02							
00	00	00	00	ff	ff	ff	ff								
															
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\	mod
5	REG_BINARY	66 00 31 00 00 00 00 00 cc 56 7d 66 10 00 50 52 4f 43 45 53 7e 31 00 00 4e 00 09 00 04 00 ef be cc 56 7c 66 46 5d c3 99 2e 00 00 00 96 a2 01 00 00 00  ... (104)	add
01	00	00	00	03	00	00	00	04	00	00	00	02	00	00	00
05				01				03				04			
00	00	00	00	ff	ff	ff	ff								
02				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\1\5\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x0000005f (95)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\	mod
1	REG_BINARY	56 00 31 00 00 00 00 00 45 5d 14 99 10 00 72 65 73 75 6c 74 73 00 40 00 09 00 04 00 ef be 45 5d 14 99 46 5d c3 99 2e 00 00 00 e9 64 01 00 00 00 09 00  ... (88)	add
00	00	00	00	ff	ff	ff	ff								
01				00	00	00	00	ff	ff	ff	ff				
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\1\2\1\	add
MRUListEx	REG_BINARY	ff ff ff ff 	add
NodeSlot	REG_DWORD	0x00000060 (96)	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\9\	mod
02	00	00	00	01	00	00	00	00	00	00	00	ff	ff	ff	ff
01				02											
MRUListEx	REG_BINARY		mod
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\95\Shell\	add
SniffedFolderType	REG_SZ	Generic	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\	add
ColInfo	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd df df fd 10 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 18 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1  ... (136)	add
FFlags	REG_DWORD	0x00000001 (1)	add
GroupByDirection	REG_DWORD	0x00000001 (1)	add
GroupByKey:FMTID	REG_SZ	{00000000-0000-0000-0000-000000000000}	add
GroupByKey:PID	REG_DWORD	0x00000000 (0)	add
GroupView	REG_DWORD	0x00000000 (0)	add
IconSize	REG_DWORD	0x00000010 (16)	add
LogicalViewMode	REG_DWORD	0x00000001 (1)	add
Mode	REG_DWORD	0x00000004 (4)	add
Sort	REG_BINARY	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 30 f1 25 b7 ef 47 1a 10 a5 f1 02 60 8c 9e eb ac 0a 00 00 00 01 00 00 00 	add
HKEY_USERS\S-1-5-21-2292890337-69778762-837601055-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\96\Shell\	add
SniffedFolderType	REG_SZ	Generic	add