Sample File: MD5 hash: eadd4d15f9e23d579232aff07f9e988a SHA1 hash: 1f74fd5d6889a593072604860c47219de71e5d94 SHA256 hash: 4095b31681f998c808b2e7338fa8adec82c9f5049df457c9f0c0fc562e2a48ab SSDEEP hash: 1536:ZY+km4OrZTPVbJhr1TBL602MCspTZ4xEtjPOtioVjDGUU1qfDlaGGx+cL2QnSJ4a:ZY+km4OrZbVbJhr1TBL602MCspTZ4xEH Filename(s): Doc061120182038778905.xls Filetype: Excel Document Mutex IOCs: Global\.net clr networking Registry Key IOCs: HKEY_CLASSES_ROOT\Licenses HKEY_CLASSES_ROOT\Licenses\8804558B-B773-11d1-BC3E-0000F87552E7 HKEY_CLASSES_ROOT\TypeLib HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046} HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 HKEY_CLASSES_ROOT\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win64 HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046} HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9 HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\0 HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\0\win64 HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\409 HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.9\9 HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52} HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8 HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0 HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.8\0\win64 HKEY_CURRENT_USER HKEY_CURRENT_USER\Environment HKEY_CURRENT_USER\Environment\PSMODULEPATH HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections HKEY_CURRENT_USER\Software\Microsoft\Command Processor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\BackGroundCompile HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\BreakOnAllErrors HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\BreakOnServerErrors HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\CompileOnDemand HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\NotifyUserBeforeStateLoss HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\RequireDeclaration HKEY_CURRENT_USER\Software\Microsoft\VBA\7.1\Common\VbaCapability HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell\path HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\PipelineMaxStackSizeMB HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\StackVersion HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance\IsMultiInstance HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance\Library HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance\CategoryOptions HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance\Counter Names HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance\FileMappingSize HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\HardwareEvents HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\HardwareEvents\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Internet Explorer HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Internet Explorer\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Media Center HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Media Center\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\OAlerts HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\OAlerts\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Windows PowerShell HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Windows PowerShell\PowerShell HKEY_LOCAL_MACHINE\Software\Classes HKEY_LOCAL_MACHINE\Software\Classes\*\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSProject.Workspace\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSProject.XLS5\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSProject.XLS8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSProject.XLTemplate\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSProject.XML\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.RdcLibrary.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.RdcLibrary\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.Similarity.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.SimilarityFileIdTable.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.SimilarityFileIdTable\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.SimilarityTraitsTable.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.SimilarityTraitsTable\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSRDC.Similarity\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSScriptControl.ScriptControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSScriptControl.ScriptControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSSearch.IpsPi.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSSearch.IpsPi\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSSppLicenseFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSSppPackageFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTIME.TIMEFactory.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTIME.TIMEFactory\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTSWebProxy.MSTSWebProxy.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTSWebProxy.MSTSWebProxy\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSCommon.LTS.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSCommon.LTS\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSDecWrp.DecObj.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSDecWrp.DecObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSEngine.TTSEngine.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSEngine.TTSEngine\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSFrontendENU.MSTTSFrontendENU.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSTTSFrontendENU.MSTTSFrontendENU\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.EVR.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.EVR\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSEventBinder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSEventBinder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidAnalogTunerDevice.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidAnalogTunerDevice\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidAudioRenderer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidAudioRendererDevices.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidAudioRendererDevices\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidAudioRenderer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidBDATunerDevice.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidBDATunerDevice\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidCCA.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidCCA\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidClosedCaptioning.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidClosedCaptioningSI.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidClosedCaptioningSI\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidClosedCaptioning\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidCtl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidCtl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidEncoder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidEncoder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidFeatures.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidFeatures\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidFilePlaybackDevice.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidFilePlaybackDevice\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidGenericSink.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidGenericSink\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidITVCapture.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidITVCapture\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidITVPlayback.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidITVPlayback\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidInputDevices.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidInputDevices\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidOutputDevices.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidOutputDevices\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferRecordingControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferRecordingControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferSink.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferSink\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferSource.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferSource\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferV2Source.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidStreamBufferV2Source\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidVMR9.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidVMR9\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidVideoRenderer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidVideoRendererDevices.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidVideoRendererDevices\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidVideoRenderer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidWebDVD.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidWebDVDAdm.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidWebDVDAdm\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSVidCtl.MSVidWebDVD\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSXML.DOMDocument\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MSXML.FreeThreadedDOMDocument\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MTSAdmin.Catalog.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MTSAdmin.Catalog\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MTxAS.AppServer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MTxSpm.SharedPropertyGroupManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MTxSpm.SharedPropertyGroupManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.2.a\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.3.a\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.3\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.4.a\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.5\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.6\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP.7\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRDP.MsRDP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRdpWebAccess.MsRdpClientShell.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsRdpWebAccess.MsRdpClientShell\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsScp.MSSCP.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsScp.MSSCP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsScp.SCPTRANS.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsScp.SCPTRANS\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.3\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.5\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.6\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.7\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\MsTscAx.MsTscAx\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msrtedit.AAMSREdit\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msshed.ShedDSO\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.DOMDocument.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.DOMDocument.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.DOMDocument\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.DSOControl.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.DSOControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.FreeThreadedDOMDocument.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.FreeThreadedDOMDocument.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.FreeThreadedDOMDocument\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.MXHTMLWriter.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.MXNamespaceManager.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.MXXMLWriter.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.MXXMLWriter.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.MXXMLWriter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.SAXAttributes.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.SAXAttributes.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.SAXAttributes\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.SAXXMLReader.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.SAXXMLReader.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.SAXXMLReader\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.ServerXMLHTTP.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.ServerXMLHTTP.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.ServerXMLHTTP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLHTTP.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLHTTP.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLHTTP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLParser.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLParser\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLSchemaCache.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLSchemaCache.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XMLSchemaCache\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XSLTemplate.3.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XSLTemplate.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml2.XSLTemplate\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Msxml\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Mts.MtsGrp\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NCPjcal.PjCalendar3\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NCProv.NCProvider.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NCProv.NCProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.AppEventsDHTMLConnector.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.AppEventsDHTMLConnector\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.ComCacheCleanup.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.ComCacheCleanup\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCDocConfig.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCDocConfig\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCProtocol.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCProtocol\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCVersionInfo.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCVersionInfo\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCViewExt.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.MMCViewExt\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.NodeInitObject.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.NodeInitObject\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.ScopeTreeObject.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NODEMGR.ScopeTreeObject\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Name.NameCtrl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Name.NameCtrl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NameControlServer.NameCtrl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NameControlServer.NameCtrl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NameTranslate\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbBaseDoc.NbBaseDocEdit.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbBaseDoc.NbBaseDocEdit\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocCstg.NbDocCstg.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocCstg.NbDocCstg\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocViewer.NbAccessibleObject.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocViewer.NbAccessibleObject\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocViewer.NbDocView.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocViewer.NbDocView\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocViewer.NbRioEventSink.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbDocViewer.NbRioEventSink\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbImage.NbBitmapLayer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbImage.NbBitmapLayer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbImage.NbCompositeLayer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbImage.NbCompositeLayer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbTextLayout.NbTextLayoutPage.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbTextLayout.NbTextLayoutPageProp.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbTextLayout.NbTextLayoutPageProp\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbTextLayout.NbTextLayoutPageText.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbTextLayout.NbTextLayoutPageText\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NbTextLayout.NbTextLayoutPage\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Nbdoc.NBDocument.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Nbdoc.NBDocument\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Nbdoc.Stationery.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Nbdoc.Stationery\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NetProjW.Elev.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NetProjW.Elev\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NetServer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NetworkConnections\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NetworkExplorerPlugins\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Network\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NumericResourceTable.NumericResourceTable\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\NumericTaskTable.NumericTaskTable\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OCHelper.BrowserHelper.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OCHelper.BrowserHelper\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ODBC.FileDSN\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ODCfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OLE DB Row Proxy\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OLE DB Row Server\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OLE DB Rowset Proxy\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OLE DB Rowset Server\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OLETransactionManagers\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OPCFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OSE.Global\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OSPPWMI.OSppWmiProvider.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OSPPWMI.OSppWmiProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OSPPWMI.OSppWmiTokenActivationSigner.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OSPPWMI.OSppWmiTokenActivationSigner\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OVCtl.OVCtl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OVCtl.OVCtl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OWS.PostData\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Object.Microsoft.DXTFilter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Object.Microsoft.DXTFilterCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Object.Microsoft.DXTFilterCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Object.Microsoft.DXTFilter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OcOffice.FormRegionContext\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OcOffice.OcForms\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OcOffice.OneNoteHelper\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.LocalSyncClient.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.LocalSyncClient\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.QueryConstraintsBuilder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.QueryConstraints\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.Query\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.Row\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.Session\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.StorageServer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.awsdc.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Office.awsdc\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OfficeCompatible.Application.x64\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OfficeCompatible.Application.x86\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OfficeListShortcut\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OfficePriv.Application\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OfficeTheme.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OfficeTheme\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OldFont\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.AspHelp.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.AspHelp\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.DSPrintQueue.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.DSPrintQueue\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.OleCvt.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.OleCvt\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.OleInstall.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.OleInstall\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.OleSNMP.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.OleSNMP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.PrinterURL.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OlePrn.PrinterURL\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneIndex.ShellFolder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneIndex.ShellFolder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneIndex16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Application.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Application.14\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Application.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Application\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.CFileConverter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Folder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Folder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.IEAddin.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.IEAddin.LinkedNotes.14\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.IEAddin.LinkedNotes\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.IEAddin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.NoteAnchorCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.NoteAnchor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.NoteLinkContentService\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.NoteLinkMeta\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.NoteLinkStoreService\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Notebook.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Notebook\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.OutlookAddin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Package\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.PowerPointAddinTakeNotesButton\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.PowerPointAddinTakeNotesService\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Section.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.Section\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.TableOfContents.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.TableOfContents\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.URL.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.WordAddinTakeNotesButton\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote.WordAddinTakeNotesService\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNoteDesktop.URL.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNoteDesktop\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OneNote\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OpenSearchProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OrgPlusWOPX.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OscAddin.Connect\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OscAddin.SharePointProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OutlMapiPH\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OutlPOPPH\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\OutlSMTPPH\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.Application.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.Application\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.Envelope\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.det.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.eml.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.fdm.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.hol.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.ics.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.msg.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.nk2.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.nst.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.ofs.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.oft.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.ost.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.otm.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.pab.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.pst.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.vcf.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.File.vcs.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.FileAttach\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.MsgAttach\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkBusinessCardControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkBusinessCardControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkCategoryStrip.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkCategoryStrip\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkCheckBox.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkCheckBox\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkComboBox.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkComboBox\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkCommandButton.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkCommandButton\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkContactPhoto.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkContactPhoto\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkDateControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkDateControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkFrameHeader.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkFrameHeader\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkInfoBar.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkInfoBar\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkLabel.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkLabel\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkListBox.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkListBox\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkOptionButton.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkOptionButton\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkPageControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkPageControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkSenderPhoto.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkSenderPhoto\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkTextBox.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkTextBox\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkTimeControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkTimeControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkTimeZone.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.OlkTimeZone\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.Search.MAPI16Handler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.URL.feed.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.URL.mailto.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.URL.stssync.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Outlook.URL.webcal.15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\P10File\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\P7MFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\P7RFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\P7SFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PBrush\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PCBFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFPrevHndlr.PDFPreviewHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFPrevHndlr.PDFPreviewHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFShell.PDFShell.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFShell.PDFShell\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFShellServer.PDFShellInfo.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFShellServer.PDFShellInfo2.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFShellServer.PDFShellInfo2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDFShellServer.PDFShellInfo\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PDXFileType\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PFXFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PKOFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.BootTraceSession.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.BootTraceSessionCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.BootTraceSessionCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.BootTraceSession\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.DataCollectorSet.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.DataCollectorSetCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.DataCollectorSetCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.DataCollectorSet\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyDataCollectorSet.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyDataCollectorSetCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyDataCollectorSetCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyDataCollectorSet\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyTraceSession.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyTraceSessionCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyTraceSessionCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.LegacyTraceSession\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.ServerDataCollectorSet.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.ServerDataCollectorSetCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.ServerDataCollectorSetCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.ServerDataCollectorSet\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.SystemDataCollectorSet.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.SystemDataCollectorSetCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.SystemDataCollectorSetCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.SystemDataCollectorSet\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceDataProvider.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceDataProviderCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceDataProviderCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceDataProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceSession.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceSessionCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceSessionCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PLA.TraceSession\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PNGFilter.CoPNGFilter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PNGFilter.CoPNGFilter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PPSLAX.SlideLibrary\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PROTOCOLS\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PTRegTerminal.Class\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PTRegTerminalClass.Class\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Package2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Package\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Paint.Picture\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PairingFolderItemBluetooth\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PairingFolderItem\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Pathname\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Pdump.ProcessDump\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PeerDraw.PeerDraw.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PeerDraw.PeerDraw\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PeerFactory.PeerFactory.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PeerFactory.PeerFactory\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PenIMC.PimcManager.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PenIMC.PimcManager.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PenIMC.PimcSurrogate.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PenIMC.PimcSurrogate.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PenInputPanel.PenInputPanel.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PenInputPanel.PenInputPanel\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PerfFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PhotoViewer.FileAssoc.Bitmap\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PhotoViewer.FileAssoc.JFIF\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PhotoViewer.FileAssoc.Jpeg\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PhotoViewer.FileAssoc.Png\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PhotoViewer.FileAssoc.Tiff\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PhotoViewer.FileAssoc.Wdp\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDevice.PortableDevice.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDevice.PortableDevice\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceClassExtension.PortableDeviceClassExtension.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceClassExtension.PortableDeviceClassExtension\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceFTM.PortableDeviceFTM.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceFTM.PortableDeviceFTM\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceManager.PortableDeviceManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceManager.PortableDeviceManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceService.PortableDeviceService.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceService.PortableDeviceService\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceServiceFTM.PortableDeviceServiceFTM.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceServiceFTM.PortableDeviceServiceFTM\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceValues.PortableDeviceValues.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceValues.PortableDeviceValues\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceValuesCollection.PortableDeviceValuesCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceValuesCollection.PortableDeviceValuesCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceWMDRM.PortableDeviceWMDRM.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceWMDRM.PortableDeviceWMDRM\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceWiaCompat.PortableDeviceWiaCompat.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortableDeviceWiaCompat.PortableDeviceWiaCompat\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortalConnect14.PersonalSite.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PortalConnect14.PersonalSite\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPivotExcelClientAddIn.NativeEntry\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Addin.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Addin.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Addin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Application.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Application\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.OpenDocumentPresentation.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.OpenDocumentPresentation\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Show.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Show.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.ShowMacroEnabled.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.ShowMacroEnabled\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Show\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Slide.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Slide.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideMacroEnabled.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideMacroEnabled\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideShow.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideShow.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideShowMacroEnabled.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideShowMacroEnabled\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.SlideShow\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Slide\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Template.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Template.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.TemplateMacroEnabled.12\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.TemplateMacroEnabled\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Template\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.UriLink.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PowerPoint.Wizard.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Presenter.MCVideoPresenter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Presenter.MCVideoPresenter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Previous.Versions\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PrintSys.CoFilterPipeline.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PrintSys.CoFilterPipeline\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PrintSys.CoPrintIsolationHost.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PrintSys.CoPrintIsolationHost\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Printers\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectHeader.ProjectHeader\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.Link\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.PMDocument\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.PMEvents\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.PMObject\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.Project\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.RelEnum\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ProjectModel.Task\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Project\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropRpt.VisExcelRptDriver\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropRpt.VisListRptDriver\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropRpt.VisReportDef\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropRpt.VisReportManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropRpt.VisVisioRptDriver\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropVariantCollection.PropVariantCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropVariantCollection.PropVariantCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropertyEntry\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropertyKeyCollection.PropertyKeyCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropertyKeyCollection.PropertyKeyCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PropertyValue\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.ATSCTerrestrial.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.ATSCTerrestrial\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.AnalogCable.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.AnalogCable\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.AtscPsipParser.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.AtscPsipParser\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.CDvb.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.CDvb\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.CIsdb.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.CIsdb\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.DigitalCable.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.DigitalCable\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.DvbSiParser.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.DvbSiParser\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.PBDA.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Psisdecd.PBDA\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\PublishedApp\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Publisher.Application.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Publisher.Application\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Publisher.Document.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Publisher.Document\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Publisher.UriLink.16\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QC.DLQListener\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QC.ListenerHelper\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QC.MessageMover.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QC.MessageMover\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QC.Recorder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QueryAllWinSAT\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\QueryWinSAT\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RACplDlg.RARegSetting.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RACplDlg.RARegSetting\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RACplDlg.RASettingProperty.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RACplDlg.RASettingProperty\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RAServer.RASMapi.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RAServer.RASMapi\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RAServer.RASrv.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RAServer.RASrv\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RAServer.RemoteAssistance.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RAServer.RemoteAssistance\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RCM.ConnectionManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RCM.ConnectionManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDB.AutoPlayHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDBFileProperties.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDP.File\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDS.DataControl.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDS.DataControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDS.DataSpace.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDS.DataSpace\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDSServer.DataFactory.6.0\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RDSServer.DataFactory\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RECIP.RecipCtl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RdpCoreKMTS.WTSProtocolManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RdpCoreKMTS.WTSProtocolManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Rdpcomapi.RDPSession.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Rdpcomapi.RDPSession\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Rdpvcomapi.RDPViewer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Rdpvcomapi.RDPViewer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Record\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RegisterControl.Register.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RegisterControl.Register\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RemoteAssistance.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RemoteHelper.RemoteHelper\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ReplicateCatalog.ReplicateCatalog.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ReplicateCatalog.ReplicateCatalog\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RequestMakeCall.RequestMakeCall.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RequestMakeCall.RequestMakeCall\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ResourceAssignment.ResourceAssignment\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ResourceInt.ResourceInt\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ResourceManager.ResourceManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Results\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RowPosition.RowPosition.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RowPosition.RowPosition\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\RowsetHelper\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SPNotify.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SPNotify\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpAudioFormat.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpAudioFormat\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpCompressedLexicon.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpCompressedLexicon\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpCustomStream.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpCustomStream\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpDataKey.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpDataKey\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpFileStream.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpFileStream\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpGramCompBackEnd.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpGramCompBackEnd\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpGrammarCompiler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpGrammarCompiler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpITNProcessor.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpITNProcessor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpInProcRecoContext.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpInProcRecoContext\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpInprocRecognizer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpInprocRecognizer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpLexicon.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpLexicon\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMMAudioEnum.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMMAudioEnum\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMMAudioIn.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMMAudioIn\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMMAudioOut.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMMAudioOut\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMemoryStream.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpMemoryStream\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpNotifyTranslator.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpNotifyTranslator\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpNullPhoneConverter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpNullPhoneConverter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpObjectToken.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpObjectTokenCategory.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpObjectTokenCategory\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpObjectTokenEnum.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpObjectTokenEnum\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpObjectToken\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhoneConverter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhoneConverter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhrase.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhraseBuilder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhraseBuilder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhraseInfoBuilder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhraseInfoBuilder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpPhrase\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpResourceManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpResourceManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpSharedRecoContext.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpSharedRecoContext\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpSharedRecognizer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpSharedRecognizer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpShortcut.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpShortcut\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpStream.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpStreamFormatConverter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpStreamFormatConverter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpStream\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpTextSelectionInformation.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpTextSelectionInformation\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpUncompressedLexicon.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpUncompressedLexicon\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpVoice.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpVoice\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpWaveFormatEx.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPI.SpWaveFormatEx\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPIEngine.TTSEngine.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SAPIEngine.TTSEngine\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.AudioCD.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.AudioCD\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.BurnDevice.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.BurnDevice\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.DataBurner.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.DataBurner\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.DiscBurner.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.DiscBurner\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.SBEDeviceManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.SBEDeviceManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.VideoAudioBurner.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SBEServer.VideoAudioBurner\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDBACKUPCONFIG.SdBackupConfig.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDBACKUPCONFIG.SdBackupConfig\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDConfig.AutoPlayHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDConfig.AutoPlayHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDENGINE.CSdGITManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDENGINE.CSdGITManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDENGINE.CSdWhcNotifier.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDENGINE.CSdWhcNotifier\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDENGINE.SdEngine2.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDENGINE.SdEngine2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDRun.AutoPlayHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDRun.AutoPlayHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDSHELLEXTENSION.SdShellExtension.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDSHELLEXTENSION.SdShellExtension\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDSnapin.SDSnapin.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDSnapin.SDSnapin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SDSnapinAbout.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SHCmdFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SKBMonitor.KeyStrokeMonitor.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SKBMonitor.KeyStrokeMonitor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SOFTWARE\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SPCFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\STLFile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisSaveAsWeb.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisSaveAsWeb\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisWebDispProxy.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisWebDispProxy\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisWebPageSettings.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisWebPageSettings\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisioSolutionDocumentMap.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWeb.VisioSolutionDocumentMap\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWebHF.SVGDispObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWebRaster.GIFDispObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWebRaster.JPGDispObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWebRaster.PNGDispObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWebVML.VMLDispObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SaveAsWebXAML.XAMLDispObj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SavedDsQuery\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScanProfiles.ScanProfileMgr.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScanProfiles.ScanProfileMgr\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScanProfiles.ScanProfileUI.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScanProfiles.ScanProfileUI\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Schedule.Service.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Schedule.Service\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptBridge.ScriptBridge.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptBridge.ScriptBridge\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptedDiag.Engine.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptedDiag.Engine\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scripting.Dictionary\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scripting.Encoder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scripting.FileSystemObject\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scripting.Signer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.Behavior\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.Constructor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.Context\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.Factory\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.HiFiTimer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.HostEncode\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.SvrOm\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Scriptlet.TypeLib\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptletHandler.ASP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptletHandler.Automation\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptletHandler.Behavior\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptletHandler.Event\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptoSys.Scripto.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ScriptoSys.Scripto\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SdrService.SdController.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SdrService.SdController\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SdrService.SdrRestoreService.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SdrService.SdrRestoreService\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CollatorDSO.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CollatorDSO\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CollatorErrors.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CollatorErrors\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CommandCreator.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CommandCreator\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CscHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CscHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CustomWordbreaker.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.CustomWordbreaker\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.DirMonitorNotifier.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.DirMonitorNotifier\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedGatherMgr.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedGatherMgr\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedGatherNotify.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedGatherNotifyInline.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedGatherNotifyInline\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedGatherNotify\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedSearchSvcAdmin.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.EmbeddedSearchSvcAdmin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.FileHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.FileHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.FilesystemBackupProvider.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.FilesystemBackupProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.FilterRegistration.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.FilterRegistration\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherMgr.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherMgr\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherNotify.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherNotifyInline.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherNotifyInline\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherNotify\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherTrx.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GatherTrx\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.Gatherer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GathererLogFileProvider.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.GathererLogFileProvider\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.Gatherer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.Indexer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.Indexer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.JetPropStore.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.JetPropStore\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.LanguageResource.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.LanguageResource\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.LoadLangRes.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.LoadLangRes\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.MAPI2Handler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.MAPI2Handler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.MapPI.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.MapPI\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.MediaCenterHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.MediaCenterHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.NlCiIndex.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.NlCiIndex\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.NullWB.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.NullWB\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.OneIndexHandler.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.OneIndexHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.OutlookToolbar.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.OutlookToolbar\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.ShellFolder.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.ShellFolder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.ShellFolderr.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.StickyNotesHandler.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.StickyNotesHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.TripoliIndexer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.TripoliIndexer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.XmlContentFilter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Search.XmlContentFilter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SearchConnectorFolder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SearchFolder\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SecurityDescriptor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.Sensor.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.SensorCollection.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.SensorCollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.SensorDataReport.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.SensorDataReport\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.SensorManager.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.SensorManager\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SensorsApi.Sensor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShapeCollector.ShapeCollector.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShapeCollector.ShapeCollector\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShapewareVISIO10\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShapewareVISIO20\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.ClipboardCtl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.ClipboardCtl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.DragDownloadCtl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.DragDownloadCtl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.DragUploadCtl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.DragUploadCtl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.ExportDatabase\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OfflineClient\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OpenDocuments.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OpenDocuments.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OpenDocuments.3\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OpenDocuments.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OpenDocuments.5\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.OpenDocuments\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.SpreadsheetLauncher.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.SpreadsheetLauncher.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.SpreadsheetLauncher\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.StssyncHandler.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.StssyncHandler.3\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePoint.StssyncHandler\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SharePointWorkspace.Application.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Application.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Application\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Autoplay.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Autoplay\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.CDBurn\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Explorer.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Explorer.2\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.Explorer\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.FolderView.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.FolderView\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.HWEventHandlerShellExecute.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.HWEventHandlerShellExecute\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.UIHelper.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Shell.UIHelper\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShellNameSpace.ShellNameSpace.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShellNameSpace.ShellNameSpace\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.10\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.11\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.3\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.5\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.6\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.7\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.8\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash.9\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ShockwaveFlash.ShockwaveFlash\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SketchObj.SketchInk.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SketchObj.SketchInk\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Snapins.FolderSnapin.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Snapins.FolderSnapin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Snapins.HTMLSnapin.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Snapins.HTMLSnapin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Snapins.OCXSnapin.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\Snapins.OCXSnapin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SoftwareDistribution.VistaWebControl.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SoftwareDistribution.VistaWebControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SoundRec\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SpeechUX.ConfigUI.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SpeechUX.ConfigUI\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SpeechUX.SpeechUXHost.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\SpeechUX.SpeechUXHost\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\msstylesfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ndfapi.NDFAPI.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ndfapi.NDFAPI\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ndfapi.NetworkDiagnostics.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ndfapi.NetworkDiagnostics\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\netcenter.NCLUA.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\netcenter.NCLUA\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\new\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\objref\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ocxfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odc.cube\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odc.database\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odc.new\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odc.table\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odc.tablecollection\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odccubefile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odcdatabasefile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odcnewfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odctablecollectionfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odctablefile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odffile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\odtfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\omicaut.MathInputControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\oms\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\opensearchblocked\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\opensearchdescription\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\opensearchfilefolderresult\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\opensearchresult\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\oqyfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\osf.OsfAxControl\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\osf.RemoterProxy\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\osf.SandboxContext\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\osf.Sandbox\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\otffile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\otkloadr.WRAssembly\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\otkloadr.WRLoader\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\outlspam.SmartScreenFactoryOutlook\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\partition\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\pbkfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\pfmfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\piffile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\pjpegfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\pnffile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\pngfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\powerpointhtmlfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\powerpointhtmltemplate\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\powerpointmhtmlfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\powerpointxmlfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\prffile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\publisherhtmlfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\publishermhtmlfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtAlphaSetter.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtAlphaSetter\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtCompositor.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtCompositor\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtJpeg.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtJpegPP.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtJpegPP\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtJpeg\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtKey.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.DxtKey\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.GrfCache.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.GrfCache\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.MediaLocator.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.MediaLocator\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.RenderEngine.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.RenderEngine\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.SmartRenderEngine.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.SmartRenderEngine\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.Xml2Dex.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\qedit.Xml2Dex\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\queue\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\ratfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\regedit\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\regfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\rlefile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\rlogin\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\rqyfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\rtffile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\scrfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\script\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\scriptlet\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\scriptletfile\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\sdchange.sdchangeobj.1\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\sdchange.sdchangeobj\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\search-ms\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\search\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\service4\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\service\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\sip\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\sips\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\skypecast15\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\soap\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\solution_utils.dll.CSD\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\solution_utils.dll.CustomPropertySet\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\solution_utils.dll.CustomPropertySets\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\solution_utils.dll.CustomProperty\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\solution_utils.dll.PropertySetDefs\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Classes\stssync\Shell\Open\Command HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DefaultColor HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DisableUNCCheck HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell\1 HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell\1\PowerShellEngine HKEY_LOCAL_MACHINE\Software\Microsoft\PowerShell\1\PowerShellEngine\ApplicationBase HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\InstallationType HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSMODULEPATH HKEY_PERFORMANCE_DATA Domain IOCs: images2.imgbox.com images2.imgbox.com.sds.rncdn7.com IP IOCs: 66.254.122.104 66.254.122.100 66.254.122.102 URL IOCs: - None - File IOCs: Filenames: C:\ C:\Users\aETAdzjz C:\Users\aETAdzjz\Desktop C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Config\machine.config C:\Windows\System32\WindowsPowerShell\v1.0 C:\Windows\System32\WindowsPowerShell\v1.0\Certificate.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\Diagnostics.Format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\DotNetTypes.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\FileSystem.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\GetEvent.types.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\Help.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\PowerShellCore.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\PowerShellTrace.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\Registry.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\WSMan.format.ps1xml C:\Windows\System32\WindowsPowerShell\v1.0\powershell.config C:\Windows\System32\WindowsPowerShell\v1.0\types.ps1xml C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll cmd.exE MD5 hashes: SHA1 hashes: SHA256 hashes: SSDEEP hashes: