<#
	.SYNOPSIS
		trawler helps Incident Responders discover suspicious persistence mechanisms on Windows devices.
	
	.DESCRIPTION
		trawler inspects a wide variety of Windows artifacts to help discover signs of persistence including the registry, scheduled tasks, services, startup items, etc.
        For a full list of inspected artifacts and MITRE Techniques, please see github.com/joeavanzato/trawler

	.PARAMETER OutputLocation
		The fully-qualified file-path where detection output should be stored (defaults to $PSScriptRoot, the same location the script is executing from)

    .PARAMETER snapshot
		If specified, tells trawler to load the designated file as an allow-list (defaults to $PSScriptRoot, the same location the script is executing from)

    .PARAMETER quiet
		If specified, tells trawler to suppress detection output to console

    .PARAMETER evtx
		If specified, tells trawler to log detections as JSON blobs to the specified Event Log (defaults to Log=Application, Source=trawler)

    .PARAMETER daysago
		If specified, tells trawler how far back (in days) to consider for suppressing time-based detections (defaults to 45 days - for detections that involve time such as "recently created", this will serve as the threshold).

	.PARAMETER ScanOptions
		Set to pick specific scanners to run. Multiple can be used when separated by a comma. (Supports tab completion)

	.PARAMETER HashMode
		Tells trawler which hashing algorithm to use for detection metadata - SHA1, SHA256 or MD5

	.PARAMETER drivetarget
		Tells trawler to target a separate drive rather than the local system.

	.EXAMPLE
		.\trawler.ps1 -outpath "C:\detections.csv"

	.EXAMPLE
		.\trawler.ps1 -outpath "C:\detections.csv" -ScanOptions ScheduledTasks, BITS
	
	.OUTPUTS
		None
	
	.NOTES
		None
	
	.INPUTS
		None
	
	.LINK
		https://github.com/joeavanzato/Trawler
#>

[CmdletBinding()]
param
(
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'The directory where Trawler output will be saved, defaults to the location where the script ran from')]
	[string]
	$OutputLocation = $PSScriptRoot,
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'Which hashing algorithm to use. Defaults to SHA1')]
	[ValidateSet("SHA1", "SHA256", "MD5")]
	$HashMode = "SHA1",
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'Suppress Detection Output to Console')]
	[switch]
	$Quiet,
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'Enable EventLog output - trawler will write detections to the Application EventLog under Source=trawler with EventID=9001 - events will be written in JSON format.  Must be running as administrator to create the Event Log source initially.')]
	[switch]
	$evtx,
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'Do not append timestamp to specified output filename')]
	[switch]
	$notimestamp,
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'The fully-qualified file-path of the snapshot to use for comparison - this should be a JSON file from a previous trawler execution')]
	[string]
	$snapshot,
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'File name to override defaults - if specified, overrides -outputlocation and both a CSV and JSON are generated at the specified path')]
	[string]
	$filename = "detections",
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'If specified, overrides output name for CSV')]
	[string]
	$csvfilename = "",
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'If specified, overrides output name for JSON')]
	[string]
	$jsonfilename = "",
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'The drive to target for analysis - for example, if mounting an imaged system as a second drive on an analysis device, specify via -drivetarget "D:" (PARTIALLY IMPLEMENTED)')]
	[string]
	$drivetarget,
	[Parameter(
		Mandatory = $false,
		HelpMessage = 'How many days back to search when doing time-based detections')]
	[int]
	$daysago = 45,
	[Parameter(
		Mandatory = $false,
		HelpMessage = "Allows for performing certain checks and ignoring others. Leave blank to execute all Persistence checks (or use 'All')")]
	[ValidateSet(
		"ActiveSetup",
		"All",
		"AMSIProviders",
		"AppCertDLLs",
		"AppInitDLLs",
		"ApplicationShims",
		"AppPaths",
		"AssociationHijack",
		"AutoDialDLL",
		"BIDDll",
		"BITS",
        "BootVerificationProgram",
		"COMHijacks",
		"CommandAutoRunProcessors",
		"Connections",
		"ContextMenu",
        "ChromiumExtensions",
		"DebuggerHijacks",
		"DirectoryServicesRestoreMode",
        "DisableLowIL",
        "DiskCleanupHandlers",
		"DNSServerLevelPluginDLL",
		"eRegChecks",
		"ErrorHandlerCMD",
		"ExplorerHelperUtilities",
		"FolderOpen",
		"GPOExtensions",
		"GPOScripts",
		"HTMLHelpDLL",
		"IFEO",
        "InstalledSoftware",
		"InternetSettingsLUIDll",
		"KnownManagedDebuggers",
		"LNK",
		"LSA",
		"MicrosoftTelemetryCommands",
		"ModifiedWindowsAccessibilityFeature",
		"MSDTCDll",
		"Narrator",
		"NaturalLanguageDevelopmentDLLs",
		"NetSHDLLs",
		"NotepadPPPlugins",
		"OfficeAI",
		"OfficeGlobalDotName",
		"Officetest",
        "OfficeTrustedDocuments",
		"OfficeTrustedLocations",
		"OutlookStartup",
		"PATHHijacks",
		"PeerDistExtensionDll",
		"PolicyManager",
		"PowerShellProfiles",
		"PrintMonitorDLLs",
		"PrintProcessorDLLs",
		"Processes",
		"ProcessModules",
		"RATS",
		"RDPShadowConsent",
		"RDPStartupPrograms",
		"RegistryChecks",
		"RemoteUACSetting",
		"ScheduledTasks",
		"SCMDACL",
		"ScreenSaverEXE",
		"SEMgrWallet",
        "ServiceControlManagerSD",
		"ServiceHijacks",
		"Services",
		"SethcHijack",
		"SilentProcessExitMonitoring",
		"Startups",
		"SuspiciousCertificates",
		"SuspiciousFileLocation",
		"TerminalProfiles",
		"TerminalServicesDLL",
		"TerminalServicesInitialProgram",
		"TimeProviderDLLs",
		"TrustProviderDLL",
		"UninstallStrings",
		"UserInitMPRScripts",
		"Users",
		"UtilmanHijack",
		"WellKnownCOM",
		"WERRuntimeExceptionHandlers",
		"WindowsLoadKey",
		"WindowsUnsignedFiles",
		"WindowsUpdateTestDlls",
		"WinlogonHelperDLLs",
		"WMIConsumers",
		"Wow64LayerAbuse",
        "WSL"
	)]
	$ScanOptions = "All"
)

# Used for tracking snapshot effectiveness
$script:suppressed_detections = 0

# Used in detections when checking if a particular date is older/younger than the max-lookback date (threshold_date)
$threshold_date = (Get-Date).adddays(-$daysago)
# Event Log source used for creation/writing
$evtx_source = "trawler"
$evtx_logname = "Application"
# Control Flow Variables
$loadsnapshotdata = $PSBoundParameters.ContainsKey('snapshot')
$drivechange = $PSBoundParameters.ContainsKey('drivetarget')

# Variables used for augmenting detections throughout the script
$suspicious_process_paths = @(
	".*\\users\\(administrator|default|public|guest)\\.*",
	".*\\windows\\(debug|fonts|media|repair|servicing|temp)\\.*",
	".*\\programdata\\.*",
	".*recycle\.bin.*"
)
$suspicious_extensions = @('*.exe', '*.bat', '*.ps1', '*.hta', '*.vb', '*.vba', '*.vbs','*.rar', '*.zip', '*.gz', '*.7z', '*.dll', '*.scr', '*.cmd', '*.com', '*.ws', '*.wsf', '*.scf', '*.scr', '*.pif', '*.dmp','*.htm', '*.doc*','*.xls*','*.ppt*')
$suspicious_terms = ".*(\[System\.Reflection\.Assembly\]|regedit|invoke-iex|frombase64|tobase64|rundll32|http:|https:|system\.net\.webclient|downloadfile|downloadstring|bitstransfer|system\.net\.sockets|tcpclient|xmlhttp|AssemblyBuilderAccess|shellcode|rc4bytestream|disablerealtimemonitoring|wmiobject|wmimethod|remotewmi|wmic|gzipstream|::decompress|io\.compression|write-zip|encodedcommand|wscript\.shell|MSXML2\.XMLHTTP|System\.Reflection\.Emit\.AssemblyBuilderAccess|System\.Runtime\.InteropServices\.MarshalAsAttribute|memorystream|SuspendThread|EncodedCommand|MiniDump|lsass\.exe|Invoke-DllInjection|Invoke-Shellcode|Invoke-WmiCommand|Get-GPPPassword|Get-Keystrokes|Get-TimedScreenshot|Get-VaultCredential|Invoke-CredentialInjection|Invoke-Mimikatz|Invoke-NinjaCopy|Invoke-TokenManipulation|Out-Minidump|VolumeShadowCopyTools|Invoke-ReflectivePEInjection|Invoke-UserHunter|Invoke-ACLScanner|Invoke-DowngradeAccount|Get-ServiceUnquoted|Get-ServiceFilePermission|Get-ServicePermission|Invoke-ServiceAbuse|Install-ServiceBinary|Get-RegAutoLogon|Get-VulnAutoRun|Get-VulnSchTask|Get-UnattendedInstallFile|Get-ApplicationHost|Get-RegAlwaysInstallElevated|Get-Unconstrained|Add-RegBackdoor|Add-ScrnSaveBackdoor|Gupt-Backdoor|Invoke-ADSBackdoor|Enabled-DuplicateToken|Invoke-PsUaCme|Remove-Update|Check-VM|Get-LSASecret|Get-PassHashes|Show-TargetScreen|Port-Scan|Invoke-PoshRatHttp|Invoke-PowerShellTCP|Invoke-PowerShellWMI|Add-Exfiltration|Add-Persistence|Do-Exfiltration|Start-CaptureServer|Get-ChromeDump|Get-ClipboardContents|Get-FoxDump|Get-IndexedItem|Get-Screenshot|Invoke-Inveigh|Invoke-NetRipper|Invoke-EgressCheck|Invoke-PostExfil|Invoke-PSInject|Invoke-RunAs|MailRaider|New-HoneyHash|Set-MacAttribute|Invoke-DCSync|Invoke-PowerDump|Exploit-Jboss|Invoke-ThunderStruck|Invoke-VoiceTroll|Set-Wallpaper|Invoke-InveighRelay|Invoke-PsExec|Invoke-SSHCommand|Get-SecurityPackages|Install-SSP|Invoke-BackdoorLNK|PowerBreach|Get-SiteListPassword|Get-System|Invoke-BypassUAC|Invoke-Tater|Invoke-WScriptBypassUAC|PowerUp|PowerView|Get-RickAstley|Find-Fruit|HTTP-Login|Find-TrustedDocuments|Invoke-Paranoia|Invoke-WinEnum|Invoke-ARPScan|Invoke-PortScan|Invoke-ReverseDNSLookup|Invoke-SMBScanner|Invoke-Mimikittenz|Invoke-SessionGopher|Invoke-AllChecks|Start-Dnscat|Invoke-KrbRelayUp|Invoke-Rubeus|Invoke-Pandemonium|Invoke-Mongoose|Invoke-NETMongoose|Invoke-SecretsDump|Invoke-NTDS|Invoke-SharpRDP|Invoke-Kirby|Invoke-SessionHunter|Invoke-PrintNightmare|Invoke-Monkey365|Invoke-AzureHound|Kerberoast|Bloodhound|Sharphound|DisableRealtimeMonitoring|DisableBehaviorMonitoring|DisableScriptScanning|DisableBlockAtFirstSeen|ExclusionPath).*"
$ipv4_pattern = '.*((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?).*'
$ipv6_pattern = '.*:(?::[a-f\d]{1,4}){0,5}(?:(?::[a-f\d]{1,4}){1,2}|:(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})))|[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}:(?:[a-f\d]{1,4}|:)|(?::(?:[a-f\d]{1,4})?|(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))))|:(?:(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|[a-f\d]{1,4}(?::[a-f\d]{1,4})?|))|(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|:[a-f\d]{1,4}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){0,2})|:))|(?:(?::[a-f\d]{1,4}){0,2}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){1,2})|:))|(?:(?::[a-f\d]{1,4}){0,3}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){1,2})|:))|(?:(?::[a-f\d]{1,4}){0,4}(?::(?:(?:(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2})\.){3}(?:25[0-5]|2[0-4][0-9]|[0-1]?[0-9]{1,2}))|(?::[a-f\d]{1,4}){1,2})|:)).*'
$office_addin_extensions = ".wll",".xll",".ppam",".ppa",".dll",".vsto",".vba", ".xlam", ".com", ".xla"
$rat_terms = @(
    #Remote Access Tool Indicators
    # Any Process Name, Scheduled Task or Service containing these keywords will be flagged.
    "aeroadmin"
    "action1"
    "ammyadmin"
    "aa_v"
    "anydesk"
    "anyscreen"
    "anyviewer"
    "atera"
    "aweray_remote"
    "awrem32"
    "awhost32"
    "beyondtrust"
    "bomgar"
    "connectwise"
    "cservice"
    "dameware"
    "desktopnow"
    "distant-desktop"
    "dwservice"
    "dwagent"
    "dwagsvc"
    "dwrcs"
    "famitrfc"
    "g2comm"
    "g2host"
    "g2fileh"
    "g2mainh"
    "g2printh"
    "g2svc"
    "g2tray"
    "gopcsrv"
    "getscreen"
    "iperius"
    "kaseya"
    "litemanager"
    "logmein"
    "lmiignition"
    "lmiguardiansvc"
    "meshagent"
    "mstsc"
    "ninja1"
    "ninjaone"
    "PCMonitorManager"
    "pcmonitorsrv"
    "pulseway"
    "quickassist"
    "radmin"
    "rcclient"
    "realvnc"
    "remotepc"
    "remotetopc"
    "remote utilities"
    "RepairTech"
    "ROMServer"
    "ROMFUSClient"
    "rutserv"
    "screenconnect"
    "screenmeet"
    "showmypc"
    "smpcsetup"
    "strwinclt"
    "supremo"
    "sightcall"
    "splashtop"
    "surfly"
    "syncro"
    "tacticalrmm"
    "teamviewer"
    "tightvnc"
    "ultraviewer"
    "vnc"
    "winvnc"
    "vncviewer"
    "winvncsc"
    "winwvc"
    "xmreality"
    "ultravnc"
    "Zaservice"
    "Zohours"
    "ZohoMeeting"
    "zoho"
    "rpcgrab"
    "rpcsetup"
    "action1_agent"
    "aeroadmin"
    "alitask"
    "alpemix"
    "ammyy_admin"
    "anydesk"
    "apc_host"
    "ateraagent"
    "syncrosetup"
    "auvik.agent"
    "auvik.engine"
    "beamyourscreen"
    "beamyourscreen-host"
    "basupsrvc"
    "basupsrvcupdate"
    "basuptshelper"
    "bomgar-scc"
    "CagService"
    "ctiserv"
    "remote_host"
    "cloudflared"
    "connectwisechat-customer"
    "connectwisecontrol"
    "itsmagent"
    "rviewer"
    "crossloopservice"
    "pcivideo"
    "supporttool"
    "dntus"
    "dwrcs"
    "domotz_bash"
    "echoserver"
    "echoware"
    "ehorus standalone"
    "remoteconsole"
    "accessserver"
    "ericomconnnectconfigurationtool"
    "era"
    "ezhelp"
    "eratool"
    "ezhelpclient"
    "ezhelpclientmanager"
    "fastclient"
    "fastmaster"
    "fixmeitclient"
    "fleetdeck_agent_svc"
    "gp3"
    "gp4"
    "gp5"
    "getscreen"
    "g2a"
    "gotoassist"
    "gotohttp"
    "g2file"
    "g2quick"
    "g2svc"
    "g2tray"
    "goverrmc"
    "govsrv"
    "guacd"
    "helpbeam"
    "iit"
    "intouch"
    "hsloader"
    "ihcserver"
    "instanthousecall"
    "iadmin"
    "intelliadmin"
    "iperius"
    "iperiusremote"
    "ITSMAgent"
    "ItsmRsp"
    "ITSMService"
    "RDesktop"
    "RHost"
    "RmmService"
    "islalwaysonmonitor"
    "isllight"
    "isllightservice"
    "jumpclient"
    "jumpdesktop"
    "jumpservice"
    "agentmon"
    "ltsvc"
    "ltsvcmon"
    "lttray"
    "issuser"
    "landeskagentbootstrap"
    "ldinv32"
    "ldsensors"
    "laplink"
    "laplinkeverywhere"
    "llrcservice"
    "serverproxyservice"
    "laplink"
    "tsircusr"
    "romfusclient"
    "romserver"
    "romviewer"
    "lmiguardiansvc"
    "lmiignition"
    "logmein"
    "logmeinsystray"
    "support-logmeinrescue"
    "lmi_rescue"
    "mesh"
    "mikogo"
    "mikogolauncher"
    "mikogo-service"
    "mikogo-starter"
    "mionet"
    "mionetmanager"
    "myivomanager"
    "myivomgr"
    "nhostsvc"
    "nhstw32"
    "nldrw32"
    "rmserverconsolemediator"
    "client32"
    "pcictlui"
    "neturo"
    "ntrntservice"
    "netviewer"
    "ngrok"
    "ninjarmmagent"
    "nomachine"
    "nxd"
    "nateon"
    "nateon"
    "nateonmain"
    "ocsinventory"
    "ocsservice"
    "prl_deskctl_agent"
    "prl_deskctl_wizard"
    "prl_pm_service"
    "awhost32"
    "pcaquickconnect"
    "winaw32"
    "mwcliun"
    "pcnmgr"
    "webexpcnow"
    "pcvisit"
    "pcvisit_client"
    "pcvisit-easysupport"
    "pocketcontroller"
    "pocketcloudservice"
    "wysebrowser"
    "qq"
    "qqpcmgr"
    "konea"
    "quickassist"
    "radmin"
    "tdp2tcp"
    "rdp2tcp.py"
    "remobo"
    "remobo_client"
    "remobo_tracker"
    "rfusclient"
    "rutserv"
    "rutserv"
    "rutview"
    "rcengmgru"
    "rcmgrsvc"
    "remotesupportplayeru"
    "rxstartsupport"
    "remotepass-access"
    "rpaccess"
    "rpwhostscr"
    "remotepcservice"
    "rpcsuite"
    "remoteview"
    "rvagent"
    "rvagtray"
    "wisshell"
    "wmc"
    "wmc_deployer"
    "wmcsvc"
    "royalts"
    "rudesktop"
    "rustdesk"
    "screenconnect"
    "screenconnect.windowsclient"
    "seetrolcenter"
    "seetrolclient"
    "seetrolmyservice"
    "seetrolremote"
    "seetrolsetting"
    "showmypc"
    "simplehelpcustomer"
    "simpleservice"
    "windowslauncher"
    "remote access"
    "simplegatewayservice"
    "clientmrinit"
    "mgntsvc"
    "routernt"
    "sragent"
    "srmanager"
    "srserver"
    "srservice"
    "supremo"
    "supremohelper"
    "supremoservice"
    "supremosystem"
    "tacticalrmm"
    "teamviewer"
    "teamviewer_service"
    "teamviewerqs"
    "tv_w32"
    "tv_w64"
    "pstlaunch"
    "ptdskclient"
    "ptdskhost"
    "todesk"
    "pcstarter"
    "turbomeeting"
    "turbomeetingstarter"
    "ultraviewer"
    "ultraviewer_desktop"
    "ultraviewer_service"
    "vncserver"
    "vncserverui"
    "vncviewer"
    "winvnc"
    "webrdp"
    "weezo"
    "weezohttpd"
    "xeox-agent_x64"
    "za_connect"
    "zaservice"
    "zohotray"
)
# https://github.com/magicsword-io/LOLRMM/tree/main/yaml
$suspicious_software = @(
    ".*ithelp.*"
    ".*access.*"
    ".*absolute.*"
    ".*acronic.*"
    ".*remotix.*"
    ".*action1.*"
    ".*addigy.*"
    ".*adobe connect.*"
    ".*aeroadmin.*"
    ".*aliwangwang.*"
    ".*alpemix.*"
    ".*ammyy.*"
    ".*anydesk.*"
    ".*anyplace.*"
    ".*anyview.*"
    ".*apple remote.*"
    ".*atera.*"
    ".*auvik.*"
    ".*aweray.*"
    ".*barracuda.*"
    ".*basecamp.*"
    ".*beamyourscreen.*"
    ".*beanywhere.*"
    ".*beinsync.*"
    ".*beyondtrust.*"
    ".*bitvise.*"
    ".*bomgar.*"
    ".*carotdav.*"
    ".*centrastage.*"
    ".*datto.*"
    ".*centurion.*"
    ".*chicken.*"
    ".*chrome remote.*"
    ".*cloudflare tunnel.*"
    ".*cloudflared.*"
    ".*comodo.*"
    ".*connectwise.*"
    ".*crossloop.*"
    ".*crosstec.*"
    ".*cruzcontrol.*"
    ".*dameware.*"
    ".*deskday.*"
    ".*desknets.*"
    ".*deskshare.*"
    ".*desktopnow.*"
    ".*tunnels.*"
    ".*devolutions.*"
    ".*distant desktop.*"
    ".*domotz.*"
    ".*dragondisk.*"
    ".*duplicati.*"
    ".*dw service.*"
    ".*echoware.*"
    ".*ehorus.*"
    ".*kaseya.*"
    ".*emco remote.*"
    ".*encapto.*"
    ".*ericom.*"
    ".*accessnow.*"
    ".*remote.*"
    ".*extraputty.*"
    ".*ezhelp.*"
    ".*fastviewer.*"
    ".*fixme.*"
    ".*filezilla.*"
    ".*fleetdeck.*"
    ".*fortra.*"
    ".*free ping.*"
    ".*freenx.*"
    ".*freerdp.*"
    ".*gatherplace.*"
    ".*getscreen.*"
    ".*goto opener.*"
    ".*gotoassist.*"
    ".*gotohttp.*"
    ".*gotomypc.*"
    ".*guacamole.*"
    ".*goverlan.*"
    ".*helpbeam.*"
    ".*helpu.*"
    ".*intouch.*"
    ".*imperoconnect.*"
    ".*housecall.*"
    ".*insync.*"
    ".*intelliadmin.*"
    ".*iperius.*"
    ".*isl online.*"
    ".*isl light.*"
    ".*islonline.*"
    ".*itarian.*"
    ".*itsupport.*"
    ".*ivanti.*"
    ".*fastvnc.*"
    ".*jump cloud.*"
    ".*jump desktop.*"
    ".*kabuto.*"
    ".*khelpdesk.*"
    ".*kickidler.*"
    ".*kitty.*"
    ".*koofr.*"
    ".*labteach.*"
    ".*labtech.*"
    ".*landesk.*"
    ".*laplink.*"
    ".*level\.io.*"
    ".*level.*"
    ".*levelio.*"
    ".*lite manager.*"
    ".*litemanager.*"
    ".*logmein.*"
    ".*manage engine.*"
    ".*manageengine.*"
    ".*megasync.*"
    ".*meshcentral.*"
    ".*quick assist.*"
    ".*mikogo.*"
    ".*mionet.*"
    ".*mobaxterm.*"
    ".*mocha vnc.*"
    ".*mremote.*"
    ".*msp360.*"
    ".*multicloud.*"
    ".*mygreenpc.*"
    ".*myivo.*"
    ".*n-able.*"
    ".*nateon.*"
    ".*naverisk.*"
    ".*netop.*"
    ".*netreo.*"
    ".*netsupport.*"
    ".*neturo.*"
    ".*netviewer.*"
    ".*ngrok.*"
    ".*ninjaone.*"
    ".*ninjarmm.*"
    ".*nomachine.*"
    ".*nordlocker.*"
    ".*noteon.*"
    ".*ntr remote.*"
    ".*ocs inventory.*"
    ".*onionshare.*"
    ".*optitune.*"
    ".*pandora rc.*"
    ".*panorama9.*"
    ".*parallels.*"
    ".*pcanywhere.*"
    ".*pcnow.*"
    ".*pcvisit.*"
    ".*pdq connect.*"
    ".*pilixo.*"
    ".*pocket cloud.*"
    ".*pocket controller.*"
    ".*psexec.*"
    ".*pulseway.*"
    ".*putty.*"
    ".*remote assistance.*"
    ".*quest kace.*"
    ".*quickassist.*"
    ".*radmin.*"
    ".*rdp2tcp.*"
    ".*rdpview.*"
    ".*rdpwrap.*"
    ".*realvnc.*"
    ".*remcos.*"
    ".*remmina.*"
    ".*remobo.*"
    ".*remote\.it.*"
    ".*devolutions.*"
    ".*remote desktop.*"
    ".*remote manipulator.*"
    ".*remote utilities.*"
    ".*remotecall.*"
    ".*remotepc.*"
    ".*remotepass.*"
    ".*remoteview.*"
    ".*res automation.*"
    ".*rocketremote.*"
    ".*royal apps.*"
    ".*rport.*"
    ".*rudesktop.*"
    ".*runsmart.*"
    ".*rustdesk.*"
    ".*s3 browser.*"
    ".*screenconnect.*"
    ".*screenmeet.*"
    ".*securecrt.*"
    ".*seetrol.*"
    ".*senso cloud.*"
    ".*servereye.*"
    ".*showmypc.*"
    ".*simplehelp.*"
    ".*site24.*"
    ".*skyfex.*"
    ".*web vnc.*"
    ".*smartftp.*"
    ".*smartty.*"
    ".*sorillus.*"
    ".*splashtop.*"
    ".*spyanywhere.*"
    ".*sunlogin.*"
    ".*superops.*"
    ".*supremo.*"
    ".*syncro.*"
    ".*syncthing.*"
    ".*synergy.*"
    ".*sysaid.*"
    ".*syspectr.*"
    ".*tactical rmm.*"
    ".*tailscale.*"
    ".*teamviewer.*"
    ".*teledesktop.*"
    ".*tigervnc.*"
    ".*tightvnc.*"
    ".*todesk.*"
    ".*turbomeeting.*"
    ".*ultra vnc.*"
    ".*ultraviewer.*"
    ".*ultravnc.*"
    ".*webrdp.*"
    ".*weezo.*"
    ".*winscp.*"
    ".*x2go.*"
    ".*xeox.*"
    ".*xpra.*"
    ".*xrdp.*"
    ".*xshell.*"
    ".*yandex.*"
    ".*zabbix.*"
    ".*zerotier.*"
    ".*zoc.*"
    ".*zohoassist.*"
)

# Script level container for detections
$detection_list = New-Object -TypeName "System.Collections.ArrayList"
$detection_hash_array_snapshot = New-Object System.Collections.Generic.List[System.Object]
$new_psdrives_list = @{}

function Write-Message ($message){
    <#
    .SYNOPSIS
        Write-Host wrapper to standardize messages to the console
    #>
    # TODO - Message 'types' to alter the symbol as appropriate (detection, info, warning, error, etc)
    Write-Host "[+] $message"
}

function Test-OutputDirectoryPermissions(){
    <#
    .SYNOPSIS
        Validates output directory exists and that current user has appropriate permissions to write files
    #>
    # if the output path doesn't exist, create it.
    if ($csvfilename -ne "" -or $jsonfilename -ne ""){
        return $true
    }

    if (!(Test-Path $OutputLocation)) {
        try{
            New-Item $OutputLocation -Type Directory
            return $true
        } catch {
            return $false
        }
    } else {
        # Can we write to the specified dir?
        $testfile = Join-Path $OutputLocation "trawler_writetest.trawler"
        Try {
            [io.file]::OpenWrite($testfile).close()
            Remove-Item $testfile
            return $true
        }
        Catch {
            return $false
        }
    }
}

function New-TrawlerOutputItem() {
    <#
    .SYNOPSIS
        Helper function to create output items and report on failures.
    #>
	param (
		[string]
		$FileName,
        [string]
        $FileType,
        [bool]
        $skiptimestamp
	)
	$timestamp = [System.DateTimeOffset]::Now.ToUnixTimeSeconds()
    $filepath = [System.IO.Path]::Combine($OutputLocation, "$($FileName)_$($timestamp).$($FileType.ToLower())")
    if ($skiptimestamp) {
        $filepath = [System.IO.Path]::Combine($OutputLocation, "$($FileName).$($FileType.ToLower())")
    }

	$output = [PSCustomObject]@{
		Path = $filepath
		CanWrite = $false
	}
    #TODO - Review as this check should be unnecessary as we already validate write capabilities before this
	try {
        [System.IO.File]::OpenWrite($output.Path).Close()
        $output.CanWrite = $true
    }
    catch {
        Write-Warning "Unable to write to provided output path: $($output.Path)"
    }
	$output
}

function Check-ScheduledTasks {
    # Can possibly support drive-retargeting by parsing Task XML
    # Working on this with regex from Task Files
    # ^ Mostly working now
    # TODO - Add Argument Comparison Checks
    # TODO - Non-Standard Service/Task running as/created by Local Administrator
    Write-Message "Checking Scheduled Tasks"

    $task_base_path = "$env_homedrive\Windows\System32\Tasks"
    $tasks = New-Object -TypeName "System.Collections.ArrayList"
    $author_pattern = '<Author>(?<Author>.*?)<\/Author>'
    $runas_pattern = '<Principal id="(?<RunAs>.*?)">'
    $execute_pattern = '<Command>(?<Execute>.*?)<\/Command>'
    $argument_pattern = '<Arguments>(?<Arguments>.*?)<\/Arguments>'
    $userid_pattern = '<UserId>(?<UserId>.*?)</UserId>'
    $sid_lookup = @{
        'S-1-5-17' = 'IUSR'
        'S-1-5-18' = 'SYSTEM'
        'S-1-5-19' = 'LOCAL_SERVICE'
        'S-1-5-20' = 'NETWORK_SERVICE'
    }

    if (Test-Path -Path $task_base_path) {
        $items = Get-ChildItem -Path $task_base_path -Recurse -ErrorAction SilentlyContinue
        foreach ($item in $items) {
            $task_content = Get-Content $item.FullName -ErrorAction SilentlyContinue | Out-String
            if ($task_content -eq $null){
                continue
            }
            $task_content = [string]::join("",($task_content.Split("`n")))
            #Write-Host $task_content[0]
            #$task_match = $regex_pattern.Match($task_content)

            $author_match = [regex]::Matches($task_content, $author_pattern)
            $runas_match = [regex]::Matches($task_content, $runas_pattern)
            $execute_match = [regex]::Matches($task_content, $execute_pattern)
            $arguments_match = [regex]::Matches($task_content, $argument_pattern)
            $userid_match = [regex]::Matches($task_content, $userid_pattern)


            If ($author_match[0] -eq $null){
                $author = "N/A"
            } else {
                $author = $author_match[0].Groups["Author"].Value
            }
            If ($runas_match[0] -eq $null){
                $runas = "N/A"
            } else {
                $runas = $runas_match[0].Groups["RunAs"].Value
                if ($runas -eq "Author"){
                    $runas = $author
                }
            }
            If ($execute_match[0] -eq $null){
                $execute = "N/A"
            } else {
                $execute = $execute_match[0].Groups["Execute"].Value
            }
            If ($arguments_match[0] -eq $null){
                $arguments = "N/A"
            } else {
                $arguments = $arguments_match[0].Groups["Arguments"].Value
            }
            If ($userid_match[0] -eq $null){
                $userid = $author
            } else {
                $userid = $userid_match[0].Groups["UserId"].Value
                if ($userid -eq 'System'){
                    $userid = 'SYSTEM'
                } elseif ($userid -match 'S-.*'){
                    if ($sid_lookup.ContainsKey($userid)){
                        $userid = $sid_lookup[$userid]
                    }
                }
                if ($runas -eq 'N/A'){
                    $runas = $userid
                }
                if ($author -eq 'N/A'){
                    $author = $userid
                }
            }

            $task = [PSCustomObject]@{
                TaskName = $item.Name
                Execute = $execute
                Arguments = $arguments
                Author = $author
                RunAs = $runas
                UserId = $userid
            }
            if ($task.Execute -ne "N/A"){
                $tasks.Add($task) | Out-Null
            }
        }
    } else {
        Write-Message "Could not find Scheduled Task Path: $task_base_path"
        return
    }

    $default_task_exe_paths = @(
		"`"%ProgramFiles%\Windows Media Player\wmpnscfg.exe`"",
        "%windir%\system32\appidpolicyconverter.exe",
		"%SystemRoot%\System32\ClipRenew.exe",
		"%SystemRoot%\System32\ClipUp.exe",
		"%SystemRoot%\System32\drvinst.exe",
		"%SystemRoot%\System32\dsregcmd.exe",
		"%SystemRoot%\System32\dusmtask.exe",
		"%SystemRoot%\System32\fclip.exe",
		"%SystemRoot%\System32\MbaeParserTask.exe",
		"%systemroot%\System32\MusNotification.exe",
		"%systemroot%\System32\sihclient.exe",
		"%systemroot%\System32\usoclient.exe",
        "%SystemRoot%\system32\Wat\WatAdminSvc.exe",
		"%SystemRoot%\System32\WiFiTask.exe",
		"%SystemRoot%\System32\wsqmcons.exe",
		"%windir%\System32\AppHostRegistrationVerifier.exe",
		"%windir%\System32\appidcertstorecheck.exe",
		"%windir%\System32\appidcertstorecheck.exe".
		"%windir%\System32\appidpolicyconverter.exe",
		"%windir%\System32\bcdboot.exe",
		"%windir%\System32\cleanmgr.exe",
		"%windir%\System32\compattelrunner.exe",
		"%windir%\System32\defrag.exe",
		"%windir%\System32\devicecensus.exe",
		"%windir%\System32\DFDWiz.exe",
		"%windir%\System32\directxdatabaseupdater.exe",
		"%windir%\System32\disksnapshot.exe",
		"%windir%\System32\dmclient.exe",
		"%windir%\System32\dstokenclean.exe",
		"%windir%\System32\dxgiadaptercache.exe",
		"%windir%\System32\eduprintprov.exe",
		"%windir%\System32\gatherNetworkInfo.vbs",
		"%windir%\System32\LocationNotificationWindows.exe",
		"%windir%\System32\lpremove.exe",
        "%windir%\system32\MDMAgent.exe",
		"%windir%\System32\ProvTool.exe",
		"%windir%\System32\RAServer.exe",
		"%windir%\System32\rundll32.exe",
		"%windir%\System32\sc.exe",
        "%SystemRoot%\system32\schtasks.exe",
		"%windir%\System32\SDNDiagnosticsTask.exe",
		"%WINDIR%\System32\SecureBootEncodeUEFI.exe",
		"%windir%\System32\ServerManagerLauncher.exe",
		"%windir%\System32\SpaceAgent.exe",
		"%windir%\System32\spaceman.exe",
		"%windir%\System32\speech_onecore\common\SpeechModelDownload.exe",
		"%windir%\System32\speech_onecore\common\SpeechRuntime.exe",
		"%windir%\System32\srtasks.exe",
		"%windir%\System32\srvinitconfig.exe",
		"%windir%\System32\tzsync.exe",
		"%windir%\System32\UNP\UpdateNotificationMgr.exe",
		"%windir%\System32\wermgr.exe",
		"%WinDir%\System32\WinBioPlugIns\FaceFodUninstaller.exe",
		"%windir%\System32\WindowsActionDialog.exe",
		"%windir%\System32\wpcmon.exe",
		"%windir%\System32\XblGameSaveTask.exe",
		"BthUdTask.exe",
		"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe",
		"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe",
		"$env_assumedhomedrive\Program Files\Microsoft Office\root\Office16\sdxhelper.exe",
		"$env_assumedhomedrive\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe",
		"$env_assumedhomedrive\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe",
		"$env_assumedhomedrive\Program Files\NVIDIA Corporation\nview\nwiz.exe",
		"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\MpCmdRun.exe",
		'"C:\Windows\System32\MicTray64.exe"',
		"$env_assumedhomedrive\Windows\System32\sc.exe",
		"`"$env_assumedhomedrive\Windows\System32\SynaMonApp.exe`"",
        "%localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe",
        "$env:homedrive\WINDOWS\system32\msfeedssync.exe"
        "$env:homedrive\Program Files\Microsoft Security Client\MpCmdRun.exe"

    )

    $default_task_args = @(
		"config upnphost start= auto",
		'%systemroot%\System32\pla.dll,PlaHost "Server Manager Performance Monitor" "$(Arg0)"',
		'/B /nologo %systemroot%\System32\calluxxprovider.vbs $(Arg0) $(Arg1) $(Arg2)',
		'/NoUACCheck'
    )
    #$tasks = Get-ScheduledTask  | Select-Object -Property State,Actions,Author,Date,Description,Principal,SecurityDescriptor,Settings,TaskName,TaskPath,Triggers,URI, @{Name="RunAs";Expression={ $_.principal.userid }} -ExpandProperty Actions | Select-Object *

    foreach ($task in $tasks){

        # Detection - Non-Standard Tasks
        foreach ($i in $default_task_exe_paths){
            if ( $task.Execute -like $i) {
                $exe_match = $true
                break
            } elseif ($task.Execute.Length -gt 0) { 
                $exe_match = $false 
            }
        }

        ForEach ($term in $rat_terms) {
            if ($task.Execute -match ".*$term.*" -or $task.Arguments -match ".*$term.*") {
                # Service has a suspicious launch pattern matching a known RAT
                $detection = [PSCustomObject]@{
                    Name = 'Scheduled Task has known-RAT Keyword'
                    Risk = 'Medium'
                    Source = 'Scheduled Tasks'
                    Technique = "T1053: Scheduled Task/Job"
                    Meta = [PSCustomObject]@{
                        Location = $task.Execute
                        EntryName = $task.TaskName
                        Arguments = $task.Arguments
                        Author = $task.Author
                        RunAs = $task.RunAs
                        SuspiciousEntry = $term
                    }
                }
                Write-Detection $detection
            }
        }
        # Task Running as SYSTEM
        if ($task.RunAs -eq "SYSTEM" -and $exe_match -eq $false -and $task.Arguments -notin $default_task_args) {
            # Current Task Executable Path is non-standard
            $detection = [PSCustomObject]@{
                Name = 'Non-Standard Scheduled Task Running as SYSTEM'
                Risk = 'High'
                Source = 'Scheduled Tasks'
                Technique = "T1053: Scheduled Task/Job"
                Meta = [PSCustomObject]@{
                    Location = $task.Execute
                    EntryName = $task.TaskName
                    Arguments = $task.Arguments
                    Author = $task.Author
                    RunAs = $task.RunAs
                }
            }
            Write-Detection $detection
            continue
        }
        # Detection - Task contains an IP Address
        if ($task.Execute -match $ipv4_pattern -or $task.Execute -match $ipv6_pattern) {
            # Task Contains an IP Address
            $detection = [PSCustomObject]@{
                Name = 'Scheduled Task contains an IP Address'
                Risk = 'High'
                Source = 'Scheduled Tasks'
                Technique = "T1053: Scheduled Task/Job"
                Meta = [PSCustomObject]@{
                    Location = $task.Execute
                    EntryName = $task.TaskName
                    Arguments = $task.Arguments
                    Author = $task.Author
                    RunAs = $task.RunAs
                }
            }
            Write-Detection $detection
        }
        # TODO - Task contains domain-pattern

        # Task has suspicious terms
        $suspicious_keyword_regex = ".*(regsvr32.exe | downloadstring | mshta | frombase64 | tobase64 | EncodedCommand | DownloadFile | certutil | csc.exe | ieexec.exe | wmic.exe).*"
        if ($task.Execute -match $suspicious_keyword_regex -or $task.Arguments -match $suspicious_keyword_regex) {
            $detection = [PSCustomObject]@{
                Name = 'Scheduled Task contains suspicious keywords'
                Risk = 'High'
                Source = 'Scheduled Tasks'
                Technique = "T1053: Scheduled Task/Job"
                Meta = [PSCustomObject]@{
                    Location = $task.Execute
                    EntryName = $task.TaskName
                    Arguments = $task.Arguments
                    Author = $task.Author
                    RunAs = $task.RunAs
                }
            }
            Write-Detection $detection
        }
        # Detection - User Created Tasks
        if ($task.Author -ne $null) {
            if (($task.Author).Contains("\")) {
                if ((($task.Author.Split('\')).count-1) -eq 1) {
                    if ($task.RunAs -eq "SYSTEM") {
                        # Current Task Executable Path is non-standard
                        $detection = [PSCustomObject]@{
                            Name = 'User-Created Task running as SYSTEM'
                            Risk = 'High'
                            Source = 'Scheduled Tasks'
                            Technique = "T1053: Scheduled Task/Job"
                            Meta = [PSCustomObject]@{
                                Location = $task.Execute
                                EntryName = $task.TaskName
                                Arguments = $task.Arguments
                                Author = $task.Author
                                RunAs = $task.RunAs
                            }
                        }
                        Write-Detection $detection
                        continue
                    }
                    # Single '\' in author most likely indicates it is a user-made task
                    $detection = [PSCustomObject]@{
                        Name = 'User Created Task'
                        Risk = 'Low'
                        Source = 'Scheduled Tasks'
                        Technique = "T1053: Scheduled Task/Job"
                        Meta = [PSCustomObject]@{
                            Location = $task.Execute
                            EntryName = $task.TaskName
                            Arguments = $task.Arguments
                            Author = $task.Author
                            RunAs = $task.RunAs
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
        # Non-Standard EXE Path with Non-Default Argumentes
        if ($exe_match -eq $false -and $task.Arguments -notin $default_task_args) {
            # Current Task Executable Path is non-standard
            $detection = [PSCustomObject]@{
                Name = 'Non-Standard Scheduled Task Executable'
                Risk = 'Low'
                Source = 'Scheduled Tasks'
                Technique = "T1053: Scheduled Task/Job"
                Meta = [PSCustomObject]@{
                    Location = $task.Execute
                    EntryName = $task.TaskName
                    Arguments = $task.Arguments
                    Author = $task.Author
                    RunAs = $task.RunAs
                    UserId = $task.UserId
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-Users {
    # Can possibly support drive retargeting by reading SAM/SYSTEM Hives if intact
    # https://habr.com/en/articles/441410/
    if ($drivechange){
        Write-Message "Skipping User Analysis - No Drive Retargeting [yet]"
        return
    }

    Write-Message "Checking Local Administrators"

    # TODO - Catch error with outdated powershell versions that do not support Get-LocalGroupMember and use alternative gather mechanism
    # Find all local administrators and their last logon time as well as if they are enabled.
    $local_admins = Get-LocalGroupMember -Group "Administrators" | Select-Object *

    foreach ($admin in $local_admins){
        $admin_user = Get-LocalUser -SID $admin.SID | Select-Object AccountExpires,Description,Enabled,FullName,PasswordExpires,UserMayChangePassword,PasswordLastSet,LastLogon,Name,SID,PrincipalSource

        $detection = [PSCustomObject]@{
            Name = 'Local Administrator Account'
            Risk = 'Medium'
            Source = 'Users'
            Technique = "T1136: Create Account"
            Meta = [PSCustomObject]@{
                User = $admin.Name
                LastLogon = $admin_user.LastLogon
                Enabled = $admin_user.Enabled
            }
        }
        Write-Detection $detection
    }
    
}

function Check-Services {
    # Support Drive Retargeting
    # TODO - Non-Standard Service/Task running as/created by Local Administrator

    Write-Message "Checking Windows Services"
    $default_service_exe_paths = @(
		"`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /medsvc",
		"`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /svc",
		"`"$env_assumedhomedrive\Program Files (x86)\Microsoft\Edge\Application\*\elevation_service.exe`"",
		"`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /medsvc",
		"`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /svc",
		"`"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe`" /service",
		"`"$env_assumedhomedrive\Program Files\Google\Chrome\Application\*\elevation_service.exe`"",
		"`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\FileSyncHelper.exe`"",
		"`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\OneDriveUpdaterService.exe`"",
		"`"$env_assumedhomedrive\Program Files\Microsoft Update Health Tools\uhssvc.exe`"",
		"`"$env_assumedhomedrive\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe`" -s NVDisplay.ContainerLocalSystem -f `"$env_assumedhomedrive\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log`" -l 3 -d `"$env_assumedhomedrive\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem`" -r -p 30000 ",
		"`"$env_assumedhomedrive\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`"",
		"`"$env_assumedhomedrive\Program Files\Windows Media Player\wmpnetwk.exe`"",
		"`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\MsMpEng.exe`"",
		"`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\NisSrv.exe`"",
		"`"$env_assumedhomedrive\Windows\CxSvc\CxAudioSvc.exe`"",
		"`"$env_assumedhomedrive\Windows\CxSvc\CxUtilSvc.exe`"",
		"`"$env_assumedhomedrive\Windows\System32\wbengine.exe`"",
		"$env_assumedhomedrive\Windows\Microsoft.Net\*\*\WPF\PresentationFontCache.exe",
		"$env_assumedhomedrive\Windows\Microsoft.NET\Framework64\*\SMSvcHost.exe",
		"$env_assumedhomedrive\Windows\servicing\TrustedInstaller.exe",
		"$env_assumedhomedrive\Windows\System32\AgentService.exe",
		"$env_assumedhomedrive\Windows\System32\alg.exe",
		"$env_assumedhomedrive\Windows\System32\Alps\GlidePoint\HidMonitorSvc.exe",
		"$env_assumedhomedrive\Windows\System32\AppVClient.exe",
		"$env_assumedhomedrive\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe",
		"$env_assumedhomedrive\Windows\System32\CredentialEnrollmentManager.exe",
		"$env_assumedhomedrive\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_*\igfxCUIService.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_*\HotKeyServiceUWP.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_*\LanWlanWwanSwitchingServiceUWP.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_*\RstMwService.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_*\OneApp.IGCC.WinService.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_*\IntelCpHDCPSvc.exe",
		"$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_*\IntelCpHeciSvc.exe",
		"$env_assumedhomedrive\Windows\System32\fxssvc.exe",
		"$env_assumedhomedrive\Windows\System32\ibtsiva",
		"$env_assumedhomedrive\Windows\System32\locator.exe",
		"$env_assumedhomedrive\Windows\System32\lsass.exe",
		"$env_assumedhomedrive\Windows\System32\msdtc.exe",
		"$env_assumedhomedrive\Windows\System32\msiexec.exe /V",
		"$env_assumedhomedrive\Windows\System32\nvwmi64.exe",
		"$env_assumedhomedrive\Windows\System32\OpenSSH\ssh-agent.exe",
		"$env_assumedhomedrive\Windows\System32\PerceptionSimulation\PerceptionSimulationService.exe",
		"$env_assumedhomedrive\Windows\System32\RSoPProv.exe",
        "$env_assumedhomedrive\WINDOWS\RtkBtManServ.exe",
        "$env_assumedhomedrive\Windows\runSW.exe",
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k rpcss"
		"$env_assumedhomedrive\Windows\System32\SearchIndexer.exe /Embedding",
		"$env_assumedhomedrive\Windows\System32\SecurityHealthService.exe",
		"$env_assumedhomedrive\Windows\System32\SensorDataService.exe",
		"$env_assumedhomedrive\Windows\System32\SgrmBroker.exe",
		"$env_assumedhomedrive\Windows\System32\snmptrap.exe",
		"$env_assumedhomedrive\Windows\System32\spectrum.exe",
		"$env_assumedhomedrive\Windows\System32\spoolsv.exe",
		"$env_assumedhomedrive\Windows\System32\sppsvc.exe",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k AarSvcGroup -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k appmodel -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k appmodel",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k AppReadiness -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k AppReadiness",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k AssignedAccessManagerSvc",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k autoTimeSvc",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k AxInstSVGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k BcastDVRUserService",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k BthAppGroup -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k Camera",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k CameraMonitor",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k ClipboardSvcGroup -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k CloudIdServiceGroup -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k DcomLaunch -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k DcomLaunch",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k defragsvc",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k DevicesFlow -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k DevicesFlow",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k diagnostics",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k DialogBlockingService",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k ICService -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k imgsvc",
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k ICService",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k KpsSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k localService -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetworkFirewall -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted",
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LxssManagerUser -p"
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k McpManagementServiceGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k NetSvcs -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService",
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation"
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceNetworkRestricted -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceNetworkRestricted",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k PeerDist",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k print",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k PrintWorkflow",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k rdxgroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k rpcss -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k RPCSS -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k SDRSVC",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k smbsvcs",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k smphost",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k swprv",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k termsvcs",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k UdkSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k UnistackSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k utcsvc -p",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k utcsvc",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k WbioSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k WepHostSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k WerSvcGroup",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k wsappx -p",
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k wcssvc"
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k wsappx",
		"$env_assumedhomedrive\Windows\System32\svchost.exe -k wusvcs -p",
		"$env_assumedhomedrive\Windows\System32\TieringEngineService.exe",
		"$env_assumedhomedrive\Windows\System32\UI0Detect.exe",
		"$env_assumedhomedrive\Windows\System32\vds.exe",
		"$env_assumedhomedrive\Windows\System32\vssvc.exe",
		"$env_assumedhomedrive\Windows\System32\wbem\WmiApSrv.exe",
		"$env_assumedhomedrive\Windows\SysWow64\perfhost.exe",
		"$env_assumedhomedrive\Windows\SysWOW64\XtuService.exe"
        "$env_assumedhomedrive\WINDOWS\system32\dllhost.exe /Processid:*"
        "$env_assumedhomedrive\Windows\System32\drivers\1394ohci.sys"
        "System32\drivers\3ware.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k AarSvcGroup -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k AarSvcGroup -p"
        "System32\drivers\ACPI.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\AcpiDev.sys"
        "System32\Drivers\acpiex.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\acpipagr.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\acpipmi.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\acpitime.sys"
        "system32\drivers\Acx01000.sys"
        "System32\drivers\ADP80XX.SYS"
        "$env_assumedhomedrive\Windows\system32\drivers\afd.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\afunix.sys"
        "system32\DRIVERS\ahcache.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\alg.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\amdgpio2.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\amdi2c.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\amdk8.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\amdppm.sys"
        "System32\drivers\amdsata.sys"
        "System32\drivers\amdsbs.sys"
        "System32\drivers\amdxata.sys"
        "system32\drivers\appid.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\AppleKmdfFilter.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\AppleLowerFilter.sys"
        "system32\drivers\applockerfltr.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k AppReadiness -p"
        "$env_assumedhomedrive\Windows\system32\AppVClient.exe"
        "$env_assumedhomedrive\Windows\system32\drivers\AppvStrm.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\AppvVemgr.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\AppvVfs.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k wsappx -p"
        "System32\drivers\arcsas.sys"
        #"`"$env_assumedhomedrive\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe`""
        #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\AXSP\*\atkexComSvc.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k AssignedAccessManagerSvc"
        #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\Update\AsusUpdate.exe`" /svc"
        #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe`""
        #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\AsusFanControlService\*\AsusFanControlService.exe`""
        "\??\$env_assumedhomedrive\Windows\system32\drivers\AsIO2.sys"
        "\??\$env_assumedhomedrive\Windows\system32\drivers\AsIO3.sys"
        #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\Update\AsusUpdate.exe`" /medsvc"
        #"$env_assumedhomedrive\Windows\System32\AsusUpdateCheck.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\asyncmac.sys"
        "System32\drivers\atapi.sys"
        #"\??\D:\SteamLibrary\steamapps\common\Call of Duty HQ\randgrid.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k autoTimeSvc"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k AxInstSVGroup"
        "System32\drivers\bxvbda.sys"
        "system32\drivers\bam.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_*\BasicDisplay.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_*\BasicRender.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k BcastDVRUserService"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k BcastDVRUserService"
        "$env_assumedhomedrive\Windows\System32\drivers\bcmfn2.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        #"`"$env_assumedhomedrive\Program Files (x86)\Common Files\BattlEye\BEService.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p"
        "$env_assumedhomedrive\Windows\system32\drivers\bindflt.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k BthAppGroup -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k BthAppGroup -p"
        "system32\DRIVERS\bowser.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted"
        "$env_assumedhomedrive\Windows\System32\drivers\BthA2dp.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\drivers\BthEnum.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\bthhfenum.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\BTHMINI.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\bthmodem.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\bthpan.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\BTHport.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\drivers\BTHUSB.sys"
        "System32\drivers\bttflt.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\buttonconverter.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\CAD.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k appmodel -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k ClipboardSvcGroup -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k ClipboardSvcGroup -p"
        "system32\DRIVERS\cdfs.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\System32\drivers\cdrom.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs"
        "System32\drivers\cht4sx64.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\cht4vx64.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\circlass.sys"
        "system32\drivers\cldflt.sys"
        "System32\drivers\CLFS.sys"
        "`"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe`" /service"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k wsappx -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k CloudIdServiceGroup -p"
        "$env_assumedhomedrive\Windows\System32\drivers\CmBatt.sys"
        "System32\Drivers\cng.sys"
        "System32\DRIVERS\cnghwassist.sys"
        #"`"$env_assumedhomedrive\Program Files\Docker\Docker\com.docker.service`""
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_*\CompositeBus.sys"
        "$env_assumedhomedrive\Windows\system32\dllhost.exe /Processid:{*}"
        "System32\drivers\condrv.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p"
        #"$env_assumedhomedrive\Windows\System32\CorsairGamingAudioCfgService64.exe"
        #"\??\$env_assumedhomedrive\Windows\System32\drivers\CorsairGamingAudio64.sys"
        #"\??\$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys"
        #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe`""
        #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe`""
        #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\CueUniwillService.exe`""
        #"$env_assumedhomedrive\Windows\System32\drivers\CorsairVBusDriver.sys"
        #"$env_assumedhomedrive\Windows\System32\drivers\CorsairVHidDriver.sys"
        #"\??\$env_assumedhomedrive\Windows\temp\cpuz152\cpuz152_x64.sys"
        #"\??\$env_assumedhomedrive\Windows\temp\cpuz153\cpuz153_x64.sys"
        #"\??\$env_assumedhomedrive\Windows\temp\cpuz154\cpuz154_x64.sys"
        "$env_assumedhomedrive\Windows\system32\CredentialEnrollmentManager.exe"
        "$env_assumedhomedrive\Windows\system32\CredentialEnrollmentManager.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkService -p"
        "system32\drivers\csc.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "\??\$env_assumedhomedrive\Windows\system32\drivers\CtiAIo64.sys"
        "system32\drivers\dam.sys"
        #"`"$env_assumedhomedrive\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe`" /svc"
        #"`"$env_assumedhomedrive\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe`" /medsvc"
        "$env_assumedhomedrive\Windows\system32\DbxSvc.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\dc1-controller.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k defragsvc"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DevicesFlow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "System32\Drivers\dfsc.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k diagnostics"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k utcsvc -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DialogBlockingService"
        "System32\drivers\disk.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\dmvsc.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p"
        "$env_assumedhomedrive\Windows\System32\drivers\drmkaud.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\drivers\dxgkrnl.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\e2f68.inf_amd64_*\e2f68.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        #"`"$env_assumedhomedrive\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe`""
        #"`"$env_assumedhomedrive\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe`""
        "System32\drivers\evbda.sys"
        "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /svc"
        "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe`" /medsvc"
        "$env_assumedhomedrive\Windows\System32\lsass.exe"
        "System32\drivers\EhStorClass.sys"
        "System32\drivers\EhStorTcgDrv.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k appmodel -p"
        "$env_assumedhomedrive\Windows\System32\drivers\errdev.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\fxssvc.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\fdc.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "system32\drivers\filecrypt.sys"
        "System32\drivers\fileinfo.sys"
        "`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\FileSyncHelper.exe`""
        "system32\drivers\filetrace.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\flpydisk.sys"
        "system32\drivers\fltmgr.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\Microsoft.Net\Framework64\v*\WPF\PresentationFontCache.exe"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k Camera"
        "System32\drivers\FsDepends.sys"
        "System32\DRIVERS\fvevol.sys"
        "`"$env_assumedhomedrive\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe`" -service"
        #"`"$env_assumedhomedrive\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe`""
        "$env_assumedhomedrive\Windows\System32\drivers\vmgencounter.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_*\genericusbfn.sys"
        "`"$env_assumedhomedrive\Program Files\Google\Chrome\Application\*\elevation_service.exe`""
        #"system32\DRIVERS\googledrive*.sys"
        "System32\Drivers\msgpioclx.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "System32\drivers\gpuenergydrv.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup"
        #"`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /svc"
        #"`"$env_assumedhomedrive\Program Files (x86)\Google\Update\GoogleUpdate.exe`" /medsvc"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\hcmon.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\HdAudio.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\HDAudBus.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\HidBatt.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hidbth.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hidi2c.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hidinterrupt.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hidir.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\drivers\hidspi.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hidusb.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetSvcs -p"
        "System32\drivers\hnswfpdriver.sys"
        "System32\drivers\HpSAMD.sys"
        "system32\drivers\HTTP.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hvcrash.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "system32\drivers\hvservice.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\hvsocketcontrol.sys"
        "System32\Drivers\mshwnclx.sys"
        "System32\drivers\hwpolicy.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\hyperkbd.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\HyperVideo.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\i8042prt.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iagpio.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iai2c.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSSi_GPIO.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\iaLPSSi_I2C.sys"
        "System32\drivers\iaStorAVC.sys"
        "System32\drivers\iaStorV.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\ibbus.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_f75065d93521b024\ibtusb.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        #"`"$env_assumedhomedrive\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\IndirectKmd.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "System32\drivers\intelide.sys"
        "System32\drivers\intelpep.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\intelpmax.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\intelppm.sys"
        "system32\drivers\iorate.sys"
        "system32\DRIVERS\ipfltdrv.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetSvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\IPMIDrv.sys"
        "System32\drivers\ipnat.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\ipt.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "System32\drivers\isapnp.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\msiscsi.sys"
        "System32\drivers\ItSas35i.sys"
        #"`"$env_assumedhomedrive\Program Files\JetBrains\ETW Host\16\JetBrains.Etw.Collector.Host.exe`""
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\dal.inf_*\jhi_service.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\kbdclass.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\kbdhid.sys"
        "system32\drivers\kbldfltr.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\kdnic.sys"
        "$env_assumedhomedrive\Windows\system32\lsass.exe"
        "System32\Drivers\ksecdd.sys"
        "System32\Drivers\ksecpkg.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\ksthunk.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p"
        "System32\drivers\l2bridge.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "`"$env_assumedhomedrive\Program Files\LGHUB\lghub_updater.exe`" --run-as-service"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p"
        "`"$env_assumedhomedrive\Program Files (x86)\LightingService\LightingService.exe`""
        "system32\drivers\lltdio.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\drivers\logi_generic_hid_filter.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_bus_enum.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_hid_filter.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_hid_lo.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_vir_hid.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\logi_joy_xlcore.sys"
        "System32\drivers\lsi_sas.sys"
        "System32\drivers\lsi_sas2i.sys"
        "System32\drivers\lsi_sas3i.sys"
        "System32\drivers\lsi_sss.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "$env_assumedhomedrive\Windows\system32\drivers\luafv.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs"
        "system32\drivers\lxss.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LxssManagerUser -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LxssManagerUser -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\System32\drivers\mausbhost.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\mausbip.sys"
        "$env_assumedhomedrive\Windows\System32\Drivers\MbamChameleon.sys"
        "system32\DRIVERS\MbamElam.sys"
        "`"$env_assumedhomedrive\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe`""
        "$env_assumedhomedrive\Windows\System32\Drivers\mbamswissarmy.sys"
        "system32\drivers\MbbCx.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k McpManagementServiceGroup"
        "System32\drivers\megasas.sys"
        "System32\drivers\MegaSas2i.sys"
        "System32\drivers\megasas35i.sys"
        "System32\drivers\megasr.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_*\x64\TeeDriverW10x64.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "`"$env_assumedhomedrive\Program Files (x86)\Microsoft\Edge\Application\*\elevation_service.exe`""
        "$env_assumedhomedrive\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\drivers\mlx4_bus.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\mmcss.sys"
        "system32\drivers\modem.sys"
        #"`"$env_assumedhomedrive\Program Files\MongoDB\Server\*\bin\mongod.exe`" --config `"$env_assumedhomedrive\Program Files\MongoDB\Server\*\bin\mongod.cfg`" --service"
        "$env_assumedhomedrive\Windows\System32\drivers\monitor.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\mouclass.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\mouhid.sys"
        "System32\drivers\mountmgr.sys"
        "\??\$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Definition Updates\{*}\MpKslDrv.sys"
        "System32\drivers\mpsdrv.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p"
        "$env_assumedhomedrive\Windows\system32\drivers\mrxdav.sys"
        "system32\DRIVERS\mrxsmb.sys"
        "system32\DRIVERS\mrxsmb20.sys"
        "System32\drivers\bridge.sys"
        "$env_assumedhomedrive\Windows\System32\msdtc.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\msgpiowin32.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\mshidkmdf.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\mshidumdf.sys"
        "\??\$env_assumedhomedrive\Windows\system32\drivers\MsIo64.sys"
        "System32\drivers\msisadrv.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\msiexec.exe /V"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\MSKSSRV.sys"
        "system32\drivers\mslldp.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\MSPCLOCK.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\MSPQM.sys"
        "system32\drivers\msquic.sys"
        "system32\drivers\msseccore.sys"
        "system32\drivers\mssecflt.sys"
        "system32\drivers\mssecwfp.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\mssmbios.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\MSTEE.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\MTConfig.sys"
        "System32\Drivers\mup.sys"
        "System32\drivers\mvumis.sys"
        "system32\DRIVERS\nwifi.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetSvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p"
        "$env_assumedhomedrive\Windows\System32\drivers\ndfltr.sys"
        "system32\drivers\ndis.sys"
        "System32\drivers\ndiscap.sys"
        "System32\drivers\NdisImPlatform.sys"
        "System32\DRIVERS\ndistapi.sys"
        "system32\drivers\ndisuio.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\NdisVirtualBus.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\ndiswan.sys"
        "System32\DRIVERS\ndiswan.sys"
        "system32\drivers\NDKPing.sys"
        "System32\DRIVERS\NDProxy.sys"
        "system32\drivers\Ndu.sys"
        "system32\drivers\NetAdapterCx.sys"
        "system32\drivers\netbios.sys"
        "System32\DRIVERS\netbt.sys"
        "$env_assumedhomedrive\Windows\system32\lsass.exe"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\Microsoft.NET\Framework64\v*\SMSvcHost.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\netvsc.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\Netwtw10.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\Netwtw12.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\npcap.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\npsvctrig.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "system32\drivers\nsiproxy.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetSvcs"
        "`"$env_assumedhomedrive\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe`" -s NvContainerLocalSystem -f `"$env_assumedhomedrive\ProgramData\NVIDIA\NvContainerLocalSystem.log`" -l 3 -d `"$env_assumedhomedrive\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem`" -r -p 30000 -st `"$env_assumedhomedrive\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll`""
        "System32\drivers\nvdimm.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_*\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f $env_assumedhomedrive\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d $env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_*\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem"
        "$env_assumedhomedrive\Windows\system32\drivers\nvhda64v.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_*\nvlddmkm.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_*\NvModuleTracker.sys"
        "System32\drivers\nvraid.sys"
        "System32\drivers\nvstor.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\nvvad64v.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\nvvhci.sys"
        "`"$env_assumedhomedrive\Program Files\Microsoft OneDrive\*\OneDriveUpdaterService.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet"
        "System32\drivers\p9rdr.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\parport.sys"
        "System32\drivers\partmgr.sys"
        "system32\drivers\passthruparser.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "System32\drivers\pci.sys"
        "System32\drivers\pciide.sys"
        "System32\drivers\pcmcia.sys"
        "System32\drivers\pcw.sys"
        "system32\drivers\pdc.sys"
        "system32\drivers\peauth.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k PeerDist"
        "$env_assumedhomedrive\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe"
        "System32\drivers\percsas2i.sys"
        "System32\drivers\percsas3i.sys"
        "$env_assumedhomedrive\Windows\SysWow64\perfhost.exe"
        #"$env_assumedhomedrive`\Program Files (x86)\PgBouncer\bin\pgbouncer.exe --service `"$env_assumedhomedrive\Program Files (x86)\PgBouncer\share\pgbouncer.ini`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "system32\drivers\PktMon.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p"
        #"$env_assumedhomedrive\Program Files (x86)\GeoComply\//PlayerLocationCheck///Application/service.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "System32\drivers\pmem.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\pnpmem.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServicePeerNet"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\drivers\portcfg.sys"
        #"`"$env_assumedhomedrive\Program Files\PostgreSQL\14\bin\pg_ctl.exe`" runservice -N `"postgresql-x64-14`" -D `"$env_assumedhomedrive\Program Files\PostgreSQL\14\data`" -w"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "$env_assumedhomedrive\Windows\System32\drivers\raspptp.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k print"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k PrintWorkflow"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k PrintWorkflow"
        #"`"$env_assumedhomedrive\Program Files\Private Internet Access\pia-service.exe`""
        #"`"$env_assumedhomedrive\Program Files\Private Internet Access\pia-wgservice.exe`" `"$env_assumedhomedrive\Program Files\Private Internet Access\data\wgpia0.conf`""
        "$env_assumedhomedrive\Windows\System32\drivers\processr.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "System32\drivers\pacer.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "system32\drivers\pvhdparser.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p"
        "$env_assumedhomedrive\Windows\system32\drivers\qwavedrv.sys"
        "`"$env_assumedhomedrive\Program Files\erl-*\erts-*\bin\erlsrv.exe`""
        "system32\DRIVERS\ramdisk.sys"
        "System32\DRIVERS\rasacd.sys"
        #"$env_assumedhomedrive\Windows\System32\drivers\AgileVpn.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\rasl2tp.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs"
        "System32\DRIVERS\raspppoe.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\rassstp.sys"
        "system32\DRIVERS\rdbss.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\rdpbus.sys"
        "System32\drivers\rdpdr.sys"
        "System32\drivers\rdpvideominiport.sys"
        "System32\drivers\rdyboost.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k localService -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k rdxgroup"
        "$env_assumedhomedrive\Windows\System32\drivers\rfcomm.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\rhproxy.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted"
        #"`"$env_assumedhomedrive\Program Files\Rockstar Games\Launcher\RockstarService.exe`""
        #"`"$env_assumedhomedrive\Program Files\ASUS\ROG Live Service\ROGLiveService.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k RPCSS -p"
        "$env_assumedhomedrive\Windows\system32\locator.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k rpcss -p"
        "system32\drivers\rspndr.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vms3cap.sys"
        "$env_assumedhomedrive\Windows\system32\lsass.exe"
        "System32\drivers\sbp2port.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted"
        "System32\DRIVERS\scfilter.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "System32\drivers\scmbus.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs"
        "$env_assumedhomedrive\Windows\System32\drivers\sdbus.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\SDFRd.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k SDRSVC"
        "$env_assumedhomedrive\Windows\System32\drivers\sdstor.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\SecurityHealthService.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "`"$env_assumedhomedrive\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`""
        "$env_assumedhomedrive\Windows\System32\SensorDataService.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p"
        "system32\drivers\SerCx.sys"
        "system32\drivers\SerCx2.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\serenum.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\serial.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\sermouse.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\sfloppy.sys"
        "system32\drivers\SgrmAgent.sys"
        "$env_assumedhomedrive\Windows\system32\SgrmBroker.exe"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "System32\drivers\SiSRaid2.sys"
        "System32\drivers\sisraid4.sys"
        "System32\drivers\SmartSAMD.sys"
        "System32\DRIVERS\smbdirect.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k smphost"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\snmptrap.exe"
        "system32\drivers\spaceparser.sys"
        "System32\drivers\spaceport.sys"
        "System32\drivers\SpatialGraphFilter.sys"
        "system32\drivers\SpbCx.sys"
        "$env_assumedhomedrive\Windows\system32\spectrum.exe"
        "$env_assumedhomedrive\Windows\System32\spoolsv.exe"
        "$env_assumedhomedrive\Windows\system32\sppsvc.exe"
        "System32\DRIVERS\srv2.sys"
        "System32\DRIVERS\srvnet.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p"
        "$env_assumedhomedrive\Windows\System32\OpenSSH\ssh-agent.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k appmodel -p"
        "`"$env_assumedhomedrive\Program Files (x86)\Common Files\Steam\steamservice.exe`" /RunAsService"
        "System32\drivers\stexstor.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k imgsvc"
        "System32\drivers\storahci.sys"
        "System32\drivers\vmstorfl.sys"
        "System32\drivers\stornvme.sys"
        "system32\drivers\storqosflt.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "System32\drivers\storufs.sys"
        "System32\drivers\storvsc.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\storvsp.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_*\swenum.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k swprv"
        "$env_assumedhomedrive\Windows\System32\drivers\Synth3dVsc.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k DcomLaunch -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\drivers\tap-pia-*.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p"
        "System32\drivers\tcpip.sys"
        "System32\drivers\tcpip.sys"
        "System32\drivers\tcpipreg.sys"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\tdx.sys"
        #"`"$env_assumedhomedrive\Program Files\TeamViewer\TeamViewer_Service.exe`""
        "System32\drivers\IntelTA.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\terminpt.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService"
        "$env_assumedhomedrive\Program Files\A Subfolder\B Subfolder\C Subfolder\SomeExecutable.exe"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\TieringEngineService.exe"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\tpm.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\servicing\TrustedInstaller.exe"
        "system32\drivers\tsusbflt.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\TsUsbGD.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\tsusbhub.sys"
        "System32\drivers\tunnel.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\drivers\uaspstor.sys"
        "System32\Drivers\UcmCx.sys"
        "System32\Drivers\UcmTcpciCx.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\UcmUcsiAcpiClient.sys"
        "System32\Drivers\UcmUcsiCx.sys"
        "system32\drivers\ucx01000.sys"
        "system32\drivers\udecx.sys"
        "system32\DRIVERS\udfs.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UdkSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UdkSvcGroup"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\uefi.inf_amd64_*\UEFI.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\UevAgentDriver.sys"
        "$env_assumedhomedrive\Windows\system32\AgentService.exe"
        "system32\drivers\ufx01000.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_*\UfxChipidea.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\ufxsynopsys.sys"
        "`"$env_assumedhomedrive\Program Files\Microsoft Update Health Tools\uhssvc.exe`""
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_*\umbus.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\umpass.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_*\urschipidea.sys"
        "system32\drivers\urscx01000.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_*\urssynopsys.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\usbaudio.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbaudio2.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbccgp.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbcir.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbehci.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbhub.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\UsbHub3.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbohci.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbprint.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usb80236.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\usbser.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\USBSTOR.SYS"
        "$env_assumedhomedrive\Windows\System32\drivers\usbuhci.sys"
        "$env_assumedhomedrive\Windows\System32\Drivers\usbvideo.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\USBXHCI.SYS"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\lsass.exe"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxNetAdp6.sys"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxNetLwf.sys"
        "`"$env_assumedhomedrive\Program Files\Oracle\VirtualBox\VBoxSDS.exe`""
        "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxSup.sys"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\VBoxUSBMon.sys"
        "System32\drivers\vdrvroot.sys"
        "$env_assumedhomedrive\Windows\System32\vds.exe"
        "System32\drivers\VerifierExt.sys"
        "system32\drivers\vfpext.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vhdmp.sys"
        "system32\drivers\vhdparser.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vhf.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\Vid.sys"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_*\vrd.sys"
        #"`"$env_assumedhomedrive\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe`""
        "System32\drivers\vmbus.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\VMBusHID.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vmbusr.sys"
        "System32\drivers\vmci.sys"
        "$env_assumedhomedrive\Windows\system32\vmcompute.exe"
        "$env_assumedhomedrive\Windows\System32\drivers\vmgid.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k ICService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k ICService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\vmnetadapter.sys"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\vmnetbridge.sys"
        "$env_assumedhomedrive\Windows\SysWOW64\vmnetdhcp.exe"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\vmnetuserif.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vmswitch.sys"
        "system32\drivers\VmsProxyHNic.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\VmsProxyHNic.sys"
        "System32\drivers\vmswitch.sys"
        "system32\drivers\VmsProxy.sys"
        "System32\drivers\vmswitch.sys"
        "System32\drivers\vmswitch.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vmusb.sys"
       # "`"$env_assumedhomedrive\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe`""
        "$env_assumedhomedrive\Windows\SysWOW64\vmnat.exe"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\vmx86.sys"
        "$env_assumedhomedrive\Windows\system32\drivers\mvvad.sys"
        "System32\drivers\volmgr.sys"
        "System32\drivers\volmgrx.sys"
        "System32\drivers\volsnap.sys"
        "System32\drivers\volume.sys"
        "System32\drivers\vpci.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vpcivsp.sys"
        "System32\drivers\vsmraid.sys"
        "system32\DRIVERS\vsock.sys"
        "$env_assumedhomedrive\Windows\system32\vssvc.exe"
        "`"$env_assumedhomedrive\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe`""
        "SysWOW64\drivers\vstor2-x64.sys"
        "System32\drivers\vstxraid.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vwifibus.sys"
        "System32\drivers\vwififlt.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\vwifimp.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k wusvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\wacompen.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k appmodel -p"
        "System32\DRIVERS\wanarp.sys"
        "System32\DRIVERS\wanarp.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted"
        "`"$env_assumedhomedrive\Windows\system32\wbengine.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k WbioSvcGroup"
        "$env_assumedhomedrive\Windows\system32\drivers\wcifs.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation -p"
        "$env_assumedhomedrive\Windows\system32\drivers\wcnfs.sys"
        "system32\drivers\wd\WdBoot.sys"
        "system32\drivers\Wdf01000.sys"
        "system32\drivers\wd\WdFilter.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "system32\DRIVERS\wdiwifi.sys"
        "system32\drivers\WdmCompanionFilter.sys"
        "system32\drivers\wd\WdNisDrv.sys"
        "`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\NisSrv.exe`""
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k WepHostSvcGroup"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k WerSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "System32\drivers\wfplwfs.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "system32\drivers\wimmount.sys"
        "`"$env_assumedhomedrive\ProgramData\Microsoft\Windows Defender\Platform\*\MsMpEng.exe`""
        "system32\drivers\WindowsTrustedRT.sys"
        "System32\drivers\WindowsTrustedRTProxy.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\System32\drivers\winmad.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "system32\drivers\winnat.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k NetworkService -p"
        "$env_assumedhomedrive\Windows\System32\drivers\WinUSB.SYS"
        "$env_assumedhomedrive\Windows\System32\drivers\winverbs.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\wmiacpi.sys"
        "$env_assumedhomedrive\Windows\system32\wbem\WmiApSrv.exe"
        "$env_assumedhomedrive\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_*\WMIRegistrationService.exe"
        "`"$env_assumedhomedrive\Program Files\Windows Media Player\wmpnetwk.exe`""
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalService -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalService"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted"
        "System32\drivers\WpdUpFltr.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k UnistackSvcGroup"
        "$env_assumedhomedrive\Windows\system32\drivers\ws2ifsl.sys"
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\SearchIndexer.exe /Embedding"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "system32\drivers\WudfPf.sys"
        "$env_assumedhomedrive\Windows\System32\drivers\WUDFRd.sys"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\WUDFRd.sys"
        "$env_assumedhomedrive\Windows\system32\DRIVERS\WUDFRd.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\xboxgip.sys"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\system32\svchost.exe -k netsvcs -p"
        "$env_assumedhomedrive\Windows\System32\drivers\xinputhid.sys"
        "`"$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE`""
        "$env_assumedhomedrive\Windows\System32\svchost.exe -k secsvcs"
        "system32\DRIVERS\wfplwf.sys"
        "C:\Windows\system32\drivers\wd.sys"
        "C:\Windows\system32\Wat\WatAdminSvc.exe"
        "system32\DRIVERS\vwifibus.sys"
        "C:\Windows\system32\drivers\vsmraid.sys"
        "C:\Windows\system32\drivers\vmbus.sys"
        "C:\Windows\system32\drivers\viaide.sys"
        "system32\DRIVERS\vhdmp.sys"
        "System32\drivers\rdvgkmd.sys"
        "C:\Windows\System32\drivers\vga.sys"
        "system32\DRIVERS\vgapnp.sys"
        "system32\DRIVERS\usbuhci.sys"
        "system32\DRIVERS\USBSTOR.SYS"
        "system32\DRIVERS\usbhub.sys"
        "system32\DRIVERS\usbehci.sys"
        "system32\DRIVERS\umbus.sys"
        "C:\Windows\system32\drivers\uliagpkx.sys"
        "C:\Windows\system32\drivers\uagp35.sys"
        "system32\drivers\tsusbhub.sys"
        "System32\drivers\truecrypt.sys"
        "System32\DRIVERS\tssecsrv.sys"
        "system32\drivers\tpm.sys"
        "system32\DRIVERS\termdd.sys"
        "system32\DRIVERS\tdx.sys"
        "system32\drivers\tdtcp.sys"
        "system32\drivers\tdpipe.sys"
        "System32\drivers\synth3dvsc.sys"
        "system32\DRIVERS\swenum.sys"
        "C:\Windows\system32\drivers\storvsc.sys"
        "C:\Windows\system32\drivers\stexstor.sys"
        "System32\DRIVERS\srv.sys"
        "system32\DRIVERS\smb.sys"
        "C:\Windows\system32\drivers\sisraid4.sys"
        "C:\Windows\system32\drivers\SiSRaid2.sys"
        "C:\Windows\system32\drivers\sffp_sd.sys"
        "C:\Windows\system32\drivers\sffp_mmc.sys"
        "C:\Windows\system32\drivers\sbp2port.sys"
        "C:\Windows\system32\svchost.exe -k regsvc"
        "system32\drivers\rdprefmp.sys"
        "system32\drivers\rdpencdd.sys"
        "System32\DRIVERS\RDPCDD.sys"
        "system32\DRIVERS\rdpbus.sys"
        "system32\DRIVERS\rassstp.sys"
        "system32\DRIVERS\rasl2tp.sys"
        "C:\Windows\system32\drivers\ql40xx.sys"
        "C:\Windows\system32\drivers\ql2300.sys"
        "system32\DRIVERS\raspptp.sys"
        "C:\Windows\system32\drivers\pciide.sys"
        "C:\Windows\system32\drivers\ohci1394.sys"
        "C:\Windows\system32\drivers\nv_agp.sys"
        "C:\Windows\system32\drivers\nvstor.sys"
        "C:\Windows\system32\drivers\nvraid.sys"
        "`"c:\Program Files\Microsoft Security Client\NisSrv.exe`""
        "`"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe`" -NetMsmqActivator"
        "system32\drivers\MSTEE.sys"
        "system32\DRIVERS\mssmbios.sys"
        "system32\drivers\MSPQM.sys"
        "system32\drivers\MSPCLOCK.sys"
        "`"c:\Program Files\Microsoft Security Client\MsMpEng.exe`""
        "system32\drivers\MSKSSRV.sys"
        "C:\Windows\system32\drivers\msdsm.sys"
        "system32\drivers\msahci.sys"
        "system32\DRIVERS\mrxsmb10.sys"
        "C:\Windows\system32\drivers\mpio.sys"
        "system32\DRIVERS\MpFilter.sys"
        "system32\DRIVERS\mouclass.sys"
        "system32\DRIVERS\monitor.sys"
        "system32\DRIVERS\WUDFRd.sys"
        "C:\Windows\system32\drivers\sffdisk.sys"
        "system32\DRIVERS\NisDrvWFP.sys"
        "C:\Windows\system32\drivers\nfrd960.sys"
        "C:\Windows\system32\drivers\lsi_*.sys"
        "system32\DRIVERS\kbdclass.sys"
        "C:\Windows\system32\drivers\isapnp.sys"
        "system32\drivers\irenum.sys"
        "system32\DRIVERS\intelppm.sys"
        "C:\Windows\system32\drivers\iirsp.sys"
        "`"C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe`""
        "C:\Windows\system32\drivers\iaStorV.sys"
        "system32\DRIVERS\i8042prt.sys"
        "C:\Windows\system32\drivers\HpSAMD.sys"
        "system32\DRIVERS\HDAudBus.sys"
        "system32\drivers\HdAudio.sys"
        "C:\Windows\system32\drivers\hcw85cir.sys"
        "C:\Windows\system32\drivers\gagp30kx.sys"
        "C:\Windows\system32\drivers\elxstor.sys"
        "C:\Windows\ehome\ehsched.exe"
        "C:\Windows\ehome\ehRecvr.exe"
        "C:\Windows\system32\drivers\evbda.sys"
        "system32\DRIVERS\e1e6032e.sys"
        "System32\drivers\discache.sys"
        "C:\Windows\system32\drivers\crcdisk.sys"
        "system32\DRIVERS\CompositeBus.sys"
        "system32\DRIVERS\compbatt.sys"
        "C:\Windows\system32\drivers\cmdide.sys"
        "system32\DRIVERS\CmBatt.sys"
        "C:\Windows\Microsoft.NET\Framework64\v*\mscorsvw.exe"
        "System32\CLFS.sys"
        "system32\DRIVERS\cdrom.sys"
        "C:\Windows\system32\svchost.exe -k bthsvcs"
        "C:\Windows\System32\Drivers\BrUsbSer.sys"
        "C:\Windows\System32\Drivers\BrUsbMdm.sys"
        "C:\Windows\System32\Drivers\BrUsbWdm.sys"
        "C:\Windows\System32\Drivers\Brserid.sys"
        "C:\Windows\System32\Drivers\BrFiltUp.sys"
        "C:\Windows\System32\Drivers\BrFiltLo.sys"
        "system32\DRIVERS\blbdrive.sys"
        "system32\DRIVERS\b57nd60a.sys"
        "C:\Windows\system32\drivers\bxvbda.sys"
        "system32\DRIVERS\athrx.sys"
        "system32\DRIVERS\asyncmac.sys"
        "C:\Windows\Microsoft.NET\Framework64\v*\aspnet_state.exe"
        "C:\Windows\system32\drivers\arcsas.sys"
        "C:\Windows\system32\drivers\arc.sys"
        "C:\Windows\system32\drivers\appid.sys"
        "C:\Windows\system32\IEEtwCollector.exe*"
        "C:\Windows\Microsoft.NET\Framework\v*\mscorsvw.exe"
        "C:\Windows\System32\Drivers\BrSerWdm.sys"
        "C:\Windows\system32\drivers\amdsbs.sys"
        "C:\Windows\system32\drivers\amdsata.sys"
        "C:\Windows\system32\drivers\amdide.sys"
        "C:\Windows\system32\drivers\aliide.sys"
        "C:\Windows\system32\drivers\agp440.sys"
        "C:\Windows\system32\drivers\adpu320.sys"
        "C:\Windows\system32\drivers\adpahci.sys"
        "C:\Windows\system32\drivers\adp94xx.sys"
    )

    #$services = Get-CimInstance -ClassName Win32_Service  | Select-Object Name, PathName, StartMode, Caption, DisplayName, InstallDate, ProcessId, State
    $service_path = "$regtarget_hklm`SYSTEM\$currentcontrolset\Services"
    $service_list = New-Object -TypeName "System.Collections.ArrayList"
    if (Test-Path -Path "Registry::$service_path") {
        $items = Get-ChildItem -Path "Registry::$service_path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSProvider
            if ($data.ImagePath -ne $null){
                $service = [PSCustomObject]@{
                    Name = $data.PSChildName
                    PathName = $data.ImagePath
                }
                $service.PathName = $service.PathName.Replace("\SystemRoot", "$env_assumedhomedrive\Windows")
                $service_list.Add($service) | Out-Null
            }
        }
    }
    foreach ($service in $service_list){
        foreach ($term in $rat_terms) {
            if ($service.PathName -match ".*$term.*") {
                # Service has a suspicious launch pattern matching a known RAT
                $detection = [PSCustomObject]@{
                    Name = 'Service Argument has known-RAT Keyword'
                    Risk = 'Medium'
                    Source = 'Services'
                    Technique = "T1543.003: Create or Modify System Process: Windows Service"
                    Meta = [PSCustomObject]@{
                        Location = $service.PathName
                        EntryName = $service.Name
                        SuspiciousEntry = $term
                        Hash = Get-File-Hash $service.PathName
                    }
                }
                Write-Detection $detection
            }
        }
        if ($service.PathName -match "$env_assumedhomedrive\\Windows\\Temp\\.*") {
            # Service launching from Windows\Temp
            $detection = [PSCustomObject]@{
                Name = 'Service Launching from Windows Temp Directory'
                Risk = 'High'
                Source = 'Services'
                Technique = "T1543.003: Create or Modify System Process: Windows Service"
                Meta = [PSCustomObject]@{
                    Location = $service.PathName
                    EntryName = $service.Name
                    Hash = Get-File-Hash $service.PathName
                }
            }
            Write-Detection $detection
        }
        # Detection - Non-Standard Tasks
        foreach ($i in $default_service_exe_paths){
            if ( $service.PathName -like $i) {
                $exe_match = $true
                break
            } elseif ($service.PathName.Length -gt 0) {
                $exe_match = $false
            }
        }
        if ($exe_match -eq $false) {
            # Current Task Executable Path is non-standard
            $detection = [PSCustomObject]@{
                Name = 'Non-Standard Service Path'
                Risk = 'Low'
                Source = 'Services'
                Technique = "T1543.003: Create or Modify System Process: Windows Service"
                Meta = [PSCustomObject]@{
                    Location = $service.PathName
                    EntryName = $service.Name
                    Hash = Get-File-Hash $service.PathName
                }
            }
            Write-Detection $detection
        }
        if ($service.PathName -match ".*cmd.exe /(k|c).*") {
            # Service has a suspicious launch pattern
            $detection = [PSCustomObject]@{
                Name = 'Service launching from cmd.exe'
                Risk = 'Medium'
                Source = 'Services'
                Technique = "T1543.003: Create or Modify System Process: Windows Service"
                Meta = [PSCustomObject]@{
                    Location = $service.PathName
                    EntryName = $service.Name
                    Hash = Get-File-Hash $service.PathName
                }
            }
            Write-Detection $detection
        }
        if ($service.PathName -match ".*powershell.exe.*") {
            # Service has a suspicious launch pattern
            $detection = [PSCustomObject]@{
                Name = 'Service launching from powershell.exe'
                Risk = 'Medium'
                Source = 'Services'
                Technique = "T1543.003: Create or Modify System Process: Windows Service"
                Meta = [PSCustomObject]@{
                    Location = $service.PathName
                    EntryName = $service.Name
                    Hash = Get-File-Hash $service.PathName
                }
            }
            Write-Detection $detection
        }

        if ($service.PathName -match $suspicious_terms) {
            # Service has a suspicious launch pattern
            $detection = [PSCustomObject]@{
                Name = 'Service launching with suspicious keywords'
                Risk = 'High'
                Source = 'Services'
                Technique = "T1543.003: Create or Modify System Process: Windows Service"
                Meta = [PSCustomObject]@{
                    Location = $service.PathName
                    EntryName = $service.Name
                    Hash = Get-File-Hash $service.PathName
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-Processes {
    # Does not support drive retargeting
    # TODO - Check for processes spawned from netsh.dll
    if ($drivechange){
        Write-Message "Skipping Process Analysis - No Drive Retargeting"
        return
    }

    Write-Message "Checking Running Processes"
    $processes = Get-CimInstance -ClassName Win32_Process | Select-Object ProcessName,CreationDate,CommandLine,ExecutablePath,ParentProcessId,ProcessId
    foreach ($process in $processes){
        ForEach ($term in $rat_terms) {
            if ($process.CommandLine -match ".*$term.*") {
                $detection = [PSCustomObject]@{
                    Name = 'Running Process has known-RAT Keyword'
                    Risk = 'Medium'
                    Source = 'Processes'
                    Technique = "T1059: Command and Scripting Interpreter"
                    Meta = [PSCustomObject]@{
                        Location = $process.ExecutablePath
                        ProcessName = $process.ProcessName
                        CommandLine = $process.CommandLine
                        PID = $process.ProcessId
                        SuspiciousEntry = $term
                        Created = $process.CreationDate
                        Hash = Get-File-Hash $process.ExecutablePath
                    }
                }
                Write-Detection $detection
            }
        }
        if ($process.CommandLine -match $ipv4_pattern -or $process.CommandLine -match $ipv6_pattern) {
            $detection = [PSCustomObject]@{
                Name = 'IP Address Pattern detected in Process CommandLine'
                Risk = 'Medium'
                Source = 'Processes'
                Technique = "T1059: Command and Scripting Interpreter"
                Meta = [PSCustomObject]@{
                    Location = $process.ExecutablePath
                    ProcessName = $process.ProcessName
                    CommandLine = $process.CommandLine
                    PID = $process.ProcessId
                    Created = $process.CreationDate
                    Hash = Get-File-Hash $process.ExecutablePath
                }
            }
            Write-Detection $detection
        }
        foreach ($path in $suspicious_process_paths) {
            if ($process.ExecutablePath -match $path){
                $detection = [PSCustomObject]@{
                    Name = 'Suspicious Executable Path on Running Process'
                    Risk = 'High'
                    Source = 'Processes'
                    Technique = "T1059: Command and Scripting Interpreter"
                    Meta = [PSCustomObject]@{
                        Location = $process.ExecutablePath
                        ProcessName = $process.ProcessName
                        CommandLine = $process.CommandLine
                        PID = $process.ProcessId
                        Created = $process.CreationDate
                        Hash = Get-File-Hash $process.ExecutablePath
                    }
                }
                Write-Detection $detection
            }
        }

    }
}

function Check-Connections {
    # Does not support drive-retargeting
    if ($drivechange){
        Write-Message "Skipping Network Connections - No Drive Retargeting"
        return
    }
    Write-Message "Checking Network Connections"
    $tcp_connections = Get-NetTCPConnection | Select-Object State,LocalAddress,LocalPort,OwningProcess,RemoteAddress,RemotePort
    $suspicious_ports = @(20,21,22,23,25,137,139,445,3389,443)
    $allow_listed_process_names = @(
		"brave",
		"chrome",
		"Discord",
		"firefox",
		"GitHubDesktop",
		"iexplorer",
		"msedge",
		"officeclicktorun"
		"OneDrive",
		"safari",
		"SearchApp",
		"Spotify",
		"steam"		
    )
    foreach ($conn in $tcp_connections) {
        #allowlist_remote_addresses

        $proc = Get-Process -Id $conn.OwningProcess -ErrorAction SilentlyContinue | Select-Object Name, Path

        if ($conn.State -eq 'Listen' -and $conn.LocalPort -gt 1024){
            $detection = [PSCustomObject]@{
                Name = 'Process Listening on Ephemeral Port'
                Risk = 'Very Low'
                Source = 'Network Connections'
                Technique = "T1071: Application Layer Protocol"
                Meta = [PSCustomObject]@{
                    Location = $proc.Path
                    ProcessName = $proc.Name
                    PID = $conn.OwningProcess
                    LocalPort = $conn.LocalPort
                }
            }
            Write-Detection $detection
        }
        if ($conn.State -eq 'Established' -and ($conn.LocalPort -in $suspicious_ports -or $conn.RemotePort -in $suspicious_ports) -and $proc.Name -notin $allow_listed_process_names){
            $detection = [PSCustomObject]@{
                Name = 'Established Connection on Suspicious Port'
                Risk = 'Low'
                Source = 'Network Connections'
                Technique = "T1071: Application Layer Protocol"
                Meta = [PSCustomObject]@{
                    Location = $proc.Path
                    ProcessName = $proc.Name
                    PID = $conn.OwningProcess
                    LocalPort = $conn.LocalPort
                    LocalAddress = $conn.LocalAddress
                    RemotePort = $conn.RemotePort
                    RemoteAddress = $conn.RemoteAddress
                }
            }
            Write-Detection $detection
        }
        if ($proc.Path -ne $null){
            foreach ($path in $suspicious_process_paths){
                if (($proc.Path).ToLower() -match $path){
                    $detection = [PSCustomObject]@{
                        Name = 'Process running from suspicious path has Network Connection'
                        Risk = 'High'
                        Source = 'Network Connections'
                        Technique = "T1071: Application Layer Protocol"
                        Meta = [PSCustomObject]@{
                            Location = $proc.Path
                            ProcessName = $proc.Name
                            PID = $conn.OwningProcess
                            LocalPort = $conn.LocalPort
                            LocalAddress = $conn.LocalAddress
                            RemotePort = $conn.RemotePort
                            RemoteAddress = $conn.RemoteAddress
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-WMIConsumers {
    # Drive Retargeting..maybe
    # https://netsecninja.github.io/dfir-notes/wmi-forensics/
    # https://github.com/davidpany/WMI_Forensics
    # https://github.com/mandiant/flare-wmi/blob/master/WMIParser/WMIParser/ActiveScriptConsumer.cpp
    # This would require building a binary parser in PowerShell..difficult.
    if ($drivechange){
        Write-Message "Skipping WMI Analysis - No Drive Retargeting [yet]"
        return
    }
    Write-Message "Checking WMI Consumers"
    $consumers = Get-WMIObject -Namespace root\Subscription -Class __EventConsumer | Select-Object *

    foreach ($consumer in $consumers) {
        if ($consumer.ScriptingEngine -ne $null) {
            $detection = [PSCustomObject]@{
                Name = 'WMI ActiveScript Consumer'
                Risk = 'High'
                Source = 'WMI'
                Technique = "T1546.003: Event Triggered Execution: Windows Management Instrumentation Event Subscription"
                Meta = [PSCustomObject]@{
                    Location = $consumer.ScriptFileName
                    EntryName = $consumer.Name
                    EntryValue = $consumer.ScriptText
                    Hash = Get-File-Hash $consumer.ScriptFileName
                }
            }
            Write-Detection $detection
        }
        if ($consumer.CommandLineTemplate -ne $null) {
            $detection = [PSCustomObject]@{
                Name = 'WMI CommandLine Consumer'
                Risk = 'High'
                Source = 'WMI'
                Technique = "T1546.003: Event Triggered Execution: Windows Management Instrumentation Event Subscription"
                Meta = [PSCustomObject]@{
                    Location = $consumer.ExecutablePath
                    EntryName = $consumer.Name
                    EntryValue = $consumer.CommandLineTemplate
                    Hash = Get-File-Hash $consumer.ExecutablePath
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-Startups {
    # Supports Drive Retargeting
    Write-Message "Checking Startup Items"
    $paths = @(
        "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
        "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
        "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunEx"
        "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx"
        "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices"
        "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
        "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
        "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunEx"
        "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx"
        "REPLACE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices"
    )
    if ($nevermind) {
        foreach ($tmpbase in $paths){
            if ($tmpbase -match "REPLACE.*"){
                foreach ($p in $regtarget_hkcu_list){
                    $newpath = $tmpbase.Replace("REPLACE", $p)
                    $paths += $newpath
                }
            }
        }
        $startups = @()
    } else {
        $startups = Get-CimInstance -ClassName Win32_StartupCommand | Select-Object Command,Location,Name,User
        #$statups = @()

    }
    # Redoing this to only read reg-keys instead of using win32_StartupCommand
    foreach ($tmpbase in $paths){
        if ($tmpbase -match "REPLACE.*"){
            foreach ($p in $regtarget_hkcu_list){
                $newpath = $tmpbase.Replace("REPLACE", $p)
                $paths += $newpath
            }
        }
    }
    $startups = @()

    foreach ($item in $startups) {
        $detection = [PSCustomObject]@{
            Name = 'Startup Item Review'
            Risk = 'Low'
            Source = 'Startup'
            Technique = "T1037.005: Boot or Logon Initialization Scripts: Startup Items"
            Meta = [PSCustomObject]@{
                Location = $item.Location
                EntryName = $item.Name
                EntryValue = $item.Command
                User = $item.User
                Hash = Get-File-Hash $item.Location
            }
        }
        Write-Detection $detection
    }

    foreach ($path_ in $paths){
        #Write-Host $path
        $path = "Registry::$path_"
        if (Test-Path -Path $path) {
            $item = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $item.PSObject.Properties | ForEach-Object {
                if ($_.Name -ne "(Default)"){
                    $detection = [PSCustomObject]@{
                        Name = 'Startup Item Review'
                        Risk = 'Low'
                        Source = 'Startup'
                        Technique = "T1037.005: Boot or Logon Initialization Scripts: Startup Items"
                        Meta = [PSCustomObject]@{
                            Location = $path_
                            EntryName = $_.Name
                            EntryValue = $_.Value
                            Hash = Get-File-Hash $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }

    $startup_dir = "$env_assumedhomedrive\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"
    $startup_items = Get-ChildItem -Path $startup_dir -Recurse
    foreach ($file in $startup_items){
        $detection = [PSCustomObject]@{
            Name = 'Startup Item Review'
            Risk = 'Low'
            Source = 'Startup'
            Technique = "T1037.005: Boot or Logon Initialization Scripts: Startup Items"
            Meta = [PSCustomObject]@{
                Location = $file.FullName
                Created = $file.CreationTime
                Modified = $file.LastWriteTime
                Hash = Get-File-Hash $file.FullName
            }
        }
        Write-Detection $detection
    }
}

function Check-BITS {
    # Maybe with Drive Retargeting
    # C:\ProgramData\Microsoft\Network\Downloader
    # https://www.giac.org/paper/gcih/28198/bits-forensics/130713#:~:text=These%20files%20are%20named%20%E2%80%9Cqmgr0,Microsoft%5CNetwork%5CDownloader%E2%80%9D.
    if ($drivechange){
        Write-Message "Skipping BITS Analysis - No Drive Retargeting [yet]"
        return
    }
    Write-Message "Checking BITS Jobs"
    $bits = Get-BitsTransfer -AllUsers | Select-Object *
    foreach ($item in $bits) {
        if ($item.NotifyCmdLine -ne $null){
            $cmd = [string]$item.NotifyCmdLine
        } else {
            $cmd = ''
        }
        $detection = [PSCustomObject]@{
            Name = 'BITS Item Review'
            Risk = 'Low'
            Source = 'BITS'
            Technique = "T1197: BITS Jobs"
            Meta = [PSCustomObject]@{
                EntryName = $item.DisplayName
                TransferType = $item.TransferType
                JobState = $item.JobState
                User = $item.OwnerAccount
                EntryValue = $cmd
            }
        }
        Write-Detection $detection
    }
}

function Check-Modified-Windows-Accessibility-Feature {
    # Supports Drive Retargeting
    Write-Message "Checking Accessibility Binaries"
    $files_to_check = @(
		"$env_homedrive\Program Files\Common Files\microsoft shared\ink\HID.dll"
		"$env_homedrive\Windows\System32\AtBroker.exe",
		"$env_homedrive\Windows\System32\DisplaySwitch.exe",
		"$env_homedrive\Windows\System32\Magnify.exe",
		"$env_homedrive\Windows\System32\Narrator.exe",
		"$env_homedrive\Windows\System32\osk.exe",
		"$env_homedrive\Windows\System32\sethc.exe",
		"$env_homedrive\Windows\System32\utilman.exe"
    )
    foreach ($file in $files_to_check){ 
        $fdata = Get-Item $file -ErrorAction SilentlyContinue | Select-Object CreationTime,LastWriteTime
        if ($fdata.CreationTime -ne $null) {
            if ($fdata.CreationTime.ToString() -ne $fdata.LastWriteTime.ToString()){
                $detection = [PSCustomObject]@{
                    Name = 'Potential modification of Windows Accessibility Feature'
                    Risk = 'High'
                    Source = 'Windows'
                    Technique = "T1546.008: Event Triggered Execution: Accessibility Features"
                    Meta = [PSCustomObject]@{
                        Location = $file
                        Created = $fdata.CreationTime
                        Modified = $fdata.LastWriteTime
                        Hash = Get-File-Hash $file
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-PowerShell-Profiles {
    # PowerShell profiles may be abused by adversaries for persistence.
    # Supports Drive Retargeting
    # TODO - Add check for 'suspicious' content

    # $PSHOME\Profile.ps1
    # $PSHOME\Microsoft.PowerShell_profile.ps1
    # $HOME\Documents\PowerShell\Profile.ps1
    # $HOME\Documents\PowerShell\Microsoft.PowerShell_profile.ps1
    Write-Message "Checking PowerShell Profiles"
    if ($drivechange){
        # TODO - Investigate whether these paths can be retrieved from the HKLM HIVE dynamically
        $alluserallhost = "$env_homedrive\Windows\System32\WindowsPowerShell\v1.0\profile.ps1"
        $allusercurrenthost =  "$env_homedrive\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShellISE_profile.ps1"
    } else {
        $PROFILE | Select-Object AllUsersAllHosts,AllUsersCurrentHost,CurrentUserAllHosts,CurrentUserCurrentHost | Out-Null
        $alluserallhost = $PROFILE.AllUsersAllHosts
        $allusercurrenthost = $PROFILE.AllUsersCurrentHost
    }

    if (Test-Path $alluserallhost){
        $detection = [PSCustomObject]@{
            Name = 'Review: Global Custom PowerShell Profile'
            Risk = 'Medium'
            Source = 'PowerShell'
            Technique = "T1546.013: Event Triggered Execution: PowerShell Profile"
            Meta = [PSCustomObject]@{
                Location = $alluserallhost
                EntryValue = $PROFILE.AllUsersAllHosts
            }
        }
        Write-Detection $detection
    }
    if (Test-Path $allusercurrenthost){
        $detection = [PSCustomObject]@{
            Name = 'Review: Global Custom PowerShell Profile'
            Risk = 'Medium'
            Source = 'PowerShell'
            Technique = "T1546.013: Event Triggered Execution: PowerShell Profile"
            Meta = [PSCustomObject]@{
                Location = $allusercurrenthost
                EntryValue = $PROFILE.AllUsersCurrentHost
            }
        }
        Write-Detection $detection
    }

    $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object Name
    foreach ($name in $profile_names){
        $path1 = "$env_homedrive\Users\$name\Documents\WindowsPowerShell\profile.ps1"
        $path2 = "$env_homedrive\Users\$name\Documents\WindowsPowerShell\Microsoft.PowerShellISE_profile.ps1"
        $path3 = "$env_homedrive\Users\$name\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1"
        if (Test-Path $path1){
            $detection = [PSCustomObject]@{
                Name = 'Review: Custom PowerShell Profile'
                Risk = 'Medium'
                Source = 'PowerShell'
                Technique = "T1546.013: Event Triggered Execution: PowerShell Profile"
                Meta = [PSCustomObject]@{
                    Location = $path1
                }
            }
            Write-Detection $detection
        }
        if (Test-Path $path2){
            $detection = [PSCustomObject]@{
                Name = 'Review: Custom PowerShell Profile'
                Risk = 'Medium'
                Source = 'PowerShell'
                Technique = "T1546.013: Event Triggered Execution: PowerShell Profile"
                Meta = [PSCustomObject]@{
                    Location = $path2
                }
            }
            Write-Detection $detection
        }
        if (Test-Path $path3){
            $detection = [PSCustomObject]@{
                Name = 'Review: Custom PowerShell Profile'
                Risk = 'Medium'
                Source = 'PowerShell'
                Technique = "T1546.013: Event Triggered Execution: PowerShell Profile"
                Meta = [PSCustomObject]@{
                    Location = $path3
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-Outlook-Startup {
    # Supports Drive Retargeting
    Write-Message "Checking Outlook Macros"
    # allowlist_officeaddins
    $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object *
    foreach ($user in $profile_names){
        $path = "$env_homedrive\Users\"+$user.Name+"\AppData\Roaming\Microsoft\Word\STARTUP"
        $items = Get-ChildItem -Path $path -File -ErrorAction SilentlyContinue | Select-Object * | Where-Object {$_.extension -in $office_addin_extensions}
        # Removing this as we are performing this functionality else-where for Office Trusted Location Scanning.
        #foreach ($item in $items){
		#	Write-SnapshotMessage -Key $item.FullName -Value $item.FullName -Source 'Office'

			# If the allowlist contains the curren task name
        #    if ($loadsnapshot -and ($allowlist_outlookstartup.Contains($item.FullName))){
        #        continue
        #    }

        #    $detection = [PSCustomObject]@{
        #        Name = 'Potential Persistence via Office Startup Addin'
        #        Risk = 'Medium'
        #        Source = 'Office'
        #        Technique = "T1137.006: Office Application Startup: Add-ins"
        #        Meta = "File: "+$item.FullName+", Last Write Time: "+$item.LastWriteTime
        #    }
            #Write-Detection $detection - Removing this as it is a duplicate of the new Office Scanning Functionality which will cover the same checks
        #}
        $path = "$env_homedrive\Users\"+$user.Name+"\AppData\Roaming\Microsoft\Outlook\VbaProject.OTM"
        if (Test-Path $path) {

            $i = Get-Item -Path $path -ErrorAction SilentlyContinue
            $detection = [PSCustomObject]@{
                Name = 'Potential Persistence via Outlook Application Startup'
                Risk = 'Medium'
                Source = 'Office'
                Technique = "T1137.006: Office Application Startup: Add-ins"
                Meta = [PSCustomObject]@{
                    Location = $path
                    Created = $i.CreationTime
                    Modified = $i.LastWriteTime
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-Registry-Checks {
    # DEPRECATED FUNCTION
    #TODO - Inspect File Command Extensions to hunt for anomalies
    # https://attack.mitre.org/techniques/T1546/001/

    # COM Object Hijack Scan
    # NULL this out for now since it should be covered in following COM functionality - this function is deprecated
    if (Test-Path -Path "Registry::HKCU\SOFTWARE\Classes\CLSIDNULL") {
        $items = Get-ChildItem -Path "Registry::HKCU\SOFTWARE\Classes\CLSID" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $children = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($child in $children){
                $path = "Registry::"+$child.Name
                $data = Get-Item -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                if ($data.Name -match '.*InprocServer32'){
                    $datum = Get-ItemProperty $path
                    $datum.PSObject.Properties | ForEach-Object {
                        if ($_.Name -eq '(default)'){
                            $detection = [PSCustomObject]@{
                                Name = 'Potential COM Hijack'
                                Risk = 'High'
                                Source = 'Registry'
                                Technique = "T1546.012: Event Triggered Execution: Image File Execution Options Injection"
                                Meta = [PSCustomObject]@{
                                    Location = $data.Name
                                    EntryName = $_.Name
                                    EntryValue = $_.Value
                                }
                            }
                            #Write-Detection $detection
                            # This is now handled by Check-COM-Hijacks along with HKLM and HKCR checks (which should be identical)
                        }
                    }
                }
            }
        }
    }


}

function Check-COM-Hijacks {
    # Supports Drive Retargeting
    Write-Message "Checking COM Classes"
    # TODO - Consider NOT alerting when we don't have a 'known-good' entry for the CLSID in question
    # TODO - Some regex appears to be non-functional, especially on HKU inspection - need to figure out why/troubleshoot
    # TODO - Inspect TreatAs options
    # Malware will typically target 'well-known' keys that are present in default versions of Windows - that should be enough for most situations and help to reduce noise.
    $homedrive = $env_assumedhomedrive
	$default_hkcr_com_lookups = @{
	"HKEY_CLASSES_ROOT\CLSID\{0000002F-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000300-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000301-A8F2-4877-BA0A-FD2B6645FB94}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000303-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000304-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000305-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000306-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000308-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000309-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0000030B-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll|coml2\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000315-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000316-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000319-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0000031A-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0000031D-0000-0000-C000-000000000046}\InProcServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000320-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000327-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0000032E-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00000355-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\System32\\combase\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000507-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0000050B-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000514-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000535-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000541-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000542-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000560-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000566-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msado15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000602-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000609-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000615-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000618-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0000061B-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0000061E-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00000621-0000-0010-8000-00AA006D2EA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020000-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020001-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020003-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0002000D-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0002000F-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\avifil32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00021400-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0002E005-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0002E006-0000-0000-C000-000000000046}\InprocServer32" = "(combase\.dll|ole32\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{000C103E-0000-0000-C000-000000000046}\InProcServer32" = "$homedrive\\Windows\\System32\\msi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{000C1090-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\msi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{000C1094-0000-0000-C000-000000000046}\InprocServer32" = "$homedrive\\Windows\\System32\\msi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{000D0E00-0000-0000-C000-000000001157}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VVIEWDWG\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{0010668C-0801-4DA6-A4A4-826522B6D28F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00108226-EE41-44A2-9E9C-4BE4D5B1D2CD}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0010890e-8789-413c-adbc-48f5b511b3af}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{001DC1E0-0F8C-4720-98DB-39D32A661422}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{002EB8C6-3D34-4848-9A6D-58E388D55908}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{003e0278-eca8-4bb8-a256-3689ca1c2600}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{006E61DF-1A43-4F2C-B26F-780BAEA3A92D}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0070746C-9A38-4236-822A-72CC4E5C8087}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00722F5F-CB8F-44D3-AC27-CC37F76CFE92}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{008E91AA-A905-4206-A0FE-D4177E1C7BB1}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0095b496-f121-4256-96a0-09179828cc16}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{009F3B45-8A6B-4360-B997-B2A009A16402}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00A77FF7-A514-493e-B721-CDF8CB0F5B59}\InProcServer32" = "$homedrive\\Windows\\system32\\systemcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00B01B2E-B1FE-33A6-AD40-57DE8358DC7D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00B8308C-09F2-4c18-A7B0-4594D6B22EFE}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00BB2764-6A77-11D0-A535-00C04FD7D062}\InProcServer32" = "(shell32\.dll|$homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00C429C0-0BA9-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00C4E345-813F-4401-9A9F-29F7A576FA11}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00CA399E-4CC0-43D2-902B-CEA3D36DC9E4}\InProcServer32" = "$homedrive\\Windows\\System32\\remoteaudioendpoint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00E80F18-EC5B-4FCF-A417-7348991A8D32}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvsvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00eebf57-477d-4084-9921-7ab3c2c9459d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{00f20eb5-8fd6-4d9d-b75e-36801766c8f1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00f210a1-62f0-438b-9f7e-9618d72a1831}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00f24ca0-748f-4e8a-894f-0e0357c6799f}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00f26e02-e9f2-4a9f-9fdd-5a962fb26a98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00f29a34-b8a1-482c-bcf8-3ac7b0fe8f62}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00F2CE1E-935E-4248-892C-130F32C45CB4}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoAcq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0102563D-F16D-434d-82A2-37968BD3E31E}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{010911E2-F61C-479B-B08C-43E6D1299EFE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{011B3619-FE63-4814-8A84-15A194CE9CE3}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{011BE22D-E453-11D1-945A-00C04FB984F9}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0131BE10-2001-4C5F-A9B0-CC88FAB64CE8}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01367108-5EE2-4E1C-A8DE-24438065ABC9}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01458CF0-A1A2-11D1-8F85-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0149EEDF-D08F-4142-8D73-D23903D21E90}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01575CFE-9A55-4003-A5E1-F38D1EBDCBE1}\InprocServer32" = "$homedrive\\Windows\\system32\\MsCtfMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01504157-8839-4BF6-9B5B-51165A967B2B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{016fd94e-b02a-4ab8-94c6-149fdab56b8d}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01776DF3-B9AF-4E50-9B1C-56E93116D704}\InprocServer32" = "$homedrive\\Windows\\system32\\EditionUpgradeHelper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{017F10E3-89E4-49F0-B545-618DE31FD27C}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0180E49C-13BF-46DB-9AFD-9F52292E1C22}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01822ABA-23F0-4506-9BBC-680F5D6D606C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{018BA427-F311-44FD-8AA1-ABEEB57739D9}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{018f2d58-f16d-448a-bd87-225c8c5d5c94}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{019f7150-e6db-11d0-83c3-00c04fddb82e}\InprocServer32" = "$homedrive\\Windows\\System32\\(IME\\IMEJP\\imjpapi\.dll|imjp10k\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{01A30791-40AE-4653-AB2E-FD210019AE88}\InprocServer32" = "$homedrive\\Windows\\system32\\mgmtrefreshcredprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01A3BF5C-CC93-4C12-A4C3-09B0BBE7F63F}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01afc156-f2eb-4c1c-a722-8550417d396f}\InProcServer32" = "$homedrive\\Windows\\System32\\actioncenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01B90D9A-8209-47F7-9C52-E1244BF50CED}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01BE4CFB-129A-452B-A209-F9D40B3B84A5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01C20F2B-3DD2-400F-949F-AD00BDAB1D41}\InprocServer32" = "$homedrive\\Windows\\System32\\ia2comproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01C6CA30-792B-404B-A5C2-0A34434B3AA4}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01D0A625-782D-4777-8D4E-547E6457FAD5}\InprocServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01E04581-4EEE-11d0-BFE9-00AA005B4383}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01F36CE2-0907-4d8b-979D-F151BE91C883}\InprocServer32" = "$homedrive\\Windows\\System32\\mfvdsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01F3E95C-7D8F-46e6-A408-9BA5D1FA5067}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01FA60A0-BBFF-11D0-8825-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01fe4a1f-cc5c-44ab-a1e6-cfbd9249146d}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01FF4E4B-8AD0-3171-8C82-5C2F48B87E3D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{021003e9-aac0-4975-979f-14b5d4e717f8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{021812bc-ae59-4f3c-9e04-72adc0ac9da5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{022BA4BE-26C9-495B-8829-1CDD5946720C}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceElementSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{023A36FC-E9D5-419E-824A-CDC66A116E84}\InprocServer32" = "$homedrive\\Windows\\System32\\AuthFWGP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0245858B-948D-4f36-A574-1A71EF5111CB}\InProcServer32" = "$homedrive\\Windows\\System32\\fvecpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02665D88-6A3E-4DFC-BEFF-8CA2118A5061}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{026CC6D7-34B2-33D5-B551-CA31EB6CE345}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0273c57c-6693-4444-b20c-a62a3b185b7e}\InprocServer32" = "$homedrive\\Windows\\System32\\DDOIProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02783ae2-02a6-4403-a482-e08bf20ffd06}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{027C265F-E9C7-4506-8C19-3B91B203AE1D}\InProcServer32" = "$homedrive\\Windows\\System32\\ContactApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{027D3767-28E0-4FFA-98D0-DF67D0CBBE47}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0280284d-ab12-4cb7-9b51-7579e6c3796b}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02805F1E-D5AA-415B-82C5-61C033A988A6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02844640-E37C-4322-A3B8-4C61A2E58879}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02A3586C-D264-40BF-97F7-FE40F7E3A882}\InprocServer32" = "$homedrive\\Windows\\System32\\vdsdyn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02AF6DD2-77E6-44DF-B3E1-57CF1476D8EA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{02BCC737-B171-4746-94C9-0D8A0B2C0089}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\IEAWSDC\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{02C09DB6-F3E3-4C27-970D-17107BF4518E}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02C35120-4924-46EB-BC2B-5FB0DB060948}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imedicapiccps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02C68609-99E3-4A8F-9575-4973D401C06F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdevtools\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02df6db6-9405-4812-b3f6-500e8615b7af}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02E6EC4C-96E4-42E8-B533-336916A0087D}\InProcServer32" = "$homedrive\\Windows\\system32\\lsmproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02E7E69E-E80A-48E3-8B1D-6448C25B1710}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{02ECA72E-27DA-40E1-BDB1-4423CE649AD9}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03012959-F4F6-44D7-9D09-DAA087A9DB57}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03022430-ABC4-11D0-BDE2-00AA001A1953}\InProcServer32" = "$homedrive\\Windows\\System32\\oleacc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0316BBC2-92D9-4E2E-8345-3609C6B5C167}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_4\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{032C35F6-11E2-497B-9D78-6AD0288FBD48}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{032EE239-DEB8-436E-9043-A2767D457274}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03372354-C040-4C4E-94D1-27DB5A879A33}\InprocServer32" = "$homedrive\\Windows\\System32\\Win32CompatibilityAppraiserCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0340F119-A598-4ed9-B0AC-6F6A12D3E755}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0344ec28-5339-4124-a186-2e8eef168785}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32" = "$homedrive\\Windows\\system32\\wininet\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0363215C-3B87-4C3D-8300-FF3FD3E02B91}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0369B4E5-45B6-11D3-B650-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0369B4E6-45B6-11D3-B650-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{036A9790-C153-11D2-9EF7-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{037BB880-2613-4F6E-9F84-9574CCA8DEAC}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{037c3380-0855-4e8a-8c80-0aa3f697cd27}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837511-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837513-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0383751C-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837521-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837525-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837526-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837527-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837528-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837529-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837530-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837531-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837532-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837538-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837539-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837546-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03837547-098B-11D8-9414-505054503030}\InprocServer32" = "$homedrive\\Windows\\System32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03b5835f-f03c-411b-9ce2-aa23e1171e36}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjptip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{03C06416-D127-407A-AB4C-FDD279ABBE5D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03ca8927-0bf5-4df6-9534-0f5e17851944}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03e15b2e-cca6-451c-8fb0-1e2ee37a27dd}\InprocServer32" = "$homedrive\\Windows\\system32\\tapilua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03E6C474-8D95-4C1B-9268-4AA3FA16DE4F}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03E7DAD7-17A6-4F91-A879-F276B6FD62F8}\InprocServer32" = "$homedrive\\Windows\\System32\\delegatorprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03ECCB13-7A8E-4DBC-B83C-B4E95F9CAD02}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Pal\.Desktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04082FC6-E032-49F2-A263-FE64E9DA1FA3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{0413965e-17f3-46b2-b39f-f8aced04194c}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{041DEBA2-A4CA-45d0-9430-418026E0848A}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0429EC6E-1144-4bed-B88B-2FB9899A4A3D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{043B13A3-C479-48AF-9E98-E9F08A411670}\InprocServer32" = "$homedrive\\Windows\\System32\\UpdateDeploymentProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04731B67-D933-450a-90E6-4ACD2E9408FE}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04788120-12C2-498D-83C1-A7D92E677AC6}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipcima\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{047A9A40-657E-11D3-8D5B-00104B35E7EF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{047DEC5A-95C1-4C86-827F-7B8C92EBA67A}\InProcServer32" = "$homedrive\\Windows\\system32\\winrssrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0482DDE0-7817-11CF-8A03-00AA006ECB65}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{049F2CE6-D996-4721-897A-DB15CE9EB73D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04a1e553-fe36-4fde-865e-344194e69424}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04A578B2-E778-422A-A805-B3EE54D90BD9}\InProcServer32" = "$homedrive\\Windows\\System32\\wmcodecdspps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04A7F8A1-F465-4079-A4FD-B8F4700DF426}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04AF2416-5F4C-4FEB-A9A8-BBF9893A4E6B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04B55BC3-33DE-4d79-94EC-830CDF96CC82}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04CCE2FF-A7D3-11D0-B436-00A0244A1DD2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04e9894c-c756-4fce-b11c-f38888d01279}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{04FBCBF4-DC23-3CEC-9025-9D4093C26733}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{05058F23-20BE-11d2-8F18-0000F87A4335}\InProcServer32" = "$homedrive\\Windows\\System32\\Pimstore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0520af9e-e3da-4b32-8be8-0f3e475bfc5f}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05238C14-A6E1-11D0-9A84-00C04FD8DBF7}\InProcServer32" = "$homedrive\\Windows\\system32\\els\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05300401-BCBC-11d0-85E3-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{053C9CB8-5BA1-4F47-A6F1-D1D748C7DA93}\InProcServer32" = "$homedrive\\Windows\\System32\\BcastDVR.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{053D33FD-D0D4-44BF-B84E-99478DC343CD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05589F80-C356-11CE-BF01-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpdxm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05589FAF-C356-11CE-BF01-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{055A7699-EAFF-47DF-8E55-41F4C0612BF3}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{055CB2D7-2969-45CD-914B-76890722F112}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{055E80CA-DD63-4C25-93AB-448BBDB7AA17}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{056440FD-8568-48e7-A632-72157243B55B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0567cea8-7b61-4cd4-a9d0-58073b9888f0}\InProcServer32" = "$homedrive\\Windows\\System32\\HdcpHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32" = "$homedrive\\Windows\\system32\\wininet\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05921124-5057-483E-A037-E9497B523590}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\AuraSDK\\AuraSdk_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05A47EBB-8BF0-4CBF-AD2F-3B71D75866F5}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05B8E7A3-7D5D-41DE-B6CC-5E6205837FB7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ENE\\Aac_ENE RGB HAL\\x64\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05BDC38E-5493-487a-A7FF-8CF2246ABC13}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d7}\InProcServer32" = "$homedrive\\Windows\\System32\\taskbarcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d8}\InProcServer32" = "$homedrive\\Windows\\System32\\taskbarcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05DF8D13-C355-47f4-A11E-851B338CEFB8}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05EBA309-0164-11D3-8729-00C04F79ED0D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{05F3561D-0358-4687-8ACD-A34D24C488DF}\InProcServer32" = "$homedrive\\Windows\\System32\\ActionCenterCPL\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05f6fe1a-ecef-11d0-aae7-00c04fc9b304}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05FDB3A2-5639-4D24-AF7D-4C6FB0684661}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{060AF76C-68DD-11D0-8FC1-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06210E88-01F5-11D1-B512-0080C781C384}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06254B9D-05E9-4FBE-968D-F46DBDC91AF9}\InprocServer32" = "$homedrive\\Windows\\System32\\BingASDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{062584a6-f830-4bdc-a4d2-0a10ab062b1d}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Input\.Inking\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD0-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD1-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD2-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD3-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD4-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD5-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD8-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BD9-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BDA-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06290BDB-48AA-11D2-8432-006008C3FBFC}\InprocServer32" = "$homedrive\\Windows\\System32\\scrobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06334b1f-d73e-42f5-a448-5bd2df3c5ec7}\InprocServer32" = "$homedrive\\Windows\\system32\\eapsimextdesktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{063B79F5-7539-11D2-9773-00A0C9B4D50C}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{063B79F6-7539-11D2-9773-00A0C9B4D50C}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06405088-BC01-4E08-B392-5303E75090C8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0647D986-BD6B-48C9-B496-91E73A06F3BD}\InprocServer32" = "mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{065377f7-9876-4d5a-9f2a-1b4721255a67}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0655E396-25D0-11D3-9C26-00C04F8EF87C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06587E71-F043-403A-BF49-CB591BA6E103}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06622D85-6856-4460-8DE1-A81921B41C4B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{066D2323-D35A-4C15-AE22-F88F136C1613}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{067B4B81-B1EC-489f-B111-940EBDC44EBE}\InprocServer32" = "$homedrive\\Windows\\System32\\cewmdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{068a8476-9229-4cc0-9d49-2fc699dcd30a}\InProcServer32" = "$homedrive\\Windows\\System32\\mfaudiocnv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06946266-393A-456E-92BC-91DDDBF6893C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06993B16-A5C7-47EB-B61C-B1CB7EE600AC}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3gpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06A03425-C9EB-11d2-8CAA-0080C739E3E0}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06B32AEE-77DA-484B-973B-5D64F47201B0}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06B81C12-A5DA-340D-AFF7-FA1453FBC29A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{06BF8E77-0FEC-4bd3-AFD6-C949AE21E34B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06C792F8-6212-4F39-BF70-E8C0AC965C23}\InProcServer32" = "$homedrive\\Windows\\System32\\UserAccountControlSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06CCA63E-9941-441B-B004-39F999ADA412}\InprocServer32" = "$homedrive\\Windows\\System32\\mmdevapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06DC6740-FD0D-426A-9BF6-20DDBD7D53CE}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06EEE834-461C-42c2-8DCF-1502B527B1F9}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0700F42F-EEE3-443a-9899-166F16286796}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0709BCEE-E071-4CF1-BD15-BAEC9AA12D75}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxUserDictDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07252659-bb6b-4b79-b78b-623f6699a579}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0725C3CB-FEFB-11D0-99F9-00C04FC2F8EC}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07333BBD-64AF-4206-899D-2809660C61C7}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07369A67-07A6-4608-ABEA-379491CB7C46}\InprocServer32" = "$homedrive\\Windows\\System32\\UpdatePolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07398dcf-2e0b-4ece-99dd-56b262db948b}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_5\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{074BFFFD-4E50-42c1-A7EB-40D9D70F2471}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{076C2A6C-F78F-4C46-A723-3583E70876EA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{078759d3-423b-48ad-ab6a-5638c2884dbe}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0794B86D-0158-4EC1-8D52-E4025DCE746A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07AA0886-CC8D-4e19-A410-1C75AF686E62}\InProcServer32" = "$homedrive\\Windows\\System32\\l2nacp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07B65360-C445-11CE-AFDE-00AA006C14F4}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07C45BB1-4A8C-4642-A1F5-237E7215FF66}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07D26616-6136-11D1-8C9C-00C04FC3261D}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07DC68FA-A15D-4E44-93DE-645060C7B469}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07F94112-A42E-328B-B508-702EF62BCC29}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{07fc2b94-5285-417e-8ac3-c2ce5240b0fa}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07FFDD7A-0300-4FDC-B113-1C5364E61F54}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{080d0d78-f421-11d0-a36e-00c04fb950dc}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{081378D5-CE84-411B-8ABF-883840D7B90D}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Display\.DisplayEnhancementOverride\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0814BEF4-2971-429A-B694-2F3E63912DCF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08165EA0-E946-11CF-9C87-00AA005127ED}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08229782-89C8-4028-BB74-75BB58EF1488}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsmsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08295C62-7462-3633-B35E-7AE68ACA3948}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{082bc1fc-591a-4a9e-9d90-8ab689f49519}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{082C78E1-CD8F-4982-BEB9-BBFE43A0F09A}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0839CA75-2FE4-4608-A1B9-2224E046D6A3}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxEM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08586F78-3B1F-4CDE-9E87-AFFA015B5DE2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.SystemManufacturers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08728914-3F57-4D52-9E31-49DAECA5A80A}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONFILTER\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{087798c4-3c0a-48d4-abc9-ed60912fa139}\InprocServer32" = "$homedrive\\Windows\\system32\\VmApplicationHealthMonitorProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{088714E2-5783-44A2-8552-C9D7E7513339}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{088E8DFB-2464-4C21-BAD2-F0AA6DB5D4BC}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08a99e2f-6d6d-4b80-af5a-baf2bcbe4cb9}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08d450b7-f7e5-4424-8229-11888adb7c14}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08d5bfbf-fbca-4322-9f70-ca9f66f8ed6a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{08DFCEF6-4F00-436F-B621-B1585343C2FB}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08F91D9D-1F00-48C2-B90F-CC75FFAFE727}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08fedb70-9d27-4bcf-bbb0-99986ae2bcb5}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imecfmps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09017262-fdb4-4ff2-9013-26332c926ee7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0913ACCF-B1AB-4EEE-A0C7-F4D7C12F4EEC}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09144FD6-BB29-11DB-96F1-005056C00008}\InprocServer32" = "$homedrive\\Windows\\System32\\CPFilters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09156f15-2b3d-4864-a60e-82b82baa18da}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09290C14-40BF-40F1-A245-85FC671B5FA3}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{093FF999-1EA0-4079-9525-9614C3504B74}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{09474572-B2FB-11D1-A1A1-0000F875B132}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0947c622-f98a-48a5-9df7-60e5fe202e07}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0955AC62-BF2E-4CBA-A2B9-A63F772D46CF}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09655E95-040C-4654-85AF-48852407FDD9}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0968e258-16c7-4dba-aa86-462dd61e31a3}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{096CBB6C-221A-4A5D-B609-0C7534E3EE1F}\InProcServer32" = "$homedrive\\Windows\\System32\\MbSmsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_4\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0977EEC5-10F7-44AE-A7FA-D4824EBA5C74}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09799AFB-AD67-11d1-ABCD-00C04FC30936}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{098870b6-39ea-480b-b8b5-dd0167c4db59}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{098ef871-fa9f-46af-8958-c083515d7c9c}\InprocServer32" = "$homedrive\\Windows\\System32\\WaaSAssessment\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0991CE67-3649-4138-85A8-E17D037298DB}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0997898B-0713-11d2-A4AA-00C04F8EEB3E}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{099EB73C-FF12-45C5-BF64-F0277733A6E2}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09a28848-0e97-4cef-b950-cea037161155}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780}\InprocServer32" = "($homedrive\\Program Files( \(x86\))?\\Windows Defender\\shellext\.dll|.*\\shellext\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{09A5DFC5-8BA2-47DD-BF84-FFD7E0B24481}\InProcServer32" = "$homedrive\\Windows\\system32\\windows\.cortana\.onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09A60795-31C0-3A79-9250-8D93C74FE540}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{09A81E78-E1D3-44D4-84E3-C33A04A4CC6E}\InprocServer32" = "$homedrive\\Windows\\System32\\CIWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09AA621D-CF81-408D-9C9F-41399065CAC4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09c5dd34-009d-40fa-bcb9-0165ad0c15d4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09C77DF4-B76F-4875-9781-FB692504F39A}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.SharedPC\.CredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09DBBC77-588F-4517-A485-74A29759F54C}\InProcServer32" = "$homedrive\\Windows\\System32\\eapphost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09f209a1-d04d-4225-9333-076d72a7bb06}\InProcServer32" = "$homedrive\\Windows\\System32\\DMRServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09F4E6FE-F1D3-4E5C-B4CF-25D9C378961D}\InProcServer32" = "$homedrive\\Program Files (x86)\Microsoft\EdgeUpdate\.*\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09F81337-D568-41d1-A177-D6779AF55847}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A129CAF-A760-4ce3-A812-01087F41C7E9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A14D3FF-EC53-450f-AA30-FFBC55BE26A2}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A16D195-6F47-4964-9287-9F4BAB6D9827}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A235AB7-264B-4D1A-B533-DD7AB44AD94E}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A29F9BD-86B3-4384-B25D-EF1FFE020266}\InprocServer32" = "$homedrive\\Windows\\system32\\WSDScanProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0A2EC3B5-6599-42F1-8D7C-AFD6F3771CAD}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A30F902-8398-4ee8-86F7-4CFB589F04D1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0A3976C5-4529-4ef8-B0B0-42EED37082CD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0A4B5474-4226-4D28-B4FC-369CC68A7211}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A4B8F34-D725-454D-B81D-3BEBE48382DC}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A556D98-CFEE-4D84-82A7-00377F939198}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0A56CD6C-B45A-4A6C-A88C-3F42AC7BCED4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A6C76BD-9A96-4FD9-930B-F60AF68F6388}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A77F7E3-36D2-4D32-83A8-496A4680C706}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A860B80-3773-4DDE-85B4-E68C520A858C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0A9AE910-85C0-11D0-BD42-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0a9bbb1e-03ee-4201-9900-abbff56c9c6c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_0\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0AA02E8D-F851-4CB0-9F64-BBA9BE7A983D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\mpvis\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{0AC71593-60FC-4a6a-BF85-A0B93BCC3785}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0AD67D92-C11B-419A-AA28-9045B4169097}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.Provisioning\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0ADD8D9B-E3C3-43B5-BBCE-1E158E027A64}\InProcServer32" = "$homedrive\\Windows\\System32\\UserDataPlatformHelperUtil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0ADDA830-2C26-11D2-AD65-00A0C9AF11A6}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSI Tools\\MergeMod\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0AE2DEB0-F901-478b-BB9F-881EE8066788}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0AEA3667-1039-43ff-8D21-B1A162090671}\InprocServer32" = "$homedrive\\Windows\\System32\\AppIdPolicyEngineApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0af10cec-2ecd-4b92-9581-34f6ae0637f3}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0af96ede-aebf-41ed-a1c8-cf7a685505b6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0AFACED1-E828-11D1-9187-B532F1E9575D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0AFCCBA6-BF90-4A4E-8482-0AC960981F5B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0B124F8F-91F0-11D1-B8B5-006008059382}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{0B1C8EE2-4E12-496F-BA37-D7337B90FB4B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Portable\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B26FE8C-9E57-48FF-AD9F-3084EF402443}\InProcServer32" = "$homedrive\\Windows\\System32\\provops\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B2C35D2-C8BC-4470-BFC0-D6BB1235E5CE}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{0b2c9183-c9fa-4c53-ae21-c900b0c39965}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B2FAAC6-8D0D-40C8-8C06-42D6DAD2F3F1}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0b2feecb-1577-4fa6-9a29-bd9022ebcf90}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B30F034-02D5-4E2B-9BB7-A9F6538F4110}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B3FFB92-0919-4934-9D5B-619C719D0202}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0b43d888-341a-4d8c-8c3a-f9ef5045df01}\InProcServer32" = "$homedrive\\Windows\\System32\\hnsproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0b4c227f-2394-43ff-ba59-bc762f5c46ea}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B4CD745-723E-4D23-B898-47BECD7F0DEF}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\vpnclientpsprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B5A7836-4C16-4560-90B2-0F5DAF6D6D1B}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0b6d74fe-ad29-4c92-ac06-f06bc2f238a7}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0b91a74b-ad7c-4a9d-b563-29eef9167172}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BA2A2AC-A4D5-38CB-AD03-A0D5B6EC4646}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0BB3B78C-1807-4249-5BA5-EA42D66AF0BF}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Oracle\\VirtualBox\\VBoxProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BD7E521-4DA6-42D5-81BA-1981B6B94075}\InProcServer32" = "$homedrive\\Windows\\System32\\PNPXAssocPrx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0bdc6fc7-83e3-46a4-bfa0-1bc14dbf8b38}\InProcServer32" = "$homedrive\\Windows\\System32\\logoncontroller\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BE35200-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\mfc42u\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BE35201-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\mfc42u\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BE35202-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\mfc42u\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BE9F729-A4E0-4BED-9FB3-85F1858143B7}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BEBFF02-C139-4f43-AE23-333A4E635ECE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0bf754aa-c967-445c-ab3d-d8fda9bae7ef}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BFCC060-8C1D-11D0-ACCD-00AA0060275C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0BFCF7B7-E7B6-433a-B205-2904FCF040DD}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{0bfee0ab-71c3-4ffe-89ef-bd28bef201e7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C08E3BB-D10B-4CC9-B1B3-701F5BE9D6EC}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Icaros\\64-bit\\IcarosPropertyHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C0B0642-1DEB-43DF-8032-7A9BF5811A74}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c0b25f5-e762-4004-96cd-00ffc1ecb5bf}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0C11C759-23B0-4731-8D48-5FE3EA62051F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c15d503-d017-47ce-9016-7b3f978721cc}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c194cb2-2959-4d14-8964-37fd3e48c32d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0C1A0EF4-B44F-4179-BDDD-31C27DE7A6D1}\InprocServer32" = "$homedrive\\Windows\\System32\\InternetMailCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C1CC3CF-D7B8-459F-BE18-2F009E2541DC}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C27CFDD-1613-4A0C-BD12-E8D369669152}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C313C67-199B-4e68-884D-D36914E26EDD}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c39a5cf-1a7a-40c8-ba74-8900e6df5fcd}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c3ae323-c4c1-43c6-9fb4-bb4f34fe0e28}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.SystemId\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C3B05FB-3498-40C3-9C03-4B22D735550C}\InProcServer32" = "$homedrive\\Windows\\System32\\rasdlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C41D1E6-9D16-41ED-9CDD-D0665039857B}\InProcServer32" = "$homedrive\\Windows\\system32\\tcpipcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c449b17-06f4-4f1f-a1bf-8cd17fe5d45b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C5672F9-3EDC-4b24-95B5-A6C54C0B79AD}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C657D21-CE8E-4D86-AEEB-63FFBC70846D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C7EFBDE-0303-4c6f-A4F7-31FA2BE5E397}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C7FF16C-38E3-11d0-97AB-00C04FC2AD98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqloledb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0C93795D-E155-444B-9761-1B1C4715AA55}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0c9ac398-8c78-4b4b-b8c6-675ed1b734a1}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CA2640D-5B9C-4c59-A5FB-2DA61A7437CF}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CCB8559-9E10-4759-AEFD-51815C3677E3}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CD069CF-AC9B-41F4-9571-3A95A62C36A1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CD397F8-20A2-46F0-BAE8-952DEEEDA2C5}\InProcServer32" = "$homedrive\\Windows\\system32\\ConnectedAccountState\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}\InProcServer32" = "$homedrive\\Windows\\system32\\cabview\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cdb500e-123f-4e98-b446-0f3eae3c7ebc}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CE7A4A6-03E8-4A60-9D15-282EF32EE7DA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CE63743-3E8B-463F-90D8-0274D20FCEBB}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CF07551-EEF2-420C-B5AB-7E4FEB2249CF}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CF32AA1-7571-11D0-93C4-00AA00A3DDEA}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{0CF774D0-F077-11D1-B1BC-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CF774D1-F077-11D1-B1BC-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CFAE939-931E-4305-8D05-8C76C254EB34}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CFDD070-581A-11D2-9EE6-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0CFF0699-BD9D-495A-A558-DD5C77B70875}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Data\.Activities\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D0D66EB-CF74-4164-B52F-08344672DD46}\InprocServer32" = "$homedrive\\Windows\\System32\\fdssdp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D0E47ED-7220-411f-8F81-1118095DA5E7}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D23F8B4-F2A6-3EFF-9D37-BDF79AC6B440}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0D29D708-8F9D-44D9-88BE-1AA7EF30CFCD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D41EBA2-17EA-4B0D-9172-DBD2AE0CC97A}\InprocServer32" = "$homedrive\\Windows\\system32\\srhelper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D43FE01-F093-11CF-8940-00A0C9054228}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D45D530-764B-11d0-A1CA-00AA00C16E65}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D52ABE3-3C93-3D94-A744-AC44850BACCD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0d5c7d36-333d-4f39-9c65-7ab0c48fce32}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinDataModelServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D6417E3-866C-4959-9816-4BF5B85CDAD7}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsrx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D722F1A-9FCF-4E62-96D8-6DF8F01A26AA}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D816B02-D487-44FB-8BD3-7EADB66604CA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0d81ea0d-13bf-44b2-af1c-fcdf6be7927c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0d9948a9-e79f-4a06-8784-c32583d034f2}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0d9b47a2-92b8-4c3b-9147-5b1f1a2e0967}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0D9D975A-C577-4B5C-93B0-D1BE4944DEDE}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0da7bfdf-c0a0-44eb-be82-b7a82c4721de}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{0DAD2FDD-5FD7-11D3-8F50-00C04F7971E2}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0DBD7044-8EA5-4573-A924-FE8565CCE18F}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0dbecec1-9eb3-4860-9c6f-ddbe86634575}\InprocServer32" = "$homedrive\\Windows\\system32\\msheif\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0DC1AB8B-A52D-4BA8-BD76-E2819386FB2F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0dc331ee-8438-49d5-a721-e10b937ce459}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0DD1B55E-2EB8-42E2-B8D0-F11594A29477}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0dea3e34-6b45-4e36-aa94-9200e0dddea5}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0dec7d0c-bd63-4759-aa64-adefd70dcf9a}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0DED49D5-A8B7-4D5D-97A1-12B0C195874D}\InprocServer32" = "$homedrive\\Windows\\System32\\bdaplgin\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{0DFA72F0-D26C-4987-A128-E3A5641C5568}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E1487F2-9865-4CD5-B99A-9C5EB063A2BC}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E1EEFB2-E336-481C-B178-36261EC5A843}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E21C2A5-88A5-408D-A3F4-480755678C61}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E25DC18-9F5E-48B1-80B3-D124E81B773B}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E2B61B8-8E14-4725-B45C-8FD5F809D16D}\InProcServer32" = "$homedrive\\Windows\\System32\\EnterpriseAppVMgmtCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E32D9F9-10FB-4b90-8B24-826B07B084D0}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0e3be0d7-030e-4ca3-a911-d86e24ae0a3c}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\IMTCCFG\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{0E41CFB8-0506-40F4-A516-77CC23642D91}\InprocServer32" = "$homedrive\\Windows\\System32\\MSFlacDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E4EFFC0-2387-11D3-B372-00105A98B7CE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0E58372A-2CA5-4866-8443-988215E6EE1F}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E59FEAB-3B5A-49E2-8E2E-BD6C9FDE1DC6}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\binaryinfo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E5AAE11-A475-4c5b-AB00-C66DE400274E}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E5CBF21-D15F-11D0-8301-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0E681C52-CD03-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0e6daa63-dd4e-47ce-bf9d-fdb72ece4a0d}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E71F9BD-C109-3352-BD60-14F96D56B6F3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0E752416-F29E-4195-A9DD-7F0D4D5A9D71}\InprocServer32" = "$homedrive\\Windows\\System32\\AuthFWGP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E890F83-5F79-11D1-9043-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E94CA61-50B3-4ACD-8276-1A281F3357F3}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceElementSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0e971350-4039-4a03-85fe-4c210917c26d}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E9847B3-13E8-44E6-9659-2B60A140A573}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\DMWmiBridgeProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0ea79562-d4f6-47ba-b7f2-1e9b06ba16a4}\InProcServer32" = "$homedrive\\Windows\\System32\\AuthBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0eb06e8d-d00a-11da-a46c-0040f4b33241}\InprocServer32" = "$homedrive\\Windows\\system32\\TSErrRedir\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0ED2F8D5-02B2-48CC-A25A-8B8468E67B45}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0EE4845B-96CD-403b-8609-317330581408}\InprocServer32" = "$homedrive\\Windows\\System32\\DeviceDisplayStatusManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0EEA25CC-4362-4a12-850B-86EE61B0D3EB}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0EEBEAF3-B225-493C-AD14-1DBE8775C8BA}\InProcServer32" = "$homedrive\\Windows\\System32\\LanguagePackManagementCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0EEC1AF6-7664-4D17-88A5-B71EF18A93BC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0EEF5FBE-18F3-478A-BD28-4899C2E90323}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0f3079cc-f843-4c8e-9a5e-4af1e37b4c95}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0f3ed1f2-afdd-4b0c-b6d9-229c1bc58a08}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F3F9F91-C838-415E-A4F3-3E828CA445E0}\InprocServer32" = "$homedrive\\Windows\\System32\\fxscomex\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F469577-F241-4632-941A-C592F64FC1C4}\InProcServer32" = "$homedrive\\Windows\\System32\\VoiceActivationManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F563B5F-8EE2-4516-BA0A-544DE058C75B}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcleanup\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F6221DB-8EE7-450D-A28A-2898956004F2}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F7434B6-59B6-4250-999E-D168D6AE4293}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F7650EE-9AFA-47B4-9BE7-F74D9D3C41D7}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32" = "$homedrive\\Windows\\System32\\taskschd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F92030A-CBFD-4AB8-A164-FF5985547FF6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0f92ff8d-2f19-4b9a-b9dd-3efc2b3becec}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F96E303-CA9A-4CEB-9A1B-A3E7A775E04F}\InProcServer32" = "$homedrive\\Windows\\system32\\IppCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0F9FDB2D-1804-4cde-A2F9-9B380CDACF7A}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\IHDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FA53099-5317-46AF-9376-9A04A4B550F9}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0fafd998-c8e8-42a1-86d7-7c10c664a415}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.ui\.picturepassword|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FB15084-AF41-11CE-BD2B-204C4F4F5020}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msxactps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FB41BD0-3107-40A5-8D49-456E585947B2}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FC988D4-C935-4b97-A973-46282EA175C8}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FDE5092-AA2A-11D1-A7D4-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FD16473-86A0-4991-B88A-D48733BF9873}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FE62585-2E14-4bf2-8D61-93954A5F1041}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FEB51A7-30AA-4201-BA5E-97B75740CBC6}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0FF66430-C796-3EE7-902B-166C402CA288}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{0FFD3B05-5194-4e02-A4C8-A1449209F10E}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10072CEC-8CC1-11D1-986E-00A0C955B42E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VGX\\vgx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{100B4FC8-74C1-470F-B1B7-DD7B6BAE79BD}\InprocServer32" = "$homedrive\\Windows\\System32\\adrclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{101193C0-0BFE-11D0-AF91-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{102D1D13-BD88-435f-99C1-DE69F1886168}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{103874F6-2837-4156-9C6A-DEE9D37CF3DE}\InProcServer32" = "$homedrive\\Windows\\System32\\settingsync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{103E1E59-66D1-4143-B772-8D846E96FEBF}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1047074A-3407-43ff-8CCB-0060CFE28A93}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{104846ab-42b1-4e38-a80d-136f78c3f258}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{10493933-661B-4083-9CE0-EFE48ADD0770}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1050489C-0702-493F-94AB-58A9C5BE620C}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10794fd1-36a6-4527-8e61-691856d5aa34}\InProcServer32" = "$homedrive\\Windows\\System32\\HdcpHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{108296C1-281E-11D3-BD22-0000F80849BD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{10898C3A-D2EB-483A-BC44-66BCCF03D6F4}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.Devices\.HumanInterfaceDevice\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10964DDD-6A53-4C60-917F-7B5723014344}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10A59D3A-E15C-44EC-B6C8-950E713DCA7D}\InProcServer32" = "$homedrive\\Windows\\system32\\settingsync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10BCEB99-FAAC-4080-B2FA-D07CD671EEF2}\InprocServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10C1EF5E-6155-4c58-B33B-5D5A78532EE8}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10d62541-90d0-42fe-848c-0dbc1ac42eda}\InProcServer32" = "$homedrive\\Windows\\System32\\CoreGlobConfig\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10E2414A-EC59-49D2-BC51-5ADD2C36FEBC}\InProcServer32" = "$homedrive\\Windows\\System32\\dispex\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10E59D21-3860-4ed8-BD52-883E116A892E}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10FEF81C-0DAA-4af0-B714-1F1689C08C8C}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1108BE51-F58A-4CDA-BB99-7A0227D11D5E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11103421-354C-4CCA-A7A3-1AFF9A5B6701}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1123D0C1-886C-42C3-98E6-7109780E8BE2}\InprocServer32" = "$homedrive\\Windows\\System32\\SmartCardSimulator\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11275A82-5E5A-47fd-A01C-3683C12FB196}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{112BC2E7-9EF9-3648-AF9E-45C0D4B89929}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{114F5598-0B22-40A0-86A1-C83EA495ADBD}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{115193ED-8F85-426D-8792-5B1097807A0F}\InProcServer32" = "$homedrive\\Windows\\System32\\kinsapo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1153ACC9-1943-4b3b-B365-0CB8EF9CDE9B}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11581718-2434-32E3-B559-E86CE9923744}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1163D0CA-2A02-37C1-BF3F-A9B9E9D49245}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{11659a23-5884-4d1b-9cf6-67d6f4f90b36}\InProcServer32" = "$homedrive\\Windows\\System32\\WinTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{116ABC1A-F7DB-45A7-ADDA-D5A57A08C6FF}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{116F8D13-101E-4fa5-84D4-FF8279381935}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11962D33-DEDC-457B-8D75-B3DAD1F202B9}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcCtnr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11993195-1244-4840-AB44-480975C4FFE4}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{119b14a0-eb11-40c7-9a3c-e6a8904827d2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11a25a1d-b9a3-4edd-af83-3b59adbed361}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11d162b6-1cea-4b4a-8037-2518ecd6554b}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11D5C91F-0A98-11D1-BB10-00C04FC9A3A3}\InprocServer32" = "$homedrive\\Windows\\System32\\mycomput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11D61A62-19CA-4F89-AC06-07743E039B71}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv121p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11D893E6-ED32-4826-BCB1-E5F9E15C4036}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11dbb47c-a525-400b-9e80-a54615a090c0}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11E6A93F-EC60-4AD7-A3C8-3DDC3E2E4050}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11F11442-3359-410C-875E-D21984507B62}\InProcServer32" = "$homedrive\\Windows\\System32\\(usoapi|wuapi)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12044CC7-38BB-487A-AD74-D39F7135304F}\InProcServer32" = "$homedrive\\Windows\\System32\\ComposableShellProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1206F5F1-0569-412C-8FEC-3204630DFB70}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{120CED89-3BF4-4173-A132-3CB406CF3231}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{122595E5-20A2-47D3-8604-4A613FF6CCA7}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatializerApo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{122EC645-CD7E-44D8-B186-2C8C20C3B50F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12426E70-50E2-3129-B617-E252B36ECE89}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1249B20C-5DD0-44FE-B0B3-8F92C8E6D080}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{124E2045-8D63-4C23-B420-BBCD6A0ED61A}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\qoswmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12518493-00B2-11d2-9FA5-9E3420524153}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{125B0F61-0EC3-4f07-9A49-AFB340D9E57F}\InProcServer32" = "$homedrive\\Windows\\System32\\fhlisten\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{126D7983-FAA4-49EF-A081-BD4B22453A1E}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1273567F-5FEE-46B1-8895-BD3AD61A58EE}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{127b106b-b42e-4cd8-b08a-22b66a1c7877}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imesearchps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{128509e9-c44e-45dc-95e9-c255b8f466a6}\InprocServer32" = "$homedrive\\Windows\\System32\\MSFlacEncoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{128ACDCE-4D92-4D16-854F-F40AC7311ABB}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationControllerPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1293C733-3151-48F5-89DE-2457B4AB3FD2}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\InProcServer32" = "$homedrive\\Windows\\System32\\npmproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{129D7E40-C10D-11D0-AFB9-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12C21EA7-2EB8-4B55-9249-AC243DA8C666}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12CDE14D-5ECF-4c56-8233-120DB56647A2}\InprocServer32" = "$homedrive\\Windows\\System32\\mtfspellcheckds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12D3E372-874B-457D-9FDF-73977778686C}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12D51199-0DB5-46FE-A120-47A3D7D937CC}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12D73610-A1C9-11D3-BC90-00C04F72DF9F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12DD4DBB-532B-4FCE-8653-74CDB9C8FE5A}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12fc5e89-5446-4a7c-ba46-207a29e2945d}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{130F6206-B21A-4B21-9D98-526B5AECC0BB}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1334e551-b2db-429b-a94a-7d6a226ffcbf}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{133eac4f-5891-4d04-bada-d84870380a80}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{13482EC3-06A3-4bb3-84A9-193302B8DD54}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13516F23-4A53-4282-A462-CC1571129539}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcCtnr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{135698D2-3A37-4d26-99DF-E2BB6AE3AC61}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1362ada1-eb60-456a-b6e1-118050db741b}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13639463-00DB-4646-803D-528026140D88}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{136BFD13-0C9E-49B3-8C4E-74A235AFEA37}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13709620-C279-11CE-A49E-444553540000}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1372A97E-2034-41ee-A6C1-1B68FAFA75A1}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{137f5ec6-cf6b-482f-acea-c687dfbd199d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\IpsPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13847AF0-912C-470B-87B7-7FC3483BD5F9}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{138508bc-1e03-49ea-9c8f-ea9e1d05d65d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MAPISHELL\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{139D8403-E74F-41d2-B103-8790C5C7A517}\InProcServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\speechuxcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13a4bbe8-6527-40cb-a996-1602829541ef}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13AA3650-BB6F-11D0-AFB9-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13B216F4-3CD0-410F-951B-ECED8D7485C6}\InProcServer32" = "$homedrive\\Windows\\System32\\NFCProvisioningPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13B37A2A-546B-47BF-BBCA-8AC97F1EBDCB}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{13D3C4B8-B179-4ebb-BF62-F704173E7448}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13D557B6-A469-4362-BEAF-52BFD0F180E2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{13DE4A42-8D21-4C8E-BF9C-8F69CB068FCA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13E208E5-F763-4689-BB90-7133C6B7FD54}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13EE36D8-2EFD-44F6-AF3B-75FF35E6C691}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{13F6A0B6-57AF-4BA7-ACAA-614BC89CA9D7}\InProcServer32" = "$homedrive\\Windows\\System32\\ProximityCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14010e02-bbbd-41f0-88e3-eda371216584}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14074e0b-7216-4862-96e6-53cada442a56}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1438B859-8F3B-4053-9C45-EE3D2BAB4611}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{143B03BE-F4B9-4775-979E-5392AB1B7EB2}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1443904b-34e4-40f6-b30f-6beb81267b80}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpTip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14445657-8983-11e5-998B-B4B52FE06611}\InprocServer32" = "$homedrive\\Windows\\System32\\trie\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{144C71F2-7F10-4AB2-BB07-C38F5B9AE05E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14599217-F4F5-4B07-BF65-249B9D59C915}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGCapturePropPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{145B4335-FE2A-4927-A040-7C35AD3180EF}\InprocServer32" = "$homedrive\\Windows\\System32\\fdssdp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14654CA6-5711-491D-B89A-58E571679951}\InProcServer32" = "$homedrive\\Windows\\System32\\tbauth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{146855FA-309F-3D0E-BB3E-DF525F30A715}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{146A47AB-A2CF-3587-BB25-2B286D7566B4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{14795a8f-78f3-47bd-acb6-e767414fe293}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{147A9C5D-36F4-4e3e-BD47-F5F207425085}\InProcServer32" = "$homedrive\\Windows\\system32\\hgprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1482dc37-fae9-4787-9025-8ce4e024ab56}\InprocServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14834D34-8CEE-459e-8520-2264EC46E099}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{148BD520-A2AB-11CE-B11F-00AA00530503}\InProcServer32" = "$homedrive\\Windows\\System32\\mstask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32" = "$homedrive\\Windows\\System32\\mstask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14910622-09D4-3B4A-8C1E-9991DBDCC553}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{14BE1FB6-7B58-4724-BCF7-4389C7770F07}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14BE6B21-C682-3A3A-8B24-FEE75B4FF8C5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{14ce31dc-abc2-484c-b061-cf3416aed8ff}\InProcServer32" = "$homedrive\\Windows\\system32\\shutdownux\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14D0D64D-5493-4E66-AD22-716E81E1D094}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14D4CBD9-7490-4F25-BAA6-1C5E22F6B1E3}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v3\.0\\WPF\\PenIMC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14d7a407-396b-44b3-be85-5199a0f0f80a}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14DD9A1C-7CFF-41be-B1B9-BA1AC6ECB571}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14E74C62-DC97-43B0-8F2F-581496A65D60}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14EEC4CA-22CF-4FA7-96C9-4BD953414079}\InProcServer32" = "$homedrive\\Windows\\System32\\starttiledata\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14F3C12D-7712-42CC-B7CC-64D2BB560C43}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Speech\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14F94ACC-7A15-45A8-898A-CFA5EA3BF453}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Devices\.Sensors\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{14FDABF5-AF35-4975-A073-C5017ABDEEAF}\InProcServer32" = "$homedrive\\Windows\\System32\\dlnashext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{150F28F1-49A5-4C28-BE1A-CFA854A1D04B}\InprocServer32" = "$homedrive\\Windows\\System32\\tpmvsc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1510FB87-5676-40B9-A227-5D0B66866F81}\InProcServer32" = "$homedrive\\Windows\\System32\\eapphost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1531d583-8375-4d3f-b5fb-d23bbd169f22}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{154CF571-B575-4353-A775-D5623728D0F8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.WiFi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15756be1-a4ad-449c-b576-df3df0e068d3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{157D9A5F-5139-4AD7-AC07-6E8B996FE99F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15A58581-C545-46FE-BD72-FC6416CD2AF7}\InprocServer32" = "$homedrive\\Windows\\System32\\LegacyNetUX\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15b0bb4c-0f7d-11D1-b21f-00C04Fb9473f}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15D6504A-5494-499C-886C-973C9E53B9F1}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15DBE5AD-317F-4271-A72F-D73D34B26559}\InProcServer32" = "$homedrive\\Windows\\System32\\LockHostingFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15deef81-c4c4-431f-b0c9-b62cb9ea3aa9}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15E16AEC-F2F0-4E52-B0DF-029D11E58E4B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15EABA99-0ED7-48E5-80B6-19635B525CC2}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15eae92e-f17a-4431-9f28-805e482dafd4}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{15fc1bac-8d83-4e87-8cc2-a70c9f66f943}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15FD01A3-6E5D-4ECD-9EBD-1813CB3887A1}\InProcServer32" = "$homedrive\\Windows\\system32\\btpanui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1618348E-35B3-4631-8C04-2AB15AF5007D}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1643E180-90F5-11CE-97D5-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{164484A9-35D9-4FB7-9FAB-48273B96AA1D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1649b154-c794-497a-9b03-f3f0121302f3}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1649d1cf-deaf-4a68-abe8-5c9f68572fd1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{165D4642-1278-4486-A3FD-439F5888FCA3}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16671E5F-0CE6-4CC4-9768-E89FE5018ADE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1677ABA1-4346-442F-A74A-D8B9A713B964}\InProcServer32" = "$homedrive\\Windows\\System32\\bcastdvr\.proxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{167c0a56-c490-4623-9225-8ffdc546e56c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1685D4AB-A51B-4af1-A4E5-CEE87002431D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{168eb462-775f-42ae-9111-d714b2306c2e}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{168F4281-EC0D-46D3-951D-FBCB2F7C9079}\InProcServer32" = "$homedrive\\Windows\\system32\\fhsrchapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1698790a-e2b4-11d0-b0b1-00c04fd8dca6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{169A0691-8DF9-11d1-A1C4-00C04FD75D13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{16A0A3B9-9F65-4102-9367-2CDA3A4F372A}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16A78C67-DCE5-45E9-A45E-7A051B50C09E}\InProcServer32" = "$homedrive\\Windows\\system32\\wifidatacapabilityhandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16AA5514-10D0-47F4-8EFD-FF066D924F2B}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16B280C5-EE70-11D1-9066-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16B280C8-EE70-11D1-9066-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16C2C29D-0E5F-45f3-A445-03E03F587B7D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16CA098E-5156-4EDC-B064-741AB2B08A38}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{16CA4E03-FE69-4705-BD41-5B7DFC0C95F3}\InProcServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16d51579-a30b-4c8b-a276-0ff4dc41e755}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{16D5A2BE-B1C5-47b3-8EAE-CCBCF452C7E8}\InProcServer32" = "$homedrive\\Windows\\system32\\webcamui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17072F7B-9ABE-4A74-A261-1EB76B55107A}\InprocServer32" = "$homedrive\\Windows\\System32\\wscapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{170EC3FC-4E80-40AB-A85A-55900C7C70DE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{171252A0-8820-4AFE-9DF8-5C92B2D66B04}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{1722D4D2-7310-468E-9242-42AF7B4DAE4E}\InProcServer32" = "$homedrive\\Windows\\system32\\NetworkQoSPolicyCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17383A17-6B93-4193-9B60-4D4F99C05163}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{173FD26E-B0F7-42BF-BFD0-D91DF64CC298}\InprocServer32" = "$homedrive\\Windows\\System32\\tpmvsc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1765E14E-1BD4-462E-B6B1-590BF1262AC6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1767B93A-B021-44EA-920F-863C11F4F768}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{176961ec-fbfb-4288-b418-c80c86947481}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{176D323D-E591-4535-9A09-26F698E5AC5D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{176d6597-26d3-11d1-b350-080036a75b03}\InprocServer32" = "$homedrive\\Windows\\System32\\colorui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{177C0AFE-900B-48d4-9E4C-57ADD250B3D4}\InprocServer32" = "$homedrive\\Windows\\System32\\DolbyDecMFT\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{177F0C4A-1CD3-4DE7-A32C-71DBBB9FA36D}\InprocServer32" = "$homedrive\\ProgramData\\Microsoft\\VisualStudio\\Setup\\x64\\Microsoft\.VisualStudio\.Setup\.Configuration\.Native\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{178167bc-4ee3-403e-8430-a6434162db17}\InProcServer32" = "$homedrive\\Windows\\system32\\webplatstorageserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{179CC917-3A82-40E7-9F8C-2FC8A3D2212B}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{179EE204-246C-4895-919F-5B1D2414B21C}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{179F3D56-1B0B-42B2-A962-59B7EF59FE1B}\InprocServer32" = "$homedrive\\Windows\\System32\\speech_onecore\\engines\\tts\\MSTTSEngine_OneCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17a8b57c-9502-4494-8580-81a9b8069c09}\InprocServer32" = "$homedrive\\Windows\\System32\\chakradiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17B001CF-85DA-4D7B-86F9-56119D38692E}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17B21A1B-6C59-48E0-A448-6BC9AD2C5BFE}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17B75166-928F-417d-9685-64AA135565C1}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17C82257-654E-4C47-8E23-DCA24EAA76A0}\InProcServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17CCA47D-DAE5-4E4A-AC42-CC54E28F334A}\InprocServer32" = "$homedrive\\Windows\\system32\\EditionUpgradeManagerObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17CCA71B-ECD7-11D0-B908-00A0C9223196}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{17cd9488-1228-4b2f-88ce-4298e93e0966}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17D6CCD8-3B7B-11D2-B9E0-00C04FD8DBF7}\InprocServer32" = "$homedrive\\Windows\\System32\\objsel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17DB7422-8CEA-4EE5-A68B-59D956D9A5FF}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.ModernDeployment\.ConfigProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17f418ed-5cd0-4067-be51-4c96d386ebc1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{17fb3711-de14-477f-8b81-32a9c11a6938}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17FC1A80-140E-4290-A64F-4A29A951A867}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17FE9752-0B5A-4665-84CD-569794602F5C}\InProcServer32" = "($homedrive\\Windows\\System32\\ieproxy\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\ieproxy\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1814CEEB-49E2-407F-AF99-FA755A7D2607}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Mozilla Firefox\\AccessibleMarshal\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{181A38F4-6CE6-4edc-8DB0-6E5631963A1E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{181b54fc-380b-4a75-b3f1-4ac45e9605b0}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{181D6C15-60A6-4BC7-A8E7-389D5BFE4841}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{182C3813-DF97-40fa-9C4E-B7D3E74F00CA}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{184132B8-32F8-4784-9131-DD7224B23438}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1860E246-E924-4F73-B2C5-93E0577E3AA1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{18619969-3835-41E5-B457-44FE0DB77653}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxStreamingDataSourcePS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{186974B7-47BB-4673-9CDF-EBEDDE957427}\InProcServer32" = "$homedrive\\Windows\\System32\\AADJCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{186cda7f-de22-4b95-99b7-49efba0a08f4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{186dd02c-2dec-41b5-a7d4-b59056fade51}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{187463A0-5BB7-11D3-ACBE-0080C75E246E}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{18845040-0fa5-11d1-ba19-00c04fd912d0}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{188890A9-EFC6-4B11-8E76-D8579F739E86}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{18907f3b-9afb-4f87-b764-f9a4e16a21b8}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{189255E0-6EF0-41C5-8A1E-3B391D691215}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{18B1C7EE-68E3-35BB-9E40-469A223285F7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{18C628EE-962A-11D2-8D08-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{18F65133-BB77-4C67-8A64-D427BE942224}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1910E202-236A-43E6-9469-FE0B3149F3D9}\InprocServer32" = "$homedrive\\Windows\\system32\\WwanRadioManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19129EAC-A717-4BBD-87E0-615E3C939668}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19198abd-d4b9-4e14-b156-725f85205f0f}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{191D5A6B-43B9-477A-BB22-656BF91228AB}\InProcServer32" = "$homedrive\\Windows\\System32\\LanguagePackDiskCleanup\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19204EDD-187C-40B7-ADA4-79772BD10FB2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.SmartCards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19227DC0-FC88-4AAA-8C2D-A0DB913AA2FF}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19352205-42B0-4690-9AA4-D7DB9AE5F259}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{193B4137-0480-11D1-97DA-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{195B4D07-3DE2-4744-BBF2-D90121AE785B}\InprocServer32" = "`"$homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\DefenderCSP\.dll`""
	"HKEY_CLASSES_ROOT\CLSID\{19603261-6059-43DF-B9E1-8B4352825A90}\InprocServer32" = "$homedrive\\Windows\\System32\\wiascanprofiles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1965FEA3-3896-438B-B789-F5981797E7E7}\InProcServer32" = "$homedrive\\Windows\\System32\\MapsBtSvcProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1968106d-f3b5-44cf-890e-116fcb9ecef1}\InProcServer32" = "$homedrive\\Windows\\System32\\sud\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{196f128d-dce9-4090-b061-3d29c6ca32c2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{197F74E3-B84B-46DE-8AE6-82F1CD181CDC}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1992BE97-5290-45A1-897C-4E69431A1803}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32" = "$homedrive\\Users\\.*\\AppData\\Local\\Microsoft\\TeamsMeetingAddin\\.*\\x64\\Microsoft\.Teams\.AddinLoader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19A76FE0-7494-11D0-8816-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19AD99AE-0DD2-495A-AAC4-015E479722FD}\InprocServer32" = "$homedrive\\Windows\\System32\\VscMgrPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19b9dcc7-6f37-4dc7-9da6-8af601c5fce2}\InProcServer32" = "$homedrive\\Windows\\system32\\WWanMM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19BA17F2-2602-4E77-9027-103894607626}\InprocServer32" = "$homedrive\\Windows\\system32\\sharemediacpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19eb3aee-148e-42fe-a569-a7dc9b25d658}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19fb28d1-0e3f-4b94-bd34-8e841aa8b85e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19FED08E-EFD1-45da-B524-7BE4774A6AEE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{1A0391BF-9564-4294-B0A4-06C298929EF9}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A06A4DC-E239-3717-89E1-D0683F3A5320}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1a184871-359e-4f67-aad9-5b9905d62232}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A1BDCF1-7EBF-427B-BE56-8D7D2B3D6043}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A32449E-4C06-4d34-B674-452A952511CE}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A34F5C1-4A5A-46DC-B644-1F4567E7A676}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A3F11DC-B514-4B17-8C5F-2154513852F1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A503A1F-BD58-415D-A2FA-A3891F1D99F6}\InProcServer32" = "$homedrive\\Windows\\System32\\wups\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A66AEDC-93C3-4ACC-BA96-08F5716429F7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Shell\.ServiceHostBuilder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A68CF90-753A-4523-A4A4-40CAB4BC6EFF}\InprocServer32" = "$homedrive\\Windows\\system32\\ms3dthumbnailprovider\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{1A7F9F39-FB98-4405-A66D-954E07714E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\AppVClientPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A8766A0-62CE-11CF-A5D6-28DB04C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{1A8B3420-AE1D-4DCD-953B-992C429F8861}\InprocServer32" = "$homedrive\\Windows\\System32\\AssignedAccessCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A9482E3-2C71-44DF-9012-A969577325B6}\InprocServer32" = "mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1a9ca6d5-2488-46b1-b439-218f2314a059}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ab4a8c0-6a0b-11d2-ad49-00c04fa31a86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1AB78400-B5A3-4D91-8ACE-33FCD1499BE6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ABB62A5-054D-48A4-9509-D717E39E045B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Perception\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1AC32B1A-E379-4CAD-B655-F978A30856EC}\InprocServer32" = "$homedrive\\Windows\\System32\\SmartCardSimulator\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1AD699A6-31F7-4EF0-93E9-FFD576F35D30}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ADD3454-9CD8-449B-8777-341DAC8A3B0A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1AF81E4E-FC45-48ee-B236-A2A663494390}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1b00f3f3-945c-4bd3-ade8-77ece2f75dbd}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinDataModelServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B02C1F5-555B-4802-96A7-ADDDCCBCA38A}\InProcServer32" = "$homedrive\\Windows\\system32\\Dot3MM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B1A897E-FBEE-41CF-8C48-9BF764F62B8B}\InProcServer32" = "$homedrive\\Windows\\system32\\softkbd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1b223276-f79d-46c5-bc7e-3783ebf93b72}\InProcServer32" = "$homedrive\\Windows\\System32\\edgemanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1b283861-754f-4022-ad47-a5eaaa618894}\InProcServer32" = "$homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B2AFB92-0B5E-4A30-B5CC-353DB4F9E150}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B4DEBEC-0475-4564-B2BF-11490C40AACB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B544C20-FD0B-11CE-8C63-00AA0044B51E}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B544C22-FD0B-11CE-8C63-00AA0044B51E}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B544C22-FD0B-11CE-8C63-00AA0044B51F}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B544C24-FD0B-11CE-8C63-00AA0044B520}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B57B2A1-E763-4676-9064-297F1B413632}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B6FC61A-648A-4493-A303-A1A22B543F01}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1b7cd997-e5ff-4932-a7a6-2a9e636da385}\InprocServer32" = "$homedrive\\Windows\\System32\\Chakra\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B979846-AAEB-314B-8E63-D44EF1CB9EFC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1B9A0947-4903-45FE-9B96-FE0E80C35D9C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Sensors\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B9B1983-753C-47ab-9C02-A94EF23154DA}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1b9f2bf2-27f5-4dec-a175-3cf7bb8cfd3e}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BA21EC2-FC80-4515-AAAB-F5766A4B88BC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{1BA67E3F-8CC4-44E0-848E-4E50B0126BD0}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxAPDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BA783C1-2A30-4ad3-B928-A9A46C604C28}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32" = "$homedrive\\Windows\\System32\\usermgrproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BC39379-8D90-4F18-8817-795C57163770}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BC691FE-2EC5-4F1B-B985-8DA7423CE6E9}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BCD547A-62F6-4F2D-A0E3-B4930A3F3C33}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\EventTracingManagement\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BD3AC02-7468-49C8-80CF-A138ECB84317}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcCtnr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BDF02A4-23B7-4173-8107-A56C23124493}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.3D\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BE49F30-0E1B-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1bef2128-2f96-4500-ba7c-098dc0049cb2}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32" = "$homedrive\\.*\\((Microsoft OneDrive|Microsoft\\OneDrive)|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C0F439D-7C29-4bde-8952-4EEB6A49E048}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C15D484-911D-11D2-B632-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C16EBAB-7C12-4F21-A2A9-56D67931108F}\InProcServer32" = "$homedrive\\Windows\\System32\\HttpsDataSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1c1800c1-3258-44c2-be80-3deadb6c5e39}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C1EDB47-CE22-4bbb-B608-77B48F83C823}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C308B42-B4B4-42AD-864C-48440C12B7A5}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C31BAA6-6551-4679-953C-47FA17D1AF6D}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Mozilla Firefox\\notificationserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1c391f2b-801a-416c-9838-6be810293dfc}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1C5221CB-C1F6-4999-8936-501C2023E4CD}\InprocServer32" = "$homedrive\\Windows\\System32\\fdBth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1c5346b8-63e1-4c2b-b125-3c5db94e946c}\InprocServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\applets\\imtcskf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1c5759cb-fe4b-464b-a8d3-2687637376c4}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C621200-67B2-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1c773157-69bb-4998-abf1-93a94fd766d3}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C82EAD9-508E-11D1-8DCF-00C04FB951F9}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1c85e599-77dc-416a-ae5d-62569f1872e9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Background\.SystemEventsBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1C97EF1D-74ED-3D21-84A4-8631D959634A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1CC6B704-D0F5-4dc3-A521-13620D89E8BC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1CD0938D-1AC1-49DE-AA04-F2C92D4A02D1}\InProcServer32" = "$homedrive\\Windows\\System32\\FirewallControlPanel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1cedc5da-3614-11d2-bf96-00c04fd8d5b0}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1CFC4CDA-1271-11D1-9BD4-00C04FB683FA}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D0983EA-B409-44ED-8B61-0406BA1E9C93}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_nt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D09B407-A97F-378A-ACCB-82CA0082F9F3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1d16438c-54dc-404f-83a9-c041e77a32dd}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D1F0730-0748-4b5f-81DF-865694BD07AC}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D2680C9-0E2A-469d-B787-065558BC7D43}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1d27f844-3a1f-4410-85ac-14651078412d}\InprocServer32" = "$homedrive\\Windows\\system32\\acppage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1d2b8d89-9324-46a0-b797-5725d8c8d881}\InprocServer32" = "$homedrive\\Windows\\system32\\sdengin2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D3529C7-671A-468d-AD2A-499A96B073D1}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D428C79-6E2E-4351-A361-C0401A03A0BA}\InprocServer32" = "$homedrive\\Windows\\System32\\TSWorkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D49F57D-47D2-4AEE-A69B-593EC558773F}\InProcServer32" = "$homedrive\\Windows\\System32\\(Windows\.Globalization|NaturalLanguage6)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D5532BB-1E08-4002-8445-8BA35E462045}\InProcServer32" = "$homedrive\\Windows\\system32\\hotplug\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D583ABC-8A0E-4657-9982-A380CA58FB4B}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D6322AD-AA85-4EF5-A828-86D71067D145}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1d64637d-31e9-4b06-9124-e83fb178ac6e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.FileExplorer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1d697619-5d35-44a1-a0f6-1c305324c9d0}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1d6f0f8f-857d-4011-9eb2-69776d1916f0}\InProcServer32" = "$homedrive\\Windows\\System32\\MbSmsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D78ABF5-19B5-4290-A7E3-620748B8307E}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1D858A97-49A3-4805-8390-3BD5976E7ABB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1d8a9b47-3a28-4ce2-8a4b-bd34e45bceeb}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DA08500-9EDC-11CF-BC10-00AA00AC74F6}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DC08C0F-A60F-4C62-9A1B-26E181CE8DB1}\InprocServer32" = "$homedrive\\Windows\\System32\\FilterDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DC715B2-9126-4671-8086-299A44543E0F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\NVXDBat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DCB3A00-33ED-11D3-8470-00C04F79DBC0}\InProcServer32" = "$homedrive\\Windows\\System32\\wmdmps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DF1BDDA-A8FA-4E57-8015-8B621C4DBBE7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DF7C823-B2D4-4B54-975A-F2AC5D7CF8B8}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DF7D126-4050-47F0-A7CF-4C4CA9241333}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E1714A3-50B9-480b-A94A-636D9A9B56D1}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E35B0D0-49F2-4ACB-A9A5-4D2DA8331B02}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1e46246f-b2ad-4a86-9e08-d0f9e01ee05d}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E54333B-2A00-11d1-8198-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E651CC0-B199-11D0-8212-00C04FC32C45}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E66C960-3DF9-4d3a-A1A7-CEC25E938C60}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E66F26B-79EE-11D2-8710-00C04F79ED0D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1E8F0D70-7399-41BF-8598-7949A2DEC898}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1e94e93c-852d-47fb-9197-7edeb41101b0}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ea1ea14-48f4-4054-ad1a-e8aee10ac805}\InprocServer32" = "$homedrive\\Windows\\System32\\vidreszr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ea5fb56-9ee8-47dc-8998-f45585c2e3e0}\InprocServer32" = "$homedrive\\Windows\\System32\\MFPlay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1EC2DE53-75CC-11d2-9775-00A0C9B4D50C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1ED6DDBB-0401-4498-A093-7D249203200C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech\\Direct Input Force Feedback\\1_1_5\\jerry_forcefeedback_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ee026d0-f551-4c71-aea2-f9897b159eaf}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1EE2EAEF-F6FE-4F5B-B9B0-CC6314541025}\InProcServer32" = "$homedrive\\Windows\\System32\\execmodelclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1ee7337f-85ac-45e2-a23c-37c753209769}\InProcServer32" = "$homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1eeb5b5a-06fb-4732-96b3-975c0194eb39}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1EF94880-01A8-11D2-A90B-00AA00BF3363}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\dsprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f01f4e9-8b75-4e20-8eb0-e49f17f2be61}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F046ABF-3202-4DC1-8CB5-3C67617CE1FA}\InProcServer32" = "$homedrive\\Windows\\system32\\dwmapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F068127-5760-490e-998C-6E35B845F49E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F06F815-7C26-43d1-BA39-3814B4B467C5}\InprocServer32" = "$homedrive\\Windows\\System32\\WordBreakers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f09b058-f3fd-4a9d-a8ba-a8a05f8fe283}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F0BC6AD-46D4-488B-BE1F-047FC7505E60}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F17C39C-99D5-37E0-8E98-8F27044BD50A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1F189384-5AD4-45EA-9721-AD3E5288C62A}\InprocServer32" = "$homedrive\\Windows\\System32\\vmwpctrl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f1b577e-5e5a-4e8a-ba73-c657ea8e8598}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_1\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f1f4e1a-2252-4063-84bb-eee75f8856d5}\InprocServer32" = "$homedrive\\Windows\\System32\\WMSPDMOE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{1f26a602-2b5c-4b63-b8e8-9ea5c1a7dc2e}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f2e5c40-9550-11ce-99d2-00aa006e086c}\InProcServer32" = "$homedrive\\Windows\\system32\\rshx32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1f3d8aa5-9ebf-4ee4-85c2-ea40379aede8}\InprocServer32" = "$homedrive\\Windows\\System32\\sdiageng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}\InprocServer32" = "$homedrive\\Windows\\system32\\azroleui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F7D1BE9-7A50-40b6-A605-C4F3696F49C0}\InprocServer32" = "$homedrive\\Windows\\system32\\eapp3hst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1f849cce-2546-4b9f-b03e-4004781bdc40}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F872270-D68C-4C28-85D9-70CD5FC47A70}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1f9a2c18-d89e-463e-b4f4-bb90152acc64}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmkvsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F9F18A3-EFC0-3913-84A5-90678A4A9A80}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{1FA9085F-25A2-489B-85D4-86326EEDCD87}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1FABC6A8-AF38-4353-A39E-1AC0F29BDFA4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1fb2a002-4c6c-4de7-85c2-cb8db9a4f728}\InProcServer32" = "$homedrive\\Windows\\System32\\dskquoui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1FCE6123-B675-4790-A629-F3E8AC06F839}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\Edge\\Application\\.*\\BHO\\ie_to_edge_bho_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1fda955b-61ff-11da-978c-0008744faab7}\InprocServer32" = "$homedrive\\Windows\\system32\\dtsh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1fda955c-61ff-11da-978c-0008744faab7}\InprocServer32" = "$homedrive\\Windows\\system32\\dtsh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1FE45ED3-B842-4CF2-8DF6-43E3D6D10E64}\InProcServer32" = "$homedrive\\Windows\\System32\\audiokse\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20051D1B-321F-3E4D-A3DA-5FBE892F7EC5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{20076C7E-4851-41ed-9EB8-F4E5F2BB0286}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{201600d8-6eff-48ce-b842-e14d37a0682d}\InProcServer32" = "$homedrive\\Windows\\System32\\wpninprc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2025BCB1-370E-4103-9C34-883770F7F2A0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{203b1eed-db9f-40fb-87bd-1990982017d2}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20404060-F24F-4F89-84C6-8AF80B0A17CB}\InProcServer32" = "$homedrive\\Windows\\System32\\audiokse\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20425B74-41F5-426F-A145-13BBB45A2F66}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2048EEE6-7FA2-11D0-9E6A-00A0C9138C29}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{204D5A28-46A0-3F04-BD7C-B5672631E57F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{205447d9-4af1-4f97-a773-e10ff2e44ead}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20578929-A1F0-4EB1-A4BA-66207291CBA3}\InprocServer32" = "$homedrive\\Windows\\System32\\VPNv2CSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{205D7A97-F16D-4691-86EF-F3075DCCA57D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{205EB05C-A2B9-4135-8645-C8673A7B81F4}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{206FA6D0-A493-41FA-943D-3F655088F7B9}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2087c2f4-2cef-4953-a8ab-66779b670495}\InProcServer32" = "$homedrive\\Windows\\system32\\(winhttpcom|winhttp)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32" = "$homedrive\\.*\\((Microsoft OneDrive|Microsoft\\OneDrive)|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{208F7A6F-FB35-4686-9494-AB22B7B2CD78}\InProcServer32" = "$homedrive\\Windows\\System32\\BthAvrcp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{209D8461-E6FB-49DD-A824-C9962A9D2F2B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20b1cb23-6968-4eb9-b7d4-a66d00d07cee}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{20C6F4C2-80A8-4310-A59A-1CC487334236}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC2_v0400\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20CCEF1E-0185-41a5-A933-509C43B54F98}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20cd9315-87d0-40b4-b925-0a8f208e1f8d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20E25881-F081-448e-85C9-4707A9400593}\InProcServer32" = "$homedrive\\Windows\\system32\\profprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20E6D937-F6A7-4C7F-8E69-7E0AF81795FB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.BackgroundManagerPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20E823C2-62F3-4638-96BD-90F4F6784EBC}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{20E8B2FE-7568-46AE-A0DB-76B7F469B92D}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{20ED4A03-6AFD-4FD9-980B-2F6143AA0892}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{210DDC43-689C-46E3-BDC1-38C16C8F4C96}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2111CED3-4393-4490-BA09-0714A7C9EA37}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.WiFiDirect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{212690FB-83E5-4526-8FD7-74478B7939CD}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{212BFFFB-DAB9-4EEF-AF58-3366DAAF4C4F}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncController\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2134da04-4faa-42ed-ada2-43707b4e1de1}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2135f72a-90b5-4ed3-a7f1-8bb705ac276a}\InProcServer32" = "$homedrive\\Windows\\system32\\((credprovs|authui)legacy|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2139e6da-c341-4774-9ac3-b4e026347f64}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_5\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2155fee3-2419-4373-b102-6843707eb41f}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{215B68E5-0E78-4505-BE40-962EE3A0C379}\InProcServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{215B77BA-853F-48C4-8DC4-024E0D68A812}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21690A61-3629-4E3B-A72D-BBC8A88DB81F}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2169A933-95E2-41BA-9377-D3FCE9448381}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Audio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{216C62DF-6D7F-4E9A-8571-05F14EDB766A}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{217700E0-2001-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{217700E0-2003-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{217700E0-2004-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{217700E0-2005-11DF-ADB9-F4CE462D9137}\InProcServer32" = "$homedrive\\Windows\\System32\\provcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{217FC9C0-3AEA-1069-A2DB-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2180D006-7C2A-4058-B5C0-A28D3A114814}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Graphics\.Display\.DisplayColorManagement\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2183DACA-D0BF-4a31-97F7-B87618A81955}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21A36DDA-45BD-4F89-881E-0E18FDE90CDF}\InProcServer32" = "$homedrive\\Windows\\System32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21AEC8CC-EF8C-422a-8CBC-D3FB3735D855}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21B22460-3AEA-1069-A2DC-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{21D6D48E-A88B-11D0-83DD-00AA003CCABD}\InprocServer32" = "$homedrive\\Windows\\System32\\tapi3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21EC2020-3AEA-1069-A2DD-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{21EEDCF3-6B66-4593-8956-E9443F979627}\InProcServer32" = "$homedrive\\Windows\\System32\\EasPolicyManagerBrokerPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21F5A790-53EA-3D73-86C3-A5BA6CF65FE9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{21F71DD1-2398-4150-825A-CBDE00272EE4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21FE04BD-0FCE-4d3f-A89E-D00CB1421371}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2206CDB3-19C1-11D1-89E0-00C04FD7A829}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2206D773-CA1C-3258-9456-CEB7706C3710}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{220898A1-E3F3-46B4-96EA-B0855DC968B6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{220A0D48-03A8-4F7B-8408-4EB506EF68D9}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\prnfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2269DAA3-2A9F-4165-A501-CE00A6F7A75B}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{227188db-3179-4fdf-af3a-da3b85a0b3cc}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{227B1F3B-C276-4DE0-9FAA-C0AD42ADDCF0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{227C5B36-F148-4B4B-AEC1-943E394D9885}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wfascim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{227ec397-6791-4ac6-a762-2f70f99015c2}\InprocServer32" = "$homedrive\\Windows\\System32\\iasrecst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{228136B0-8BD3-11D0-B4EF-00A0C9138CA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadomd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{228136B8-8BD3-11D0-B4EF-00A0C9138CA4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadomd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22877a6d-37a1-461a-91b0-dbda5aaebc99}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{228D9A81-C302-11cf-9AA4-00AA004A5691}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{228D9A82-C302-11cf-9AA4-00AA004A5691}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2291478C-5EE3-4bef-AB5D-B5FF2CF58352}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2297EF69-AF4B-441D-8F63-4B69C7692DD0}\InProcServer32" = "$homedrive\\Windows\\System32\\ErrorDetails\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{229FC7D6-9056-4e26-A8B9-F546D40200AF}\InProcServer32" = "$homedrive\\Windows\\System32\\ActiveSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22A7E88C-5BF5-4DE6-B687-60F7331DF190}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22AF56E3-F2E0-4A7E-AA0C-6B226EF5ABF8}\InprocServer32" = "$homedrive\\Windows\\System32\\WorkFoldersShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22B6E688-B3A5-44FC-B0CE-69F20653CD61}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22C21F93-7DDB-411C-9B17-C5B7BD064ABC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22c6c651-f6ea-46be-bc83-54e83314c67f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{22C7DA12-F3FD-4875-8344-7786454F6534}\InProcServer32" = "$homedrive\\Windows\\System32\\ActiveSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpdxm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22D8B4F2-F577-4adb-A335-C2AE88416FAB}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22e5fca2-9c7c-4239-8aed-4d0623f532d8}\InprocServer32" = "$homedrive\\Windows\\System32\\setup\\cmmigr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22EE26E5-2289-11d2-8F43-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22F1B05B-F983-4CC7-A5F6-67BC2701E29A}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{22ff30d1-a59e-4580-9190-da3042ceca64}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\7-Zip\\7-zip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23331F43-1908-4637-940B-1EA31F4E92A1}\InprocServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{233664b0-0367-11cf-abc4-02608c9e7553}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23445657-8A4C-11e5-998D-B4B52FE06611}\InprocServer32" = "$homedrive\\Windows\\System32\\trie\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23571E11-E545-4DD8-A337-B89BF44B10DF}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{235DF164-7970-4B68-8453-2CACFFDD23C9}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\IHDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23650F94-13B8-4F39-B2C3-817E6564A756}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.immersiveshell\.serviceprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23B77E99-5C2D-482D-A795-62CA3AE5B673}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipiprt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23C1F3CF-C110-4512-ACA9-7B6174ECE888}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23CC32C8-6654-40CA-AACD-F4712A6CDCAF}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23CF860E-9D2C-451A-8E83-C79C848D85A6}\InProcServer32" = "$homedrive\\Windows\\system32\\sxproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23E26328-3928-40F2-95E5-93CAD69016EB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23f6a6a7-8cbb-4880-93f3-a81af3c07011}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{23F6D342-08C4-4E48-89B3-0BC8BF990783}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{240acdd2-8597-4e04-84d7-fa0068da460b}\InprocServer32" = "$homedrive\\Windows\\System32\\VrdUmed\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{242025BB-8546-48B6-B9B0-F4406C54ACFC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24264891-E80B-4fd3-B7CE-4FF2FAE8931F}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{242A95A9-8D6C-4974-A5DA-D9B6C9E619B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24400D16-5754-11d2-8218-00C04FB687DA}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{24540EBC-316E-35D2-80DB-8A535CAF6A35}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2465E8F5-E0EA-4BFD-B8B8-A3A6BCB485EB}\InprocServer32" = "$homedrive\\Windows\\System32\\storewuauth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2475A152-2C35-4489-BCBA-A269BD3F5BA4}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2489e282-b262-43f9-a0ba-8ddf0c773fa7}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2497F4DE-E9FA-4204-80E4-4B75C46419C0}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{24CA8AEF-F6D8-4732-8DB5-9D83EFD8CFBC}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24D568C5-F3AE-4F91-9CD9-AA18876DA7C2}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24DC3975-09BF-4231-8655-3EE71F43837D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24DF3111-8474-4955-AA18-F6750BAD2A2B}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24EEC005-3938-3C71-821D-7F68FD850B2D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{250e91a0-0367-11cf-abc4-02608c9e7553}\InprocServer32" = "$homedrive\\Windows\\system32\\adsnt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25150040-b8f1-418e-af61-b51071ac1ee2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{25256c24-3b75-49b3-a433-4bb2f8865896}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25336920-03F9-11cf-8FD0-00AA00686F13}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25336921-03F9-11CF-8FD0-00AA00686F13}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25585dc7-4da0-438d-ad04-e42c8d2d64b9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{255a6fda-6f93-4e8a-9611-ded1169eefb4}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25642426-028D-4474-977B-111BB114FE3E}\InProcServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25983561-9D65-49CE-B335-40630D901227}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25ab468c-3974-4075-be50-193135461727}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{25BAAD81-3560-11D3-8471-00C04F79DBC0}\InprocServer32" = "$homedrive\\Windows\\System32\\mswmdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25BE9228-00AF-11D2-BF87-00C04FD8D5B0}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25CBB996-92ED-457e-B28C-4774084BD562}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25D7BAFF-F559-4D0E-9EA4-B48F936956AA}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25dfe23c-a049-403d-9c45-6c574d49dcf6}\InProcServer32" = "$homedrive\\Windows\\System32\\ACPBackgroundManagerPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25E609E0-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25E609E1-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25E609E4-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput8\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25E609E5-B259-11CF-BFC7-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\dinput8\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25EC352E-72E1-4724-9A28-4AE730072149}\InProcServer32" = "$homedrive\\Windows\\System32\\autoplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{25ecf786-a925-4706-a269-eef5ad6899db}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\IMTCCORE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{25F843F3-1ED6-4B4E-8749-DF294C7FEB30}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{261B8CA9-3BAF-4BD0-B0C2-BF04286785C6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\OUTLCTL\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{263A4743-BC0D-40b6-8F7F-1B2135C204D2}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26445657-50E1-4C9F-8378-FF028FD26816}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2645C449-956D-42A5-9573-AE04FD7B93EC}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{264FFAF3-9A9C-42B7-AEDB-34896CDBC7C1}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{265011AE-5481-4f77-A295-ABB6FFE8D63E}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26671179-2ec2-42bf-93d3-64108589cad5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2667745B-5427-42D0-82E5-E432D30786E6}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{266C72D4-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcons\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{266C72E5-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcons\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{266C72E6-62E8-11D1-AD89-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcons\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{266EEE40-6C63-11cf-8A03-00AA006ECB65}\InprocServer32" = "$homedrive\\Windows\\System32\\kstvtune\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{266EEE41-6C63-11cf-8A03-00AA006ECB65}\InprocServer32" = "$homedrive\\Windows\\System32\\kstvtune\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{267cf8a9-f4e3-41e6-95b1-af881be130ff}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{267DB0B3-55E3-4902-949B-DF8F5CEC0191}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26933B26-DA32-49FC-B31F-02BACE3A497D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26A1F020-DDD8-472D-8B7C-2F98B80024F3}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26A37DC6-935D-439B-80DD-C1006AE13D71}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26bdc675-a557-411c-975f-80c4a63428f7}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.StateRepositoryBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26D32566-760A-40A2-AA82-A40366528916}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26DFFE05-90B8-4744-8A17-50B9B64E0009}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26EC0B63-AA90-458A-8DF4-5659F2C8A18A}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26ED43EA-45C6-4EF6-9E9B-1740366C98BF}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{26EEC7CE-6C67-4568-BA8F-52BEA143D756}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26fdc864-be88-46e7-9235-032d8ea5162e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{27016870-8E02-11D1-924E-00C04FBBBFB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msdarem\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{270411D9-9832-48D5-BC1C-CE606B00F42E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFrameworkPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27171325-5F06-407C-AA8F-61154A674DE2}\InProcServer32" = "$homedrive\\Windows\\System32\\(XpsDocumentTargetPrint|XpsPrint)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354124-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354125-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354126-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354127-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354128-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354129-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2735412A-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2735412B-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2735412C-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2735412D-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2735412E-7F64-5B0F-8F00-5D77AFBE261E}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27354130-7F64-5B0F-8F00-5D77AFBE261E}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2737EE87-ABA3-4F28-89A6-C370484D85F9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{273eb5e7-88b0-4843-bfef-e2c81d43aae5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{274C2936-A842-45f3-A457-FB4BA4ED1BA2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{274fae1f-3626-11d1-a3a4-00c04fb950dc}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27569A8A-5891-4ad0-A0CE-74D6CBC035A9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{275AF033-1C37-48ED-91F7-8E23C5D9B382}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_nt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InProcServer32" = "$homedrive\\Windows\\system32\\mlang\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2763BE6B-F8CF-39D9-A2E8-9E9815C0815E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2764BCE5-CC39-11D2-B639-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2769280B-5108-498c-9C7F-A51239B63147}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{276C88CA-7533-4A86-B676-66B36080D484}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{276FBFC1-D71F-4619-A7C1-0181077EE283}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2781761E-28E0-4109-99FE-B9D127C57AFE}\InprocServer32" = "($homedrive\\Program Files( \(x86\))?\\Windows Defender\\MpOav\.dll|`"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MpOav\.dll`")"
	"HKEY_CLASSES_ROOT\CLSID\{278407C2-558C-4BED-83A0-B6FA454200BD}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVVideo\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{27949969-876A-41D7-9447-568F6A35A4DC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2797B627-B7FA-4CBF-9472-6B8ACFDF3E41}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2797CF92-415A-43e6-A8F7-A5FAAB783719}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27a4e414-20a5-4dc1-b426-e42289729560}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27AAD1C8-3564-4A15-B0B8-F73F90FB95A7}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27C7D4DD-D73D-426A-AD9C-F989722095FD}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtHkStrokeDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27c98999-2895-4829-b080-5a8b65bd3db0}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27D62E77-6AFE-4AAE-AF27-E6CC20A884D9}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27E4B0FF-4E29-4998-A7A5-5979E8F8A630}\InProcServer32" = "$homedrive\\Windows\\System32\\wlanmediamanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27E986E1-BAEC-3D48-82E4-14169CA8CECF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{27F31D55-D6C6-3676-9D42-C40F3A918636}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{27F71832-6815-48CB-902A-7A1D891BA962}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27F86E83-F66E-455B-BE1F-1ED899C48A2B}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}\InprocServer32" = "$homedrive\\Windows\\system32\\TrustedSignalCredProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{27FE144C-9CAD-4EA6-8232-912FE8A96873}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{280A3020-86CF-11D1-ABE6-00A0C905F375}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{280A7B65-8F00-438F-989B-8EAF9E438A71}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{280ECF1B-B8F6-41B6-BC14-0E58035C4DCC}\InprocServer32" = "$homedrive\\Windows\\system32\\PackageStateChangeHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28404f37-8eff-4c1f-a0fa-84d1c9f2a83e}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinAUG\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2846AE5E-A9FA-36CF-B2D1-6E95596DBDE7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2853ADD3-F096-4C63-A78F-7FA3EA837FB7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2854F705-3548-414C-A113-93E27C808C85}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{285E403A-14CE-41C9-8E55-92921CA0DFB3}\InprocServer32" = "$homedrive\\Windows\\System32\\FluencyDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{286AA738-2928-49af-A410-4118F5C31626}\InprocServer32" = "$homedrive\\Windows\\system32\\dot3hc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28803F59-3A75-4058-995F-4EE5503B023C}\InProcServer32" = "$homedrive\\Windows\\system32\\DevicePairingFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28890E39-A124-4216-B3D8-686F4203AD20}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{288a2d5f-253c-46b4-b58c-2ced3180b993}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{288B5845-2831-42c3-861B-0ADB30446513}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{289228DE-A31E-11D1-A19C-0000F875B132}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28953661-0231-41DB-8986-21FF4388EE9B}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{289978AC-A101-4341-A817-21EBA7FD046D}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{289AF617-1CC3-42A6-926C-E6A863F0E3BA}\InProcServer32" = "$homedrive\\Windows\\System32\\dlnashext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28AB0005-E845-4FFA-AA9B-F4665236141C}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28AF2E16-0190-44F4-9CED-08AF91145361}\InprocServer32" = "$homedrive\\Windows\\System32\\msrahc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28BCCB9A-E66B-463C-82A4-09F320DE94D7}\InProcServer32" = "(($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)F12App\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\F12Tools\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{28D18BFA-85E3-4419-9AFD-7ECCE53F8D13}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{28F4700C-44EB-4BD8-BC25-95812DE98E08}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{291EE2A7-BFA5-4e9e-A358-C93655556A6C}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{2933BF90-7B36-11D2-B20E-00C04F983E60}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2933BF91-7B36-11D2-B20E-00C04F983E60}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2933BF94-7B36-11D2-B20E-00C04F983E60}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{293ccd4b-0d59-43c0-997e-3449c780ac65}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{294935CE-F637-4E7C-A41B-AB255460B862}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{294EC7E3-94B7-4A6C-8636-09B33674D58F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2959380c-1567-40ec-80b0-05907ad6f9de}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29625281-51CE-3F8A-AC4D-E360CACB92E2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2965e715-eb66-4719-b53f-1672673bbefa}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2968B3C3-CC07-40BE-B78F-094B7C310479}\InProcServer32" = "$homedrive\\Windows\\system32\\Vault\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{297EE78C-BA95-4E94-81D3-D6E7F089C7B5}\InProcServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2981a36e-f22d-11e5-9ce9-5e5517507c66}\InprocServer32" = "$homedrive\\Windows\\System32\\wscapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2984A9DB-5689-43AD-877D-14999A15DD46}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsrx_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{298a6f17-03e7-4bd4-971c-544f359527b7}\InProcServer32" = "$homedrive\\Windows\\System32\\lapscsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{299D0193-6DAA-11d2-B679-006097DF5BD4}\InProcServer32" = "$homedrive\\Windows\\system32\\msieftp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29A6CF6F-D663-31A7-9210-1347871681FC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{29B5828C-CAB9-11D2-B35C-00105A1F8177}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29C69707-875F-3678-8F01-283094A2DFB1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{29C98DFC-AC6B-4788-BDDD-CA41D6D3704A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{29CE1D46-B481-4AA0-A08A-D3EBC8ACA402}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29D365AE-D23B-4004-8658-5ED2A59CD77C}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29EA1611-529B-4113-8EE3-EE0F6DD2C715}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29F06F0C-FB7F-44A5-83CD-D41705D5C525}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ncprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{29FC9ABF-E561-44FD-A8A4-657A4C4DD953}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdmproxy140\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A005C11-A5DE-11CF-9E66-00AA00A3F464}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A038320-5727-4FDC-B703-1EC222C6911F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.HumanInterfaceDevice\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2a11bae2-fe6e-4249-864b-9e9ed6e8dbc2}\InprocServer32" = "$homedrive\\Windows\\System32\\mp4sdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A11F42C-3E81-4ad4-9CBE-45579D89671A}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A3EFC7B-7CEB-496A-9E69-DC40AD179F51}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A614240-A4C5-4C33-BD87-1BC709331639}\InprocServer32" = "$homedrive\\Windows\\System32\\bidispl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A6F3A80-5976-11D2-9524-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A744BD8-158A-4bbf-9513-4A656F6C01D7}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A7B042D-578A-4366-9A3D-154C0498458E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2aa2b5fe-b846-4d07-810c-b21ee45320e3}\InProcServer32" = "$homedrive\\Windows\\System32\\xmlprovi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2AABFCD0-1797-11D2-ABA2-00C04FB6C6FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2AC015F2-103C-4186-A114-A0C70AC941AC}\InprocServer32" = "$homedrive\\Windows\\System32\\BingASDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2ACFC431-A2E7-4FC6-8C4B-0B4BD201A797}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2ae64751-b728-4d6b-97a0-b2da2e7d2a3b}\InProcServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2af6bcaa-f526-4803-aeb8-5777ce386647}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2AFCECBA-ABA5-404B-8F4F-15BECC9FEE20}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ndisimplatcim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B1C6F4F-4F0D-490F-8D88-A3EAF66130AC}\InProcServer32" = "$homedrive\\Windows\\System32\\MaintenanceUI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B1FFCE5-DD0F-4f1f-B150-A87AE69CE009}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2B20FE1A-1B2C-4DC5-8595-616B0E182FD1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2b2cad40-19c1-4794-b32d-397e41d5e8a7}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B32ECC3-C3BB-4701-82BB-EB7FE370D999}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B4099B4-ABED-4014-881E-AB96D7CC4E48}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B445657-7159-42A1-84F0-538E82EE5DE9}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B4B0612-E1F4-376F-A9B9-86BA3F72A670}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2B4F54B1-3D6D-11d0-8258-00C04FD5AE38}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2b8f8a9e-51b6-46db-9d45-ffb33e023823}\InProcServer32" = "$homedrive\\Windows\\System32\\HdcpHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2BB6C5E0-C2B9-3608-8868-21CFD6DDB91E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2BC0EF29-E6BA-11d1-81DD-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2BE1981C-CCF9-4D8B-8DA2-E217287AD983}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2c012f55-1318-44f4-a235-20c4df918fb3}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinDataModelServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C01D35E-79DE-45DE-9D5F-11923C2D0894}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C1EAB37-9E2A-459A-821F-9C58036CF42D}\InProcServer32" = "$homedrive\\Windows\\System32\\KeywordDetectorMsftSidAdapter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C256447-3F0D-4CBB-9D12-575BB20CDA0A}\InProcServer32" = "$homedrive\\Windows\\System32\\faultrep\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C28A1A9-EDB1-4A70-AE14-E0A5C7E81C2C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv100p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C314899-8F99-3041-A49D-2F6AFC0E6296}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2C3E140B-7A0D-42d1-B2AA-D343500A90CF}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C63E4EB-4CEA-41B8-919C-E947EA19A77C}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C673043-FC2E-4d67-8920-517D24DEBD2C}\InProcServer32" = "$homedrive\\Windows\\System32\\ActionCenterCPL\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C731933-62A6-31A0-AFE1-1034F46361D2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2C786341-0E36-4BE8-AA51-524CC1F2AE15}\InProcServer32" = "$homedrive\\Windows\\System32\\NPSMDesktopProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2c86c843-77ae-4284-9722-27d65366543c}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C875213-FCE5-11d1-A0B0-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2c932742-413c-4b70-82c9-252094ed4c3c}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C941FC5-975B-59BE-A960-9A2A262853A5}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C941FCE-975B-59BE-A960-9A2A262853A5}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C941FD4-975B-59BE-A960-9A2A262853A5}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2CA8CA52-3C3F-11D2-B73D-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2cc48587-c7b0-4472-8996-3fb162547ce8}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2CD39202-3A2F-4935-9A86-65B919919A7F}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2CFD5F1D-BFAA-4B72-B035-6B691F3A204C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.XboxLive\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2d05c0a1-f85f-4830-b3e0-dc26e701d9aa}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D0F7985-9EE6-427C-AAAA-A9D72CBFA853}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Credentials\.UI\.UserConsentVerifier\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D11CF10-4FE0-45B2-88DF-6FFBF92BE9AB}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D12DD17-6C4E-456E-A953-D210E3C64176}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D1F634B-BA35-4BA0-A3B4-B03AC5FE724A}\InProcServer32" = "$homedrive\\Windows\\system32\\BthpanContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D20F990-DA11-4B00-A082-C548EDC78428}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Usb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D2E24CB-0CD5-458F-86EA-3E6FA22C8E64}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2d3468c1-36a7-43b6-ac24-d3f02fd9607a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D3F8A1B-6DCD-4ED5-BDBA-A096594B98EF}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D4156A2-897A-11DB-BA21-001185AD2B89}\InprocServer32" = "$homedrive\\Windows\\System32\\nlmgp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D4156A5-897A-11DB-BA21-001185AD2B89}\InprocServer32" = "$homedrive\\Windows\\System32\\nlmgp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D4D6F88-8B41-40A2-B297-3D722816648B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVVideo\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{2D533768-8BD9-4D3D-8754-25E0CF5A1290}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D5EC63C-1B3E-3EE4-9052-EB0D0303549C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2d702e20-b8a1-4c0b-a218-32223ce86ea1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\TeamViewer\\outlook\\TeamViewerMeetingAddinShim64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D709E52-123F-49b5-9CBC-9AF5CDE28FB9}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2D8F1801-A70D-48F4-B76B-7F5AE022AB54}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{2DA1964A-7232-48BF-9946-D0510557C492}\InprocServer32" = "$homedrive\\Windows\\System32\\LegacyNetUX\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}\InprocServer32" = "$homedrive\\Windows\\System32\\wlangpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DB47AE5-CF39-43C2-B4D6-0CD8D90946F4}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DB5E62B-0D67-495F-8F9D-C2F0188647AC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DCD1DAF-A110-49c0-BFDB-6FDF557B5FDF}\InProcServer32" = "$homedrive\\Windows\\System32\\cscobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DCD7FDB-8809-48E4-8E4F-3157C57CF987}\InprocServer32" = "$homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MPUXAGENT\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{2de55398-137e-4c4c-bf72-5cc7f18d9109}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2DE92DB3-CD3E-4ad6-80F9-089036E1C81E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DE967D6-9BE7-458A-9B1C-6D3A6FF425F8}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DEA658F-54C1-4227-AF9B-260AB5FC3543}\InprocServer32" = "$homedrive\\Windows\\System32\\PlaySndSrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2DECBCB7-BAC0-316D-9131-43035C5CB480}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2DF0ACC2-6D97-491b-9581-70A6001FD25A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvsvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2df7b51e-797b-4d06-be71-d14a52cf8421}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsvr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2dfb3a35-6071-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E095DD0-AF56-47e4-A099-EAC038DECC24}\InprocServer32" = "$homedrive\\Windows\\System32\\PsisDecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E0BC2B7-6C66-4FD1-AF55-C2D671754431}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E1271D5-2FF2-4EA4-9647-C67A82A2D85C}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2e167ea7-85e3-4395-995a-77af9875d79a}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E17C0EF-2851-459b-A3C8-27A41D4BC9F7}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E1AE5DF-5A6F-420A-9B7B-41E5BA8FA36D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E1DCDFF-AB5C-47B6-AD3B-169E65344720}\InProcServer32" = "$homedrive\\Windows\\System32\\RemoteWipeCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E4D68DD-F8F7-4B7F-8BF9-E71B84A97F17}\InProcServer32" = "($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)F12AppFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E7700B7-27C4-437F-9FBF-1E8BE2817566}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E8EA1E5-F406-46F5-AF10-661FD6539F28}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E8FCB18-A0EE-41AD-8EF8-77FB3A370CA5}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E9E59C0-B437-4981-A647-9C34B9B90891}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2EBDEE67-3505-43f8-9946-EA44ABC8E5B0}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2EC4C88A-9A75-4C36-A07E-419CB0D78B8E}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\Shared\\MoIME_ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2ED326ED-C4C0-434a-B4CE-FB0318D725A7}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2eeb4adf-4578-4d10-bca7-bb955f56320a}\InprocServer32" = "$homedrive\\Windows\\System32\\WMADMOD\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{2EF44DE8-80C9-42D9-8541-F40EF0862FA3}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F0888F4-2C5B-4353-A395-40CF3B6BA29E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F096B28-C65D-4C05-A37E-7E88735E32FA}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{2F2165FF-2C2D-4612-87B2-CC8E5002EF4C}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F29854D-D87F-4B47-8BF8-0C25AEB83FB0}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2f2dc38b-34d2-462c-add4-f74cc15510a1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2f49412a-3ed3-4da7-b041-f2a55fcc1150}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F5E64E3-0B46-4DAF-AEA6-721994E5AC8B}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F63C206-752B-4B26-9DA7-CD264895A7C8}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F6CE85C-F9EE-43CA-90C7-8A9BD53A2467}\InProcServer32" = "$homedrive\\Windows\\System32\\fhshl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2f712f0f-ed71-474b-9529-9b9627ed0a6b}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F7ED5E3-06C9-4B61-97DB-067CC8AE0664}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F81081E-C2AB-40CA-8E3C-AF6022E8AFF4}\InProcServer32" = "$homedrive\\Windows\\System32\\vmsifproxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F86B8BD-EFF5-4C07-8FA5-60788517EF95}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\PrintManagementProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2f8891f3-f692-450e-a222-ff28d9daaaf8}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2f893820-7089-46cc-a6e8-c4aae45f151b}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F94D7B0-BF63-11D1-A6A2-00C04FB9988E}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FA44F43-D422-4F90-91EF-E6F067BCB947}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FAE8AFE-04A3-423a-A814-85DB454712B0}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBEncoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FB21955-33A2-46A0-8F60-B475DC33FD5A}\InProcServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FC216B0-D2E2-4967-9B6D-B8A5C9CA2778}\InprocServer32" = "$homedrive\\Windows\\System32\\VmSynthNic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FD96798-0D65-4D57-A095-B57679740E37}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FF8EAD4-2977-4908-95D8-4BC4CAA1F541}\InProcServer32" = "$homedrive\\Windows\\system32\\ScanPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{300a81e6-a674-4d84-9eed-0337389e7e66}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{301056D0-6DFF-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{301B94BA-5D25-4A12-BFFE-3B6E7A616585}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{301F77B0-A470-11D0-8821-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3020E6D8-7D1A-4D3C-8B62-C4D4B8F28434}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30276b4f-f25c-457c-a4b7-08574f8ea528}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3028902F-6374-48b2-8DC6-9725E775B926}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3037B4CD-A40B-401B-B676-2017EE8FAFF4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows NT\\Accessories\\WordpadFilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{304FC8AB-6643-4DAA-9027-4B21389DCB2D}\InProcServer32" = "$homedrive\\Windows\\system32\\RemoveDeviceElevated\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F391-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f3B3-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f3B4-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f3BB-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F3C2-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F3D6-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F3D9-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f499-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F4CF-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f4e1-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtmled\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f4f5-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtmled\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f4f8-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f5be-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050F5C8-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f664-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f667-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f67D-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f6b3-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f6cd-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f6d4-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\iepeers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3050f819-98b5-11cf-bb82-00aa00bdce0b}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtmled\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30510483-98B5-11CF-BB82-00AA00BDCE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30562646-f7b5-4a62-8ced-6f30a70587c5}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imefiles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30590066-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30590067-98b5-11cf-bb82-00aa00bdce0b}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3059ACB9-9875-44CC-ABA9-EAA6EFBEBA39}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30655864-f8cd-45f9-b7d6-6721acb69c5e}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3080F90D-D7AD-11D9-BD98-0000947B0257}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3080F90E-D7AD-11D9-BD98-0000947B0257}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{308f826d-88e4-4323-9ad0-51c006148211}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30AC0B94-3BDB-3199-8A5D-ECA0C5458381}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{30B33640-5250-4328-92C5-A1618E406A3A}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30C3B080-30FB-11d0-B724-00AA006C1A01}\InProcServer32" = "$homedrive\\Windows\\System32\\imgutil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30d49246-d217-465f-b00b-ac9ddd652eb7}\InProcServer32" = "$homedrive\\Windows\\System32\\IDStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{30fb9e79-61dc-4a66-bbff-a362b09a6866}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31143611-AC65-4568-AE76-8A9DAD50EA88}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationControllerPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31220067-EE3A-4ED7-B579-103D74930CB5}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{312A6884-4ABE-4C4E-AE73-C69874C8318B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{312AB530-ECC9-496E-AE0E-C9E6C5392499}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3133A7FE-BC5F-4D81-BF02-184ECC88D66E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3134ef9c-6b18-4996-ad04-ed5912e00eb5}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31350404-77AC-4471-B33A-9020A2EDA1D1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3140F5B6-093F-4F94-9141-5DF9EE10BC27}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31430c59-bed1-11D1-8De8-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3156EC84-29BD-4EAA-AE0A-817ED606FA99}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{317D06E8-5F24-433D-BDF7-79CE68D8ABC2}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{317E92FC-1679-46FD-A0B5-F08914DD8623}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31879719-E751-4DF8-981D-68DFF67704ED}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31b11d80-9ed7-44f7-b1cd-c95992a738b9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{31b231f6-546d-4f9b-ac95-0f963d72559c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{31C967B5-2F8A-3957-9C6D-34A0731DB36C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{31D0E08E-1AC8-4B50-B591-25F091984A8C}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31D353B3-0A0A-3986-9B20-3EC4EE90B389}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{320D405F-CC9A-43AE-AB18-90428066E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3213CD15-4DF2-415F-83F2-9FC58F3AEB3A}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32314BC0-BE41-42EA-89B5-2CE53085E22D}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsPinyinDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32314BC0-BE41-42EA-89B5-2CE53085E22E}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsPinyinDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3237555C-C043-4836-AFDE-570D63E9EDAB}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskFlowDataEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3240F7D1-E591-4807-8370-08625D21CAAB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Energy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32433977-2283-4853-8a6d-e7f4cc3053bc}\InprocServer32" = "$homedrive\\Windows\\System32\\fhtask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{324C321B-D91A-451C-AB3C-362A7849773D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32557D3B-69DC-4F95-836E-F5972B2F6159}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3261BF13-9B3E-4DD5-B6D3-0006F3FFE8BC}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32624F4B-F1D5-4877-989E-555640109D2B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32665929-D77E-4ab5-8C08-FBF409B8A233}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3279762A-C6C8-4274-A2FB-FD390DAEB7E7}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3283EEBF-E67D-31AC-8481-A968F3A77E9A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{328489c8-f25e-44b5-93d4-8f811b4dc326}\InProcServer32" = "$homedrive\\Windows\\system32\\AuthExt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{328B0346-7EAF-4BBE-A479-7CB88A095F5B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3292A418-BAC2-4BBF-BB07-66A1CB3B8B7D}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\NetPeerDistCim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32B533BB-EDAE-11d0-BD5A-00AA00B92AF1}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32be5ed2-5c86-480f-a914-0ff8885a1b3f}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpviewerax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32C5A81F-27C0-4E66-A894-786F646F1236}\InprocServer32" = "$homedrive\\Windows\\system32\\eapp3hst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32DA2B15-CFED-11D1-B747-00C04FC2B085}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32E7DC13-1E22-4D7E-8AC7-D2E718DE8042}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32EAC0F0-1C2B-4775-942E-0AC11121A0F4}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32ff7589-83d5-4e34-86fe-a2d5e27bdf3a}\InprocServer32" = "$homedrive\\Windows\\System32\\srmstormod\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33154C99-BF49-443D-A73C-303A23ABBE97}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3318360C-1AFC-4D09-A86B-9F9CB6DCEB9C}\InProcServer32" = "$homedrive\\Windows\\system32\\msutb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{331B60DA-9E90-4DD0-9C84-EAC4E659B61F}\InprocServer32" = "$homedrive\\Windows\\system32\\spool\\drivers\\x64\\3\\PrintConfig\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{331E8B29-D4C3-4278-B005-671BB919C320}\InprocServer32" = "$homedrive\\Windows\\System32\\DefaultPrinterProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{331E9F3D-9351-4A4D-A2CA-75A16BAFF7BB}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3336B8BF-45AF-429f-85CB-8C435FBF21E4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{333C7BC4-460F-11D0-BC04-0080C7055A83}\InprocServer32" = "$homedrive\\Windows\\System32\\tdc\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{333E6924-4353-4934-A7BE-5FB5BDDDB2D6}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{334125C0-77E5-11D3-B653-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{334796A6-31DC-4B5D-8FD7-14E82186417C}\InprocServer32" = "$homedrive\\Windows\\System32\\DDDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{334857cc-f934-11d2-ba96-00c04fb6d0d1}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{336475D0-942A-11CE-A870-00AA002FEAB5}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33708259-ba1b-4add-9de4-d4f280ea1223}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\VSPerfCollectionTools\\vs2022\\x64\\VSPerfCorProf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{337448ee-2a70-43f7-99f9-40f2857950b9}\InprocServer32" = "$homedrive\\Windows\\System32\\chakra\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33831ED4-42B8-11D2-93AD-00805F853771}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\dsprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}\InProcServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33BCC8EC-0D01-4E10-AD3D-4DAF749873ED}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33C1D1ED-4DAE-47C8-943A-955BC0DAE7C4}\InProcServer32" = "$homedrive\\Windows\\System32\\NetworkProxyCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33C4643C-7811-46FA-A89A-768597BD7223}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33C53A50-F456-4884-B049-85FD643ECFED}\InProcServer32" = "$homedrive\\Windows\\system32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33c86cd6-705f-4ba1-9adb-67070b837775}\InProcServer32" = "$homedrive\\Windows\\System32\\l2nacp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33C89616-F807-4957-BF34-A1C91D7A1A2E}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\NVXDBat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33D9A761-90C8-11d0-BD43-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33D9A762-90C8-11d0-BD43-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33de48c4-943f-4b96-8cd8-b117c94576cf}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33F3C8F8-27A1-4DF3-A525-E89CB18881A5}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33FACFE0-A9BE-11D0-A520-00A0D10129C0}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{33fd0563-d81a-4393-83cc-0195b1da2f91}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{341301BA-111C-408D-A8E3-14D1DDC62A6F}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34212D32-6E9E-11E2-BDA0-6B2B6288709B}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3429E395-176B-4a0a-863D-FCA6B19073BA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_9\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3449A1C8-C56C-11D0-AD72-00C04FC29863}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34568a1f-8d5a-4080-99c7-464e2cb40008}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{346D5B9F-45E1-45C0-AADF-1B7D221E9063}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{347CBD95-DD80-4144-81AF-AE803E633A00}\InProcServer32" = "$homedrive\\Windows\\System32\\DXPPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{348ef17d-6c81-4982-92b4-ee188a43867a}\InProcServer32" = "$homedrive\\Windows\\System32\\(XpsDocumentTargetPrint|XpsPrint)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3495E5FA-2A90-3CA7-B3B5-58736C4441DD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{34996c91-9897-40eb-944b-28b5c9308383}\InProcServer32" = "$homedrive\\Windows\\System32\\DevPropMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34B707DC-1133-4EBC-B380-21387A50A89D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\AuraSDK\\AuraSdk_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34c10250-4e26-4950-924d-c2d3651ca94f}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Sockets\.PushEnabledApplication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34C445BA-07EB-4b5d-8EE9-F66BB9DA403B}\InprocServer32" = "$homedrive\\Windows\\system32\\wpdmtpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34CF19E8-A7BA-4775-82CF-FA760A342587}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34DEA897-7365-4f60-BA26-53DA4B89226D}\InProcServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34e5efee-eb08-4714-878a-11bbcbfc592b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpcmld\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34e6abfe-e9f4-4ddf-895a-7350e198f26e}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34E72398-AB74-43DA-8355-7F60D1BE3F73}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Connectivity\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3508C064-B94E-420b-A821-20C8096FAADC}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{351F7C7A-6186-405E-91A8-32DF82F437C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3522D7AF-4617-4237-AAD8-5860231FC9BA}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3523c2fb-4031-44e4-9a3b-f1e94986ee7f}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3529B1D2-313A-4202-BD3E-5996B7E18A10}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\IpsPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{352EC2B7-8B9A-11D1-B8AE-006008059382}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{3540D440-5B1D-49cb-821A-E84B8CF065A7}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{354F7156-A4F6-47F5-A028-FE2000E92132}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintFilterPipelinePrxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{355822FC-86F1-4BE8-B5F0-A33736789641}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{356F2F88-05A6-4728-B9A4-1BFBCE04D838}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35786D3C-B075-49b9-88DD-029876E11C01}\InProcServer32" = "$homedrive\\Windows\\system32\\wpdshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{357b663c-d9fa-4188-99af-2943920f96c5}\InProcServer32" = "$homedrive\\Windows\\system32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35A069A1-A029-46AF-B531-454C0F66D61F}\InprocServer32" = "$homedrive\\Windows\\system32\\NetworkStatus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35A5E985-12E6-46ee-B385-E887F3940FB0}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35b1d3bb-2d4e-4a7c-9af0-f2f677af7c30}\InprocServer32" = "$homedrive\\Windows\\System32\\fdWNet\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35B78F79-B973-48C8-A045-CAEC732A35D5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35C5242B-7455-4F9C-962B-369EA43ED6F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35C61CC2-5851-4F2D-89B6-4F9BB4B4193F}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35cc8486-4fb1-11d3-a5da-00c04f88249b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\APPLETS\\imkrcac\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35E62C5B-07E5-40C1-AFA5-CF69E8701BB3}\InProcServer32" = "$homedrive\\Windows\\System32\\Microsoft\.Bluetooth\.Proxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{35E946E4-7CDA-3824-8B24-D799A96309AD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{361290c0-cb1b-49ae-9f3e-ba1cbe5dab35}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\MpProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3613F1D2-C9A5-4f41-A070-E5BB823B2E5B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{361778EC-D741-4CE1-90F9-743435F56E13}\InProcServer32" = "$homedrive\\Windows\\system32\\RemoveDeviceContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36383E77-35C2-4B45-8277-329E4BEDF47F}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{363BE3C0-DDD4-4B21-BC6D-7E9DF8CE19CB}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3642BC7D-5E16-4EBD-BBD1-FFFDBE8E8644}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.NetworkOperators\.ESim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3647D1DF-A67B-4882-A74E-67EEB4178F89}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3650f781-4549-46ff-b799-8f2df2541dbb}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{366D4750-AB08-4957-BF80-82133AF2BC86}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{366F6FDF-839D-4ED5-BFC6-7301A42A2F20}\InProcServer32" = "$homedrive\\Windows\\System32\\FrameServerClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{367E582C-F71C-4BF9-AA1B-9F62B793E9C5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{368D4A96-945D-4D76-A3F8-B29636EB9758}\InprocServer32" = "$homedrive\\Windows\\System32\\NotificationPlatformComponent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3692CA39-E082-4350-9E1F-3704CB083CD5}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{369647e0-17b0-11ce-9950-00aa004bbb1f}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3697790B-223B-484E-9925-C4869218F17A}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36a479ef-8b67-4d01-8dda-753cfcb2dd96}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36CB6E0C-78C1-42B2-9943-846262F31786}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36D7422C-EDCF-4881-8054-ADC2AE9B4819}\InprocServer32" = "$homedrive\\Windows\\System32\\WindowsIoTCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36DCDA30-DC3B-4D93-BE42-90B2D74C64E7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{36f0bd14-d84d-468c-b79c-9990f3fa897f}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36F54939-CD3B-4C73-92D5-F9A389ED631C}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{36F99745-23C9-4C9C-8DD5-CC31CE964390}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{370A1D5D-DDEB-418C-81CD-189E0D4FA443}\InprocServer32" = "$homedrive\\Windows\\System32\\VBICodec\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{370BF38C-0451-42e8-9B03-0CAFA95081B6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{370F8FEA-1B4A-470E-B5F7-25AAFC6702F2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{371CCB71-D045-45C5-9952-BB07B1711B0B}\InprocServer32" = "$homedrive\\Windows\\system32\\cmgrcspps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3722c3b1-82e8-4022-8b27-1f8a68b44ac7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{372FCE38-4324-11D0-8810-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3730BBF8-631A-48FB-9085-E2143C11563B}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3734FF83-6764-44B7-A1B9-55F56183CDB0}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{373984C9-B845-449B-91E7-45AC83036ADE}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{374050DD-6190-3257-8812-8230BF095147}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{374CEDE0-873A-4C4F-BC86-BCC8CF5116A3}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{374EE8E8-DEA6-4DB7-B14A-B43EE3E8948E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3756e7f5-e514-4776-a32b-eb24bc1efe7a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{375ff002-dd27-11d9-8f9c-0002b3988e81}\InprocServer32" = "$homedrive\\Windows\\System32\\fdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37600FF7-470B-408F-8718-F2A7ABF0EF20}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{376666C8-61CF-4152-8398-7015FFE165EE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37708080-3519-4ED6-91D5-A64B643863FB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{378E0446-5384-43B7-8877-E7DBDD883446}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA}\InProcServer32" = "$homedrive\\Windows\\System32\\InputCloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37903486-85EE-4733-AEFC-8C4496F19DE4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Web\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{379E501F-B231-11D1-ADC1-00805FC752D8}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37A61C8B-7F8E-4d08-B12B-248D73E9AB4F}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37B0353C-A4C8-11D2-B634-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37B03543-A4C8-11D2-B634-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37B03544-A4C8-11D2-B634-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37de7045-5056-456f-8409-c871e0f8b0e0}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37E92A92-D9AA-11D2-BF84-8EF2B1555AED}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37ea3a21-7493-4208-a011-7f9ea79ce9f5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{38018C19-B0ED-489F-A9DC-96EBF886450B}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3807BD87-D141-439A-B711-25A053A020F7}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5307D61-F9BC-4de1-94EA-1DEF24DF4BB2}\InProcServer32" = "$homedrive\\Windows\\system32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d54e0450-f515-42ac-bf22-b254a2764d49}\InProcServer32" = "$homedrive\\Windows\\system32\\ime\\shared\\imever\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38086A84-31E7-4C8E-BB0E-9758D634C7E1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Shell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38142214-ED63-4965-9214-1BBC06E130E9}\InProcServer32" = "$homedrive\\Windows\\System32\\execmodelclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5C82393-AB49-47e9-BE80-B7801443BE43}\InProcServer32" = "$homedrive\\Windows\\System32\\defaultlocationcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{381DDA3C-9CE9-4834-A23E-1F98F8FC52BE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3829dfb4-9eed-434e-88c7-dcbe810b1a6e}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{382AC1B5-9C16-4CCD-9D00-D5053977B8D6}\InprocServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{384742B1-2A77-4CB3-8CF8-1136F5E17E59}\InProcServer32" = "$homedrive\\Windows\\system32\\dwmapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{384ea5ae-ade1-4e8a-8a9b-7bea78fff1e9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3852C2E2-4A16-4b11-8E71-F8904C37EC3D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{385906fb-1482-4f64-8a23-5d74e1ce1815}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{385A91BC-1E8A-4e4a-A7A6-F4FC1E6CA1BD}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3866CD68-0FC3-4563-8888-E107295BC485}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\binaryinfo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38795471-5D0E-452d-BEF8-5339CAF9E30B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3882134d-14cf-4220-9cb4-435f86d83f60}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3886CA90-AB09-49D1-A047-7A62D096D275}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{388D606F-AF7B-4AD2-AC22-6B4FE70CE286}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3gpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{389EA17B-5078-4CDE-B6EF-25C15175C751}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38be0989-9830-49a8-985b-7741219fd0fb}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38BFA80B-F989-45B2-AAFD-1E0C04E50E56}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38F03426-E83B-4E68-B65B-DCAE73304838}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38fbe75f-57ac-4c15-8988-7c5284c51508}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcProxyStubs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{38FE8128-B282-4A98-B2B0-0BAFB49815FD}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3901CC3F-84B5-4FA4-BA35-AA8172B8A09B}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{390E92C9-FA66-3357-BEF2-45A1F34186B9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3918D75F-0ACB-41F2-B733-92AA15BCECF6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3936E9E4-D92C-4EEE-A85A-BC16D5EA0819}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{39472C07-79C6-4924-96E6-41F699CBAD9C}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{394C052E-B830-11D0-9A86-00C04FD8DBF7}\InProcServer32" = "$homedrive\\Windows\\system32\\els\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{395165EF-52F5-4520-81D6-4D18ED96DDCC}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{39524FB7-028F-4035-8C2B-8E65D2B17E67}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{395671b6-129e-4e7a-a2d8-204cd8e72d6a}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3957a5ba-4448-bec4-24ac-16c4f5784ef5}\InProcServer32" = "$homedrive\\Windows\\system32\\windows\.cortana\.Desktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3967CF2E-B192-4ACA-9D45-868D51201B32}\InProcServer32" = "$homedrive\\Windows\\System32\\WindowsManagementServiceWinRt\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{397c7fba-8bed-47b7-a2b3-07c5fc18b8e9}\InProcServer32" = "$homedrive\\Windows\\System32\\HoloSI\.PCShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{398D1A2A-A0EB-4C2E-BBF9-671EF93CC6EE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.PointOfService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{39AEDC00-6B60-46DB-8D31-3642BE0E4373}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{39B68485-6773-3C46-82E9-56D8F0B4570C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{39C42C60-85F5-40ED-BF39-975A0AA0B2A4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{39F8D76B-0928-11D1-97DF-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A04D93B-1EDD-4f3f-A375-A03EC19572C4}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A410F21-553F-11d1-8E5E-00A0C92C9D5D}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A445657-23E2-4E1E-82AB-D1836874C536}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A57CB65-1857-4239-B130-FA0F8F06522A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A582F0C-9A06-43C3-BB82-7CEEED538DF7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3a59a18b-f03c-48cb-8aa7-181d35291fd7}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjptip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A614B00-FB18-46F3-950E-682A46A48B9F}\InProcServer32" = "$homedrive\\Windows\\System32\\UICOM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A66787A-8B15-4321-A09D-6E862D2DD2D4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\Edge\\Application\\.*\\PdfPreview\\PdfPreviewHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A8CCCBC-0EFD-43a3-B838-F38A552BA237}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A9428A7-31A4-45E9-9EFB-E055BF7BB3DB}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3A965ED4-0E14-4A1B-A71E-972F1C1044F6}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3ABEAFC4-F48F-4517-A9B0-8AD6A94A99A1}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3AC83423-3112-4AA6-9B5B-1FEB23D0C5F9}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3ad05575-8857-4850-9277-11b85bdb8e09}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3ADCE5CC-13C8-4573-B328-ED438EB694F9}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3AE86B20-7BE8-11D1-ABE6-00A0C905F375}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{3B0398C9-7812-4007-85CB-18C771F2206F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3B0BD075-929C-4E52-AAD1-458C81A10B24}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B1599F9-E00A-4BBF-AD3E-B3F99FA87779}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3b176793-1c28-467d-bf13-ff0ac689e18b}\InprocServer32" = "$homedrive\\Windows\\system32\\eapsimextdesktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B17FD9C-F7CF-4736-AF6B-616C2D1ED854}\InprocServer32" = "$homedrive\\Windows\\system32\\activationmanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B1A329C-6562-4183-B229-981062FE72BD}\InprocServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B1B5147-715E-49e0-AE9F-ADF86724BB89}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B269952-C2CE-40CC-BB36-94858E0A7CD4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B2B6775-70B6-45AF-8DEA-A209C69559F3}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3B2B92B7-5787-4eb5-931D-9F69E47497A9}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3b2e0be3-3790-4e9d-bec4-91a532702e63}\InProcServer32" = "$homedrive\\Windows\\System32\\ResourceMapper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B4BE995-61E3-430C-8977-0B21E4427BE7}\InprocServer32" = "$homedrive\\Windows\\System32\\TSWorkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3b517f36-1fd1-41a8-afb3-8b016072f218}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B64E510-8192-4224-A7AD-67E9A86EC479}\InProcServer32" = "$homedrive\\Windows\\System32\\(SetNetworkLocationFlyout|SetNetworkLocation)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B68879A-2CE5-419D-BB70-F39E1F66B06F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\mraut\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_0\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B873591-9427-4418-A086-79175735738F}\InprocServer32" = "$homedrive\\Windows\\System32\\smbwmiv2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3bb4118f-ddfd-4d30-a348-9fb5d6bf1afe}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3BB46AD9-4D42-4EC6-B96B-68973FCD26F1}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BBE95A4-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BBE95DA-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BBE95F5-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BBE95FB-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BBE95FE-C53F-11d1-B3A2-00A0C9083365}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BC4EE9F-1FC1-44DB-81FA-AD94DEC7AF30}\InprocServer32" = "$homedrive\\Windows\\System32\\ieapfltr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BD1F243-9BC4-305D-9B1C-0D10C80329FC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3BE786A0-0366-4F5C-9434-25CF162E475E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3BE786A0-0366-4F5C-9434-25CF162E475F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3BE786A2-0366-4F5C-9434-25CF162E475E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3BE786A2-0366-4F5C-9434-25CF162E475F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEOLEDB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3BEE4890-4FE9-4A37-8C1E-5E7E12791C1F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BF043EF-A974-49B3-8322-B853CF1E5EC5}\InprocServer32" = "$homedrive\\Windows\\System32\\SndVolSSO\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3BF2A5F1-C95E-4F7B-B939-582DB5F32B81}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3bf39b72-0fab-440f-9bcf-1f7fed0fe037}\InProcServer32" = "$homedrive\\Windows\\System32\\wslapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3bfe6eb7-281d-4333-999e-e949e3621de7}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C02F46D-C9D2-4F11-A384-53F0CF917214}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Oracle\\VirtualBox\\VBoxC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3c2654c6-7372-4f6b-b310-55d6128f49d2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3C305196-50DB-11D3-9CFE-00C04FD930C5}\InprocServer32" = "($homedrive\\Windows\\system32\\ddraw\.dll|ddraw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C4059B0-FB29-4EBA-9947-289E0D824E64}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C4512DC-AEFA-4a1e-95CF-EDF896092447}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3C4708DC-B181-46A8-8DA8-4AB0371758CD}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C5F432A-EF40-4669-9974-9671D4FC2E12}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C852D74-7E49-4FF3-BF21-81EF888078D4}\InprocServer32" = "$homedrive\\Windows\\system32\\mpeval\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C925F4E-F236-4BCF-9330-F15B8AD8765B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3C9DCA8B-4410-3143-B801-559553EB6725}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3ccdfa5a-33ef-46d4-89c6-06298e2e539a}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3CD3CA1E-2232-4BBF-A733-18B700409DA0}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3CDED51A-86B4-39F0-A12A-5D1FDCED6546}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3CE4EA62-DACB-4CC2-848F-C11130F06908}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D07A539-35CA-447C-9B05-8D85CE924F9E}\InprocServer32" = "$homedrive\\Windows\\System32\\cca\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3d09c1ca-2bcc-40b7-b9bb-3f3ec143a87b}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\VMware\\VMware Workstation\\vmnetbridge\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D0C78BF-98BF-4B97-835E-E4269F8E038D}\InprocServer32" = "$homedrive\\Windows\\System32\\TSWorkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D0DB8B7-7484-42BE-BF61-3427A2459A2B}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D0FD779-0C2D-4708-A9BA-62F7458A5A53}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{3D112E22-62B2-11D1-9FEF-00600832DB4A}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3d154a2d-d911-437e-a30c-5f56a9b7081d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3D1975AF-48C6-4f8e-A182-AC5012248AB5}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D367908-928F-3C13-8B93-5E1718820F6D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3D4C34BE-7208-4F3B-B74F-37AD231350EF}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D547E96-E934-4756-8DAE-72E0FB535AE4}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D78E42E-FAEA-47D6-8EE2-301A5DEBC025}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnServiceDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D85CB81-C520-436f-8C9A-8292041A9BDD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3dad6c5d-2167-4cae-9914-f99e41c12cfa}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3DBEE9A1-C471-4B95-BBCA-F39310064458}\InprocServer32" = "$homedrive\\Windows\\System32\\WindowsCodecsRaw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3DBFEF35-6F15-4453-BC19-D7AD5CC04756}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3DC09436-7D83-4BA0-ADDC-CD47F996C5BA}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3dd53d40-7b8b-11D0-b013-00aa0059ce02}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3dd6bec0-8193-4ffe-ae25-e08e39ea4063}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3DD82D10-E6F1-11D2-B139-00105A1F77A1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\cimwin32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3DDB2114-9285-30A6-906D-B117640CA927}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3DECD5DD-A27B-48DC-8BAA-2682CFA265FF}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3df11260-58db-46ca-85ee-35459e115b9c}\InprocServer32" = "$homedrive\\Windows\\system32\\(eappcfgui|eappcfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3E000D72-A845-4CD9-BD83-80C07C3B881F}\InProcServer32" = "$homedrive\\Windows\\System32\\cmlua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3e0f30a5-6c0c-4daf-b41e-7b1011ed7e1c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E23C363-A84B-4B28-A1B0-75EA10595B53}\InProcServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E298C47-0DA7-4418-AAC7-7A6D1F800A14}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E458037-0CA6-41aa-A594-2AA6C02D709B}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E4D4F1C-2AEE-11D1-9D3D-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E500C0C-5D15-4610-8095-7CEBD4C43F24}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E54D3BF-8EFA-400f-B875-B86A309E1CBF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E5509F0-1FB9-304D-8174-75D6C9AFE5DA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3E58004E-4CE5-4681-BA56-785A67F9F0DC}\InProcServer32" = "$homedrive\\Windows\\System32\\playtomanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E5FC7F9-9A51-4367-9063-A120244FBEC7}\InprocServer32" = "$homedrive\\Windows\\System32\\cmstplua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E6147C9-902B-48BA-B1B8-5B1FFD874FB2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E669F1D-9C23-11d1-9053-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E6D2639-4C23-4325-B8DB-6E373F20C733}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3e71f26d-136f-4545-813f-35276024b705}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E73C6F7-8937-4C07-85D9-D4447A4BE072}\InProcServer32" = "$homedrive\\Windows\\System32\\GameBarPresenceWriter\.proxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3e83c6bd-8ef0-491c-b4a8-8853e9973829}\InProcServer32" = "$homedrive\\Windows\\System32\\DockInterface\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3E8E0F03-D3FD-3A93-BAE0-C74A6494DBCA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3EA48300-8CF6-101B-84FB-666CCB9BCD32}\InProcServer32" = "$homedrive\\Windows\\system32\\docprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3EC569DC-6FB5-45D1-8B46-E122D27962E9}\InProcServer32" = "$homedrive\\Windows\\system32\\CoreUIComponents\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3EDE135F-6671-4237-A315-E2CCE24DED5B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\compresslib\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3EE60F5C-9BAD-4CD8-8E21-AD2D001D06EB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3EE8CE0F-2507-42DE-A453-8F4D554256E8}\InprocServer32" = "$homedrive\\Windows\\System32\\DefaultDeviceManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3EF76D68-8661-4843-8B8F-C37163D8C9CE}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F052B8E-512B-419D-9E06-9B9ADDC7118C}\InProcServer32" = "$homedrive\\Windows\\System32\\MapsCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F13AB10-AE95-48AA-8C94-533730760A20}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F281000-E95A-11d2-886B-00C04F869F04}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3F30C968-480A-4C6C-862D-EFC0897BB84B}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F35F070-99D6-11D2-8D10-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3f454f0e-42ae-4d7c-8ea3-328250d6e272}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3F4A4283-6A08-3E90-A976-2C2D3BE4EB0B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3F4DACA4-160D-11D2-A8E9-00104B365C9F}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F4F9726-2972-4DD4-AB7C-D119F36803B0}\InProcServer32" = "$homedrive\\Windows\\System32\\fingerprintcredential\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F66389B-BA65-4782-BA9D-B66367C8E7F1}\InProcServer32" = "$homedrive\\Windows\\System32\\powercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F66CF3F-68BE-485e-8BFE-0A005B2D00F2}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F69F351-0379-11D2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F9A55B0-8355-4CE4-B6D6-A65CAC63DB67}\InProcServer32" = "$homedrive\\Windows\\system32\\CellularAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3F9FF9AB-AC3E-40BB-BBC9-27B648AD1FB2}\InprocServer32" = "$homedrive\\Windows\\system32\\XboxGipRadioManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FA7A1C5-812C-3B56-B957-CB14AF670C09}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3FA82DD5-DDA4-4025-ADFA-DE0DCE2C1F56}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3fb11ad5-928d-4534-b217-2ffbfdbb6395}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\mscand20\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FB717AF-9D21-3016-871A-DF817ABDDD51}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3FBA60A6-7BF5-4868-A2CA-6623B3DFFEA6}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FBF60BD-90B2-2C2F-7286-128BBCF72015}\InProcServer32" = "$homedrive\\Windows\\System32\\ShellCommonCommonProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FC0B520-68A9-11D0-8D77-00C04FD70822}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3FC77A3B-14C6-41B6-ACC5-ED80223D81C4}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FD37ABB-F90A-4DE5-AA38-179629E64C2F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3fd7f233-a716-472e-8f2f-c25954f34e96}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FDCEEC6-B14B-37E2-BB69-ABC7CA0DA22F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{3FF23902-CD1F-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FF292B6-B204-11CF-8D23-00AA005FFE58}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadce\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FF566F0-6E6B-49D4-96E6-B78886692C62}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3FFB3B8C-EB99-472b-8902-E1C1B05F07CF}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4000C97B-791B-425F-9AD6-5046210503B1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40031115-09D2-3851-A13F-56930BE48038}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4003191F-71FF-49A2-B591-05C606FADB8B}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4020D514-E884-42E9-91DC-E1F09004D3F0}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4026492F-2F69-46B8-B9BF-5654FC07E423}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40319fab-cc2f-4cea-890c-1e676b139824}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4039B326-9F27-4B4A-B460-47A0C6A39D5C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\MSGFILT\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{4044e60c-7b01-4671-a97c-04e0210a07a5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Input\.Inking\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{404A6DE5-D4D6-4260-9BC7-5A6CBD882432}\InprocServer32" = "$homedrive\\Windows\\System32\\mfdvdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4057C1AD-A51F-40BB-B960-22888CEB9812}\InProcServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{405C2D81-315B-3CB0-8442-EF5A38D4C3B8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{405EC9AB-0C64-4B9F-B726-3A858A9E2BD6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4075B76F-FCDC-43B6-B0B9-5A005B38B335}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.immersiveshell\.serviceprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4082B93D-99AF-4E6F-BE9F-6AA54C0BC6BE}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40871C59-AB40-471F-8DC3-1F259D862479}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40AE2088-CE00-33AD-9320-5D201CB46FC9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{40AFA0B6-3B2F-4654-8C3F-161DE85CF80E}\InProcServer32" = "$homedrive\\Windows\\System32\\IDStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40B47A8F-C442-4f06-8304-AA1058EDEEA0}\InProcServer32" = "$homedrive\\Windows\\System32\\POSyncServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40B6664F-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40B66650-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40B66660-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40B66661-4972-11D1-A7CA-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40b8879a-9b26-42fd-8fec-00c32f8443be}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40B92C37-5745-4872-96CE-24D0BE89763A}\InProcServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40F59CE8-4044-45BA-9D52-69D52EFEADCE}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40F5CB5E-86D7-4378-A87C-CE06448EF6B2}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{410381DB-AF42-11D1-8F10-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41070793-59E4-479A-A1F7-954ADC2EF5FC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4125dd96-e03a-4103-8f70-e0597d803b9c}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{413A30F0-F269-42A0-99D9-3792FF29DAB1}\InprocServer32" = "$homedrive\\Windows\\System32\\DeviceUpdateCenterCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41445657-4118-4689-B300-E7F1EB61FF7B}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41457294-644C-4298-A28A-BD69F2C0CF3B}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfasfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{414ac301-8d95-43c8-99d0-3f25e4076945}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\mscand20\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4150F050-BB6F-11D0-AFB9-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{418008F3-CF67-4668-9628-10DC52BE1D08}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{418201e2-6c9f-42cc-9061-586d9f46ac9e}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnServiceDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{418AFB70-F8B8-11CE-AAC6-0020AF0B99A3}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{418c8b64-5463-461d-88e0-75e2afa3c6fa}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{418DFBFA-4DE8-41C0-A272-727307252DBD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41937347-2aba-4d4c-a4ca-6fe4f11f1bac}\InprocServer32" = "$homedrive\\Windows\\system32\\NetworkItemFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41945702-8302-44A6-9445-AC98E8AFA086}\InprocServer32" = "$homedrive\\Windows\\system32\\MSRAWImage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41970D73-92F6-36D9-874D-3BD0762A0D6F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{41B23C28-488E-4E5C-ACE2-BB0BBABE99E8}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{41B87F43-0094-486B-BD50-8B47FD614BCE}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41B89B6B-9399-11D2-9623-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41B9BE05-B3AF-460C-BF0B-2CDD44A093B1}\InprocServer32" = "$homedrive\\Windows\\system32\\xmlfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41CA099A-B8AF-4fc2-A285-03FAEAA8B109}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{41E300E0-78B6-11ce-849B-444553540000}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41FCCC3A-1FA1-4949-953A-6EE61C46A4D1}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41fd88f7-f295-4d39-91ac-a85f3149a05b}\InProcServer32" = "$homedrive\\Windows\\System32\\WinTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42044394-8c34-11d1-83bc-00c04fbbc34e}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42060D27-CA53-41f5-96E4-B1E8169308A6}\InprocServer32" = "$homedrive\\Windows\\system32\\RacEngn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42071712-76d4-11d1-8b24-00a0c9068ff3}\InProcServer32" = "$homedrive\\Windows\\system32\\deskadp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42071713-76d4-11d1-8b24-00a0c9068ff3}\InProcServer32" = "$homedrive\\Windows\\system32\\deskmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42089D2D-912D-4018-9087-2B87803E93FB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MSOSB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{42150CD9-CA9A-4EA5-9939-30EE037F6E74}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{421516C1-3CF8-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4224AC84-9B11-3561-8923-C893CA77ACBE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{42281387-EDEA-477C-89DB-6F7033D518AB}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4234d49b-0245-4df3-b780-3893943456e1}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42393E99-8513-42d3-8AEA-E0E5FBDC8F64}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{424B71AF-0695-11D2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{424bed78-ef88-4b7c-945c-b8cf46d56e20}\InProcServer32" = "$homedrive\\Windows\\system32\\credprovhost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{426C82B9-D74C-4873-BC90-28FC7BE0A32A}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4278BB8C-D0FC-4380-A2C4-525B9A396F5B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{427B34A5-2199-467e-BAC2-112AC1A48391}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{427BC7E3-F833-4584-8745-CFAB9D7A5761}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4286FA72-A2FA-3245-8751-D4206070A191}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4290CAD6-A75D-4AC8-A496-56DBBB28EB88}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{429AF92C-A51F-11d2-861E-00C04FA35C89}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{429bc048-379e-45e0-80e4-eb1977941b5c}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42C9B9F5-16FC-47ef-AF22-DA05F7C842E3}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42D69529-136E-49D6-8407-3026853038BF}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{42DFB618-A403-4401-908F-FE979B2215C8}\InProcServer32" = "$homedrive\\Windows\\System32\\LAPRXY\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{42FEBF74-65EA-4D27-B3AC-86393B6AFAE1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{430A9F0B-D367-47BD-9F8C-22CCFC022C50}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_StorageSense\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{430da762-8632-4840-bc61-3eeaa078e62e}\InProcServer32" = "$homedrive\\Windows\\system32\\display\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43136EB5-D36C-11CF-ADBC-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4315D437-5B8C-11D0-BD3B-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43232233-8338-4658-ae01-0b4ae830b6b0}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4323664B-B884-4929-8377-D2FD097F7BD3}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagSvcs\\DiagnosticsHub\.StandardCollector\.Proxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{432D76CE-8C9E-4EED-ADDD-91737F27A8CB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{43324B33-A78F-480F-9111-9638AACCC832}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{433CA926-9887-3541-89CC-5D74D0259144}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4340CECB-0B6B-4F58-B71C-2B2177AE404B}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{434A6274-C539-4E99-88FC-44206D942775}\InprocServer32" = "$homedrive\\Windows\\System32\\AccessibilityCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4356b08e-ecb5-43d1-8e9f-7bef4fc960fe}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{435899C9-44AB-11D1-AF00-080036234103}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{437ff9c0-a07f-4fa0-af80-84b6c6440a16}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{43886CD5-6529-41c4-A707-7B3C92C05E68}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{439E63BD-5D7D-4ABB-A3AA-0AB1E884AA80}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv140p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43A1BB0E-2CE9-405C-8799-12E7D7550D3F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43A8F463-4222-11d2-B641-006097DF5BD4}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43B07326-AAE0-4B62-A83D-5FD768B7353C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43B63097-9F58-41CC-9375-BB546CE27F4E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\AacVGAHal\\AacVgaHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43C103A6-696F-4D05-AF04-9E44A6844B30}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43CD41AD-3B78-3531-9031-3059E0AA64EB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{43D7FDB4-B94D-4415-8792-54AF9FBEBB82}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\netttcim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{43FB1553-AD74-4ee8-88E4-3E6DAAC915DB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4405b37b-60fe-49ed-ba8f-691a78f84daf}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44090B31-CDF9-4ad1-8182-DB5DA3627974}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InProcServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileCoAuthLib64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44181B13-AE94-3CFB-81D1-37DB59145030}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{442e102b-6f60-4baf-b151-e6e4db841788}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{442FF639-3DA0-4A70-A1D8-579E26C46A60}\InprocServer32" = "$homedrive\\Windows\\system32\\PSModuleDiscoveryProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{443C8934-90FF-48ED-BCDE-26F5C7450042}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{443E7B79-DE31-11D2-B340-00104BCC4B4A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4444AC9E-242E-471B-A3C7-45DCD46352BC}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{444F7305-1D7D-4BE9-8C29-CC3F1D220C40}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4456C5C3-DC01-4FF3-AF4E-06F4EBCC3B09}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{446CDD3B-EFFC-4B23-A625-62CED58C7749}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxAPDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4479C009-4CC3-39A2-8F92-DFCDF034F748}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{447EDBE5-0080-4036-A0BB-7B84C58C604F}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44838BA6-68C6-4951-8CD5-1DD1B4787B53}\InProcServer32" = "$homedrive\\Windows\\System32\\WebcamUi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4487FB5A-9D22-4718-AA9F-C6ED6C4EC169}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44A50F5F-78E2-4D17-930C-68BB9F69EC9E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44af8604-94bb-40fe-8bd0-a8d7d36b44a7}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44C76ECD-F7FA-411c-9929-1B77BA77F524}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44CB442B-9DA9-49df-B3FD-023777B16E50}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44EC053A-400F-11D0-9DCD-00A0C90391D3}\InprocServer32" = "$homedrive\\Windows\\system32\\atl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44f3dab6-4392-4186-bb7b-6282ccb7a9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\mydocs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44F9A03B-A3EC-4F3B-9364-08E0007F21DF}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{451256BC-E7E8-4506-90F3-8746E107BF08}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4517D557-7ECD-4E88-B330-BE9C95ED9AF6}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4522c772-9a2b-4920-ad7f-62d3d15eac52}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{45234E3E-61CC-4311-A3AB-248082554482}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{453D9F45-B2A2-4DF0-B42A-51A3AEC86452}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{454AFB66-FA8C-4152-9CD6-2A8781B3D505}\InProcServer32" = "$homedrive\\Windows\\System32\\ChatApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{455703F5-BA4C-45A4-B754-AACF7A26B8F4}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{455ACF57-5345-11D2-99CF-00C04F797BC9}\InProcServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{455F24E9-7396-4A16-9715-7C0FDBE3EFE3}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{455f6102-c83a-4d07-ba36-b6da9d589ae2}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4564b25e-30cd-4787-82ba-39e73a750b14}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4582746F-473B-4022-A7E9-887CBEDD8F85}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4582EBA9-6AA1-4D79-824E-728929EF455D}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{45874AC3-B98F-4851-9046-5CFE1E747DD4}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{458AA3B5-265A-4B75-BC05-9BEA4630CF18}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4590F812-1D3A-11D0-891F-00AA004B2E24}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4599202D-460F-3FB7-8A1C-C2CC6ED6C7C8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{45BA127D-10A8-46EA-8AB7-56EA9078943C}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{45F2C32F-ED16-4C94-8493-D72EF93A051B}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{45FB4600-E6E8-4928-B25E-50476FF79425}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{45FD65ED-6BC2-47ae-B391-9E2B79F07C52}\InProcServer32" = "$homedrive\\Windows\\System32\\systemcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46031ba1-083f-47d9-8369-23c92bdab2ff}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46080CA7-7CB8-3A55-A72E-8E50ECA4D4FC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{461CDD3F-D54E-4033-A0AA-6CD24F152AA1}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{461DED9E-81D5-494F-BC96-6432C8645733}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{463AE13F-C7E5-357E-A41C-DF8762FFF85C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{46408325-AF70-4AB0-90D9-7B1779C1AD87}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46445657-1F22-11DA-A2D9-00065B83EE53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\TabIpsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{464510d9-3477-4c8b-97cb-4b4c29f04354}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4655840e-ab1a-49d0-a4c4-261fa1c20e86}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4657278A-411B-11d2-839A-00C04FD918D0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{46615ACE-28BC-47A8-8176-3713A64C9FDC}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAA5-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAA6-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAA7-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAA8-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAA9-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAAA-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAAB-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAAC-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAAD-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAAE-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAAF-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAB0-D393-11D0-9A56-00C04FB68B66}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{4662DAB0-D393-11D0-9A56-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{466936A9-E281-45E6-A239-9FE53D07B4A5}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenContent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4693FF15-B962-420A-9E5D-176F7D4B8321}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\ODFFILT\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{4697144f-7735-49dc-bb05-401766f4cf39}\InProcServer32" = "$homedrive\\Windows\\System32\\AdaptiveCards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{469afbdf-084f-4dc9-904f-9e824c48bc37}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{46A4DD5C-73F8-4304-94DF-308F760974F4}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46b73c9c-0e62-41ee-86c0-2f8997777f48}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46C166AA-3108-11D4-9348-00C04F8EEB71}\InProcServer32" = "$homedrive\\Windows\\system32\\(hnetcfgclient|hnetcfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46CB32FA-B5CA-8A3A-62CA-A7023C0496C5}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46CF315B-2D3A-4765-852A-6500C42D9865}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{46CF410A-49FF-4045-88EB-71E23CCA4773}\InProcServer32" = "$homedrive\\Windows\\system32\\CMUSBDACASIO64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46E31370-3F7A-11CE-BED6-00AA00611080}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{46E97093-B2EC-3787-A9A5-470D1A27417C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{46FBCEA0-A318-4B91-89D2-AFE7869481A7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Identity\.Provider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4705A6B4-E4CB-4ed1-AF8D-851C644A0459}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{470C0EBD-5D73-4d58-9CED-E91E22E23282}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47206204-5ECA-11D2-960F-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4723D2C7-E315-466B-A8D3-AB7A5B74B383}\InProcServer32" = "$homedrive\\Windows\\System32\\ffbroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47354492-827E-4b8a-B318-C80EBA1381F0}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{473AA80B-4577-11D1-81A8-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4740316D-2BF9-48EB-A48B-F68298E968AB}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47405ACE-008F-43AB-B6F0-91875029ADC7}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47497F33-F83E-40E0-A1FB-9DE499CA3C7C}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4753da60-5b71-11cf-b035-00aa006e0975}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{475743C2-3495-4FD5-B23D-CB36CF813D19}\InProcServer32" = "$homedrive\\Windows\\System32\\InternetMail\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{475CBF15-C58F-4756-B626-88E2BB50B2FC}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{475E398F-8AFA-43A7-A3BE-F4EF8D6787C9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{477A7D8E-8D26-3959-88F6-F6AB7E7F50CF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{477EC299-1421-4bdd-971F-7CCB933F21AD}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{478B7068-DF14-446F-B5C1-A5B877E7665D}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.ServiceDiscovery\.Dnssd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4795051A-6429-4D63-BCA0-D706532954AC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{47AADF36-BA70-4E24-BBDE-20EC9FC139FD}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvlicensings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47B706B0-B103-4AFD-8ECF-16C2DDF81C15}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\netnccim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47B73B70-1964-444A-B390-FAB1565DCAA3}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47D35BB4-71CC-4810-9669-D03D9FF7CEAF}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceDriverRetrievalClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47D3C68D-7D85-3227-A9E7-88451D6BADFC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{47D4D946-62E8-11cf-93BC-444553540000}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47DFBE54-CF76-11D3-B38F-00105A1F473A}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{47e30d54-dac1-473a-aff7-2355bf78881f}\InprocServer32" = "$homedrive\\Windows\\system32\\ngctasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48025243-2D39-11CE-875D-00608CB78066}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{480FF4B0-28B2-11D1-BEF7-00C04FBF8FEF}\InProcServer32" = "$homedrive\\Windows\\System32\\dmusic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48123BC4-99D9-11D1-A6B3-00C04FD91555}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{482BF0FB-CA13-453C-9C9C-BEF9C8F06BA9}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{483afb5d-70df-4e16-abdc-a1de4d015a3e}\InprocServer32" = "$homedrive\\Windows\\system32\\azroles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4844E347-E354-4B24-9E0C-F4AE31AD55DB}\InProcServer32" = "$homedrive\\Windows\\System32\\XblAuthManagerProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48527bb3-e8de-450b-8910-8c4099cb8624}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{48728B3F-F7D9-36C1-B3E7-8BF2E63CE1B3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4876DC0E-F963-4227-9A8F-19872B75D231}\InProcServer32" = "$homedrive\\Windows\\system32\\StorageContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48794782-6a1f-47b9-bd52-1d5f95d49c1b}\InprocServer32" = "$homedrive\\Windows\\System32\\pnpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{487af411-1d5e-4f7f-b4f4-4721fe1e95d9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{487BA7B8-4DB0-465F-B122-C74A445A095D}\InProcServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{488A2E25-B509-4238-97BA-CAB956F8C2F5}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{488C2839-8ABA-4368-B4DF-8EF11CF99F99}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{489331DC-F5E0-4528-9FDA-45331BF4A571}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{489AE5DA-059A-4aca-93E5-7B7CFD1BD752}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48A75519-CB7A-3D18-B91E-BE62EE842A3E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{48AD62E8-BD40-37F4-8FD7-F7A17478A8E6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{48B4E58D-2791-456C-9091-D524C6C706F2}\InProcServer32" = "$homedrive\\Windows\\System32\\devicengccredprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48C6BE7C-3871-43cc-B46F-1449A1BB2FF3}\InProcServer32" = "$homedrive\\Windows\\System32\\cscobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48C6E96F-A2F3-33E7-BA7F-C8F74866760B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{48D0CFE7-3128-3D2C-A5B5-8C7B82B4AB4F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{48d7ed61-3f9f-4d74-8c2f-a10541d4151d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjplmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48da6741-1bf0-4a44-8325-293086c79077}\InprocServer32" = "$homedrive\\Windows\\system32\\iasdatastore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48DE828C-730C-49AF-AE84-759C609911EE}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48E277F6-4E74-4cd6-BA6F-FA4F42898223}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48e2ed0f-98c2-4a37-bed5-166312ddd83f}\InprocServer32" = "$homedrive\\Windows\\System32\\mfreadwrite\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48E73304-E1D6-4330-914C-F5F514E3486C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONBttnIE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48e7caab-b918-4e58-a94d-505519c795dc}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{48F24523-C8A9-4B95-B848-7BD3D0FE14D7}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48F4CE0C-BC11-4C9B-A165-2097308F9C25}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{48F61E71-E203-4B69-AE20-3F222B5BEC89}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{493CD38D-ED47-4855-BBD0-B887DB871A87}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{493D909F-6CF0-4328-85F5-16A31E12DA58}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4955DD33-B159-11D0-8FCF-00AA006BCC59}\InProcServer32" = "$homedrive\\Windows\\system32\\msimtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{496241E9-161B-4007-AF56-B4E006F65FA9}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49638B91-48AB-48B7-A47A-7D0E75A08EDE}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{497D141A-7A42-4BB6-B017-863FD4DA36BF}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4988dd22-ccec-48ec-9271-5951e8653903}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{498A0351-BA2F-46DD-96D9-C19988FEA0C4}\InProcServer32" = "$homedrive\\Windows\\System32\\AppLockerCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{498B0949-BBE9-4072-98BE-6CCAEB79DC6F}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{499e58ea-40c6-4601-9730-a046d0451f98}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{499EAEEA-2737-4849-8BB6-47F107EAF358}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49A832D7-C7B3-4556-8716-5BDC745C3C1B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49ACAA99-F009-4524-9D2A-D751C9A38F60}\InProcServer32" = "$homedrive\\Windows\\System32\\wscui\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{49BD2BB3-DFBE-4E01-BF21-7DE89ED09ACD}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49C407EF-78B9-4C82-A40B-2FE02F8E771D}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49c47ce0-9ba4-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49C47CE4-9BA4-11D0-8212-00C04FC32C45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49c47ce5-9ba4-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49E9AE53-4547-4045-AAD1-CDC3C6C95D6C}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFrameworkInternalPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49eb6558-c09c-46dc-8668-1f848c290d0b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{49EBD8BE-1A92-4A86-A651-70AC565E0FEB}\InprocServer32" = "$homedrive\\Windows\\System32\\TelephonyInteractiveUser\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49f171dd-b51a-40d3-9a6c-52d674cc729d}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49F371E1-8C5C-4d9c-9A3B-54A6827F513C}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49F585C0-CE12-4306-9100-B6A28857B10B}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A03DCB9-6E17-4A39-8845-4EE7DC5331A5}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4a04656d-52aa-49de-8a09-cb178760e748}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4A1E5ACD-A108-4100-9E26-D2FAFA1BA486}\InprocServer32" = "$homedrive\\Windows\\System32\\icsigd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A1F5480-8271-4CB3-B094-05B41149D025}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A2286E0-7BEF-11CE-9BD9-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A38E4EF-F55B-4A59-8F02-BDEFB0B1308A}\InprocServer32" = "$homedrive\\Windows\\System32\\MSNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{4a4d5d1b-869b-4474-806a-4daaa7673e78}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A4EBE8E-AE27-4AA3-B702-F365C4A90FAC}\InProcServer32" = "$homedrive\\Windows\\System32\\fxsutility\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A5869CF-929D-4040-AE03-FCAFC5B9CD42}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A65D267-1539-4BD1-921D-1C49B3E58EB7}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4a698512-80cc-4b0e-8ae6-f394ef39f9d0}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A6B8BAD-9872-4525-A812-71A52367DC17}\InProcServer32" = "$homedrive\\Windows\\System32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A6CBDD0-0922-4463-A2AB-D8F8E21F4A86}\InProcServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A6D04A8-4DCA-4089-933F-0004601872C0}\InProcServer32" = "$homedrive\\Windows\\System32\\wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A6F23B2-B8D6-4CBE-959A-054716902320}\InProcServer32" = "$homedrive\\Windows\\System32\\dmenrollengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4a714c8e-e664-4024-9c74-1a82a3da842a}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4a76b469-7b66-4dd4-ba2d-ddf244c766dc}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4a7ded0a-ad25-11d0-98a8-0800361b1103}\InProcServer32" = "$homedrive\\Windows\\system32\\mydocs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4AA53027-562B-4653-A8EF-9B92FF74ADA6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4ABF5A06-5568-4834-BEE3-327A6D95A685}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4ac6c205-2853-4bf5-b47c-919a42a48a16}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4AE7C26B-90C8-49FC-8138-84119B709D49}\InProcServer32" = "$homedrive\\Windows\\System32\\RemoteAppLifetimeManagerProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4AF3D182-65F6-401E-B0A8-02B5928D77CA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4AF3F4A4-06C8-4B79-A523-633CC65CE297}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipdskq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4AF4A5FC-912A-11D1-B945-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B0A2997-E555-4F84-B45B-68AB8BC57635}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpendp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B314A47-12E0-4d52-95FE-084B9224DD4F}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4b360c3c-d284-4384-abcc-ef133e1445da}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B534112-3AF6-4697-A77C-D62CE9B9E7CF}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B59AFCC-B8C3-408A-B670-89E5FAB6FDA7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B601364-A04B-38BC-BD38-A18E981324CF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4b77066b-8a60-4162-9456-1b1e994eaf77}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B78D326-D922-44f9-AF2A-07805C2A3560}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B905E0F-8E31-4853-BA9F-9BE581A35535}\InProcServer32" = "$homedrive\\Windows\\System32\\InputInjectionBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4B966436-6781-4906-8035-9AF94B32C3F7}\InprocServer32" = "$homedrive\\Windows\\system32\\spp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4BB24BC2-ABFD-433D-935F-5950B42A4B3F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}\InprocServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4bc70a10-fbab-4ada-8fc4-e4f898a6f810}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4BCCBCE4-20E8-44A1-A170-C9A4D941CBA4}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\dnsclientcim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4BDAFC52-FE6A-11d2-93F8-00105A11164A}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4be5c3b3-53a2-4f2f-af9d-d26a5327eb92}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\APPLETS\\imkrskf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4BE89AC3-603D-36B2-AB9B-9C38866F56D5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4be8a061-c73b-4f23-8114-317aae3e8698}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatializerApo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4bec2015-bfa1-42fa-9c0c-59431bbe880e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4bf684f8-3d29-4403-810d-494e72c4291b}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4c1b3c1d-5c78-4a73-be8b-de1ec4b3637e}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C1D33D1-3161-4A76-9487-2677CD589C11}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C1FC63A-695C-47E8-A339-1A194BE3D0B8}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C3624D8-57AF-11E1-B779-E5CC4724019B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C3E5154-0E70-4C0C-9EDC-08277E8F163A}\InProcServer32" = "$homedrive\\Windows\\System32\\ProvPluginEng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C3EBFD5-FC72-33DC-BC37-9953EB25B8D7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4C4A5E40-732C-11D0-8816-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C596AEC-8544-4082-BA9F-EB0A7D8E65C6}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C599241-6926-101B-9992-00000B65C6F9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C5EBD71-431C-43A0-B93C-3EBF917B540F}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C60517F-C1F8-473A-B1D8-247952876A5A}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C6470A6-3F91-4f41-850B-DB9BCD074537}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeedsbs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4c649c49-c48f-4222-9a0d-cbbf4231221d}\InProcServer32" = "$homedrive\\Windows\\system32\\photowiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C69C54F-9824-38CC-8387-A22DC67E0BAB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4C6F940C-3CFE-11D2-9EE7-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4c870c20-4ed3-4235-9a2a-7185f8a87d06}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\DICTS\\imkrhjd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4c892621-6757-4fe0-ad8c-a6301be7fba2}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C8A0917-F587-4ECF-9C89-48147528F4E1}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C8CC9CB-80CA-4e16-9F60-F5EB55092361}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C8D0AF0-7BF0-4f33-9117-981A33DBD4E6}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_5\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4c9ba57a-e8eb-49db-ba55-811b3e1358b4}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4C9E22B1-0C5D-4D89-8692-6DA1EABED20D}\InProcServer32" = "$homedrive\\Windows\\System32\\\\ProvOps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4cadfae1-5512-456a-9d65-5b5e7e9ca9a3}\InprocServer32" = "$homedrive\\Windows\\System32\\portabledeviceclassextension\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4CB26C03-FF93-11d0-817E-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4CB43D7F-7EEE-4906-8698-60DA1C38F2FE}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4CBE39A3-BD8A-4D51-9BD3-B7853737FD93}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4CCEA634-FBE0-11d1-906A-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4cd0569b-0239-4602-84a3-cfc5a9167c82}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4ce6767d-e09b-45dc-831d-20c8b4ea9a26}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4CE73F9A-1A00-4EE5-8F17-A4A2A09BC7C7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Payments\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4CEC0D02-DEF7-4158-813A-C32A46945FF7}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4CFC7932-0F9D-4BEF-9C32-8EA2A6B56FCB}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmidcprv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4D111E08-CBF7-4f12-A926-2C7920AF52FC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4D187AC2-D815-3B7E-BCEA-8E0BBC702F7C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4D2F086C-6EA3-101B-A18A-00AA00446E07}\InprocServer32" = "mapi32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4D317113-C6EC-406A-9C61-20E891BC37F7}\InprocServer32" = "$homedrive\\Windows\\System32\\RACPLDlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4D3BD4B7-AD22-4DC4-B889-311DAE0D8AEB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4D4D7FAB-11CF-4314-AF4F-B84E96791CEF}\InProcServer32" = "$homedrive\\Windows\\System32\\AppManagementConfiguration\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4d4dedaa-43c5-480d-9ee0-1464f9f4ff4b}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsvr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4d56df98-e082-4bf4-9a09-df655d8427b6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4D5C8C2A-D075-11d0-B416-00C04FB90376}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4D728E35-16FA-4320-9E8B-BFD7100A8846}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DB116D1-9B24-4DFC-946B-BFE03E852002}\InProcServer32" = "$homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MPUXAGENT\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{4DB1AD10-3391-11D2-9A33-00C04FA36145}\InProcServer32" = "$homedrive\\Windows\\System32\\sti\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4db26476-6787-4046-b836-e8412a9e8a27}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DB61F89-EECE-4317-89D2-EC17BF6B27DB}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DBBE9A0-1992-4CCB-B913-2E53DB60E1EF}\InProcServer32" = "$homedrive\\Windows\\System32\\Docking\.VirtualInput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DC9C264-730E-4CF6-8374-70F079E4F82B}\InProcServer32" = "$homedrive\\Windows\\System32\\pwsso\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DD075CB-CCF0-4A26-B970-2ACD092662DB}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\LGJoyHid\\LGHppFrc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DD1D1C3-B36A-4eb4-AAEF-815891A58A30}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DDA1941-77A0-4fb1-A518-E2185041D70C}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DDB6D36-3BC1-11d2-86F2-006008B0E5D2}\InprocServer32" = "$homedrive\\Windows\\System32\\wavemsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4de7016c-5ef9-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DEC904B-9381-4E53-9E1F-7F8168A715F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Patriot\\Aac_Patriot Viper DRAM RGB\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4df0c730-df9d-4ae3-9153-aa6b82e9795a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DF929E7-4C5E-4587-A598-7ED7B3D6E462}\InProcServer32" = "$homedrive\\Windows\\System32\\UICOM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DFED3F9-B794-4d3c-973B-DDA1C28105A9}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E0680A0-A0A2-11D0-8821-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E14FBA2-2E22-11D1-9964-00C04FBBB345}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E1CB7EC-16D2-4EE0-87EA-B96AD49975E4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E29E41B-D022-4D7D-9ADE-E42352C23DD6}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E3073AC-CE55-B07D-A284-1641E2236DDA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Vpn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4e3c6645-b839-4a06-a27b-0190f9e6a0af}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E3C66D5-58D4-491E-A7D4-64AF99AF6E8B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E40F770-369C-11d0-8922-00A024AB2DBB}\InProcServer32" = "$homedrive\\Windows\\system32\\dssec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E515531-7A71-3CDD-8078-0A01C85C8F9D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4E655C26-D8F7-4B99-85CF-7FDA53EB7C30}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E77131D-3629-431c-9818-C5679DC83E81}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E77EC8F-51D8-386C-85FE-7DC931B7A8E7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4E781F7F-9430-4F56-A233-70E6E0AC1AF9}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_StorageSense\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E7D6B2C-1F7E-45B6-9EC0-8FA541BDD163}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4ea9a1b7-e521-4813-a9f8-ba6484902cb5}\InProcServer32" = "$homedrive\\Windows\\System32\\Smbhelperclass\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4eb2f086-c818-447e-b32c-c51ce2b30d31}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4EB31670-9FC6-11CF-AF6E-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4eb7409a-6062-41b9-a28d-9586036785a6}\InProcServer32" = "$homedrive\\Windows\\System32\\tzautoupdate\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4EC3C18E-7203-41E7-990D-A72B57E286A9}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4ED3A719-CEA8-4BD9-910D-E252F997AFC2}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4EDCB26C-D24C-4e72-AF07-B576699AC0DE}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4eeb9b7c-0f47-4fae-a284-a0ec40c5719a}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4EF5D9A8-0116-4C93-8142-0AB93AB603A5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4EFE2452-168A-11d1-BC76-00C04FB9453B}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F23C296-F56E-45AF-904D-D245BF750759}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F272C37-F0A8-350C-867B-2C03B2B16B80}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4f37e3a9-1d2b-42ab-a5b0-31fc05627def}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F414126-DFE3-4629-99EE-797978317EAD}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4f495385-cab7-4470-9e0d-1bc0ec792e04}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F4DB904-CA35-4A3A-90AF-C9D8BE7532AC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsrx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F4DD15E-F431-4536-AEE8-AF20BA847A33}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F58F63F-244B-4c07-B29F-210BE59BE9B4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F637904-2CAB-4F0E-8688-D3717EBD2975}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F664F91-FF01-11D0-8AED-00C04FD7B597}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4f6bcd94-c2a5-42ce-8dbc-31e794be4630}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F786E23-0F32-4888-BA02-6BB105AE3024}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FA18276-912A-11D1-AD9B-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FA480D8-32A4-4849-B774-DE8BD5242A4C}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4fab6371-6d65-47ba-b8f1-ca6273c6c69e}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{4FB1CE6D-5334-414A-BBBC-F892A47587E3}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FC7F090-041C-4730-BD24-AF4BA8A2A5E0}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\NVXDBat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FD2A832-86C8-11D0-8FCA-00C04FD9189D}\InProcServer32" = "$homedrive\\Windows\\System32\\ddrawex\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FDBC3E5-7121-4487-AB95-B58EC04648DB}\InprocServer32" = "$homedrive\\Windows\\system32\\ucmhc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FDEF69C-DBC9-454e-9910-B34F3C64B510}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FE04BFD-85B9-49DD-B914-F4C9556B9DA6}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FE24495-28CE-4920-A4C4-E556E1F0DF2A}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4fe2776b-b0f9-4396-b5fc-e9d4cf1ec195}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FE8C25F-C8E9-4322-98EE-A11E117CF049}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FF2FE0E-E74A-4B71-98C4-AB7DC16707BA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FF787E6-9A86-4BA3-BED9-8019A2B4BE1C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FFFD315-B178-46E5-A386-A45C7AFF4154}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{50040C1D-BDBF-4924-B873-F14D6C5BFD66}\InprocServer32" = "$homedrive\\Windows\\System32\\mswmdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50055B2F-D4FF-42E1-9D8F-5D48F327F3AC}\InprocServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{500DD1A1-B32A-4a37-9283-1185FB613899}\InProcServer32" = "$homedrive\\Windows\\system32\\timedate\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{50125552-EC89-4049-B1B7-5FDBE38C8509}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvsvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5014B7C8-934E-4262-9816-887FA745A6C4}\InprocServer32" = "$homedrive\\Windows\\system32\\TpmTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{502ed6c5-59b7-4f5d-9d64-03d2bcbad0db}\InprocServer32" = "$homedrive\\Windows\\System32\\TransportDSA\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50369004-DB9A-3A75-BE7A-1D0EF017B9D3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{503E79BF-1D09-4764-9D72-1EB0C65967C6}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsRasterService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{503E9FD4-127C-4d72-84BF-CF3EC3F80D40}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5052A832-2C0F-46c7-B67C-1F1FEC37B280}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{505734c0-686d-456a-9cb3-c666cbda5972}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5058292D-A244-4840-AB44-480975C4FFE4}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50613c35-8120-4721-849e-2df54d82cc33}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjplmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{506229ae-09c7-4ffd-8ec9-6a957f6da601}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{506D89AE-909A-44f7-9444-ABD575896E35}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{506F4668-F13E-4AA1-BB04-B43203AB3CC0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VISSHE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5088B39A-29B4-4d9d-8245-4EE289222F66}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50A41EF1-6BFA-4b7e-973E-798EA0BEBAD4}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50AAD4C2-61FA-3B1F-8157-5BA3B27AEE61}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{50B1904B-F28F-4574-93F4-0BADE82C69E9}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50B6327F-AFD1-11d2-9CB9-0000F87A369E}\InprocServer32" = "$homedrive\\Windows\\system32\\adsldp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50CA0A46-1588-4161-8ED2-EF9E469CED5D}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50CE75BC-766C-4136-BF5E-9197AA23569E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.Schema\.Shell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50D42F09-ECD1-4B41-B65D-DA1FDAA75663}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\InProcServer32" = "$homedrive\\Windows\\system32\\msimtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50EF4544-AC9F-4A8E-B21B-8A26180DB13F}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50FDBB99-5C92-495E-9E81-E2C2F48CDDAE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50ff05d3-62ae-402b-9b06-3cf57f74c9dc}\InprocServer32" = "$homedrive\\Windows\\System32\\PlayToReceiver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{510C4E33-05D5-438B-9852-E8406EFF033D}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintIsolationProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51208789-BD2C-475E-8265-438DFBF78F9C}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5135A9C0-F05A-4FBD-8EC6-6B920CD387F6}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51372af3-cae7-11cf-be81-00aa00a2fa25}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{513a0312-3345-4d16-94e5-630b0262c2eb}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}\InprocServer32" = "$homedrive\\Windows\\system32\\acppage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{514B5E31-5596-422F-BE58-D804464683B5}\InProcServer32" = "$homedrive\\Windows\\system32\\intl\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{51571744-7FE4-4FF2-A498-2DC34FF74F1B}\InProcServer32" = "$homedrive\\Windows\\System32\\MSVideoDSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{515980c3-57fe-4c1e-a561-730dd256ab98}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5160F343-7A1F-46C2-9E21-FC7F1DAF37F3}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{516346F3-9E52-4DBF-B0A8-ADF1843BE5FB}\InProcServer32" = "$homedrive\\Windows\\System32\\BthAvctpSvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51648e7c-d7b2-449c-b513-46050dcfd917}\InprocServer32" = "$homedrive\\Windows\\System32\\LegacyNetUX\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51653423-E62D-4FF7-894A-DABB2B8E21E2}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5167B42F-C111-47A1-ACC4-8EABE61B0B54}\InProcServer32" = "$homedrive\\Windows\\System32\\easconsent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{517D95A4-AD61-4C20-B2C8-739E0E79EA32}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{517F6AA6-D6FA-46D0-8094-17FF17E4CCF4}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51840041-B26F-4843-B358-22ABB067396C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51a1467f-96a2-4b1c-9632-4b4d950fe216}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{51ad6d44-32f8-4aa7-9ee6-24a37fa09354}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51B4ABF3-748F-4E3B-A276-C828330E926A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51C0B2CF-5994-4c2c-93F1-1C2CE21DFF4B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51CAFEF2-C040-4022-A152-53033EE9A02B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51CEDF03-4316-47C9-8100-CAC54EC2E33F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51CEFC53-622D-4C7C-B49B-74B9544DAA61}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51D1268C-D0A5-47CC-A514-547F346F45E8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51EF1569-67EE-4AD6-9646-E726C3FFC8A2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{51FC9E18-6E66-4BE2-BA40-3F68213E6EC0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{520CCA61-51A5-11D3-9144-00104BA11C5E}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{520CCA63-51A5-11D3-9144-00104BA11C5E}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{520E9D28-64C4-43df-BEED-02D9A6044A4B}\InProcServer32" = "$homedrive\\Windows\\System32\\FdDevQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5210f8e4-b0bb-47c3-a8d9-7b2282cc79ed}\InprocServer32" = "$homedrive\\Windows\\System32\\WMADMOD\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{52205fd8-5dfb-447d-801a-d0b52f2e83e1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5220cb21-c88d-11cf-b347-00aa00a28331}\InprocServer32" = "$homedrive\\Windows\\System32\\licmgr10\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{522e34a4-07f7-40a1-94d0-1bfe832efc3a}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{523A581F-EC58-40CE-99D3-36BF7897F3EC}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{524B13ED-2E57-40B8-B801-5FA35122EB5C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{524b350e-a28a-425d-a472-c9e2e2c87bfd}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.MediaControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5255EFED-103A-4444-B124-F88F99E4EF8D}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{525C410E-B007-4F15-81DD-49DF9B17139B}\InProcServer32" = "$homedrive\\Windows\\system32\\Vault\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5263233A-23CA-4eea-B9A5-25A23EAAF16C}\InProcServer32" = "$homedrive\\Windows\\System32\\accountaccessor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{527c9a9b-b9a2-44b0-84f9-f0dc11c2bcfb}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{52807600-EA97-4647-A9EE-5EE386A2B524}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.Native\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{528d46b3-3a4b-4b13-bf74-d9cbd7306e07}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52968F2C-56B5-4078-9898-EA595DCA0A6E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{529A9E6B-6587-4F23-AB9E-9C7D683E3C50}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52A2AAAE-085D-4187-97EA-8C30DB990436}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{52B097EB-7F1F-414B-89AB-A0347DE63A8E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52B20D0F-167D-4701-9AAF-9E6C3161E735}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52B65EB7-907C-4D83-A535-283BE9104DE4}\InprocServer32" = "$homedrive\\Windows\\System32\\TelephonyInteractiveUser\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52BC3999-6E52-4E8A-87C4-0A2A0CC359B1}\InProcServer32" = "$homedrive\\Windows\\System32\\AppManagementConfiguration\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52C84ACA-027A-4536-A74A-E0BB50C44782}\InprocServer32" = "$homedrive\\Windows\\system32\\iscsiwmiv2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52ce2fe5-04c3-42fd-8a8b-4251affb8408}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52F15C89-5A17-48e1-BBCD-46A3F89C7CC2}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53067330-01CE-4027-947F-FF8580E92463}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5310BE71-5C14-4FBC-8CF5-BD75D3F11A44}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{531A5E27-80E7-4EAC-9AC6-13953AF33693}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5326dddc-ec38-428d-b219-ce6dadb35de3}\InProcServer32" = "$homedrive\\Windows\\system32\\van\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5328B3AC-2CEF-41B6-81A5-B8BCF62EFF47}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Shell\.Internal\.AdaptiveCards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53362C64-A296-4F2D-A2F8-FD984D08340B}\InprocServer32" = "$homedrive\\Windows\\System32\\oleacc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53445BED-3213-453B-A12A-79AA20A702DC}\InprocServer32" = "$homedrive\\Windows\\system32\\printui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53510d24-57eb-4713-9afb-e6e60530b87e}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5383EF74-273B-4278-AB0C-CDAA9FD5369E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53a01e9d-61cc-4cb0-83b1-31bc8df63156}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{53A3C917-BB24-3908-B58B-09ECDA99265F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{53bd6b4e-3780-4693-afc3-7161c2f3ee9c}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53BEDF0B-4E5B-4183-8DC9-B844344FA104}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53C74826-AB99-4d33-ACA4-3117F51D3788}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53DEC7F6-5448-43E2-9573-3F7B91B751DC}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53E8EBDD-A50B-46DD-9FAA-42746361EC63}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53E9771B-6A21-4FEC-B8F1-3B0DAE4FACC6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{53eadd15-d8b4-4b89-9d35-c1c7a7718960}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54058896-4775-4C34-8B62-789FB2E263A4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5408B2F0-C816-11D1-8F99-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{540D8A8B-1C3F-4E32-8132-530F6A502090}\InProcServer32" = "$homedrive\\Windows\\system32\\msutb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{541987EE-0E02-411E-9A85-1FC6156E7F4B}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54337179-c8b2-4ed4-95e4-95601c850d8c}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5440837F-4BFF-4AE5-A1B1-7722ECC6332A}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{545AE700-50BF-11D1-9FE9-00600832DB4A}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54702535-2606-11D1-999C-0000F8756A10}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{548968f5-17f7-4751-a581-ff0f1c732995}\InProcServer32" = "$homedrive\\Windows\\system32\\credprovhost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{548F0526-B0EC-4915-9C4E-9CEE327CF105}\InProcServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5491AB67-AFEB-48B1-B8DF-B2D63810EF40}\InProcServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{549365d0-ec26-11cf-8310-00aa00b505db}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54A05253-96FA-4B98-B8FD-9534D7255914}\InProcServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v3\.0\\WPF\\PenIMC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54AF9350-1923-11D3-9CA4-00C04F72C514}\InprocServer32" = "$homedrive\\Windows\\System32\\odbcconf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54B50739-686F-45EB-9DFF-D6A9A0FAA9AF}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_5\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54B7D246-951E-4BEA-B551-93D178284D13}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54CE37E0-9834-41ae-9896-4DAB69DC022B}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54CEE07E-E1C8-45DB-B550-417E75C4CA58}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54d38bf7-b1ef-4479-9674-1bd6ea465258}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54D8502C-527D-43F7-A506-A9DA075E229C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{54E14197-88B0-442F-B9A3-86837061E2FB}\InProcServer32" = "$homedrive\\Windows\\system32\\CoreShellExtFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{54E211B6-3650-4F75-8334-FA359598E1C5}\InProcServer32" = "$homedrive\\Windows\\system32\\(directmanipulation|Uxtheme)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5504BE45-A83B-4808-900A-3A5C36E7F77A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MSOSB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{550D0110-8DCD-11D1-8524-00A02495E426}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VVIEWDWG\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{550DDA30-0541-11D2-9CA9-0060B0EC3D39}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5512D110-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D112-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D114-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D116-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D118-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D11A-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D11C-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D11E-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D122-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5512D124-5CC6-11CF-8D67-00AA00BDCE1D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{55136805-B2DE-11D1-B9F2-00A0C98BC547}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55200BC1-D537-44E2-BC6B-DD098A015FA1}\InprocServer32" = "$homedrive\\Windows\\System32\\Microsoft\.Uev\.Office2013CustomActions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5520B6D3-6EC6-3CE7-958B-E69FAF6EFF99}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5537E283-B1E7-4EF8-9C6E-7AB0AFE5056D}\InProcServer32" = "$homedrive\\Windows\\system32\\rasplap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{553858A7-4922-4e7e-B1C1-97140C1C16EF}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{555278E2-05DB-11D1-883A-3C8B00C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{556937b4-9619-4cde-a03b-a0a540bd848c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5569e7f5-424b-4b93-89ca-79d17924689a}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{556FF0D6-A1EE-49E5-9FA4-90AE116AD744}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5584C445-9C6B-4BD6-BBCD-673A440E5546}\InprocServer32" = "$homedrive\\Windows\\System32\\TransliterationRanker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{558c258c-90fe-401c-8772-7edca8016d2c}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{558E3D9C-F033-4A44-A019-4F3F39EC8E4F}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5593941A-F61C-49C3-85F1-D00EBF0D4EB2}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsAdvancedDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{559C6BAD-1EA8-4963-A087-8A6810F9218B}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55B3A0BD-4D28-42fe-8CFB-FA3EDFF969B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(rdbui|sysmain)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55b70dec-4b3b-4e26-ae9c-9e8d131843a1}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeedsbs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55C27CA1-022A-4381-AE5E-3412BF3D31C9}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvlicensings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55c8a077-8073-42f2-b739-970b354ad2a8}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55d7b852-f6d1-42f2-aa75-8728a1b2d264}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{55DE6817-63F3-4DD0-BAFD-7F55C30567B2}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55F7B88D-A254-4B22-B7BB-FCDBBA1AFA32}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5610F042-FF1D-36D0-996C-68F7A207D1F0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{561185DB-0C34-4572-B965-53DA7B2A58A9}\InProcServer32" = "$homedrive\\Windows\\System32\\GameInput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56198675-BD59-3B10-8346-583781462CEF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{562462DD-4F9A-4110-9D6A-C3CA0407FF76}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56276483-5c2d-472c-b375-23ce4eb6a4f9}\InProcServer32" = "$homedrive\\Windows\\system32\\RdpSaPs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{563DC062-B09A-11D2-A24D-00104BD35090}\InprocServer32" = "$homedrive\\Windows\\System32\\wshcon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5645C8C2-E277-11CF-8FDA-00AA00A14F93}\InprocServer32" = "$homedrive\\Windows\\system32\\mimefilt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{565DCEF2-AFC5-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{566296fe-e0e8-475f-ba9c-a31ad31620b1}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{566A2EFF-5651-4020-AC1A-EB48E4571EA3}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5672BB8A-BBF5-482E-B7B9-742C70C604D8}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{567fb4ad-b538-4044-8eab-796b44d91b43}\InProcServer32" = "$homedrive\\Windows\\System32\\GameChatTranscription\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5686a0d9-fe39-409f-9dff-3fdbc849f9f5}\InprocServer32" = "$homedrive\\Windows\\System32\\mp4sdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56871D63-FE46-4c7e-84BB-5DB82D4A99F8}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56904B22-091C-4459-A2E6-B1F4F946B55F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{56a91da5-5051-49f5-8d23-1f050a63e966}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{56ad4c5d-b908-4f85-8ff1-7940c29b3bcf}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{56CDA654-2AA2-456F-81B1-153FE7B381A2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56BB05DE-7AFF-49D8-9F54-2D0936D56BF6}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56DA6136-B95E-4249-BB50-E4773A2B3B5E}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56E0B3FF-1E09-4c99-88B0-C5AAA22E4105}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56EA1054-1959-467f-BE3B-A2A787C4B6EA}\InProcServer32" = "$homedrive\\Windows\\System32\\(shacctprofile|shacct)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56F68E55-D114-4C64-996E-6E5F2D5340B2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57085E7C-4B2C-4542-BC92-2C30D1175CD5}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57154C7C-EDB2-3BFD-A8BA-924C60913EBF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}\InprocServer32" = "$homedrive\\Windows\\System32\\vssapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5740A302-EF0B-45ce-BF3B-4470A14A8980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57523D96-B7F6-4D2C-8AFC-BCC5F5392E94}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57558531-C262-471E-95DB-8B181925C61B}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57635537-C856-4cc2-AE5C-62C34708070C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{57651662-CE3E-11D0-8D77-00C04FC99D61}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{576C5669-E07F-4a1b-9A7A-8F85D944283B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{576C9E85-1300-4EF5-BF6B-D00509F4EDCD}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{577289b6-6e75-11df-86f8-18a905160fe0}\InprocServer32" = "$homedrive\\Windows\\System32\\wpnprv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57756B48-2D36-478F-B4F4-E8C67C5A9454}\InProcServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{577FAA18-4518-445E-8F70-1473F8CF4BA4}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57804CEE-0B00-49AC-94FD-F26E474CCE16}\InProcServer32" = "$homedrive\\Windows\\System32\\WebcamUI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{578480AA-1B1C-4343-AABD-62C0A273DCB5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{578fef39-5e60-4aaf-855b-b6be18ac223e}\InProcServer32" = "$homedrive\\Windows\\System32\\Family\.Authentication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5791BC26-CE9C-11D1-97BF-0000F81E849C}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{579648D9-94B1-418D-ACC6-AFA17860F320}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5798643F-DC40-47c2-AA81-2D21B96B933E}\InProcServer32" = "$homedrive\\Windows\\System32\\accountaccessor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57B67A1A-2C81-4820-96EC-FA33567A9155}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57C596D0-9370-40C0-BA0D-AB491B63255D}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsmsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Malwarebytes\\Anti-Malware\\mbshlext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5805137A-E348-4F7C-B3CC-6DB9965A0599}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58141F2A-7598-4B93-9D77-4ADF00E044B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58221C65-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58221C66-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58221C67-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\System32\\mycomput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58221C69-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58221C6A-EA27-11CF-ADCF-00AA00A80033}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5828227c-20cf-4408-b73f-73ab70b8849f}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpcorets\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5842a140-ff9f-4166-8f5c-62f5b7b0c781}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58476F97-6464-4e49-9BCB-DD88816A60A3}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5860E1C5-F95C-4a7a-8EC8-8AEF24F379A1}\InProcServer32" = "$homedrive\\Windows\\System32\\SysFxUI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{586d1936-bc46-4f9c-bf65-77c95ad9d9ad}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58859c43-2c82-454b-86c0-9efb11e54838}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{58897D76-EF6C-327A-93F7-6CD66C424E11}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{58AB2366-D597-11d1-B90E-00C04FC9B263}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58c061d5-8c8f-4439-b50a-bb5f7356e621}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58C2B4D0-46E7-11D1-89AC-00A0C9054129}\InProcServer32" = "$homedrive\\Windows\\System32\\dmsynth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58D052BC-A3DF-3508-AC95-FF297BDC9F0C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{58DDEF94-53B5-4BD5-AF79-C4581BBDf7AC}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58E3C745-D971-4081-9034-86E34B30836A}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58ECEE30-E715-11CF-B0E3-00AA003F000F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadce\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58F75A6D-D949-4320-99E1-A2A2576D581C}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{58fb76b9-ac85-4e55-ac04-427593b1d060}\InprocServer32" = "$homedrive\\Windows\\system32\\dimsjob\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{590AB12E-F706-4BA8-9D08-A1EEC69A687D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\McAfee Security Scan\\.*\\McCorePS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{590E4A07-DAFC-3BE7-A178-DA349BBA980B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{59108A76-472B-4311-A9E0-B6FF399B8C99}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{591209c7-767b-42b2-9fba-44ee4615f2c7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5914e885-9394-4baf-9cd9-71f57e4f6c90}\InProcServer32" = "$homedrive\\Windows\\System32\\Family\.SyncEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59347292-B72D-41F2-98C5-E9ACA1B247A2}\InprocServer32" = "$homedrive\\Windows\\System32\\fxsutility\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{593817A0-7DB3-11CF-A2DE-00AA00B93356}\InprocServer32" = "($homedrive\\Windows\\system32\\ddraw\.dll|ddraw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{593E7688-704F-4E72-B025-15FBA735D786}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.PointOfService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{593FB605-4854-4965-B5A1-70AB54AB6475}\InProcServer32" = "$homedrive\\Windows\\System32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{595397F6-2873-449C-954B-B2E23F89D9D7}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59549856-D7D2-47DD-ADB7-CEC2E8A7E2C5}\InProcServer32" = "$homedrive\\Windows\\System32\\DavSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{595B57CF-4842-41D9-806F-D41DB63CCFFB}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Pal\.Desktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{596742A5-1393-4e13-8765-AE1DF71ACAFB}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59699770-2BF1-46C6-857C-1D509DB7079E}\InprocServer32" = "$homedrive\\Windows\\System32\\puiapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5971EC44-072A-41b7-8E67-D9E045CC196D}\InprocServer32" = "$homedrive\\Windows\\System32\\AppIdPolicyEngineApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{597c1ef7-fc28-451e-8273-417c6c9244ed}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Application Verifier\\vrfauto\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{597D4FB0-47FD-4aff-89B9-C6CFAE8CF08E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5985FC23-2588-4D9A-B38B-7E7AFFAB3155}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59899957-02f6-44ac-a369-7704e65a1364}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{598c2d1b-616c-4782-8cc2-fda9d459be71}\InprocServer32" = "$homedrive\\Windows\\system32\\(eappcfgui|eappcfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59A437AB-74F3-4de2-AFE6-54203634C4DD}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59B4762A-A6A9-43BF-A4E3-1BC20DA752D8}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59B7D16A-C309-47C4-9667-363B9B8D8255}\InProcServer32" = "$homedrive\\Windows\\system32\\spool\\tools\\PrintBrmPs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59B7DE6C-57AF-11E1-B7A4-EACC4724019B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59B9640B-3F70-4D1C-B159-F26EEB8A4C87}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59BA10A2-E577-488D-BAFA-2D0A3D89D93B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59be4990-f85c-11ce-aff7-00aa003ca9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\ntlanui2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59C88A5A-702B-4DAB-9FBE-F53140BA899B}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchph\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59CBCF95-7705-43EF-9586-A46B0D03DDE9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.Workplace\.WorkplaceSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59CDB915-8232-46AD-B38B-497B8B0463AD}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59CE6880-ACF8-11CF-B56E-0080C7C4B68A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59D95679-9799-458F-8B5B-FE00D8DA0AE4}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetTCPIP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59DC47A8-116C-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59EECBFE-C2F5-4419-9B99-13FE05FF2675}\InProcServer32" = "$homedrive\\Windows\\System32\\fcon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59EF44D1-4917-4f05-B10F-48C891E95DCC}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59F927B8-B249-4672-88D5-2D688BAFDF24}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{59FD5FD6-896A-425B-B7B6-E7A0318FC127}\InProcServer32" = "$homedrive\\Windows\\System32\\easinvoker\.proxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5a1547af-335f-4ee5-b81e-48afc4cc681a}\InprocServer32" = "$homedrive\\Windows\\System32\\webplatstorageserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A1826AF-F5A9-4495-88CD-A04A6CF07B2D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A18D43E-115B-3B8B-8245-9A06B204B717}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5A1DCFD3-7982-48F2-8A3D-5C35272862DE}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MsoAdfPs\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5a4b3263-4381-4499-bf2f-c98d168e3ee2}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A4ED3BD-2F40-44B4-93DA-2B5ECC197B26}\InProcServer32" = "$homedrive\\Windows\\System32\\Docking\.VirtualInput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_7\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A57485B-151F-4868-945B-FBB95B574075}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A580C11-E5EB-11d1-A86E-0000F8084F96}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5a6efd3c-a6b5-44ee-873f-9b25bdbe045b}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Background\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A823D1E-8DDC-44DD-8AB4-F9D32C7FBB05}\InprocServer32" = "$homedrive\\Windows\\system32\\embeddedmodesvcapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A8A3AAA-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A8A3AAB-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A8A3AAC-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A90DD8E-2A0C-45D1-873A-82B61604CEB2}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5A984BF5-D07C-4C99-9E5C-37156F21EE8F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A98B233-3C59-4B31-944C-0E560D85E6C3}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5AA730D8-0F13-4AD6-B6C6-1EA85218C9A0}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5AAE39BF-397D-4B2F-91FF-E633B3944790}\InProcServer32" = "$homedrive\\Windows\\System32\\SystemSupportInfo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5acb106d-1a06-4fcd-862d-02a74de81835}\InProcServer32" = "$homedrive\\Windows\\System32\\DevPropMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ADDC230-2D07-4480-B66E-FDAA79EB7E09}\InProcServer32" = "$homedrive\\Windows\\System32\\tsf3gip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5AE1DAE0-1461-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5AE8571B-DB50-4B7F-9726-64201BED2FC2}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5AFFD66E-3C01-4217-BE18-414C155F67B1}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5B035261-40F9-11D1-AAEC-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\(NetSetupShim|netcfgx)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5B18AB61-091D-11D1-97DF-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5b389765-edc1-4adf-9812-1c8a83175892}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5b53b2c2-46d6-433e-ab6e-b82efef22b6e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5B681E0D-BD15-4A0E-8B8C-8E90663344E4}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5B6D1451-B1E1-4372-90F5-88E541B4DAB9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5B76534C-3ACC-3D52-AA61-D788B134ABE2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5b858418-cfb4-4b32-8501-54d8b0c59f90}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5B89DEEB-4DF1-4CF6-9979-C79185CB95A0}\InProcServer32" = "$homedrive\\Windows\\System32\\provops\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5B9084E3-CE4E-4C66-8713-5B02396C090B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5b934b42-522b-4c34-bbfe-37a3ef7b9c90}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BAF654A-5A07-4264-A255-9FF54C7151E7}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BBC2C71-DEC2-4BA3-961A-36F37D1CC8A5}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5bbd58bb-993e-4c17-8af6-3af8e908fca8}\InProcServer32" = "($homedrive\\Windows\\System32\\ieproxy\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\ieproxy\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5BD3EA21-163B-4B17-951E-E73EEBF0601A}\InprocServer32" = "$homedrive\\Windows\\System32\\RotMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BE4911E-3D99-4546-898D-7EE70201C519}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BF01503-42BD-41CA-9F75-A465F07A6B11}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BFF4E02-D379-4050-A382-C6504A980D46}\InProcServer32" = "$homedrive\\Windows\\System32\\powercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BFFA85A-3384-3540-9940-699120D428A8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Ocr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C0786ED-1847-11D2-ABA2-00C04FB6C6FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C0786EE-1847-11D2-ABA2-00C04FB6C6FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C0D19E4-A364-4ef6-9288-DBD194593879}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C24B264-3A01-475C-8EE8-ED4B9DC4F86C}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5c2dc96f-8d51-434b-b33c-379bccae77c3}\InprocServer32" = "$homedrive\\Windows\\system32\\azroles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C35F099-165E-3225-A3A5-564150EA17F5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5C3E6CE8-B218-3762-883C-91BC987CDC2D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5C5C1935-0235-4434-80BC-251BC1EC39C6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C615ED6-4F9F-48BE-8D84-17409196DE36}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\OSFPROXY\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5C63C1AD-3956-4FF8-8486-40034758315B}\InProcServer32" = "$homedrive\\Windows\\system32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C659257-E236-11D2-8899-00104B2AFB46}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcntl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C659258-E236-11D2-8899-00104B2AFB46}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcntl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5c70bc6a-4ab5-48ee-bce3-e6dd857cbdc6}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5c7dd54c-6ce8-45b6-8b2e-8c5f30dcc0d0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Gaming\.Input\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C8422A6-F64B-4AA6-8D3C-78A3E988AA9E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5C90CD39-2B89-4C1C-AA3B-19950958CBDA}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C9EA9AA-5541-49C5-97C4-781B1E720F5C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5CA9971B-2DC3-3BC8-847A-5E6D15CBB16E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5cb0d309-91e1-4d75-82f6-6536909c1286}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5cb66670-d3d4-11cf-acab-00a024a55aef}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5CBA34AE-E344-40CF-B61D-FBA4D0D1FF54}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5cd80a0d-5627-49ff-ad53-c8b1791c85f6}\InprocServer32" = "$homedrive\\Windows\\system32\\(ttlsext|ttlscfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5CE34C0D-0DC9-4C1F-897C-DAA1B78CEE7C}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D02926A-212E-11D0-9DF9-00A0C922E6EC}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D084DCB-C187-4bdc-95D1-929CC8418BF8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5D08B586-343A-11D0-AD46-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5d1026ee-3f2e-4ccb-a83d-cefb7ac22a71}\InProcServer32" = "$homedrive\\Windows\\System32\\sharemediacpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D2F9804-2614-47e5-9B39-C9F74F51FE98}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D429AF6-D20F-4363-B378-C4AA2FA685EE}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D43F9BA-EE77-485B-ACFC-4AD067DAF7BD}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\Shared\\JpnKorRoaming\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5d4d54b3-9fb4-4662-8173-c48568d5e79e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}\InprocServer32" = "$homedrive\\Windows\\system32\\localsec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D6179D2-17EC-11D1-9AA9-00C04FD8FE93}\InprocServer32" = "$homedrive\\Windows\\system32\\localsec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5d7222bc-b407-410b-b440-080f8172ca09}\InProcServer32" = "$homedrive\\Windows\\System32\\vaultcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D75245F-29AE-450D-8924-A7611DE279AF}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5d8d315e-8adc-48e5-80ed-7ccf370c971f}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D8E73F7-4989-4ac8-8A98-39BA0D325302}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D9DD151-65F4-11CE-900D-00AA00445589}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcprx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D9F720A-82CE-47FB-8030-C52154BF5C29}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DA8B048-EEB0-4c15-9BB9-F2CF953C4F47}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5da8fe1f-f485-4516-be06-426b0dddf555}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DB2625A-54DF-11D0-B6C4-0800091AA605}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DC41690-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DC41691-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DC41692-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DC41693-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DC41694-C6A6-11d1-9D35-006008B0E5CA}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DE7918B-BFD7-4C1E-B4E0-B16D0A3EA76B}\InProcServer32" = "$homedrive\\Windows\\System32\\AuthHostProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ded83ef-1e99-48cf-bf83-676d2a6db408}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5DF4E7C5-78E3-4CCA-93CD-DF1639E165FB}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvxdapix\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5E032150-8C1E-4c9e-BC60-36E9BFFCFF56}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5E33D52F-2EE2-48EE-80FC-543DFF43E326}\InprocServer32" = "$homedrive\\Windows\\system32\\igdDiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5E6AB780-7743-11CF-A12B-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5E90CC8B-E402-4350-82D7-996E92010608}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5ead82c2-28f1-4f7f-956d-d37420b5a687}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5EB699B3-9296-41BA-9258-DE70F03B7D6C}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ED4F38C-D3FF-4D61-B506-6820320AEBFE}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5ed5ada6-d9c5-4645-afec-6b68e54dcf32}\InProcServer32" = "$homedrive\\Windows\\system32\\DdcComImplementationsDesktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ED98377-87A3-4d86-81F7-3E46E0342833}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5EEB5B52-92F3-4204-A8E9-1E5450DF020A}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ef4af3a-f726-11d0-b8a2-00c04fc309a4}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5F02227D-BF38-48BE-B01A-A47D3006DFA2}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F293F05-14BA-40b9-AE65-58B034579917}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F35421F-3313-4AD6-A3D9-DC4CD7DB4BED}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F3A0F8D-5EF9-3AD5-94E0-53AFF8BCE960}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5F5295E0-429F-1069-A2E2-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5F5AFF4A-2F7F-4279-88C2-CD88EB39D144}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F64EF81-5A6B-4203-9374-16218714CDFF}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F681803-2900-4C43-A1CC-CF405404A676}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5f6c1ba8-5330-422e-a368-572b244d3f87}\InProcServer32" = "$homedrive\\Windows\\System32\\fdproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F884992-EE6D-418B-9E6C-0C2A0FA94D17}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F8E3D0C-D006-4B68-9F53-F55AFD38059A}\InProcServer32" = "$homedrive\\Windows\\system32\\McpManagementProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5f96067d-e1d5-4e36-b4d6-afa822fe3df3}\InprocServer32" = "$homedrive\\Windows\\System32\\TieringEngineProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5F9A955F-AA55-4127-A32B-33496AA8A44E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{5FA29220-36A1-40f9-89C6-F4B384B7642E}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5FAFD868-E3A3-42AC-969D-B69BBE9A400C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Shell\.ServiceHostBuilder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5FB6752A-59BD-4385-8753-13DEFB1AE728}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5FB7EF7D-DFF4-468a-B6B7-2FCBD188F994}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5FDD51E2-A9D0-44CE-8C8D-162BA0C591A0}\InprocServer32" = "$homedrive\\Windows\\System32\\WindowsCodecsRaw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5ffab5c8-9a36-4b65-9fc6-fb69f451f99c}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6004c347-d3f3-472a-8f9e-319b5c583d55}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{600e7adb-da3e-41a4-9225-3c0399e88c0c}\InprocServer32" = "$homedrive\\Windows\\system32\\cngcredui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{600f8139-d614-4700-bf13-b0ccf9818c73}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{600FDFA3-1EA7-4792-9436-ABB5154A9EB2}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6011C1F5-A2E0-491A-83CD-D4C5CBA72B73\InProcServer32" = "$homedrive\\Windows\\System32\\CspLte\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6011C1F5-A2E0-491A-83CD-D4C5CBA72B73}\InProcServer32" = "$homedrive\\Windows\\System32\\CspLte\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60173D16-A550-47f0-A14B-C6F9E4DA0831}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6017A978-93AD-4F2F-9E2D-07CF8C8DEBC4}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60254CA5-953B-11CF-8C96-00AA00B8708C}\InProcServer32" = "$homedrive\\Windows\\System32\\wshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6038EF75-ABFC-4e59-AB6F-12D397F6568D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{603D3800-BD81-11d0-A3A5-00C04FD706EC}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{603D3801-BD81-11d0-A3A5-00C04FD706EC}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60400283-b242-4fa8-8c25-caf695b88209}\InprocServer32" = "$homedrive\\Windows\\System32\\pnppolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6047F837-D527-467E-9DC1-6D51F92D9E45}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows NT\\Accessories\\WordpadFilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60632754-c523-4b62-b45c-4172da012619}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60664caf-af0d-0005-a300-5c7d25ff22a0}\InProcServer32" = "$homedrive\\Windows\\system32\\shgina\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6069BBFB-987E-4532-A065-D424F2CED667}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\filetrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{606B3777-3051-401F-974A-E66ACA82A3A3}\InProcServer32" = "$homedrive\\Windows\\system32\\scavengeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60765CF5-01C2-4EE7-A44B-C791CF25FEA0}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{607C052E-2B08-4548-BD1D-EB7665A34788}\InProcServer32" = "$homedrive\\Windows\\System32\\usocoreps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{607fd4e8-0a03-11d1-ab1d-00c04fc9b304}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6089A37E-EB8A-482D-BD6F-F9F46904D16D}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60912A1F-A6E6-4C7F-8E2D-8BE7C6505E2D}\InProcServer32" = "$homedrive\\Windows\\System32\\MicrosoftAccountExtension\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{609E6A89-58A1-4509-AE8D-C577E8D7F320}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.Schema\.DesktopShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60b78e88-ead8-445c-9cfd-0b87f74ea6cd}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60F44560-5A20-4857-BFEF-D29773CB8040}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvEncMFTH264x\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60F6E464-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{60F6E465-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{60F6E466-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{60F6E467-4DEF-11d2-B2D9-00C04F8EEC8C}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{60F9F51E-4613-4b35-AE88-332542B567B8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60fd46de-f830-4894-a628-6fa81bc0190d}\InProcServer32" = "$homedrive\\Windows\\system32\\photowiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6101F767-998E-452B-B54A-E836DD486BAD}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsClassExtension\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6104DF1F-6A08-4883-B285-D438ACE61151}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{612C0A37-9005-4980-871B-C81E5EA187B2}\InProcServer32" = "$homedrive\\Windows\\System32\\GPCSEWrapperCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6131A8EC-78CE-11d2-A3F2-3078302C2030}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{613fba38-a3df-4ab8-9674-5604984a299a}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{614C2902-8C8F-4D8F-90A2-FB9017B19FF9}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6150FC78-21A1-46A4-BF3F-897090C6D79D}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{615a13be-241d-48b1-89b0-8e1d40ffd287}\InProcServer32" = "$homedrive\\Windows\\System32\\lxss\\wslclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61625667-893E-4707-B925-A82B528C00B8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61667EE4-8071-46E2-9016-3DB2D7BE9E28}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6171CA77-7A1D-41FD-BE74-AF722A054989}\InProcServer32" = "$homedrive\\Windows\\System32\\AnalogCommonProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6173D628-67F9-49B5-B9C1-D7ABD9E70D34}\InProcServer32" = "$homedrive\\Windows\\System32\\SetNetworkLocation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61A48126-EF74-4D4A-9DDA-43FD542CAD1E}\InprocServer32" = "$homedrive\\Windows\\System32\\(MSWB7|NaturalLanguage6)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61B3E12B-3586-3A58-A497-7ED7C4C794B9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{61b68808-8eee-4fd1-acb8-3d804c8db056}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61B7F4E6-ECD0-4da8-AB2F-9517CDB4B8F1}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsWubiDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61BCD1B9-340C-40EC-9D41-D7F1C0632F05}\InprocServer32" = "$homedrive\\Windows\\System32\\edptask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61E79517-4A4E-45D8-9219-30E71A9EFF39}\InprocServer32" = "$homedrive\\Windows\\System32\\TabBtnEx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61f77d5e-afe9-400b-a5e6-e9e80fc8e601}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61F7B364-432C-4D04-BBC1-7FC1BF3807A8}\InprocServer32" = "$homedrive\\Windows\\System32\\bthprops\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{62079164-233b-41f8-a80f-f01705f514a8}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6208889B-F7A7-44B4-A34E-3C40E83281DB}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{620E38AE-D62C-486B-8339-3DF3C04D88C3}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62112AA1-EBE4-11cf-A5FB-0020AFE7292D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{621E1D58-583A-45B6-B869-E3C53DE71B49}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvGameS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{622A8646-1096-4765-8E07-91A3E661CEF9}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62323107-AD7E-49D1-9223-7ADD7C922D1B}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{623E2882-FC0E-11d1-9A77-0000F8756A10}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6240EF28-7EAB-4dc7-A5E3-7CFB35EFB34D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{62545937-20A9-3D0F-B04B-322E854EACB0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{62547D24-2ACA-4A33-8F15-AE95CE1A45BD}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{626C80C1-D410-4DE4-9E82-1B4B9610C404}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6279b7cb-d768-4fbe-a6d5-add4f711e53b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\APPLETS\\imjpkdic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62907C17-0036-4D44-B59C-70F2621A3EE4}\InprocServer32" = "$homedrive\\Windows\\system32\\Windows\.Management\.SecureAssessment\.CfgProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6295DF27-35EE-11D1-8707-00C04FD93327}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62AAAC25-625B-4297-9842-8E4442FA98F5}\InProcServer32" = "$homedrive\\Windows\\System32\\dialserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62AE1F9A-126A-11D0-A14B-0800361B1103}\InProcServer32" = "$homedrive\\Windows\\system32\\dsuiext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62B2DD2C-F129-42EE-BF59-55D3FD21C215}\InProcServer32" = "$homedrive\\Windows\\System32\\Autopilot\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62B43F0E-E7DB-4329-8C13-A966D84A289F}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech\\Direct Input Force Feedback\\1_1_5\\hidpp_forcefeedback_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62B4D041-4667-40B6-BB50-4BC0A5043A73}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62ba9430-9624-46ec-9034-d5ffabb0fca0}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62BE5D10-60EB-11d0-BD3B-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62CE7E72-4C71-4D20-B15D-452831A87D9D}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2vdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62D3F5B6-7C5F-4914-82AF-E3C39743F380}\InProcServer32" = "$homedrive\\Windows\\System32\\CspCellularSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62dc1a93-ae24-464c-a43e-452f824c4250}\InProcServer32" = "$homedrive\\Windows\\System32\\WMALFXGFXDSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62E607F5-D6C2-4F5C-92EF-0D68452F5715}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{62E92675-CB77-3FC9-8597-1A81A5F18013}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{63005CD0-8541-439c-A66A-617F4B1F2BCB}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{630A3EF1-23C6-31FE-9D25-294E3B3E7486}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{630BB917-AA3B-4CF5-9D24-AAD1F7D4297A}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6312362E-EDA0-42BA-B7B1-9C8FE3D4D1A4}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{631E88E6-45C5-40DC-B2D4-28B732E45F96}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63260bce-a3fb-4a34-aa51-d4d8e877b62b}\InprocServer32" = "$homedrive\\Windows\\System32\\WorkFoldersShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6329947b-0b98-4bce-91e1-f90e7a84cd16}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{632A2D3D-86AF-411A-8654-7511B51B3D5F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{632B0530-3CBF-44F4-BFDC-750A80D4B00A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63480537-5d3d-4c42-8ac4-22a2bc016244}\InProcServer32" = "$homedrive\\Windows\\system32\\WaaSMedicPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6348A566-0BB9-425C-8E5A-F7ECDCD0419B}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletBackgroundServiceProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{634F8410-E924-46B8-A1B5-E8B08E8B8750}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{636B1538-4AD1-4FA5-831A-403D7146B11D}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{636B9F10-0C7D-11D1-95B2-0020AFDC7421}\InProcServer32" = "$homedrive\\Windows\\System32\\dmusic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{636c15cf-df63-4790-866a-117163d10a46}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{637118F4-0E4E-4C90-BC39-161165F55B6E}\InProcServer32" = "$homedrive\\Windows\\system32\\lockcontroller\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63766597-1825-407D-8752-098F33846F46}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6377013E-2C35-40F3-B8E1-1AB47D12982B}\InprocServer32" = "$homedrive\\Windows\\system32\\WABSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{637c490d-eee3-4c0a-973f-371958802da2}\InProcServer32" = "$homedrive\\Windows\\System32\\WMALFXGFXDSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{638DA67A-FAF8-4148-8DAE-9AB433DE470D}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{639bdb5a-7959-48d4-afc3-44f252bf2924}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{639F5AF5-BCED-4369-AC34-360B16D955FD}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63A4B1FC-259A-4A5B-8129-A83B8C9E6F4F}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63B51F81-C868-11D0-999C-00C04FD655E1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{63C04987-37C1-4CE6-9A11-4E0C1F8FC2A9}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63D6CF0A-104F-45FA-A0ED-8AF48864CD2E}\InprocServer32" = "$homedrive\\Windows\\System32\\DDDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63da6ec0-2e98-11cf-8d82-444553540000}\InProcServer32" = "$homedrive\\Windows\\system32\\msieftp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63df056d-a8c7-4a2e-87ff-215de332c21f}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsvr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63e17c10-2d43-4c42-8fe3-8d8b63e46a6a}\InprocServer32" = "$homedrive\\Windows\\System32\\MSOpusDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63E23168-BFF7-4E87-A246-EF024425E4EC}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63FA5E69-87FE-432d-8F62-9D7A3D7D09C3}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{640b00a1-86d6-4441-953f-2452efc8442d}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Diagnostics\.TraceReporting\.PlatformDiagnosticActions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{640C3348-C248-4A32-A111-CEA662BC9C96}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{641ABA69-56FD-4029-A445-4D8375D3A699}\InProcServer32" = "$homedrive\\Windows\\system32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64226369-CCEB-477D-88D5-7A9CB465BEAC}\InProcServer32" = "$homedrive\\Windows\\system32\\IdCtrls\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6438570B-0C08-4A25-9504-8012BB4D50CF}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{643B0017-1AAE-4AFA-B921-4BE3FB8308A2}\InprocServer32" = "$homedrive\\Windows\\System32\\tspubwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6447ABFE-B1CF-4F4D-BE2D-4924C8C8FE00}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6447E897-294B-409A-BF15-5F349A20F2C0}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64577982-86D7-11d1-BDFC-00C04FA31009}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{64654B35-A024-4807-89D3-C6FDB5A260C7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6468e186-485e-47e4-83d8-8d9318675219}\InProcServer32" = "$homedrive\\Windows\\System32\\credprovhost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64693913-1c21-4f30-a98f-4e52906d3b56}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{647053C3-1879-34D7-AE57-67015C91FC70}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{64708A78-9FA0-4606-8EB7-215E1BC3FA9D}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6473E7E7-D8D6-4696-9FBB-9F41DF134B7B}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{647A6A5A-0E3E-4490-8766-BC1894FD86EE}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\certcom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{647BD8C2-658B-4ECA-ABC7-FC5C0BF1704D}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{649b3cc6-4621-413f-a08b-5aedd333ff6b}\InProcServer32" = "$homedrive\\Windows\\System32\\KnobsCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{649C7FDB-B3F7-4683-8948-C9189D7C3C1D}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\appprelaunchlib\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{649EEC1E-B579-4E8C-BB3B-4997F8426536}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64AB4BB7-111E-11d1-8F79-00C04FC2FBE1}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64b8ba0e-2fe9-481f-884b-c67bcb531c6d}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceReactivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}\InProcServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64BA50D0-40FD-4FD0-A846-65A2ACE6A075}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcRefreshTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64BC32B5-4EEC-4de7-972D-BD8BD0324537}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64D8A8E0-80A2-11d2-8CF3-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64EE4BAC-1027-4736-904D-8BE23B93F82C}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64EEED2C-AE06-44E0-A22E-F4BAD3047339}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{64FE8D29-91B5-42C4-A7CA-BC2DE782205A}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6504AFED-A629-455C-A7F1-04964DEA5CC4}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{650503CF-9108-4DDC-A2CE-6C2341E1C582}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6515834D-6125-4878-A3A3-6B0A73B809A2}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPJOBJ\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6522CF99-94C7-4958-B18D-4F6159E6926B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{652527C4-4A72-4bd3-BFAB-4B06AB172D7C}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{652b8825-7895-4dc7-83ef-1ccc8fae39c0}\InProcServer32" = "$homedrive\\Windows\\System32\\Analog\.Shell\.Broker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65303443-AD66-11D1-9D65-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6539579C-2657-45E5-985F-835E197959C2}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6543D242-A80B-44A3-B828-95C1EC452423}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{655D9BF9-3876-43D0-B6E8-C83C1224154C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65704743-2513-4987-9fc9-826bbedde743}\InProcServer32" = "$homedrive\\Windows\\System32\\UserDeviceRegistration\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6572EE16-5FE5-4331-BB6D-76A49C56E423}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65964407-a5d8-4060-85b0-1ccd63f768e2}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{659CDEAD-489E-11D9-A9CD-000D56965251}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{659CDEAE-489E-11D9-A9CD-000D56965251}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65A04334-9DD4-4FA2-94DB-A62922B8BA24}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65a5160f-a093-48b9-8f79-05098d5087ad}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65B4D3E5-5DAA-48F3-AAFC-43EEA6215244}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\binaryinfo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65BD0711-24D2-4FF7-9324-ED2E5D3ABAFA}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65d00646-cde3-4a88-9163-6769f0f1a97d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65d4221e-35c4-4a66-bdfa-f080bec22720}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_10\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65E96706-3C3D-4929-9C36-29F50EA5E7E7}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65fa40bd-3ed5-4631-ba9f-68df9a7d9ae6}\InprocServer32" = "$homedrive\\Windows\\System32\\mtffuzzyds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{660b90c8-73a9-4b58-8cae-355b7f55341b}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66182EC4-AFD1-11d2-9CB9-0000F87A369E}\InprocServer32" = "$homedrive\\Windows\\system32\\adsnt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6619A740-8154-43BE-A186-0319578E02DB}\InProcServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WmiPerfClass\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66275315-bfa5-451b-88b6-e56ebc8d9b58}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{663e1a94-a37e-4e8a-9e55-5354b2139790}\InProcServer32" = "$homedrive\\Windows\\System32\\EsclWiaDriver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{667955AD-6B3B-43CA-B949-BC69B5BAFF7F}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{66a1c746-b147-43b8-8d08-a2657bebbe8f}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66B8AA0A-7AA7-4BE6-8F37-344D5767240F}\InProcServer32" = "$homedrive\\Windows\\System32\\dialclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66c2c36e-a363-434c-8e61-e488f0b116f7}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66CE75D4-0334-3CA6-BCA8-CE9AF28A4396}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{66D0DB14-5638-475f-A386-629522D8C461}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66d56b60-97b7-4e6a-9aa1-3ec5e3fdaa0f}\InProcServer32" = "$homedrive\\Windows\\system32\\WinsockHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{66EC5C50-45B7-48cd-81D6-20A712011AD1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{66eea0f5-001a-4073-a496-783f86fcf4c0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6705C562-0AE7-40EA-8474-F39DAB1813D0}\InProcServer32" = "$homedrive\\Windows\\system32\\RasMM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{671FCFDA-4BE4-432c-A6D3-4179179C3856}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{673DFE75-9F93-304F-ABA8-D2A86BA87D7C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6746c347-576b-4f73-9012-cdfeea251bc4}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6756A641-DE71-11d0-831B-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{675F097E-4C4D-11D0-B6C1-0800091AA605}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{67677441-3350-45B4-9455-4D7F4A50F4E4}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{676E1164-752C-3A74-8D3F-BCD32A2026D6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{677561f9-50fc-4b24-921d-eacb89706059}\InProcServer32" = "$homedrive\\Windows\\system32\\CellularAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6785BFAC-9D2D-4be5-B7E2-59937E8FB80A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{679f85cb-0220-4080-b29b-5540cc05aab6}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{67a33041-b8aa-4429-b02a-60f8d007c29e}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{67A66362-050E-42ff-B241-82C1F51EA9B9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{67EA3D48-83F2-408C-AD46-97F207D79DB3}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{67F07E00-CCEF-11D2-9EF9-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{681FD532-7EC2-4548-9ECE-44AABCFBD254}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{682D63B8-1692-31BE-88CD-5CB1F79EDB7B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6833568B-541D-4290-AF22-3AFB73D1447C}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{683a732e-eee1-4aec-8b45-455890e87ff1}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6850404F-D7FB-32BD-8328-C94F66E8C1C7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{687529e6-4d36-4336-88ea-94b03d16aa4b}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{687607A0-6BA1-4355-99F4-4E3D749FFB19}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{687734A3-65F2-43E5-B9AE-E775B351FD2C}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{687D3367-3644-467a-ADFE-6CD7A85C4A2C}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{68904ac7-1801-47f8-af3a-dac14848fd75}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6896B49D-7AFB-34DC-934E-5ADD38EEEE39}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{68A8692B-67E4-4e3f-BE10-9E287F663CFD}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68b07bff-cb50-4d60-a7d5-02b1a523bc8c}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{68B67DA9-7212-396E-9528-33F70547660E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{68c67565-410e-45e6-8560-4091ae193481}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68cfb337-fd99-43af-a64f-8b84c9ce6a56}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68DB2410-63D2-4D4A-9449-FBD53FA4E7A3}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68ddbb56-9d1d-4fd9-89c5-c0da2a625392}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68E1DF8C-9512-4801-A105-25A44DCCB164}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68E3F2FD-31AE-4441-BB6A-FD7047525F90}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68e52c1c-37cb-41d2-afe1-1e77d5f10676}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{68F61FE3-19A4-45F2-92E2-774396C79A4E}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.internal\.shellcommon\.shareexperience\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{68F8AEA9-1968-35B9-8A0E-6FDC637A4F8E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{693644B0-6858-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69375D35-B310-40fd-A7DC-9548E1DBC3B5}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6939BF8D-FF94-492C-9E4E-BD6439D8F867}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VVIEWDWG\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{693BADEA-1EB1-4013-B799-285F624A55BD}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69546697-5b53-43c5-8391-9e227b54957b}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{698F7D05-37F0-4902-8A63-AEF7D44DC7FC}\InprocServer32" = "$homedrive\\Windows\\System32\\pwlauncher\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{699583D1-6BA0-4DF2-B559-2487ED3A58CB}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{699745C2-5066-4B82-A8E3-D40478DBEC8C}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69A0BC0E-7B4E-4EE4-83B5-6C5CE096DAAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ImeSystrayMenu\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69A25C12-1811-11D2-A52B-0000F803A951}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69A25C14-1811-11D2-A52B-0000F803A951}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69a568cf-86d1-4e47-b1fc-a74a110583fb}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{69A95A38-C637-46A0-9FB2-1C939AEBF2E8}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69BE8BB4-D66D-47C8-865A-ED1589433782}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69CE757B-E8C0-4B0A-9EA0-CEA284096F98}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69D76D1B-B12E-4913-8F48-671B90195A2B}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\policman\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69F14E67-6183-4854-A16C-74273814F10C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.SerialCommunication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{69F31C37-09E1-433b-AECB-EBC83E4065D9}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A01FDA0-30DF-11d0-B724-00AA006C1A01}\InProcServer32" = "$homedrive\\Windows\\System32\\imgutil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A02951C-B129-4D26-AB92-B9CA19BDCA26}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6A08CF80-0E18-11CF-A24D-0020AFD79767}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A10CEAB-0813-48BA-9769-BD98F03F3EB8}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A205B57-2567-4a2c-B881-F787FAB579A3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6A206B40-465E-487A-AD5C-CCE637EA9EDA}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A22E68F-887C-4221-9DF1-EE0B3AC76497}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6a2af23e-b6d9-4a72-938d-9bffc96be71e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.HostName\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A2E0670-28E4-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{6a30ad66-de02-407c-8ea3-b1c03e1faa87}\InProcServer32" = "$homedrive\\Windows\\System32\\pickerplatform\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A323D92-38A8-449B-8A98-CB1CF3903F5B}\InProcServer32" = "$homedrive\\Windows\\system32\\PrintPlatformConfig\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A45335D-4C3A-44B7-B61F-C9808BBDF8ED}\InprocServer32" = "$homedrive\\Windows\\System32\\VmSynthNic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A45335E-4C3A-44B7-B61F-C9808BBDF8ED}\InprocServer32" = "$homedrive\\Windows\\System32\\VmSynthNic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A49950E-CE8A-4EF7-88B4-9D112366511C}\InProcServer32" = "$homedrive\\Windows\\system32\\softkbd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A514DB9-3EC1-4F36-9F95-BC0B00152D0B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A5B0C7C-5CCB-4F10-A043-B8DE007E1952}\InprocServer32" = "$homedrive\\Windows\\system32\\MsRdpWebAccess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A5FEA5B-BF8F-4EE5-B8C3-44D8A0D7331C}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A602D88-1FC3-47CC-ABC4-D1F9BCBFC569}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A68CC80-4337-4dbc-BD27-FBFB1053820B}\InProcServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A6F4B83-45C5-4ca9-BDD9-0D81C12295E4}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6a91029e-aa49-471b-aee7-7d332785660d}\InprocServer32" = "$homedrive\\Windows\\System32\\(IME\\IMEJP\\imjpapi\.dll|imjp10k\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_7\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6A98D0C3-3A85-4193-AAB6-333D338E178E}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6aa17c06-0c75-4006-81a9-57927e77ae87}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6ACB028E-48C0-4A44-964C-E14567C578BA}\InprocServer32" = "$homedrive\\Windows\\System32\\sppwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6AD28EE1-5002-4E71-AAF7-BD077907B1A4}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6AD7D671-3199-4D10-9372-F44DAF1DC867}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6ADF60C7-C49A-4C58-9ABA-5EB68FB7C3D3}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Feedback\.Analog\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6AE29350-321B-42be-BBE5-12FB5270C0DE}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6af6b181-3a90-4fac-9655-b34041d46b8f}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6AFCCE9E-85F0-475C-944E-9357B84A4975}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6AFE625A-6ED7-4475-BD04-47170B77D584}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B0182CC-5D01-4AA2-B295-B99C1451ECA0}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B0B3E6B-A2C5-4514-8055-AFE8A95242D9}\InprocServer32" = "$homedrive\\Windows\\System32\\MSFlacDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B127DF8-E5D6-42CA-B6A8-2FDA5F7FAB17}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B13B293-30FD-4abb-8E41-29B1F88297E2}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6b19c2a9-50ba-4275-b99b-13dcf69b9f19}\InprocServer32" = "$homedrive\\Windows\\system32\\NfcRadioMedia\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B273FC5-61FD-4918-95A2-C3B5E9D7F581}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B2D6BA0-9F3E-4f27-920B-313CC426A39E}\InProcServer32" = "$homedrive\\Windows\\System32\\OpcServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6b33163c-76a5-4b6c-bf21-45de9cd503a1}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B34D24A-213B-4929-A8A1-F0A94EBDC8BF}\InProcServer32" = "$homedrive\\Windows\\System32\\MaintenanceUI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6b3598cc-db4d-4992-95b9-5d7d327c0dc7}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B362280-6915-11D2-951F-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B462062-7CBF-400D-9FDB-813DD10F2778}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B5623CD-8C50-473E-940F-1F4FC8923B8F}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtCangJieDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B56A227-7150-4A1F-A114-C959EB8F8C24}\InProcServer32" = "$homedrive\\Windows\\System32\\appmgmts\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B6F9D2D-6D49-4026-83A6-86DFC1C3C6F0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6B7752CB-6AAF-4734-A0CE-47EB0D6C093F}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B8195EE-950E-4F71-86F3-ADD77B191420}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B831E4F-A50D-45FC-842F-16CE27595359}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6B86FF0A-31A6-4910-A973-E8D953EADBEF}\InprocServer32" = "$homedrive\\Windows\\System32\\ChsStrokeDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BA8349F-FDF4-4246-A724-32C943AED24F}\InprocServer32" = "$homedrive\\Windows\\system32\\SebBackgroundManagerPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC09692-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iasrecst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0969D-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0969F-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096A0-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096B1-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iaspolcy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096B3-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iaspolcy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096B7-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096B8-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096BC-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iashlpr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096C6-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasads\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096C8-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasads\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096D5-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096DA-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasrad\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096DB-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096DC-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096DD-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\System32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096DE-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096DF-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096E0-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096E1-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC096E5-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC09894-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasrad\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC09896-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC09897-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC09898-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC09899-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0989A-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0989B-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0989C-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0989D-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0989E-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC0989F-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasrad\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098A4-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098A5-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098A6-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098A7-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098A8-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098A9-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098AC-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC098AD-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC1CFFA-8FC1-4261-AC22-CFB4CC38DB50}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BC752F7-9721-49F8-873B-9FECB6215DE3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6BD6AECA-AFB0-45B7-BAC4-F292EC0F3F41}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6bdadf65-eb94-419b-907c-0ba9dda7f0df}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BF0A714-3C18-430b-8B5D-83B1C234D3DB}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BF52A52-394A-11d3-B153-00C04F79FAA6}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6BFCACDC-A6A6-4343-9CF6-83A83727367B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C09BB55-D683-4da0-8931-C9BF705F6480}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C1776CD-4E5A-4DEB-B810-8DD4AA5DC6E4}\InProcServer32" = "$homedrive\\Windows\\System32\\LockController\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C177EBD-C42D-4728-A04B-4131892EDBF6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{6c19be35-7500-11d1-ad94-00c04fd8fdff}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\esscli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C1B3099-127A-4BE1-93BC-DD4771EEEF90}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{6C1C243A-2146-3342-8078-AC4BFB9DB4E9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6C337B26-3E38-4F98-813B-FBA18BAB64F5}\InProcServer32" = "$homedrive\\Windows\\system32\\(Windows\.Data\.Pdf|glcndFilter)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C3EE638-B588-4D7D-B30A-E7E36759305D}\InprocServer32" = "$homedrive\\Windows\\system32\\activationmanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C683A5C-32B8-47cd-AC28-4B292414D032}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C752774-29FB-4e50-8BB1-97098425A77C}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceMetadataRetrievalClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6C7977F4-DB5B-4977-9A41-C7344CC43DB9}\InProcServer32" = "$homedrive\\Windows\\System32\\fingerprintcredential\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6c955eca-04ce-4f1e-84fe-d8a526ce3137}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6ca50344-051a-4ded-9779-a43305165e35}\InprocServer32" = "$homedrive\\Windows\\System32\\mfh264enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6CE77FA1-033F-4275-A363-44B04E289AB6}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcProCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6CED0DAA-4CDE-49C9-BA3A-AE163DC3D7AF}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6CF48EF8-44CD-45d2-8832-A16EA016311B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6cf497b5-370a-4da6-afd7-6e4e0297fab2}\InProcServer32" = "$homedrive\\Windows\\System32\\HvsiManagementApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6CFAD761-735D-4AA5-8AFC-AF91A7D61EBA}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D0F3287-6D07-4234-A3BC-EE1CD693372E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D14D8F9-DCB2-427c-91BB-E161E5870FFD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D1FBE59-A654-4A0E-8534-4505008DC528}\InProcServer32" = "$homedrive\\Windows\\system32\\CoreShellExtFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D3951EB-0B07-4fb8-B703-7C5CEE0DB578}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D40A6F9-3D32-4FCB-8A86-BE992E03DC76}\InProcServer32" = "$homedrive\\Windows\\System32\\SecurityHealthSSO\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D48E7F7-8ECD-404C-8E30-81C49E8E36EE}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D4A3650-628D-11D2-AE0F-006097B01411}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6D5313C0-8C62-11D1-B2CD-006097DF8C11}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6D68D1DE-D432-4B0F-923A-091183A9BDA7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D6B3CD8-1278-11D1-9BD4-00C04FB683FA}\InprocServer32" = "$homedrive\\Windows\\system32\\certenc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6d6d5c8a-b008-4c62-8f4c-8c11a6a88f25}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D7A4B0E-66D5-4AC3-A7ED-0189E8CF5E77}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipiprt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6d88dda9-359a-46d7-93d5-f1ea8995ab61}\InprocServer32" = "$homedrive\\Windows\\system32\\activationmanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D8BB3D3-9D87-4a91-AB56-4F30CFFEFE9F}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D93C83D-31C1-490E-B5F9-068A80E3D7CB}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceDriverRetrievalClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D99EF93-C3AB-4539-8F2D-BB1BEF21D415}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6DA736C9-DCDE-4651-82A8-56E4EF1D8DD7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6DAF9757-2E37-11D2-AEC9-00C04FB68820}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6db29a9b-10d0-4b93-b86a-188fc998eff8}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6DC25420-C66D-44B5-B3D3-78EECFFA6DB0}\InProcServer32" = "$homedrive\\Windows\\System32\\\\DMAlertListener\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6DD062C7-B6E6-4702-98B0-6E6AB46C877D}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6e10d302-789d-4237-9037-6a675bdf6511}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E182020-F460-11CE-9BCD-00AA00608E01}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{6e18f9c6-a3eb-495a-89b7-956482e19f7a}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6e29fabf-9977-42d1-8d0e-ca7e61ad87e6}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6e33091c-d2f8-4740-b55e-2e11d1477a2c}\InProcServer32" = "$homedrive\\Windows\\system32\\shimgvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E3D2534-AAB3-4FB6-A574-3C9A603AA308}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E3D2E94-E6D8-4afd-AFDE-ABD26CA88BF5}\InProcServer32" = "$homedrive\\Windows\\System32\\faultrep\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E449686-C509-11CF-AAFA-00AA00B6015C}\InProcServer32" = "$homedrive\\Windows\\System32\\inseng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E4B938E-4BA1-4E8D-BCBA-8C51CE95F94F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E4FCB12-510A-4d40-9304-1DA10AE9147C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E582707-CCAF-4333-A9B9-3B4F75C362E0}\InProcServer32" = "$homedrive\\Windows\\system32\\SyncInfrastructure\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E5D1F2A-AF9A-419A-9CAF-C5A5C32C3CF8}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E625D11-49B9-4CA6-A697-DD04FD60C41F}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6e682784-1eca-4cf2-988d-96b6e89e9a4d}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E78DAD9-E187-4D6E-BA63-760256D6F405}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPSESS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6E7E2EF2-F881-472A-8E32-17CA95710402}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\MDMAppProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6EA4B9B1-0121-46C9-95CF-8E5392CB8234}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6EB22881-8A19-11D0-81B6-00A0C9231C29}\InprocServer32" = "$homedrive\\Windows\\System32\\Com\\comadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6EBFDF36-23A6-4F02-8800-CAB1CFEE43ED}\InProcServer32" = "$homedrive\\Windows\\System32\\ReportingCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6EC153C1-371E-47E1-A896-2F7F80EB7842}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6EDD6D74-C007-4E75-B76A-E5740995E24C}\InProcServer32" = "$homedrive\\Windows\\System32\\cmlua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6EE84065-8BA3-4a8a-9542-6EC8B56A3378}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONFILTER\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{6EF07F29-F9B8-4DA4-B59E-13DEA060AD60}\InprocServer32" = "$homedrive\\Windows\\System32\\cmstplua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6f13dd2e-ebee-4dd5-a72e-850b2087f5dd}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F26A6CD-967B-47FD-874A-7AED2C9D25A2}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F3DD387-5AF2-492B-BDE2-30FF2F451241}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{6F3F133D-61E3-4153-8AAE-056031E2B597}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6f45dc1e-5384-457a-bc13-2cd81b0d28ed}\InProcServer32" = "$homedrive\\Windows\\system32\\((credprovs|authui)legacy|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F58F65F-EC0E-4ACA-99FE-FC5A1A25E4BE}\InProcServer32" = "$homedrive\\Windows\\System32\\LanguageComponentsInstaller\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6f5bad87-9d5e-459f-bd03-3957407051ca}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F674828-9081-3B45-BC39-791BD84CCF8F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_0\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F7C8E8F-DC69-4e3f-BC05-439962A05FD5}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F8527BF-5AAD-3236-B639-A05177332EFE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{6F8CF952-B381-44D3-9704-0ED7C3C4E677}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6f92a312-7524-407a-9555-6af7d22648ee}\InprocServer32" = "$homedrive\\Windows\\System32\\HashtagDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6FBD703B-FECE-4348-B93D-6E92AC097F17}\InProcServer32" = "$homedrive\\Windows\\System32\\MsftOemDllIgneous\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6ffa842b-fd90-4a0e-9315-21c52b2457aa}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC1-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC3-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC4-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC5-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC6-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC7-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACC8-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACD1-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACD3-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACD4-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACD5-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7013943A-E2EC-11D2-A086-00C04F8EF9B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7016F8FA-CCDA-11D2-B35C-00105A1F8177}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70351E05-D2BD-4817-9FFD-A6D4A9A90282}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{703574D6-AA1B-4FBF-A938-9A59C89343FA}\InprocServer32" = "$homedrive\\Windows\\system32\\pcsvDevice\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7037C8FC-97F7-4AE5-BF2D-5D2660C97878}\InProcServer32" = "$homedrive\\Windows\\System32\\VoiceActivationManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{703E7517-FA6F-43E2-9418-EFBE2A1357F0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Wallet\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{704033A7-A100-403E-AD9E-D6FEC5FF457E}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdevtools\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70438d09-456a-4a6f-86fe-1c1a3afc699e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7050ebf0-1dbf-4528-838e-f7e10089fc4b}\InprocServer32" = "$homedrive\\Windows\\System32\\VmCrashDump\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7057e952-bd1b-11d1-8919-00c04fc2c836}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{706A79C0-1AC4-4E25-B311-93B643C1E499}\InprocServer32" = "$homedrive\\Windows\\system32\\WinMsoIrmProtector\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70707B39-B2CA-4015-ABEA-F8447D22D88B}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAudDecMFT\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC01-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC05-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC07-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC13-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC31-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC32-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC33-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC61-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC62-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC71-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC75-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071EC77-663B-4BC1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECA0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECA3-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECA5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECA7-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECA8-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECA9-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECAF-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB3-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB4-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB6-663B-4BC1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB7-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECB8-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECBF-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECE0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECE5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECF1-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECFA-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70804ECC-7272-4dc8-AFFC-97CD66AAA282}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7086AD76-44BD-11D0-81ED-00A0C90FC491}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdlgs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70A738D1-1BC5-3175-BD42-603E2B82C08B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{70A92FA3-7FD8-4808-9A05-6B2FD19AA5B3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70cba7d2-50a5-4383-8aa5-b378c01c7364}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70E102B0-5556-11CE-97C0-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70F36578-2741-454F-B494-E8563DDD1CB4}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvDecMFTMjpegx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70f598e9-f4ab-495a-99e2-a7c4d3d89abf}\InprocServer32" = "$homedrive\\Windows\\System32\\WMADMOE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{70f98452-3c38-4271-8e76-6f444852ebc8}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceWiaCompat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70FF37C0-F39A-4B26-AE5E-638EF296D490}\InprocServer32" = "$homedrive\\Windows\\System32\\RACPLDlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{711001CD-CC1D-4470-9B7E-1EF73849C79E}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationConfiguration\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7112FB6A-700C-4C25-BB31-5B13CE60CC29}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{713790EE-5EE1-45ba-8070-A1337D2762FA}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{713aacc8-3b71-435c-a3a1-be4e53621ab1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{71455ADC-0A77-405F-BF67-EA663D276653}\InProcServer32" = "$homedrive\\Windows\\system32\\BthMtpContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{714b2440-bc96-48b9-9738-2a728c653464}\InprocServer32" = "$homedrive\\Windows\\System32\\vmvpci\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7153AC3A-D502-4A96-83AC-32C80FA6844A}\InprocServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{715D9C59-4442-11D2-9605-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7165c8ab-af88-42bd-86fd-5310b4285a02}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7170F2E0-9BE3-11D0-A009-00AA00B605A4}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{717ef4fe-ac8d-11d0-b945-00c04fd8d5b0}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71932D43-3CA5-46EF-B013-3F9A695996ED}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7197647A-7D2B-42E3-B6E2-9BAABBDC8B67}\InprocServer32" = "$homedrive\\Windows\\system32\\EnterpriseDesktopAppMgmtCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{719ff33d-43af-4d4a-a89a-1599e6d88a37}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71A5EC7F-F325-4376-9D94-622C372E256F}\InProcServer32" = "$homedrive\\Windows\\System32\\srumapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71D99464-3B6B-475C-B241-E15883207529}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71DA2664-3D4F-42A0-BCBB-D76F30C00946}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71E32BAA-73EE-40a1-933C-F166F0192B72}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{71E38F91-7E88-11CF-9EDE-0080C78B7F89}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71F080AA-8661-4093-B15E-4F6903E77D0A}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\MPCVR\\MpcVideoRenderer64\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71f3a4a2-dc3f-4ad1-a1ad-81e2109d4414}\InprocServer32" = "$homedrive\\Windows\\System32\\Win32_DeviceGuard\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71f96385-ddd6-48d3-a0c1-ae06e8b055fb}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{71F96460-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96461-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96462-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96463-78F3-11d0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\ksxbar\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96464-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96465-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96466-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F96467-78F3-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{71F9BB80-B88F-48EC-BA54-F92F732208A3}\InProcServer32" = "$homedrive\\Windows\\System32\\SEMgrPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{720B8500-17B3-4C89-AE84-2CFE7251B4B8}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\contextp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{720D4AC0-7533-11D0-A5D6-28DB04C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{7210D183-F81E-4CEA-A2B9-E73C4ECB067A}\InprocServer32" = "$homedrive\\Windows\\system32\\mssph\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72213061-c9bc-40be-a916-a28f5fba091e}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72422AA4-3536-41FA-965E-D5D9DD130297}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{725F645B-EAED-4fc5-B1C5-D9AD0ACCBA5E}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72682FC4-040A-430a-BE0B-224574B953FE}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{726BBDF4-6C6D-30F4-B3A0-F14D6AEC08C7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{727af81a-cacf-4e37-9df7-a22ed974f298}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{728a21c5-3d9e-48d7-9810-864848f0f404}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72967901-68EC-11D0-B729-00AA0062CBB7}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72967903-68EC-11D0-B729-00AA0062CBB7}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72970BEB-81F8-46D4-B220-D743F4E49C95}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\vsswmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72A7994A-3092-4054-B6BE-08FF81AEEFFC}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72b36e70-8700-42d6-a7f7-c9ab3323ee51}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{72B624DF-AE11-4948-A65C-351EB0829419}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72B66649-3DBF-429F-BD6F-7774A9784B78}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72BFEB11-2681-490D-874B-652FC1D75ED8}\InprocServer32" = "($homedrive\\Windows\\System32\\wlidcli\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\wlidcli\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{72c57034-02c4-4e9f-bf9c-ca711031757e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72C97D74-7C3B-40AE-B77D-ABDB22EBA6FB}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72C984BA-0666-4D3F-A0DE-96BF43838E6E}\InprocServer32" = "$homedrive\\Windows\\System32\\VaultRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72d3edc2-a4c4-11d0-8533-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72D633FF-401E-4AB4-BF80-143E4E907407}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{72eb61e0-8672-4303-9175-f2e4c68b2e7c}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7312498D-E87A-11d1-81E0-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73257e95-0378-49d6-a954-44aabc841eab}\InprocServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{734AC5AE-68E1-4FB5-B8DA-1D92F7FC6661}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPICMP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73647561-0000-0010-8000-00AA00389B71}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{73843B93-848F-453B-953D-2E5B911429DC}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7390f3d8-0439-4c05-91e3-cf5cb290c3d0}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73959FD1-7360-42F7-807D-622341783DC0}\InProcServer32" = "$homedrive\\Windows\\System32\\AppXDeploymentClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73AD6842-ACE0-45E8-A4DD-8795881A2C2A}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73B7DC00-F498-4ABD-AB79-D07AFD52F395}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\TextMgrP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73baee40-73e1-4d79-b95d-17b46be9ea08}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73BCA54E-6AEB-4597-8F27-E1284FF12722}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73bf00aa-f928-4a23-b598-cd8afb33d717}\InProcServer32" = "$homedrive\\Windows\\system32\\webplatstorageserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73C037E7-E5D9-4954-876A-6DA81D6E5768}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73CFD649-CD48-4fd8-A272-2070EA56526B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73D14237-B9DB-4efa-A6DD-84350421FB2F}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73DA5D04-4347-45D3-A9DC-FAE9DDBE558D}\InprocServer32" = "$homedrive\\Windows\\System32\\Mpeg2Data\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{73EB8142-4A74-49FD-A0FC-05FAEED4CD51}\InprocServer32" = "$homedrive\\Windows\\system32\\AuditNativeSnapIn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{73FB9979-623F-41A6-BF1C-BA817C519C4F}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{740A6AF1-F502-435E-BD8C-235A2749ECA0}\InprocServer32" = "$homedrive\\Windows\\System32\\uwfcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{740e40d8-5d9f-46be-98dd-39915e3c32ef}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{740EC24D-46AD-4334-A076-41CCC3F8D9B4}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74210DE2-C7E1-42FE-8959-287D5064D433}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGSpeakerPropPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74246bfc-4c96-11d0-abef-0020af6b0b7a}\InprocServer32" = "$homedrive\\Windows\\System32\\devmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{742AD1FB-B2F0-3681-B4AA-E736A3BCE4E1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{743a6e3b-a5df-43ed-b615-4256add790b8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{743B5D60-628D-11D2-AE0F-006097B01411}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{743F1DC6-5ABA-429F-8BDF-C54D03253DC2}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7444C717-39BF-11D1-8CD9-00C04FC29D45}\InprocServer32" = "$homedrive\\Windows\\system32\\cryptext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7444C719-39BF-11D1-8CD9-00C04FC29D45}\InprocServer32" = "$homedrive\\Windows\\system32\\cryptext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7447A267-0015-42C8-A8F1-FB3B94C68361}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{745057c7-f353-4f2d-a7ee-58434477730e}\InprocServer32" = "$homedrive\\Windows\\System32\\mfwmaaec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7459A610-B47B-4655-B86D-29D04B2755C1}\InProcServer32" = "$homedrive\\Windows\\System32\\provisioningcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74620884-155F-4B72-A4F0-0FADDBC0721E}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74628299-57EC-4F12-BA1C-08B477BF447A}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7469AE5E-1CA1-4181-970C-BDFD8EAA2C4F}\InProcServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7473b52d-97d9-41bb-ae03-2d3d51eb42b8}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imefiles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74761821-E040-423d-9399-35BBA3ECFFF5}\InProcServer32" = "$homedrive\\Windows\\system32\\daconn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7478EF65-8C46-11d1-8D99-00A0C913CAD4}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7478EF69-8C46-11d1-8D99-00A0C913CAD4}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7478f1a6-c1bb-4a4c-b7d2-6d4cc34dfffd}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74807f67-0058-440d-8600-65541a7fbbea}\InProcServer32" = "$homedrive\\Windows\\System32\\rshx32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7487cd30-f71a-11d0-9ea7-00805f714772}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{748F920F-FB24-4D09-B360-BAF6F199AD6D}\InprocServer32" = "$homedrive\\Windows\\System32\\srmshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{749962AB-D849-46D5-A39C-75A8307C2C86}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74ABD359-DD57-46b2-B459-B8FC803E67D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74b077e8-32de-40ab-be4e-65609f575459}\InprocServer32" = "$homedrive\\Windows\\System32\\wdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{74BDD0B9-38D7-3FDA-A67E-D404EE684F24}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{75048700-EF1F-11D0-9888-006097DEACF9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{750fdf10-2a26-11d1-a3ea-080036587f03}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7519A68F-E6F1-422E-B741-F9B960CBAA97}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75207391-23F2-4396-85F0-8FDB879ED0ED}\InProcServer32" = "$homedrive\\Windows\\servicing\\CbsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75215200-A2FE-30F6-A34B-8F1A1830358E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{752438CB-E941-433F-BCB4-8B7D2329F0C8}\InprocServer32" = "$homedrive\\Windows\\system32\\firewallcontrolpanel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{753EE549-D0D2-4B22-8A49-65B667B747B4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Sensors\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7542E960-79C7-11D1-88F9-0080C7D771BF}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7548A939-2776-46CF-8F62-1D1F488DEDF0}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75587F04-6EFF-443e-BED5-637117299643}\InProcServer32" = "$homedrive\\Windows\\system32\\daconn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{756c119d-9124-4693-80d8-2c1e49afab1f}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{756E6C18-79CC-3842-9E47-7C80011D303A}\InprocServer32" = "mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75718C9A-F029-11D1-A1AC-00C04FB6C223}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75847177-f077-4171-bd2c-a6bb2164fbd0}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7584c670-2274-4efb-b00b-d6aaba6d3850}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75999EBA-0679-3D43-BDC4-02E4D637F1B1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{75AB852C-0441-46D4-A205-EF0A33F98255}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75BDD7A1-1224-41DA-90B4-457ACD874F12}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75C9378A-7E89-11d2-B116-00805FC73204}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75CA41C9-9F1D-41BC-9285-65595759E52B}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{75FC37F9-423B-483F-8A2E-AA2CADA4106F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Credentials\.UI\.CredentialPicker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7601591E-EEC1-43c9-ACC5-F5EA31C7A364}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidfdp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{760681E7-B985-41CE-BCBE-2985A1DFC61C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7658816D-64C1-4483-B831-DDC4470014B2}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7658F2A2-0A83-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7669CAD6-BDEC-11D1-A6A0-00C04FB9988E}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76765b11-3f95-4af2-ac9d-ea55d8994f1a}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{767EE1f6-2006-43EA-8278-90B37AC8FD02}\InProcServer32" = "$homedrive\\Windows\\System32\\efswrt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7693E886-51C9-4070-8419-9F70738EC8FA}\InprocServer32" = "$homedrive\\Windows\\system32\\mswebp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{769B8B68-64F7-3B61-B744-160A9FCC3216}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76B4FCAC-BB29-11DB-96F1-005056C00008}\InprocServer32" = "$homedrive\\Windows\\System32\\CPFilters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76be8257-c4c0-4d37-90c0-a23372254d27}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76CCA200-8292-4BC5-B400-9265D00C1193}\InProcServer32" = "$homedrive\\Windows\\System32\\SpaceControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76D0CB12-7604-4048-B83C-1005C7DDC503}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76DAE2C2-5444-469F-9B1F-A853A5D565E2}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76F363F2-7E9F-4ED7-A6A7-EE30351B6628}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{770e8e77-4916-441c-a9a7-b342d0eebc71}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{771B6EF5-30DD-443D-8CC5-E737EB051EEE}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7724F5B4-9A4A-4a93-AD09-B06F7AB31035}\InProcServer32" = "$homedrive\\Windows\\system32\\DAMM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7734DE5F-5567-4C16-81A0-8127AFA4F1FC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGRenderPropPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7735B86B-2EAB-43EF-B5DE-31A15F767C14}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7751F46E-39B2-4b50-A7E3-23EF598ECD85}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{7757BA9B-7986-4866-B53F-A31E89FCBA15}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77597368-7B15-11D0-A0C2-080036AF3F03}\InprocServer32" = "$homedrive\\Windows\\system32\\printui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7760EF40-2920-44BA-8B47-2D42B1740139}\InProcServer32" = "$homedrive\\Windows\\System32\\MCCSEngineShared\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7763B7C0-A5FD-4AA9-BD1B-58B17137236B}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77646a68-ad14-4d53-897d-7be4dde5f929}\InProcServer32" = "$homedrive\\Windows\\System32\\TempSignedLicenseExchangeTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7775dec3-6a3e-4c57-bac2-4f1774e54b1b}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777B6BBD-2FF2-11D3-88FE-00C04F8EF9B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA815-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA816-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA81A-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA851-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwtpw32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA853-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwtpdui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA87C-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8D2-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8E3-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8E5-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8E7-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8E9-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8F5-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwreg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8F9-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwreg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777BA8FB-2498-4875-933A-3067DE883070}\InProcServer32" = "$homedrive\\Windows\\system32\\xwreg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777D0CFF-0375-43b9-8532-FB04A4903593}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpeffects\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{777F668E-3272-39CD-A8B5-860935A35181}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{778DE47F-7ADC-4C4D-974D-771BD1675DC5}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77963C0E-91BA-479E-9192-686DDA6BB722}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationController\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77A1C827-FCD2-4689-8915-9D613CC5FA3E}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77B6E213-6911-441E-8849-AF63C813D6BE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Lights\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_8\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A70-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A71-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A72-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A73-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A74-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A75-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5A90-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5AA0-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5AA1-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CA5AA2-1D99-4E2A-8D16-D2D7D00E9A9B}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77CBBBB7-6CD0-48ED-A02B-52FBB0E43ECD}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77F10CF0-3DB5-4966-B520-B7C54FD35ED6}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77F419AA-771A-45ff-AC66-7567FA3243D3}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77F7F122-20B0-4117-A2FB-059D1FC88256}\InprocServer32" = "$homedrive\\Windows\\System32\\wpdsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{780102B0-C43B-4876-BC7B-5E9BA5C88794}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78065982-b44b-41c6-a9a3-f2fd11746223}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78103FB7-AED7-4066-8BCD-30BB27B02331}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{782FC20A-81CF-43DE-A625-072155BCD30C}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78317482-5b49-4093-9c34-2758fc63bef0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{784215B4-0D2E-11D3-920A-00C0DF10D434}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{784BD832-A28C-409A-B440-DAC2028CFA5E}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78530B75-61F9-11D2-8CAD-00A024580902}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{786CDB70-1628-44A0-853C-5D340A499137}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78788f3f-e820-4d2f-bf5f-3252c7946aa4}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{787A2D6B-EF66-488D-A303-513C9C75C344}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{7888E5FE-6C66-4A34-B217-FA2292073F4A}\InProcServer32" = "$homedrive\\Windows\\System32\\wmpps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78A1BEBB-AA1D-43ED-9147-42BA274AF66F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Management\.SecureAssessment\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78A51822-51F4-11D0-8F20-00805F2CD064}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78A683B3-A5CE-484D-9559-221D1CB45EC5}\InProcServer32" = "$homedrive\\Windows\\System32\\CleanPCCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78D22140-40CF-303E-BE96-B3AC0407A34D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{78DE489B-7931-4f14-83B4-C56D38AC9FFA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78fe669a-186e-4108-96e9-77b586c1332f}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79176FB0-B7F2-11CE-97EF-00AA006D2776}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{7924BBA8-1913-4B0E-8E6F-6F45CE499731}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\nlmcim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7931F65C-2564-4C19-AE71-E7DDFA008F6A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{793239d0-2bed-4e9a-a276-0c8bf918c42e}\InProcServer32" = "$homedrive\\Windows\\System32\\UserDeviceRegistration\.Ngc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79376820-07D0-11CF-A24D-0020AFD79767}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7940ACF8-60BA-4213-A7C3-F3B400EE266D}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7945F814-7BFB-4506-A113-2BD66CDC713A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7946ede1-839d-49be-9c1d-27c44529e093}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{794873D1-35DB-44c2-8BD2-F332A433C80E}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79512918-11cd-4f7c-a294-de1ff011a194}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7970614A-BD82-439E-A828-CC96F8E91428}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{797A9BB1-9E49-4e63-AFE1-1B45B9DC8162}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{797B2BFB-AB33-4850-8126-9A07C20FC628}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.LowLevel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{798059F0-89CA-4160-B325-AEB48EFE4F9A}\InprocServer32" = "$homedrive\\Windows\\System32\\mfvdsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79834058-0A20-44dc-AD9B-CE07DC6E379C}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7988B571-EC89-11cf-9C00-00AA00A14F56}\InProcServer32" = "$homedrive\\Windows\\System32\\dskquota\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7988B573-EC89-11cf-9C00-00AA00A14F56}\InProcServer32" = "$homedrive\\Windows\\System32\\dskquoui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7998DC37-D3FE-487C-A60A-7701FCC70CC6}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\repdrvfs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7999FC25-D3C6-11CF-ACAB-00A024A55AEF}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79C43ADB-A429-469F-AA39-2F2B74B75937}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79CEEEBE-BDE0-4C05-9D92-155F78BB7D2B}\InprocServer32" = "$homedrive\\Windows\\system32\\activationclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79DBA461-677B-448A-8A5E-3006DABAF6F9}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79DEA627-A08A-43AC-8EF5-6900B9299126}\InProcServer32" = "$homedrive\\Windows\\system32\\(directmanipulation|Uxtheme)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9d0-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\hlink\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9d1-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\hlink\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9e0-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9e2-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9e3-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9e5-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9e6-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9e7-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79EAC9F1-BAF9-11CE-8C82-00AA004BA90B}\InProcServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79eac9f2-baf9-11ce-8c82-00aa004ba90b}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79EB1402-0AB8-49C0-9E14-A1AE4BA93058}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Sockets\.PushEnabledApplication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79F8E185-4E45-4B74-8182-02AA430661E4}\InProcServer32" = "$homedrive\\Windows\\System32\\Themes\.SsfDownload\.ScheduledTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{79FD7442-008F-42D9-ADFA-377C441D2DB1}\InprocServer32" = "($homedrive\\Windows\\System32\\wlidcli\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\wlidcli\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7A076CE1-4B31-452a-A4F1-0304C8738100}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A0CC021-2939-4379-AA82-12AECC3538F6}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A0F6AB7-ED84-46B6-B47E-02AA159A152B}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A213AA7-866F-414A-8C1A-275C7283A395}\InprocServer32" = "$homedrive\\Windows\\System32\\FsNVSDeviceSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7a54bbed-bb9b-425a-8bd7-1a5410923dcf}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A56C4CB-D678-4188-85A8-BA2EF68FA10D}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A63D67D-014E-4f5f-AE9D-CC0C1FE16DAC}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A7C3277-8F84-4636-95B2-EBB5507FF77E}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7A80E4A8-8005-11D2-BCF8-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7a836eee-3676-46fb-ba6f-2de2ce38cbb3}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7a872d34-bc6b-4f83-b199-22e9c0a91ddc}\InProcServer32" = "$homedrive\\Windows\\System32\\credprovhost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7aa7790d-75d7-484b-98a1-3913d022091d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7AA809F6-C072-11DF-AC23-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AA809F7-C072-11DF-AC23-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AA809F8-C072-11DF-AC23-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AAE5B4F-488C-419b-95E2-923F2AA70FFD}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AB36653-1796-484B-BDFA-E74F1DB7C1DC}\InProcServer32" = "$homedrive\\Windows\\System32\\MsSpellCheckingFacility\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AB549A8-2527-4126-A255-1CC43E1B096E}\InProcServer32" = "$homedrive\\Windows\\system32\\IppCommonProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7abbbcca-e01b-4560-8228-92e1eedbc908}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AD84985-87B4-4a16-BE58-8B72A5B390F7}\InProcServer32" = "($homedrive\\Windows\\System32\\playtomenu\.dll|$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssui\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7AE01D6C-BEE7-38F6-9A86-329D8A917803}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7AE844F0-ECA8-3F15-AE27-AFA21A2AA6F8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7AF4D6DC-F176-4db8-BB59-EB5DAA841844}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AFA253E-F823-42f6-A5D9-714BDE467412}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7afb974e-3842-4106-a702-82a13e088f46}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B014A0C-A42A-4268-BFE0-AFCA9745CD53}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B0C11A0-2FAF-40d4-9FE5-28FA27C85442}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B134486-8B58-4802-A6AE-1A5E708DBCC6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B19A919-A9D6-49E5-BD45-02C34E4E4CD5}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B2801E6-0BC6-4c92-B742-6BE9B01AE874}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7B31547E-EF7E-479b-9494-2216DC179E61}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7B3BC2A0-AA50-4ae7-BD44-B03649EC87C2}\InprocServer32" = "$homedrive\\Windows\\System32\\WSTPager\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{7b40792d-05ff-44c4-9058-f440c71f17d4}\InprocServer32" = "$homedrive\\Windows\\System32\\tdh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7b4a83b6-f704-4b77-8e3d-c6087e3a21d2}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B5A12E8-0C60-4939-A046-11CF879B19FB}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B769B29-35F0-3BDC-AAE9-E99937F6CDEC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7b81be6a-ce2b-4676-a29e-eb907a5126c5}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{7B82D688-3B9E-4090-8ECD-FC84E454C923}\InProcServer32" = "$homedrive\\Windows\\System32\\msvproc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7b8a2d94-0ac9-11d1-896c-00c04Fb6bfc4}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7b8a2d95-0ac9-11d1-896c-00c04Fb6bfc4}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B90DAE3-4AD0-4F0D-BE80-A26B296C3156}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7B938A6F-77BF-351C-A712-69483C91115D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7b9e38b0-a97c-11d0-8534-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BA4C740-9E81-11CF-99D3-00AA004AE837}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7bafb3b1-d8f4-4279-9253-27da423108de}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvsdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BB17C5A-3176-4B40-A3F9-39D4A64D7E83}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BC115CD-1EE2-3068-894D-E3D3F7632F40}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7BD29E00-76C1-11CF-9DD0-00A0C9034933}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BD29E01-76C1-11CF-9DD0-00A0C9034933}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BD7AB1C-F2C5-60C2-8D00-C2E50336A954}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7be73787-ce71-4b33-b4c8-00d32b54bea8}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BF2A436-2A30-4797-90EE-0F66B8426D75}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C07E0D0-4418-11D2-9212-00C04FBBBFB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msdaprst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C127AC8-EC8D-40f2-91D0-B791CFC2397B}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C22A465-6B21-4132-BA6A-FDABC91A4243}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C23220E-55BB-11D3-8B16-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C28841A-AB97-498e-98C4-F6F143366FBC}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C3269CC-95B0-41C7-BCD7-F96640883669}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C443A25-0ECE-4543-B776-B3BBCF77F007}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C48D08B-0DA5-4BA4-9C6E-4BB65DEB2005}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C50E1E9-DB15-4410-89C5-D27F4B727368}\InprocServer32" = "$homedrive\\Windows\\system32\\CredProvHelper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C606A3F-8AA8-4E36-92D6-2B6AFEC0B732}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7c61d0a6-af7e-483a-b705-d2c5c2264656}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7c67eb93-8eff-4e48-889f-45ba299bc46f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7c83c056-1d0d-4c8e-a6b0-89e79c213559}\InProcServer32" = "$homedrive\\Windows\\system32\\oobe\\SetupCleanupTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7C92505F-53A4-4D39-B31C-871D82A907DE}\InProcServer32" = "$homedrive\\Windows\\System32\\intl\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{7cacbd7b-0d99-468f-ac33-22e495c0afe5}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7CB359C5-570F-43c6-971F-1DB499EE57A1}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7CCDF9F4-E576-455A-8BC7-F6EC68D6F063}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7cd3c903-d2e9-4a4d-8af3-3025445b24bf}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7CD4F369-6379-4EBB-86D4-87DA8E63CA3B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Store\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7CD6B491-C1A1-4F1C-B36E-A91B011DFADD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D0A1EC2-2196-42D9-BBB2-85BF6FC65D49}\InProcServer32" = "$homedrive\\Windows\\System32\\DesktopSwitcherDataModel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D0E1FD9-E110-45A9-9C24-95E7680D9CB8}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastReceiverExt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D3195FF-A16A-43c3-9E50-E8A0975B234C}\InProcServer32" = "$homedrive\\Windows\\system32\\BthpanContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7d39c56f-6075-47c9-9bae-8cf9e531b5f5}\InprocServer32" = "$homedrive\\Windows\\System32\\msflacencoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D47A75E-E79D-4D11-8A11-362F816C04A9}\InProcServer32" = "$homedrive\\Windows\\System32\\MixedRealityRuntime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D4F81CB-1EC8-40B8-BDA4-483462EE62FF}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D559C10-9FE9-11d0-93F7-00AA0059CE02}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D5F3CBA-03DB-4BE5-B4B3-6DBED19A6833}\InprocServer32" = "$homedrive\\Windows\\System32\\storewuauth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D892F85-CC71-48fe-BFF6-72B7BD4F9C27}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D8AA343-6E63-4663-BE90-6B80F66540A3}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7DB7A939-E5C8-4eaa-B3E0-43CE04CAFFBE}\InProcServer32" = "$homedrive\\Windows\\System32\\sdcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7db875bd-1b88-4c5f-9e4c-ed23eaff24e1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7DE087A5-5DCB-4df7-BB12-0924AD8FBD9A}\InprocServer32" = "$homedrive\\Windows\\System32\\WSMAUTO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{7DED4D39-BE20-4AB6-983A-EB4ADCD9C93D}\InprocServer32" = "$homedrive\\Windows\\System32\\ieapfltr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7df2cfcd-6c09-415a-ae9d-5263f4964cbb}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7DF62B50-6843-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7DF8EF76-D449-485f-B4EB-58DC96B31EDB}\InProcServer32" = "$homedrive\\Windows\\system32\\hgprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E08E268-CD23-4E97-B433-AB31D5BFB6AE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E1A1FA9-EF4F-41E6-8F95-684ED50E039A}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7e320092-596a-41b2-bbeb-175d10504eb6}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvxencd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E3393AB-2AB2-320B-8F6F-EAB6F5CF2CAF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7E34AB89-0684-3B86-8A0F-E638EB4E6252}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7E37D5E7-263D-45CF-842B-96A95C63E46C}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E3FCEA1-31B4-11D2-AE1F-0080C7337EA1}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E45546F-6D52-4D10-B702-9C2E67232E62}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E48C5CF-72F6-4C84-9F43-B04B87B31243}\InprocServer32" = "$homedrive\\Windows\\System32\\wshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E4A23E2-B969-4761-BE35-1A8CED58E323}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E53D66F-70CE-41CD-97AF-ECB4FC7D0670}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7e5fe3d9-985f-4908-91f9-ee19f9fd1514}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E66DBEF-2474-4E82-919B-9A855F4C2FE8}\InprocServer32" = "$homedrive\\Windows\\system32\\wscproxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E6FA97B-72A8-45F1-A00B-6569192FFF91}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7E8BC44E-AEFF-11D1-89C2-00C04FB6BFC4}\InprocServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7e99c0a3-f935-11d2-ba96-00c04fb6d0d1}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7EAD5C10-8B3F-11E6-AE22-56B6B6499611}\InProcServer32" = "$homedrive\\Windows\\system32\\bnmanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7EB5FBE4-2100-49E6-8593-17E130122F91}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7ECEAD6D-6452-4DED-B567-7BB9947D7669}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7ED25D63-48E5-4BE3-8539-3040B0B8991C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7EE0A24E-A8C6-46ae-A875-8E7C3D18AEAF}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7EEBC371-4A02-413C-9419-B9DC70382AAD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7EFA68C6-086B-43e1-A2D2-55A113531240}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7efc002a-071f-4ce7-b265-f4b4263d2fd2}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F00FA1E-9820-47B1-9C4F-8701F1432177}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7f065fc8-efc7-4cab-82e0-694a14e910f2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F12E753-FC71-43D7-A51D-92F35977ABB5}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F1899DA-62A6-11D0-A2C6-00C04FD909DD}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F43B400-1A0E-4D57-BBC9-6B0C65F7A889}\InProcServer32" = "$homedrive\\Windows\\system32\\catsrvps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F4F2318-4AF6-432b-B957-B30D0779234E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F6BCBE5-EB30-370B-9F1B-92A6265AFEDD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7F71DB2D-1EA0-3CAE-8087-26095F5215E6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7F72CC7A-74A0-45B4-909C-14FB8186DD7E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipdfs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F8C7DC5-D8B4-3758-981F-02AF6B42461A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7f8e7858-c362-4c0a-b868-4cdd929da715}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7F976B72-4B71-3858-BEE8-8E3A3189A651}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7F9CB14D-48E4-43B6-9346-1AEBC39C64D3}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FA73865-842A-48A4-9C11-827EE31F731D}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FA999A5-502F-4A8B-932E-5C84FD8254AB}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FB1D98A-F895-4761-8DC2-774969C84D10}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPJOBJ\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FD3958D-0A14-3001-8074-0D15EAD7F05C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7FE0D935-DDA6-443F-85D0-1CFB58FE41DD}\InProcServer32" = "$homedrive\\Windows\\System32\\certcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FE402D6-B253-28D1-B35F-6189448727C0}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FE87A55-1321-3D9F-8FEF-CD2F5E8AB2E9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7febaf7c-18cf-11d2-993f-00a0c91f3880}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{7FF0997A-1999-4286-A73C-622B8814E7EB}\InprocServer32" = "$homedrive\\Windows\\System32\\encapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80009818-f38f-4af1-87b5-eadab9433e58}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{802B1FB9-056B-4720-B0CC-80D23B71171E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80520d81-f629-4bdb-aede-2563ee56cd56}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{805B7F91-C9CF-4EDF-ACA6-775664FDFB3E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8066FB71-AFA1-343E-8070-44AB4F3F85C9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{806f5b1a-d0db-4a89-94d8-c5712e796f9b}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{807583E5-5146-11D5-A672-00B0D022E945}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\MSOXMLMF\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8078DA75-F43F-341D-A00E-20D6D736415E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{807C1E6C-1D00-453f-B920-B61BB7CDD997}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{807e5a10-4856-4f9a-8e3c-a1f7e75648b3}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8082C5E6-4C27-48ec-A809-B8E1122E8F97}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8097A103-F7BC-4a17-876C-EE8446752464}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8099904b-0b91-4906-a89d-11de2bd8f737}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{809B6661-94C4-49E6-B6EC-3F0F862215AA}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{809fee14-1687-41d3-b333-5c2572c743c5}\InProcServer32" = "$homedrive\\Windows\\system32\\DdcComImplementationsDesktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80A09B21-11E7-462B-844A-1EB3415BB4A8}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.Compression\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80a90d72-a834-4f3d-ad3b-c7abbe4a0f66}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80BA3813-908F-4D4C-A5FF-263640AD5B7A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80c68d96-366b-11dc-9eaa-00161718cf63}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{80CB8C11-0E10-45F4-A1BA-EAD3838D7034}\InprocServer32" = "$homedrive\\Windows\\System32\\vdsvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80F94176-FCCC-11D2-B991-00C04F8ECD78}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{80FCA77A-FBCB-4F7D-BC84-547E3F79D618}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81007291-f070-4c4f-b978-ad1bec84babc}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8101368E-CABB-4426-ACFF-96C4108120CD}\InprocServer32" = "$homedrive\\Windows\\System32\\fdPnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{810E402F-056B-11D2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{811F592B-CDE7-4ca4-A6D4-7BB3F60AD8FB}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81218F10-A8AA-44C4-9436-33A42C3852E9}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{812F944A-C5C8-4CD9-B0A6-B3DA802F228D}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8135397C-5C6C-4f6b-8E93-30685615F4EA}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81397204-F51A-4571-8D7B-DC030521AABD}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{814B9800-1C88-11D1-BAD9-00609744111A}\InprocServer32" = "$homedrive\\Windows\\System32\\vbisurf\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{814B9801-1C88-11D1-BAD9-00609744111A}\InprocServer32" = "$homedrive\\Windows\\System32\\vbisurf\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{815509B5-2940-4287-83DD-13EA06E181DD}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8159d2c0-0e05-46b2-a4ce-6d16b477d375}\InprocServer32" = "$homedrive\\Windows\\System32\\emojids\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{815E42F5-B141-45C2-B844-0BDFE9C558E2}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81667C73-F396-44a3-923B-3749C0840A58}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8168e74a-b39f-46d8-adcd-7bed477b80a3}\InprocServer32" = "$homedrive\\Windows\\System32\\MemoryDiagnostic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81796171-DF5F-4F1B-A80C-BE4715D3C6BB}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsreng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{817F98C4-C9D9-4B8F-B8D0-413C8E5DBBB7}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81830747-809f-45dd-82b9-c7d943a4380b}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{819469D2-D0CF-11d1-8E0B-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{819d1334-9d74-4254-9ac8-dc745ebc5386}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{81b43e73-e814-4dcd-a7c6-e22e7fe6a029}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{81BD8EE8-F713-36A5-B7D5-9E92ACB4A18A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{81C5FE01-027C-3E1C-98D5-DA9C9862AA21}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{81E4DE90-AD0A-48C8-BE83-567EB91A0C27}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81E9DD62-78D5-11D2-B47E-006097B3391B}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{820825FD-1358-4705-8FEB-56B5CEE8BFD5}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82345212-6ACA-4B38-8CD7-BF9DE8ED07BD}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{823535A0-0318-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{823B8267-735C-477E-8151-0FA9ADC8AB3A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{82569ac2-3564-4f80-b3c5-cfd842e40d2d}\InProcServer32" = "$homedrive\\Windows\\System32\\CspProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8278F931-2A3E-11d2-838F-00C04FD918D0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{827b7a93-2c48-433e-b247-8e3be20aab4a}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{827CE1A1-8255-4165-8C83-8379F8C127AE}\InprocServer32" = "$homedrive\\Windows\\System32\\wlangpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82800303-1F33-402D-B832-052E23E9B7F9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.AccountsControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82b0d8c9-3ecc-4f1c-984c-6a85c1da2244}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82BD0E67-9FEA-4748-8672-D5EFE5B779B0}\InProcServer32" = "$homedrive\\Windows\\system32\\(wincredui|credui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82c588e7-e54b-408c-9f8c-6af9adf6f1e9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82d353df-90bd-4382-8bc2-3f6192b76e34}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdecod\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{82d792e9-8f8c-4f4a-9dbf-06253e4562a8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{83081C08-382C-4ED4-ACCF-DCBECA021010}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{831C89F1-E6AD-47C5-997A-E417B506532F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83267d9b-a70d-469d-bab0-c4e3181209d1}\InprocServer32" = "$homedrive\\Windows\\system32\\srmscan\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8336e323-2e6a-4a04-937c-548f681839b3}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{833A69FB-5E17-4893-85A5-1EF469217372}\InprocServer32" = "$homedrive\\Windows\\system32\\WlanRadioManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83472593-4fe6-4f44-a14c-fc8d4b4ff3f5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{835C38DC-820F-4CDF-ADC1-3A0DAC5A1C6B}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8368958c-a3ec-491f-9b4d-18f3f8287ee2}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{836932DD-FD20-4155-B781-DC3494D06C5A}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8369AB20-56C9-11D0-94E8-00AA0059CE02}\InProcServer32" = "$homedrive\\Windows\\System32\\occache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{836CD085-B3D3-4b5c-BBCB-224F35EB0CCD}\InprocServer32" = "$homedrive\\Windows\\System32\\wpnprv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{836FA1B6-1190-4005-B434-7ED921BE2026}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8373ce97-72b7-4fb2-b5e8-b38aa083d734}\InprocServer32" = "$homedrive\\Windows\\system32\\WinSyncProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{837A6733-1675-3BC9-BBF8-13889F84DAF4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{838A77A6-14D4-439C-925F-30EE58005026}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8398EE59-134A-420A-934A-D86A7F900D9A}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83B52078-E93E-425B-926F-DE6169875E41}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83B8BCA6-687C-11D0-A405-00AA0060275C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83bb272f-7d5e-4b6e-9250-889893f0dac7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{83bbcbf3-b28a-4919-a5aa-73027445d672}\InProcServer32" = "$homedrive\\Windows\\System32\\wiashext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83BC5EC0-6F2A-11d0-A1C4-00AA00C16E65}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83BF6728-A96E-4228-B442-DB539208D56E}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83C25742-A9F7-49FB-9138-434302C88D07}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\MSOSB\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{83d6f579-4a45-439f-994e-7ec23c46b13e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83e05bd5-aec1-4e58-ae50-e819c7296f67}\InProcServer32" = "$homedrive\\Windows\\system32\\iasdatastore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83E94DBF-7F97-46B0-A6F0-360FE982BF83}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{83F18638-2238-4B33-9FF8-24E759ADDC66}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8408B448-06CC-47A0-B482-BDAB666AF557}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceSetupStatusProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{840A0DD9-DC22-4f92-ABCE-894E6D8DCF47}\InProcServer32" = "$homedrive\\Windows\\System32\\remoteaudioendpoint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{840f3a85-dde5-4503-9529-4cfa8e5ca201}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8418E676-926B-4F83-9796-E2EC9C556906}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8421E7A1-1887-42A3-859F-1D8C20814C85}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{842a1268-6e6a-465c-868f-8bc445b9828f}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{842D84C9-C347-11D1-8F64-00C04FB611C7}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84302F97-7F7B-4040-B190-72AC9D18E420}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84465401-2886-4CE0-AF50-C0560226ED40}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv80p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84548587-A7FF-45FD-8FC9-A4E89180B474}\InProcServer32" = "$homedrive\\Windows\\System32\\edpcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84589833-40D7-36E2-8545-67A92B97C408}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{846225EA-B241-42A7-9D46-A694ECD5A781}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{846727BE-C1B7-4A57-A638-A07264752C50}\InProcServer32" = "$homedrive\\Windows\\System32\\WwaApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84840C72-9913-4D9F-BEE4-447A8A875B82}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\appbackgroundtask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8496e040-af4c-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{849F5497-5C61-4023-8E10-A28F1A8C6A70}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84A3979A-6DD5-4a45-87B9-CBB47E0BF185}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84a3a6bf-f1d8-496e-9f05-d3de70973152}\InprocServer32" = "$homedrive\\Windows\\System32\\WWanHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32" = "$homedrive\\Users\.*\\GoToMeeting\\.*\\G2MOutlookAddin64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84C050B8-8B00-409C-B752-6AFE92D9B812}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84C22490-C68A-4492-B3A6-3B7CB17FA122}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84CCE1D2-97AD-4448-AF0F-A79164073A60}\InProcServer32" = "$homedrive\\Windows\\System32\\themecpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84D586C4-A423-11D2-B943-00C04F79D22F}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84DE202D-5D95-4764-9014-A46F994CE856}\InprocServer32" = "$homedrive\\Windows\\System32\\AdmTmpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84DE202E-5D95-4764-9014-A46F994CE856}\InprocServer32" = "$homedrive\\Windows\\System32\\AdmTmpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84e04a55-2d42-4909-86e3-62fd11483e8b}\InProcServer32" = "$homedrive\\Windows\\system32\\setupcln\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84E65691-8602-4A84-BE46-708BE9CD4B74}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84EAAE65-2F2E-45F5-9BB5-0E857DC8EB47}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{84f0fae1-c27b-4f6f-807b-28cf6f96287d}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{84F70B6C-D59E-394A-B879-FFCC30DDCAA2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{84FC747A-1940-3D85-8819-EA53FC73DB1B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{85074451-173D-4091-8648-C0E196BB363E}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8509bb76-ffa3-4827-ba5e-2e786010f42f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{850D1D11-70F3-4BE5-9A11-77AA6B2BB201}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{851257E8-47C3-43E6-A937-31731537BDFB}\InprocServer32" = "$homedrive\\Windows\\System32\\DTUHandlerPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85131630-480C-11D2-B1F9-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85131631-480C-11D2-B1F9-00C04F86C324}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85423CAE-A5E8-4AB4-BC89-D4FC6C283F63}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{854CB94F-2279-4F7F-AC62-31E22E4D8899}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{855fec53-d2e4-4999-9e87-3414e9cf0ff4}\InProcServer32" = "$homedrive\\Windows\\system32\\wdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8570b44e-d109-42d3-be32-0f8d446669c5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8580ca99-925D-4537-959B-B7C9EA45FC01}\InprocServer32" = "$homedrive\\Windows\\system32\\desktopshellext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{858DACA2-78B4-412F-9A4E-315BBB4E1F21}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8596E5F0-0DA5-11D0-BD21-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8598dfba-be26-4209-8582-78189fa271b1}\InProcServer32" = "$homedrive\\Windows\\System32\\srm_ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{859AC360-A8F0-4d82-BBC7-7E28529FCC46}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85AFC315-CAC7-4475-875B-D7161BA14874}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85B3D708-4313-43F4-959B-829654791E8C}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85cfccaf-2d14-42b6-80b6-f40f65d016e7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85D88658-CFDB-4F51-AD06-4DAC60CB5AFB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{85e94d25-0712-47ed-8cde-b0971177c6a1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8601319a-d7cf-40f3-9025-7f77125453c6}\InprocServer32" = "$homedrive\\Windows\\system32\\sxsstore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{860BB310-5D01-11d0-BD3B-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{860d36ee-748e-4b73-ae45-c33187e6f166}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\applets\\imjpclst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86151827-E47B-45ee-8421-D10E6E690979}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86193C76-0DCA-4B33-83CA-6D7DCCA48D0B}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{862321c3-70b2-4ee2-8231-87ec05819d98}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{863aa9fd-42df-457b-8e4d-0de1b8015c60}\InProcServer32" = "$homedrive\\Windows\\system32\\prnfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{863FA3AC-9D97-4560-9587-7FA58727608B}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86422020-42A0-1069-A2E5-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{864A1288-354C-4D19-9D68-C2742BB14997}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{864A9449-05B7-4A4F-B2FB-7CBACA74A5B1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.UI\.Logon\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8652CE55-9E80-11D1-9053-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{865ab07b-1c8e-48c0-b9a7-fa6c5ff48f7b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8664DA16-DDA2-42AC-926A-C18F9127C302}\InProcServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8670C736-F614-427b-8ADA-BBADC587194B}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8685C4A9-D0E4-444C-87A0-D9FB858235A7}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86bec222-30f2-47e0-9f25-60d11cd75c28}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86c14003-4d6b-4ef3-a7b4-0506663b2e68}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86c815aa-4888-4063-b0ab-03c49f788be4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86C86720-42A0-1069-A2E8-08002B30309D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{86d5eb8a-859f-4c7b-a76b-2bd819b7a850}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86EB3FD8-E142-4f3d-B3D3-5D8F41097D58}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86F56B7F-A81B-478d-B231-50FD37CBE761}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{86F80216-5DD6-4F43-953B-35EF40A35AEE}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86FFEF81-E868-46F8-ACC2-290C2D8C3659}\InProcServer32" = "$homedrive\\Windows\\System32\\DuCsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87099231-C7AF-11D0-B225-00C04FB6C2F5}\InprocServer32" = "$homedrive\\Windows\\System32\\fxscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{870AF99C-171D-4f9e-AF0D-E63DF40C2BC9}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8711FA7E-7548-486F-A691-7716BBA5601D}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87123A30-0975-417D-9457-10066C5B69C3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{871463A8-6A0B-40A6-AF6E-FE733CAA1768}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87170aa7-42d4-4999-8537-49e3d4ae0767}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Streaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{872f8dc8-dde4-43bd-ac7a-e3d9fe86ceac}\InProcServer32" = "$homedrive\\Windows\\System32\\SystemResetPlatform\\SystemResetSSO\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{874131cb-4ecc-443b-8948-746b89595d20}\InprocServer32" = "$homedrive\\Windows\\System32\\WMSPDMOD\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8754DA31-5CF5-49c7-BDCF-C03045DA5A09}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87630419-6216-4ff8-a1f0-143562d16d5c}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8770D941-A63A-4671-A375-2855A18EBA73}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{877A0BB7-A313-4491-87B5-2E6D0594F520}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{877ca5ac-cb41-4842-9c69-9136e42d47e2}\InprocServer32" = "$homedrive\\Windows\\system32\\sdshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{877E4351-6FEA-11D0-B863-00AA00A216A1}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{8787dae2-d998-4ff4-a5d3-1d5fc4057c1c}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\VSPerfCollectionTools\\vs2022\\x64\\VSPerfCorProf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{878EC44B-7E5A-4e88-B688-7138196240C7}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{879fb53b-cba3-4fc8-b233-d9a93afa7fbc}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87A45ECB-6B91-4207-8C2A-8F5136B4495A}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.LockScreen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87AB8051-37BD-4e70-83C0-1E4F9AE1D37D}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87BB326B-E4A0-4de1-94F0-B9F41D0C6059}\InprocServer32" = "$homedrive\\Windows\\system32\\eapp3hst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87C8BA99-B13E-4BAE-87EE-E14A13172B26}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintWSDAHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87CB4E0D-2E2F-4235-BC0A-7C62308011F6}\InProcServer32" = "$homedrive\\Windows\\system32\\defragproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87CDE238-C2D9-4E31-99D7-DCD6A7E15F19}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87D5FBE0-B972-450B-A488-5FE6347B45C8}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87FC0268-9A55-4360-95AA-004A1D9DE26C}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88004A5C-CEAC-41b9-A7A8-D5E166D32ACF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{880ac964-2e34-4425-8cf2-86ada2c3a019}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{882BC1E4-C79E-475D-8CC7-CC8D112FDB17}\InProcServer32" = "$homedrive\\Windows\\System32\\RMSRoamingSecurity\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{883373C3-BF89-11D1-BE35-080036B11A03}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8833BC41-DC6B-34B9-A799-682D2554F02F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8839A1BA-6D01-4525-98EB-723C628320F0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}\InprocServer32" = "$homedrive\\Windows\\system32\\srcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8841d728-1a76-4682-bb6f-a9ea53b4b3ba}\InProcServer32" = "$homedrive\\Windows\\System32\\keymgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88445657-4A4E-4949-8FED-72B831C7C662}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884CFF4F-0BB0-4CAA-83BD-4FB9ECE938FA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2000-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2001-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2002-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2003-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2007-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2008-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2009-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e200b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e200c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e200d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e200e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e200f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2010-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2011-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2012-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2013-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2014-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2015-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2016-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2017-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2018-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2019-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e201a-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e201b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e201c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e201d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e201e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e201f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2020-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2021-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2022-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2023-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2024-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2025-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2026-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2027-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2028-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e202a-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e202b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e202c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e202d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e202e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e202f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2030-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2031-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2032-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2033-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2034-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2036-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2037-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2038-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2039-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e203a-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e203b-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e203d-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e203f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2042-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2043-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2044-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2045-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2046-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e204c-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2051-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e205e-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e205f-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2060-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2061-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{884e2062-217d-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8854F6A0-4683-4AE7-9191-752FE64612C3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\Inkdiv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8856918E-74C7-431C-B63D-3A5FDCC6AC08}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\MsDtcWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8856F961-340A-11D0-A96B-00C04FD705A2}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{885735DA-EFA7-4042-B9BC-195BDFA8B7E7}\InProcServer32" = "$homedrive\\Windows\\System32\\AzureSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{886D29DD-B506-466B-9FBF-B44FF383FB3F}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8872FF1B-98FA-4D7A-8D93-C9F1055F85BB}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8874E3B6-1898-4F93-84A1-8055D295617B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88753B26-5B24-49bd-B2E7-0C445C78C982}\InProcServer32" = "$homedrive\\Windows\\System32\\msvproc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88866959-07B0-4ED8-8EF5-54BC7443D28C}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{889900c3-59f3-4c2f-ae21-a409ea01e605}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88B02583-527D-43fa-B2C3-7A4C93D37C94}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88C0DC64-E224-46E1-80A9-A5582A01BD70}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneOm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88c524ca-551b-4c01-9a42-cdb16b745291}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88C6C381-2E85-11D0-94DE-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\occache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88C8A919-EB24-3CCA-84F7-2EA82BB3F3ED}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{88D042C8-EAC5-4F86-85D1-F4446AAFE1D4}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\hidpp_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LGHppFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a05-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a06-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a07-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a08-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a09-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a0a-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a0b-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a0c-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a0e-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a0f-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a10-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88d96a11-f192-11d4-a65f-0040963251e5}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}\InProcServer32" = "$homedrive\\Windows\\System32\\fde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88EEBD3A-9091-44b8-92A7-F0D595422D90}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88FC94D1-2ABB-42CF-8A07-4BC54F66EDDF}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{890CB943-D715-401B-98B1-CF82DCF36D7C}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\vdswmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8929fd8a-3967-4896-a02d-f126195af6f7}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{894132FE-635E-4F2F-B7AC-BB081636B1DB}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicesFlowBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{894BF76C-115F-44B7-9B32-ABFA7E6A804A}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{896664F7-12E1-490f-8782-C0835AFD98FC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{896C2B1D-3586-4FA5-B419-41F4A6D38CF1}\InProcServer32" = "$homedrive\\Windows\\system32\\SyncInfrastructure\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8973b4ef-7da5-4031-a333-f65609a4dcf4}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{898F8BC2-C6E3-4CD7-B04A-72E5B490B4C6}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89917B7C-A1A6-11DF-8BF6-18A90531A85A}\InprocServer32" = "$homedrive\\Windows\\System32\\fhtask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89A0CBA3-F995-48BA-A751-F27D64BEE9E7}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.BackgroundTransfer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89A86E7B-C229-4008-9BAA-2F5C8411D7E0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{89AA9BF2-38EE-4444-8AE5-8CA90AAC64F6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89B53798-9A96-4758-9571-93B72CAA5381}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89BCC804-53A5-3EB2-A342-6282CC410260}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{89C2E132-C29B-11DB-96FA-005056C00008}\InprocServer32" = "$homedrive\\Windows\\System32\\CPFilters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89d1d0c2-a3cf-490c-abe3-b86cde34b047}\InprocServer32" = "$homedrive\\Windows\\System32\\ReAgentTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89D26277-8408-3FC8-BD44-CF5F0E614C82}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{89D83576-6BD1-4c86-9454-BEB04E94C819}\InprocServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89dc1cf7-97b5-4389-a6af-c08fb4d5a408}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89EA5B5A-D01C-4560-A874-9FC92AFB0EFA}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89F2B8EB-AEDA-4057-A05B-A7D6181B63C6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A01C400-A3E0-4F8D-A933-FF780F22BD87}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A03567A-63CB-4BA8-BAF6-52119816D1EF}\InProcServer32" = "$homedrive\\Windows\\System32\\imapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A03E749-672E-446E-BF1F-2C11D233B6FF}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A0A83A7-7A6D-48D6-8F3D-9029D8A76E06}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A11B5FA-3C92-4E8B-8382-3C71B757D679}\InprocServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A1A8BB1-242F-431A-9F5B-254BA754631C}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A22069C-1EF7-45D2-A409-219540D00A76}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A23E65E-31C2-11d0-891C-00A024AB2DBB}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A3E2E1E-A40B-4650-9FB4-30072A68E661}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A3FD229-B2A9-347F-93D2-87F3B7F92753}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8A44FFB7-8140-432F-BEC5-1B5FF725BAC8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A4D840D-AB27-4c8f-AB9C-765CA85C73B7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8A667154-F9CB-11D2-AD8A-0060B0575ABC}\InProcServer32" = "$homedrive\\Windows\\System32\\dswave\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A674B49-1F63-11D3-B64C-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A674B4C-1F63-11D3-B64C-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A674B4D-1F63-11D3-B64C-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A6842BB-84DB-4EFA-99B9-06C850DF53FC}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8a696d12-576b-422e-9712-01b9dd84b446}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\MpProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8a7cae0e-5951-49cb-bf20-ab3fa1e44b01}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A89CB2C-1ED0-4709-A39C-FC34115DD660}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A9263D3-FD4C-4EDA-9B28-30132A4D4E3C}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A95E9F1-1C07-4711-8DDA-10A35B26271E}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A99553A-7971-4445-93B5-AAA43D1433C5}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A9B1CDD-FCD7-419c-8B44-42FD17DB1887}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8AA829D6-E867-492A-8AB7-7363E4859BA9}\InProcServer32" = "$homedrive\\Windows\\System32\\NgcIsoCtnr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ac3587a-4ae7-42d8-99e0-0a6013eef90f}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8AC838A3-44C0-4015-A95E-CCAB02A3CFE2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8AD5CECD-DF0D-41C3-BA21-1E22114CC73C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ADBB9D2-2107-4044-9B63-0488124AD2F6}\InProcServer32" = "$homedrive\\Windows\\System32\\TetheringConfigSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ADD018C-5C5F-43C5-BE1E-07BAE85593B7}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ADE5386-8E9B-4F4C-ACF2-F0008706B238}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8AE0163F-EDDD-4B0A-9C61-F7DD8B6137AE}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8AE85776-D1E6-4043-A94C-1529D0E26E41}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8aeff2c9-c97f-47b6-b27c-bd5969fe94d0}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8AF662BF-65A0-4D0A-A540-A338A999D36F}\InprocServer32" = "$homedrive\\Windows\\System32\\FaceCredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8b08efa2-bf11-4fa3-bbb4-655fb37c4fad}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8B19C1CD-C80C-4AEC-AAE2-4E39FEDD24D0}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\MDMSettingsProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8b1f4c40-9d24-4427-b9fa-cc4388492394}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Custom\.PS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8b20cd60-0f29-11cf-abc4-02608c9e7553}\InprocServer32" = "$homedrive\\Windows\\system32\\adsnt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8b40abb8-6c65-465a-8c4b-26224df3125f}\InprocServer32" = "$homedrive\\Windows\\System32\\(Windows\.Data\.Pdf|glcndFilter)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8B7FBFE0-5CD7-494a-AF8C-283A65707506}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8B918B82-7985-4C24-89DF-C33AD2BBFBCD}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8BB37D52-EB34-4A69-A013-DE72CF54EBE2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_4\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8BD21D10-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BD21D20-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BD21D30-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BD21D40-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BD21D50-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BD21D60-EC42-11CE-9E0D-00AA006002F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BDCE735-A077-406B-B526-F1465DD4D35C}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8BE38B01-5124-478D-BF64-B487D2FC79C0}\InProcServer32" = "$homedrive\\Windows\\system32\\peopleband\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8be9f5ea-e746-4e47-ad57-3fb191ca1eed}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8bf9a910-a8ff-457f-999f-a5ca10b4a885}\InProcServer32" = "($homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll|SmartcardCredentialProvider\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8bfc4ca2-441f-4a4f-9891-4e6a6d5d2745}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C0A1AC2-C6B3-447D-B971-35204B263972}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C1425C9-A7D3-35CD-8248-928CA52AD49B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8C1645B0-9864-465E-BE75-990B030E4B11}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C19ADE1-A894-4f78-BCB1-854A1464E442}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C1C28BE-1ADC-4C83-82F9-B1670FB9D04B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv90p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8c2031f1-b169-4e7c-9cb0-56f18d7b0c01}\InprocServer32" = "$homedrive\\Windows\\System32\\iasrecst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C334A55-DDB9-491c-817E-35A6B85D2ECB}\InprocServer32" = "$homedrive\\Windows\\system32\\iassam\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C38232E-3A45-4A27-92B0-1A16A975F669}\InprocServer32" = "$homedrive\\Windows\\System32\\wscapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C40D44A-4EDE-3760-9B61-50255056D3C7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8c4fb173-81ae-4399-9208-591a574a893f}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8c4fb175-81ae-4399-9208-591a574a893f}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanconn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8c537469-1ea9-4c85-9947-7e418500cdd4}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C60ACD5-B217-49D1-97E7-DF350C818CD7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8c7eaf13-fbd6-4ed8-ac79-fb12fcd71326}\InprocServer32" = "$homedrive\\Windows\\System32\\sdengin2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C836AF9-FFAC-11D0-8ED4-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comrepl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C89071F-452E-4E95-9682-9D1024627172}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8CC06626-FE29-4742-8F2D-08826B923497}\InprocServer32" = "$homedrive\\Windows\\System32\\ihds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8CD3AEA5-4B3B-4DE1-93EE-42BF9137194F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8cdabae1-71ef-4634-8a92-2100a5eb638f}\InProcServer32" = "$homedrive\\Windows\\System32\\bcp47langs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8cec58e7-07a1-11d9-b15e-000d56bfe6ee}\InprocServer32" = "$homedrive\\Windows\\System32\\HelpPaneProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8CF89BCB-394C-49b2-AE28-A59DD4ED7F68}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D008BF5-038F-4D3D-A6F3-64CF62462D7E}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D04238E-9FD1-41C6-8DE3-9E1EE309E935}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8d14113b-5715-4714-8a20-69fc343626de}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D1C559D-84F0-4BB3-A7D5-56A7435A9BA6}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8d1e5d4b-a99c-4408-b0f0-ccab9e5835a1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8D36569B-14D6-3C3D-B55C-9D02A45BFC3D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8D4D57E0-071A-42C7-A00A-14B3A91BE68F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Streaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D4F994C-EBBE-4F8D-BA4B-AE20CD36E72D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8D750ED5-F41E-4DD0-BF17-B1A53741BB5B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D759BEE-4828-47ad-9B19-F873D5E0F945}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobewirelessplugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8d80504a-0826-40c5-97e1-ebc68f953792}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D9945C3-A621-4F52-8641-6D8B755F42E2}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DA6DB1C-8114-40c6-9D97-D2E7E9757D67}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DB0224B-3D65-4F6F-8E12-BEB4B78B8974}\InprocServer32" = "$homedrive\\Windows\\System32\\mfnetsrc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DB2180F-BD29-11D1-8B7E-00C04FD7A924}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DBEF13F-1948-4AA8-8CF0-048EEBED95D8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DDA2943-4787-4B48-9336-CAE6746DF276}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DE39096-D24E-4DF3-B24B-1B7F770BF799}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8DE9C74C-605A-4acd-BEE3-2B222AA2D23D}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E3A359F-559A-4b6a-98A9-1690A6100ED7}\InprocServer32" = "$homedrive\\Windows\\System32\\vmserial\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E4062D9-FE1B-4b9e-AA16-5E8EEF68F48E}\InprocServer32" = "$homedrive\\Windows\\System32\\RegCtrl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E528C21-9D52-4030-BA92-3481227ADDD1}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E585CE0-F0EB-4F2E-BDC6-6B69806291C8}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E67B5C5-BAD3-4263-9F80-F769D50884F7}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E6E6079-0CB7-11d2-8F10-0000F87ABD16}\InprocServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E757038-BE02-4bce-9680-E4BE0C6C70CD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E7C2AFB-72B9-415C-9AC2-5037693309B7}\InProcServer32" = "$homedrive\\Windows\\System32\\InputCloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8e827c11-33e7-4bc1-b242-8cd9a1c2b304}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8e85d0ce-deaf-4ea1-9410-fd1a2105ceb5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8E871B70-0F3D-4605-8919-89A7ACBA199C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8e87e7b8-896b-4e67-bfa2-45c67d60ac3a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8E8F1601-AE98-3DAC-B48B-EC27C95A481E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8E974B5A-A286-37DA-94F8-5872C500EB0E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8E989135-2736-4767-8160-EA3613F69D24}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ea134cb-1567-4f90-a6d0-7ecbb2ac3f85}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Diagnostics\.Telemetry\.PlatformTelemetryClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8EB9BA6E-CEED-4D06-B7F6-EA6047221299}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ECD4EAD-0970-47E2-A035-7147F68FA986}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8ED392B6-23C2-4C3C-9126-D12D6BE621FD}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8EE97210-FD1F-4b19-91DA-67914005F020}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8F22970F-2910-4baf-9B34-396F18318C17}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8f3080a6-af99-4f2e-a806-f3d5702a0444}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F45C7FF-1E6E-34C1-A7CC-260985392A05}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8F60C6E5-0436-4B12-B53E-CA259BBD8868}\InProcServer32" = "$homedrive\\Windows\\System32\\ContactApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F6D198C-E66F-3A87-AA3F-F885DD09EA13}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8F70DED9-9E4E-4CD1-8547-C83666D055E3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F7D49DF-F271-4913-8A85-F73ACCE31138}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F914656-9D0A-4EB2-9019-0BF96D8A9EE6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FA0D5A8-DEDF-11D0-9A61-00C04FB68BF7}\InprocServer32" = "$homedrive\\Windows\\System32\\itircl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FADC6A8-183E-4DFC-944A-84A323334B98}\InprocServer32" = "$homedrive\\Windows\\System32\\findnetprinters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FC87FFF-7B63-45D9-8FB7-8C26FECA7DC3}\InprocServer32" = "$homedrive\\Windows\\System32\\ContactHarvesterDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FD730C1-DD1B-3694-84A1-8CE7159E266B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{8FD7E19C-3BF7-489B-A72C-846AB3678C96}\InProcServer32" = "$homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FE3AA4C-4FFF-11E0-9EAE-3586DFD72085}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FF711AE-1954-4f87-B94B-3D8C4C50CAE4}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8FFE37E7-DDD3-434A-9DEB-1202D1BE31F7}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90087284-d6d6-11d0-8353-00a0c90640bf}\InprocServer32" = "$homedrive\\Windows\\System32\\devmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{900be39d-6be8-461a-bc4d-b0fa71f5ecb1}\InprocServer32" = "$homedrive\\Windows\\System32\\wdi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{900c0763-5cad-4a34-bc1f-40cd513679d5}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{900D45EE-BF25-4DC6-AA92-683E9E932FC2}\InProcServer32" = "$homedrive\\Windows\\System32\\QuietHours\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{901F6B1C-2FC6-4C28-BC8A-86C82765E96B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90511715-D0AD-4DAA-A18B-254BD3AE1CF2}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9052FC30-F3B5-49F7-91DB-9E78A2AB3900}\InProcServer32" = "$homedrive\\Windows\\System32\\SpaceControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9053699F-A341-429D-9E90-EE437CF80C73}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{905667aa-acd6-11d2-8080-00805f6596d2}\InProcServer32" = "$homedrive\\Windows\\System32\\wiashext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9059f30f-4eb1-4bd2-9fdc-36f43a218f4a}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{905b55a8-77f0-4d28-80dd-e46b1412343f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{90660ACD-45E4-4AE2-B291-B74BA8E08D40}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnRanker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90903716-2F42-11D3-9C26-00C04F8EF87C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90954C68-4D60-4023-A1F8-C6AF6F62E1C8}\InProcServer32" = "$homedrive\\Windows\\System32\\netcenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90AA3A4E-1CBA-4233-B8BB-535773D48449}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{90AE59CE-C67A-492B-A4DE-78A6EA95AF68}\InprocServer32" = "$homedrive\\Windows\\system32\\wpnuserservice\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90B584D3-72AA-400F-9767-CAD866A5A2D8}\InProcServer32" = "$homedrive\\Windows\\system32\\ddp_ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90b9bce2-b6db-4fd3-8451-35917ea1081b}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90BA30DD-785C-4186-9F44-B7D2EA994EA5}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90bd963c-925a-4628-b905-fa122a1890a6}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90BE9587-37b7-477C-81A7-BA7C5C40FF81}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90C69BBB-7F1D-4833-AF4E-87A7E5C4288B}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\Shared\\JpnKorRoaming\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{90ED9FAA-A6E5-4671-8E50-1C060F8B9C47}\InprocServer32" = "$homedrive\\Windows\\servicing\\wrpintapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{90F1A06E-7712-4762-86B5-7A5EBA6BDB01}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{90F1A06E-7712-4762-86B5-7A5EBA6BDB02}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{90f8c90b-04e0-4e92-a186-e6e9c125d664}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9113A02D-00A3-46B9-BC5F-9C04DADDD5D7}\InProcServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91145a83-a6c3-4181-89ff-8365f096f90d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9127081a-04b5-4044-b4c5-c7a9718e8795}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{912A4CBA-0401-4631-91CF-5DDD3E3D6829}\InprocServer32" = "$homedrive\\Windows\\System32\\DDDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{912D9D84-DC73-48FA-8BD8-5315DE4B8FA8}\InProcServer32" = "$homedrive\\Windows\\System32\\EmailApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91363F1E-E7CA-4959-85D6-963719EC79FC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{913a6daa-57ee-4551-9ada-64d329d306a5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{914feed8-267a-4baa-b8aa-21e233792679}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{91591469-EFEF-3D63-90F9-88520F0AA1EF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9173D971-B142-38A5-8488-D10A9DCF71B0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9173e885-d54f-464a-8d04-86440a1246d3}\InProcServer32" = "$homedrive\\Windows\\System32\\ploptin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{917BD8CB-3BB6-4124-9383-B7D21AC07F79}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9185F743-1143-4C28-86B5-BFF14F20E5C8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91888BF6-FED1-4acd-9CB1-6C2F80AE58A3}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9193A8F9-0CBA-400E-AA97-EB4709164576}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9197e04d-2b9f-4849-8bf7-75294eb5c043}\InprocServer32" = "$homedrive\\Windows\\System32\\umb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91ECFDB4-2606-43E4-8F86-E25B0CB01F1E}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91EF7526-96DB-489D-8F61-53E2B4DC4039}\InProcServer32" = "$homedrive\\Windows\\System32\\easconsent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91f39028-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91f39029-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91f3902a-217f-11da-b2a4-000e7bbb2b09}\InProcServer32" = "$homedrive\\Windows\\system32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91F672A3-6B82-3E04-B2D7-BAC5D6676609}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9200689A-F979-4eea-8830-0E1D6B74821F}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92038079-b9ef-428f-87f0-0463fcb1272a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9203C2CB-1DC1-482D-967E-597AFF270F0D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9207d8c7-e7c8-412e-87f8-2e61171bd291}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9209B7D1-6DA5-43E4-BCD1-F2BE497635E7}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpendp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{920B2600-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2601-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2602-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2603-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2604-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2605-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2606-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2607-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2608-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2609-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B260A-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B260B-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B260C-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B260D-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B260E-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B260F-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{920B2610-BE85-4D30-8797-8BA0A23A5D53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\(Logitech\\Direct Input Force Feedback\\.*\\jerry_forcefeedback_x64\.dll|Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{92187326-72B4-11d0-A1AC-0000F8026977}\InprocServer32" = "$homedrive\\Windows\\System32\\gcdef\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92192FD8-C1CB-434B-A8E8-B7F3AC424EE4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92337A8C-E11D-11D0-BE48-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92396AD0-68F5-11d0-A57E-00A0C9138C66}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\ado\\msadrh15\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{923B6A38-CA24-4FB7-8914-DD55838B30E1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.SharedPC\.CredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92498132-4D1A-4297-9B78-9E2E4BA99C07}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssci\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{924ccc1b-6562-4c85-8657-d177925222b6}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll|$homedrive\\Program Files( \(x86\))?\\Windows Sidebar\\sbdrop\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9252D922-D666-478A-9770-7C0C63BC2692}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9264B7DC-A82F-4AFD-89C8-4F399DA7B028}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{926749fa-2615-4987-8845-c33e65f2b957}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{926b23ab-fd60-43f1-8f63-b24cabdf5316}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{926f41f7-003e-4382-9e84-9e953be10562}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9271B890-7BBF-48DB-ACB3-F973DC34156D}\InProcServer32" = "$homedrive\\Windows\\System32\\rasdlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92755472-2059-3F96-8938-8AC767B5187B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{927907E5-A066-4b07-BD4F-F53C7B748124}\InprocServer32" = "$homedrive\\Windows\\system32\\umpowmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{927971f5-0939-11d1-8be1-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{927ea2af-1c54-43d5-825e-0074ce028eee}\InprocServer32" = "$homedrive\\Windows\\System32\\energytask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9280E842-F931-4D24-B074-739FB4DA43F4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{928A906F-EADB-4EE2-8961-FE734AF257D1}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92A5010F-4404-4035-8D53-B87F5A736809}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92A8CCF5-2725-4E95-9264-74FAB86FBBCA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92ab5af7-a374-417e-b2e2-9b317353a322}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{92ad68ab-17e0-11d1-b230-00c04fb9473f}\InprocServer32" = "$homedrive\\Windows\\system32\\stclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92b66080-5e2d-449e-90c4-c41f268e5514}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92B94828-1AF7-4e6e-9EBF-770657F77AF5}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92BC73D8-9313-42CC-8C1B-FCF94ED2C7B4}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92BF3D3E-E9D0-48a7-A459-98992E92A96B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92c85649-0892-4bc7-9b63-949f64149a26}\InprocServer32" = "$homedrive\\Windows\\System32\\setup\\pbkmigr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92CC85F4-ACA4-4D72-94C8-49D1CAD0985F}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92D2CC58-4386-45a3-B98C-7E0CE64A4117}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92dbad9f-5025-49b0-9078-2d78f935e341}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{92E76A74-2622-3AA9-A3CA-1AE8BD7BC4A8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{92ED88BF-879E-448f-B6B6-A385BCEB846D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9301E380-1F22-11D3-8226-D2FA76255D47}\InProcServer32" = "$homedrive\\Windows\\System32\\dmloader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9305969B-F45F-47e5-A954-6EA879E874CC}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93073C40-0BA5-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9311A763-D284-4CE5-B2AA-6A99D9305D60}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9317AE81-BCD8-47B7-AAA1-A28062E41C71}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\IntelliTrace\\ProfilerProxy\\amd64\\Microsoft\.IntelliTrace\.ProfilerProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9324DA94-50EC-4A14-A770-E90CA03E7C8F}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93412589-74D4-4E4E-AD0E-E0CB621440FD}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9343812e-1c37-4a49-a12e-4b2d810d956b}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93443EB9-3F77-4DBE-84A2-D8467C1DD847}\InProcServer32" = "$homedrive\\Windows\\System32\\RemovableMediaProvisioningPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93445657-12CA-4B80-AB18-9996D7293EC6}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{934A7048-1E4A-4D6E-9A9A-CB739F519B07}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{934A9523-A3CA-4BC5-ADA0-D6D95D979421}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{934b410c-43e4-415e-9935-fbc081ba93a9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{934D4698-6A59-48f8-9F29-9FB30670320E}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{935249A5-B5E8-43F6-A991-61435E5954B3}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9357ffb2-0013-4c8e-9501-8e4e26f647d5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Background\.SystemEventsBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93714ED0-53F0-11D2-9EE6-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{937847E7-C78A-4834-9CE8-5F3EC99BD604}\InProcServer32" = "$homedrive\\Windows\\system32\\AuthExt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{937C1A34-151D-4610-9CA6-A8CC9BDB5D83}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9381AF33-66A3-4D5A-8AF2-9515B1DC19A5}\InProcServer32" = "$homedrive\\Windows\\System32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9394EA54-BA1B-4CE7-B2E5-E28067460B93}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5CFC7AAA-B618-4CE5-B425-82AF695B1BA3}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{939D20AC-8036-406F-BD5C-BF672896BD71}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93A094D7-51E8-485b-904A-8D6B97DC6B39}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93a56381-e0cd-485a-b60e-67819e12f81b}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93AAD2A0-036A-4B11-A078-DA8776B38139}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.datatransfer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93AC9CB8-27D5-4482-BFDF-68F21C7454A3}\InProcServer32" = "$homedrive\\Windows\\system32\\mscandui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93AF0C51-2275-45D2-A35B-F2BA21CAED00}\InprocServer32" = "$homedrive\\Windows\\System32\\mfAACEnc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93C063B0-68CB-4DE7-B032-8F56C1D2E99D}\InprocServer32" = "$homedrive\\Windows\\System32\\MMDevApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93CB110F-9189-4349-BD9F-392D9A4D0096}\InProcServer32" = "$homedrive\\Windows\\System32\\accessibilitycpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93cf36dd-dc00-499c-8477-7cbe51501a15}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93D11DE9-5F6C-354A-A7C5-16CCCA64A9B8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{93F551D6-2F9E-301B-BE63-85AEF508CAE0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}\InprocServer32" = "$homedrive\\Windows\\system32\\certmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{941b8883-7f97-4389-9c66-49630c5ba2a9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Signals\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{941C53C2-D2D7-4C74-84EA-28F8F6438D4B}\InProcServer32" = "$homedrive\\Windows\\System32\\mbaeapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94297043-BD82-4DFD-B0DE-8177739C6D20}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{942A8E4F-A261-11D1-A760-00C04FB9603F}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{942B7909-A28E-49a1-A207-34EBCBCB4B3B}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{942bc614-676c-464e-b384-d3202aaa02da}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9432194C-DF54-4824-8E24-B013BF2B90E3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{94357B53-CA29-4b78-83AE-E8FE7409134F}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{943FD346-D23E-42F3-8859-67F05CE92021}\InProcServer32" = "$homedrive\\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9440861a-25ca-4bc2-833e-866a6191d110}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9440F424-33D8-4114-BC6E-033867239A09}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94426DE2-3211-11d2-A0DB-00C04F8EDCEE}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{944D4C00-DD52-11CE-BF0E-00AA0055595A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9456A480-E88B-43EA-9E73-0B2D9B71B1CA}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94596c7e-3744-41ce-893e-bbf09122f76a}\InProcServer32" = "($homedrive\\Windows\\system32\\SmartcardCredentialProvider\.dll|SmartcardCredentialProvider\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{947812B3-2AE1-4644-BA86-9E90DED7EC91}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{948B45F7-EFB8-46fb-8704-B340D847227A}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{948CFD8C-1888-4E52-8703-99610347EBB6}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94971F89-D2EB-44ED-A217-A9BF27B74B65}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{949CAC9A-8ED9-42B5-9BB8-637D43127E5D}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94a909a5-6f52-11d1-8c18-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94AB5C27-C954-4218-B0A1-29640412EFBE}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94abaf2a-892a-11d1-bbc4-00a0c90640bf}\InprocServer32" = "$homedrive\\Windows\\System32\\devmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94B23D4D-1040-4C4B-9081-85D8D6FA36C4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94C00EC1-6E51-447A-87FA-8DF83767C155}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9diag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94d86820-3128-41cd-be63-5e7bbd96a958}\InprocServer32" = "$homedrive\\Windows\\system32\\ttlscfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94E7F5BD-FC4F-446C-93D2-3942E8FE34C9}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{94FBC195-CB86-4142-9A6A-8E9CCF0D4F4D}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9546306B-1B68-33AF-80DB-3A9206501515}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{95688ffa-250d-49bd-b40a-8ed3a8ef4c8e}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{956FADED-2450-4ABB-9F8C-4629FAFEBB92}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{958A1709-3B44-11D1-AD74-00C04FC2ADC0}\InprocServer32" = "$homedrive\\Windows\\system32\\txflog\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{958a6fb5-dcb2-4faf-aafd-7fb054ad1a3b}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95A24F08-5D9A-46F4-8B35-F9905397C741}\InProcServer32" = "$homedrive\\Windows\\system32\\spool\\drivers\\x64\\3\\PrintConfig\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95B01D73-A5FA-4DA1-91C4-935F1AB7763E}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicesFlowBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95B4ABA8-6D5B-4F99-9A9D-4A5EF4C75AFD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95BD18C1-D7FB-4BD3-839A-1C37C90131B1}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95CABCC9-BC57-4C12-B8DF-BA193232AA01}\InProcServer32" = "$homedrive\\Windows\\System32\\vaultcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95CE8412-7027-11D1-B879-006008059382}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{95D9BDD0-D1EE-4605-98A2-5551EA3FB39A}\InProcServer32" = "$homedrive\\Windows\\System32\\uimanagerbrokerps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32" = "$homedrive\\Windows\\System32\\OneCoreUAPCommonProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95F39BD0-A301-49BF-B80C-017F5616B26A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95FEE196-49F0-4C30-B16C-22C7B75C18EC}\InprocServer32" = "$homedrive\\Windows\\System32\\mfksproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{960005AE-F0A9-4DDB-982D-7C97671650B1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.EnrollmentStatusTracking\.ConfigProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{960CE120-E284-45CE-83BC-A15B2EEE3DE8}\InprocServer32" = "$homedrive\\Windows\\System32\\ContactHarvesterDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96236A71-9DBC-11DA-9E3F-0011114AE311}\InProcServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96236A85-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96236A8F-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96236A90-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96236A91-9DBC-11DA-9E3F-0011114AE311}\InprocServer32" = "$homedrive\\Windows\\system32\\msrdc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_1\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96484065-846E-4C01-8D2A-44253F59B606}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsEM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{964A239F-6039-4A44-BB9B-EC0FEAFE28FC}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{964AA3BD-4B12-3E23-9D7F-99342AFAE812}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\PHISON\\Aac_PHISON HAL\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{966F107C-8EA2-425D-B822-E4A71BEF01D7}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvEncMFThevcx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{966f985a-57d2-4e69-b363-0ef69ad32cee}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96705EE3-F7AB-3E9A-9FB2-AD1D536E901A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{96709adb-52b9-4735-8534-3a8b32631432}\InProcServer32" = "$homedrive\\Windows\\System32\\CertEnroll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96749373-3391-11D2-9EE3-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96749377-3391-11D2-9EE3-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{967696C6-354C-4B5C-9CC8-BD9E1C480C77}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v3\.0\\WPF\\PenIMC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{968AD211-D1B1-444B-9F59-51701D1128D3}\InProcServer32" = "$homedrive\\Windows\\System32\\remoteaudioendpoint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{969025FF-F069-4D77-ADA5-6686D1877DCA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.LockScreen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96A058CD-FAF7-386C-85BF-E47F00C81795}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{96AC7453-0B2A-451e-9A1A-203CA034AF96}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96b42929-01f1-468c-b521-6294ab438f4a}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.ui\.creddialogcontroller\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96B9DAE3-CF15-45e9-9719-57285348225E}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96BEC059-2052-4e44-8E11-123ACDC936FE}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96c7a5ef-0e2c-46d7-9bc1-6445c2444d7a}\InProcServer32" = "$homedrive\\Windows\\System32\\threadpoolwinrt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96C8AD95-C199-44DE-B34E-AC33C442DF39}\InProcServer32" = "$homedrive\\Windows\\System32\\Pimstore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96f8e0d2-86e5-4898-8fb1-153682e11900}\InProcServer32" = "$homedrive\\Windows\\System32\\(Windows\.Globalization|NaturalLanguage6)\.Fontgroups\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{97061DF1-33AA-4B30-9A92-647546D943F3}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{971127BB-259F-48c2-BD75-5F97A3331551}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{973A7390-2608-3943-9015-D798D1217C08}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{973E4CE8-85A2-4207-8147-4778B50644DB}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudDomainJoinAUG\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9743B50B-3190-4061-8DA3-BE13AA02181E}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{974C63D2-6846-4F6B-BF27-BF71ADB1E608}\InProcServer32" = "$homedrive\\Windows\\system32\\PrintPlatformConfig\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}\InprocServer32" = "$homedrive\\Windows\\system32\\els\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{975ABEDC-F64B-436d-ABFF-44B932459856}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{978b010d-d731-48af-b6a9-afe5dfe2fac9}\InProcServer32" = "$homedrive\\Windows\\System32\\AppLockerCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{978C9E23-D4B0-11CE-BF2D-00AA003F40D0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{97A2762C-403C-4953-A121-7A75ABCE4373}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{97CBCB09-9D73-4D90-9311-A78626569953}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatialStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{97d47d56-3777-49fb-8e8f-90d7e30e1a1e}\InprocServer32" = "$homedrive\\Windows\\System32\\WorkFoldersShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{97e467b4-98c6-4f19-9588-161b7773d6f6}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9800F18F-3D86-4744-A7D0-540989C86D7B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98042251-8C2B-4FC4-93E2-B1DB331EF5B9}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{981D9411-909E-42A7-8F5D-A747FF052EDB}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9821D278-84E2-4D6A-8712-2C6E23D43C7B}\InProcServer32" = "$homedrive\\Windows\\System32\\EnterpriseModernAppMgmtCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98230571-0087-4204-b020-3282538e57d3}\InprocServer32" = "$homedrive\\Windows\\System32\\colorcnv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98455561-5136-4d28-AB08-4CEE40EA2781}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{984F9804-3314-4FA4-AC8C-E688D4133C51}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9877D8A7-FDA1-43F9-AEEA-F90747EA66B0}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\krnlprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{987D8DFA-3E2C-4929-9C51-61AC8E00CBC3}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{987E88E6-4708-497A-961C-8C9AD54EDCE8}\InProcServer32" = "$homedrive\\Windows\\System32\\edgemanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98859A6C-02F2-43FC-ADB0-CE6D10F1A1AA}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9885AEF2-BD9F-41E0-B15E-B3141395E803}\InprocServer32" = "$homedrive\\Windows\\System32\\mapstoasttask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9887A40F-B86C-4531-904B-4C70A3AB6D1B}\InprocServer32" = "$homedrive\\Windows\\System32\\VocabRoamingHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98A1B01E-E363-46e9-A68F-C6078DAABB8C}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98A238A9-D8A2-4E57-84AF-6CF88FF719DA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98af66e4-aa41-4226-b80f-0b1a8f34eeb4}\InProcServer32" = "$homedrive\\Windows\\System32\\dfshim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98AFF3F0-5524-11D0-8812-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98C97BD2-E32B-4AD8-A528-95FD8B16BD42}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98D9CA81-452B-4A98-96A3-7D510C7C4F9F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.UserDeviceAssociation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98F275B4-4FFF-11E0-89E2-7B86DFD72085}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98F63271-6C09-48B3-A571-990155932D0B}\InprocServer32" = "$homedrive\\Windows\\System32\\Setup\\FXSOCM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9909aba6-519d-4b42-b57f-cc1408214ddb}\InProcServer32" = "$homedrive\\Windows\\System32\\shcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{990a9f8f-301f-45f7-8d0e-68c5952dba43}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{990F07C7-78DC-4BD2-B145-5F791410BDDE}\InprocServer32" = "$homedrive\\Windows\\System32\\TelephonyInteractiveUser\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{991DA7E5-953F-435B-BE5E-B92A05EDFC42}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{992CFFA0-F557-101A-88EC-00DD010CCC48}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9942DB71-3E0C-4A42-881B-CC7F6FB1DA14}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{994B3B2F-2880-4318-A583-15C38A01F571}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9970407f-eb6c-40bc-96d4-6e8b69b2017f}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Playback\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99793286-77CC-4B57-96DB-3B354F6F9FB5}\InProcServer32" = "$homedrive\\Windows\\system32\\(directmanipulation|Uxtheme)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99847C33-B1B4-11D1-8F10-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\system32\\comuid\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99969a8f-27e6-4adf-ab9f-b5b5e90d4733}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{99A16964-6591-4FE1-B7EC-27C6D756A1CE}\InprocServer32" = "$homedrive\\Windows\\System32\\TransliterationRanker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99a73266-0cdf-4479-88af-1842cbaada22}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99acf7f6-ef55-4ef9-8e27-3b784a6b4639}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99B29D3B-368A-4BE6-B675-805A69114497}\InProcServer32" = "$homedrive\\Windows\\System32\\usermgrproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99c0179c-c20c-488c-a510-bd779b9376ae}\InprocServer32" = "$homedrive\\Windows\\system32\\bcdsrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99CDC6E0-DA00-4dfa-8EB8-831D774F8891}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99cdfdaf-3573-4d97-bc06-d7c36627edef}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99D353BC-C813-41ec-8F28-EAE61E702E57}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99D54F63-1A69-41AE-AA4D-C976EB3F0713}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99d6470e-d780-4fce-99d2-40324846c10b}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99D651D7-5F7C-470E-8A3B-774D5D9536AC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99dcd00c-fbd6-42d3-9dfd-1b5ad7058f61}\InprocServer32" = "$homedrive\\Windows\\System32\\gpupvdev\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99E0D1EC-0A0D-4E50-B8A1-82A8B6ECE5CB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99E89F48-A745-416d-A4E0-ECF53C65DFA0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99EB9580-04EC-4B4C-99F5-52B616D444D9}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99EFDAD1-0F11-4A6B-A702-4E1C37D1A3EF}\InProcServer32" = "$homedrive\\Windows\\System32\\fcon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{99F997ED-DFD1-4F67-B367-9B52B8225A85}\InProcServer32" = "$homedrive\\Windows\\System32\\DavSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9a010fcc-488b-4836-94fd-c489f8e1ed7d}\InprocServer32" = "$homedrive\\Windows\\system32\\ndishc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9a02e012-6303-4e1e-b9a1-630f802592c5}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9a07804e-7050-41d5-a244-badc038df532}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9a096bb5-9dc3-4d1c-8526-c3cbf991ea4e}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A17DFD1-34FA-4D61-B9BB-3A1097E7FADF}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A1A6626-E967-4E10-A74E-4A51895E4F93}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9a2584c3-f7d2-457a-9a5e-22b67bffc7d2}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A2B23E4-2A50-48DB-B3C3-F5EA12947CB8}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Common Files\\Microsoft Shared\\MSEnv\\VSFileHandler_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A31D292-655F-48F7-B5AD-553358BCD0C9}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A3A64F4-8BA5-3DCF-880C-8D3EE06C5538}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9A3E1311-23F8-42DC-815F-DDBC763D50BB}\InProcServer32" = "$homedrive\\Windows\\System32\\WalletProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A43A844-0831-11D1-817F-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A4948D9-13FC-4FAC-B60A-FBA6EE0FB11C}\InProcServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A4A4A51-FB3A-4F4B-9B57-A2912A289769}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A4B942C-C16D-44D2-BDAA-1BD772A4050B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A5EA990-3034-4D6F-9128-01F3C61022BC}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A653086-174F-11D2-B5F9-00104B703EFD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A7C3FC6-8C9E-40A8-8CD9-0F3715483825}\InProcServer32" = "$homedrive\\Windows\\system32\\lpksetupproxyserv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A944885-EDAF-3A81-A2FF-6A9D5D1ABFC7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9a97f12a-6b73-4dc4-b3c1-e9244c03adac}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9AA0422B-E5C5-4A6B-ACEC-C96E2E05B353}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ab3b1c9-3225-4bb4-93b6-bfb3c0d93743}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9AB6A28C-748E-4B6A-BFFF-CC443B8E8FB4}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAlacEncoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ac9fbe1-e0a2-4ad6-b4ee-e212013ea917}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9AED384E-CE8B-11D1-8B05-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B0C8B3B-8CA5-46cb-B0DD-64542BBA21DC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B0EFD60-F7B0-11D0-BAEF-00C04FC308C9}\InprocServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B1D2710-8AEE-4B64-B5DB-0F1086A63877}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9b359d1b-ad5c-412f-a654-a431424359de}\InProcServer32" = "$homedrive\\Windows\\System32\\cscobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B39403C-8B6D-430D-AE71-9EE1DC6E74C5}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B39610A-38D1-43f1-9FAF-D4E5CA50B4B2}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B467978-A0CF-480B-965B-5A5FAC1D8277}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B496CE1-811B-11CF-8C77-00AA006B6814}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{9b4e5207-9539-4258-b4a0-4e70e9e565ec}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B55AA0E-1BC2-46e4-B306-DF9BDFDCC644}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B5EC720-9A44-4811-8B9F-24BD53F2050D}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B67E7B7-12BA-4B81-9874-E96D8C7C07F8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B77C0F2-8735-46c5-B90F-5F0B303EF6AB}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B78F0E6-3E05-4A5B-B2E8-E743A8956B65}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpsharercom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B8C4620-2C1A-11D0-8493-00A02438AD48}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B924EC5-BF13-3A98-8AC0-80877995D403}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9B9501E9-A3F8-4F29-98BA-8FBB9504D5F8}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9B97D384-048C-4e24-926D-DB6F0841C9E4}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BA05971-F6A8-11CF-A442-00A0C90A8F39}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9bb6c87b-83af-4e4b-8151-865efd1e414c}\InprocServer32" = "$homedrive\\Windows\\System32\\vmpmem\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BC49CE1-EFA7-4C49-8BB2-5355FEA6C170}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BC773B8-9B6C-400F-8AF0-0DFDD1C43229}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BCE6E2B-116B-420F-928B-5356D1629979}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BD1F370-1212-4794-AA9B-9EBD575091D5}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BDAC276-BE24-4F04-BB22-11469B28A496}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\VideoLAN\\VLC\\axvlc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BF86F6E-B0E1-348B-9627-6970672EB3D3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9BF8D948-5C56-450e-BAF8-D6144C6E81CB}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9BFFC57B-DF4D-48F7-8C61-B3C969839F74}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C07355E-C50A-45D2-B4A3-0A8235F8047F}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C125A6F-EAE2-3FC1-97A1-C0DCEAB0B5DF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9c15e692-86da-4ab8-8b5e-6ac79deb6f20}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C1878FA-A0CB-4F01-8762-A6BF18021C94}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C1CC6E4-D7EB-4EEb-9091-15A7C8791ED9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C33C4AB-BC91-4A79-BF47-7C90CEBC3AA3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C49FB9B-4E8C-43AE-BACF-76404B422264}\InprocServer32" = "$homedrive\\Windows\\system32\\DscTimer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9c4be1de-7bb5-40c3-a5fa-dfdb7c54c971}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C4D3346-650D-472d-A867-6F595B39D973}\InprocServer32" = "$homedrive\\Windows\\system32\\AuditPolicyGPInterop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C502F01-0D36-4f16-8AC9-8693E0D84E44}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C62D90D-9C14-400a-942A-404ABA5E1F38}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C67F424-22DC-3D05-AB36-17EAF95881F2}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9C695035-48D2-4229-8B73-4C70E756E519}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C7684B5-FC31-4e57-A852-282D907911CC}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvsvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9c7a1728-b694-427a-94a2-a1b2c60f0360}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9C86F320-DEE3-4DD1-B972-A303F26B061E}\InprocServer32" = "$homedrive\\Windows\\System32\\TaskSchdPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9c8db22b-8ddc-471c-9628-48847514b424}\InProcServer32" = "$homedrive\\Windows\\System32\\wcmapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CAB4470-D6FA-4903-986C-7D5A755B2691}\InprocServer32" = "$homedrive\\Windows\\System32\\RoamingSecurity\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9caf4a2e-c957-48c7-b4d2-4d11188e0b94}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9cb233a5-a4a5-46b9-ab13-db07ce949410}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CB5172B-D600-46BA-AB77-77BB7E3A00D9}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CB89EFF-B39E-4D5C-A493-F2171580CC21}\InProcServer32" = "$homedrive\\Windows\\System32\\ContentDeliveryManager\.Utilities\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CB98DB1-4D09-4538-A192-2D3D8C0B6CDB}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CC1CC97-48C6-43DB-8265-4BD9C8E192DD}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9cca66bb-9c78-4e59-a76f-a5e9990b8aa0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9CD64701-BDF3-4D14-8E03-F12983D86664}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CDAEA40-A7D3-4cc5-AED0-B5E35AD0F169}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CE31F69-2605-420C-A30E-B60A164DB44D}\InProcServer32" = "$homedrive\\Windows\\System32\\ChatApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9cfc2df3-6ba3-46ef-a836-e519e81f0ec4}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9cfc6d75-e648-47a8-9ea0-fb0907558952}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtcuiu\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9d06f027-cbfc-421a-97b3-f09a8a9359bc}\InProcServer32" = "$homedrive\\Windows\\System32\\AppContracts\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D079FE7-A102-4F3F-AD2E-A2C88C851CEE}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D148290-B9C8-11D0-A4CC-0000F80149F6}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D148291-B9C8-11D0-A4CC-0000F80149F6}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D27B916-4F17-4EE8-A71C-D84222993D64}\InProcServer32" = "$homedrive\\Windows\\system32\\CellularAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D309F77-4655-372E-84B0-B0FB4030F3B8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9D3C0751-A13F-46a6-B833-B46A43C30FE8}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D48CE47-9E1C-4D41-B480-260563C0B724}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D5E24EF-485C-4503-A47D-4A52AF8E817B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv120p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D5F55E3-B423-492F-AC3B-B7F6CBC563B9}\InProcServer32" = "$homedrive\\Windows\\System32\\eUICCsCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D71A98F-1E45-42EC-AF3D-FA13BEFB955C}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D745ED8-C514-4D1D-BF42-751FED2D5AC7}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D7F0E95-8848-47B3-8D0E-E6C0E396E640}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D958C62-3954-4b44-8FAB-C4670C1DB4C2}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9D99BE80-B271-4524-BA35-30414FE18F0E}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintWSDAHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DA2F8B8-59F0-3852-B509-0663E3BF643B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9DA3DFB6-DB99-4A52-B52B-058E0C6B7956}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}\InprocServer32" = "$homedrive\\Windows\\System32\\(MSWB7|NaturalLanguage6)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DAC2C1E-7C5C-40eb-833B-323E85A1CE84}\InProcServer32" = "$homedrive\\Windows\\System32\\wscinterop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DB7A13C-F208-4981-8353-73CC61AE2783}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DBD2C50-62AD-11d0-B806-00C04FD706EC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9DC486E3-B0E8-4230-81C4-A84D019E2B98}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_extensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DCC3CC8-8609-4863-BAD4-03601F4C65E8}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DCCCE22-C057-424E-B8D1-67935988B174}\InprocServer32" = "$homedrive\\Windows\\System32\\hascsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DCF998B-4A06-4E97-ABC4-576E80D22678}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DD35758-AAF5-4894-ADAA-77A492F54E0A}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DE85094-F71F-44f1-8471-15A2FA76FCF3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9dea6e0b-8856-45d8-a424-57244aef1e3c}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9df523b0-a6c0-4ea9-b5f1-f4565c3ac8b8}\InProcServer32" = "$homedrive\\Windows\\system32\\timedate\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B69-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B6C-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B6E-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B70-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B74-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B76-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssph\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B7F-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B8A-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B8B-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B8D-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B8E-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B90-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175B98-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175BA8-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175BA9-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175BB7-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\tquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E175BB8-F52A-11D8-B9A5-505054503030}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E28EF95-9C6F-3A00-B525-36A76178CC9C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9E31421C-2F15-4F35-AD20-66FB9D4CD428}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9E358D23-02B2-4CCD-9FEE-6B75EE8DD5CA}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\tpcps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}\InProcServer32" = "$homedrive\\Windows\\System32\\sendmail\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}\InProcServer32" = "$homedrive\\Windows\\System32\\sendmail\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9e752621-4573-4308-81c6-9f210db29e85}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9E77AAC4-35E5-42A1-BDC2-8F3FF399847C}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E797ED0-5253-4243-A9B7-BD06C58F8EF3}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EA60ECA-3DCD-340F-8E95-67845D185999}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9EB7C6FC-0C96-4EE0-9B8A-F4BDA7D305E1}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.datatransfer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EBB177D-0161-4e2c-81B0-E15D586CFC9F}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EC4B4F9-3029-45ad-947B-344DE2A249E2}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ecf51f8-cfb1-458d-9485-f5a231afd22f}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ECF752A-518E-46b1-8691-F5090F5E9A14}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9ED13477-E909-45BC-BADC-2106D04D6BD7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ED5FD4B-40C3-4DE3-8597-98ECD17035DA}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ED96B20-73AA-11D2-952C-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ED96B21-73AA-11D2-952C-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ED96B22-73AA-11D2-952C-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EE20F7D-20A3-4E75-BC6D-204304AB6C8B}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EE72A18-7BD4-44E1-8BA9-1E8E60D8CCA3}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WdacWmiProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EF96870-E160-4792-820D-48CF0649E4EC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9EFD4CF2-0BAA-350B-9D73-0974077B2F7B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9F074EE2-E6E9-4d8a-A047-EB5B5C3C55DA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32" = "$homedrive\\Windows\\System32\\PCShellCommonProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F36C194-166C-4cbf-B7EA-BF039F950172}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F377D7E-E551-44f8-9F94-9DB392B03B7B}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9f37f39c-6f49-11d1-8c18-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F38CF19-B7A6-452A-BF0B-383F3C1D50C2}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxRanker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F4F643B-8806-4861-8A79-6699E94DCF66}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F50E8B1-9530-4DDC-825E-1AF81D47AED6}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F66347C-60C4-4C4D-AB58-D2358685F607}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9f75fdc4-0aba-4866-88a9-75ebb9e7d584}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F7D7BB5-20B3-11DA-81A5-0030F1642E3C}\InprocServer32" = "$homedrive\\Windows\\System32\\SmiEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F821051-83C5-4816-BB38-5F5FA3B65DDB}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F8233AC-BE49-4C79-8EE3-E7E1985B2077}\InprocServer32" = "$homedrive\\Windows\\System32\\vmiccore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F8E6421-3D9B-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9FAE1230-74AC-4e33-B59C-4051BBEB0803}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9fb45d27-dfe3-4383-b117-ab631787649a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.ui\.picturepassword|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9FBC2D8F-6F52-4CFA-A86F-096F3E9EB4B2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\ODFFILT\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{9FC8E510-A27C-4B3B-B9A3-BF65F00256A8}\InProcServer32" = "$homedrive\\Windows\\system32\\dataexchange\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9FD4E808-F6E6-4e65-98D3-AA39054C1255}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9FE5F349-1D9F-408E-AE4D-8FC50A12DF80}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{9FE63AFD-59CF-4419-9775-ABCC3849F861}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ff13758-469b-45a8-8cc7-72182bd7e9ba}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\applets\\imjpskf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9FF65B15-F7B4-4858-BFE6-DB2083DEDF68}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9ff7242c-364d-425d-95ce-c64f8ee140d1}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a00e1768-4a9b-4d97-afc6-99d329f605f2}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a00ee528-ebd9-48b8-944a-8942113d46ac}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a015411a-f97d-4ef3-8425-8a38d022aebc}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0202464-B4B4-4b85-9628-CCD46DF16942}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A020FAD9-D661-4857-AA43-E6A86FF1163E}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0227FFC-3AA7-4dc3-9FD7-125745C9EAF6}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{A02797fC-C4AE-418C-AF95-E637C7EAD2A1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a028ae76-01b1-46c2-99c4-acd9858ae02f}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrtip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A03CD5F0-3045-11CF-8C44-00AA006B6814}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{A05AD39D-C5E6-4723-8802-AB7788548580}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a07034fd-6caa-4954-ac3f-97a27216f98a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A09CCA86-27BA-4F39-9053-121FA4DC08FC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0A7A57B-59B2-4919-A694-ADD0A526C373}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0A8C450-92FC-422a-AA04-0A19E8D65AC7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A0ABC02B-D279-4FA3-9D37-199D4D3F8152}\InprocServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0ADD4EC-5BD3-4f70-A47B-07797A45C635}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0B9B497-AFBC-45AD-A8A6-9B077C40D4F2}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0C63C30-F08D-4AB4-907C-34905D770C7D}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0CAF057-8D9E-4d01-8CDD-5F469B153A9F}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a0d018ee-1100-4389-ab44-464faf001288}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A0E2E749-63CE-3651-8F4F-F5F996344C32}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A0F5F5DC-337B-38D7-B1A3-FB1B95666BBF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A0F8D82C-E4D8-4ED9-BD3A-867A830B12BA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A0F93E27-F05D-4153-A151-F3720369A4C7}\InprocServer32" = "$homedrive\\Windows\\system32\\signdrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a1019a03-1281-47b1-93bc-856d5f0cda43}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.AllJoyn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a10dfc9e-ff12-4e7f-bc74-8fe9053920f0}\InprocServer32" = "$homedrive\\Windows\\system32\\WinSyncProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1170F2C-C5A4-467F-8EB3-50571D7201AE}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a11850eb-4501-4dea-9ef5-1d37f57d247d}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A11DB3DC-5FF6-4a0b-AEE6-29BCAC1E11E0}\InProcServer32" = "$homedrive\\Windows\\system32\\ndfetw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1230201-1439-4E62-A414-190D0AC3D40E}\InProcServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1230401-67a5-4df6-a730-dce8822c80c4}\InProcServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A12E5BCB-9758-4FBE-9B85-F50C822E6B5E}\InProcServer32" = "$homedrive\\Windows\\system32\\EnterpriseAppMgmtClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A139E32E-EA10-4B93-A813-A9E44ADA2938}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a1570149-e645-4f43-8b0d-409b061db2fc}\InprocServer32" = "$homedrive\\Windows\\System32\\portabledeviceconnectapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A158544D-66FA-4F19-8806-F3CA2E2A4C52}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A164C0BF-67AE-3C7E-BC05-BFE24A8CDB62}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A166CF69-93B2-49FB-8143-DCEFD4BF8BA9}\InProcServer32" = "$homedrive\\Windows\\System32\\wcmapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a16e1bff-a80d-48ad-aecd-a35c005685fe}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A17DA8D0-F67D-47A0-9EC4-19C486383206}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsmsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a18f6329-d0f6-45d0-9f8e-96a0499440e4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.SecurityMitigationsBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A19B036E-22B2-4A97-82A2-12D283A46001}\InprocServer32" = "$homedrive\\Windows\\System32\\BingASDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A19DE2F2-2F74-4927-8436-61129D26C141}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{A1A2B1C4-0E3A-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1B1922F-B626-4A4F-9F2B-4A6926DF86D1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a1b4dd9f-c1d9-4e24-9b7f-c0ef7cffdb71}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1B9E04A-3226-11D2-883E-00104B2AFB46}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\servdeps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1BFB370-5A9F-4429-BB72-B13E2FEAEDEF}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1C0A095-DF97-3441-BFC1-C9F194E494DB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A1DB7B5E-D0EA-4FE0-93C4-314505788272}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskFlowDataEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a1e2b86b-924a-4d43-80f6-8a820df7190f}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR\\imkrotip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1E48442-883D-491A-BE68-41214236D6A8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.SystemManagement\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1E7036D-72A1-4529-B108-0C3C9E92D424}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3gpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1EB89D6-0A9C-4575-A0AE-654A990A454C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{A1EBDBD0-E4BA-4DB3-8DF6-C91534061EF4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1FC5C0F-6A66-4858-8BA5-1E467D09695D}\InprocServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A21F5552-8D6C-4DC6-BA46-D8D3363E6BA6}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A21FC522-F671-4013-9339-0828E5C70DD9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A22C4FC7-6E91-4e1d-89E9-53B2667B72BA}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A249E9F6-5B28-4ED1-8AF0-C9B9C5195486}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A25821B5-F310-41BD-806F-5864CC441B78}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A258718D-BE3E-40CC-A77F-75642516497C}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\InprocServer32" = "$homedrive\\Windows\\system32\\wmphoto\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A28798CC-730B-41EB-9CA2-74F93E27B99E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A29673B0-DE3A-458E-822B-0ECD00D4BCE0}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2A80041-8359-46BD-9B79-9C780FD998C2}\InprocServer32" = "$homedrive\\Windows\\System32\\SDDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{a2c6a94b-127a-4173-a498-8204322fa2b8}\InProcServer32" = "$homedrive\\Windows\\System32\\fwmdmcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2CE91DB-204B-4A63-842B-3EF93694DFF1}\InProcServer32" = "$homedrive\\Windows\\System32\\EnterpriseAPNCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2D75874-6750-4931-94C1-C99D3BC9D0C7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\MsMpCom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2DC4FCB-C32A-4E4E-A2DB-67A008913992}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2E3074E-6C3D-11D3-B653-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2E30750-6C3D-11D3-B653-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2E6DDA0-06EF-4df3-B7BD-5AA224BB06E8}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a3037d66-c043-4f54-91a0-2cdb642e7718}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imetip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A31AD6C2-FF4C-43D4-8E90-7101023096F9}\InprocServer32" = "$homedrive\\Windows\\system32\\TimeSyncTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a31c0e24-c249-4e36-a1a3-9dfdceda9bbc}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a323554a-0fe1-4e49-aee1-6722465d799f}\InProcServer32" = "$homedrive\\Windows\\system32\\timedate\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{A32552C5-BA61-457A-B59A-A2561E125E33}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3367904-52A3-4A11-BF5B-1AB36EF51D1F}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.Internal\.Management\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A33FB695-B731-4A85-AABE-656397D0E88D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A35C5B62-6032-4CAF-BB23-F0556BFF94FF}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3662812-8138-4A1E-8FAF-49D06E7AED43}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.Schema\.Shell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A36738B5-FA8F-3316-A929-68099A32B43B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A36E4EAF-EA3F-30A6-906D-374BBF7903B1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A36F9519-C183-4dca-8AFC-B8DE3F71DADA}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtBopomofoDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A373F500-7A87-11D3-B1C1-00C04F68155C}\InprocServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A37B2DFB-4204-4476-B1D9-29413836093D}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A37BBB42-E8C1-4E09-B9CA-F009CE620C08}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a38b883c-1682-497e-97b0-0a3a9e801682}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A38E6420-19EC-490c-B4BF-51673C360213}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a38f3677-32fc-4dac-99b3-d804b193d2c4}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A38F4597-F640-4189-982F-132ECF8202FA}\InprocServer32" = "$homedrive\\Windows\\system32\\PortableDeviceSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A394DCA9-3727-11D4-BD85-00C04F6B93A4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VISSHE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{A3987437-F1B5-4296-A7DD-6CC3A8B738B9}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A39F0E28-7E9E-4C37-AF48-70839D5DE7AF}\InProcServer32" = "$homedrive\\Windows\\System32\\edpcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3A1F076-1FA7-3A26-886D-8841CB45382F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A3ADC43E-56D9-4EC1-ADDA-49C5B9069B07}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a3b3c46c-05d8-429b-bf66-87068b4ce563}\InProcServer32" = "$homedrive\\Windows\\System32\\actioncenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3B82825-6E21-4249-B372-C2A1F8E948AA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGCapturePropPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3B877C7-83CA-4c9b-87FB-BE0D518C2441}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3BC03A0-041D-42E3-AD22-882B7865C9C5}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a3c3d402-e56c-4033-95f7-4885e80b0111}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3C97737-76D9-4f5f-B917-4DE47FE023C8}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3CCEDF7-2DE2-11D0-86F4-00A0C913F750}\InProcServer32" = "$homedrive\\Windows\\System32\\pngfilt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3D93AB0-3079-4662-BF03-1718156E7C32}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3E41207-BE04-492A-AFF0-19E880FF7545}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipcima\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A3ECBC41-581A-4476-B693-A63340462D8B}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a405dda4-a05a-46be-b481-526ad2e0c791}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A40ECD48-32B1-46A0-9D29-3B97E1DE33CC}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\VSPerfCollectionTools\\vs2022\\x64\\VSPerfControl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4109FA5-7512-4338-8376-81F6D38ADA41}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4173A49-F373-4475-9A0F-2D615204DC20}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a41a4187-5a86-4e26-b40a-856f9035d9cb}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4256DB3-B8D8-45F1-8F14-85707DCA506C}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A43139B3-BDF5-4497-9DCF-6C7AADC1A5D0}\InProcServer32" = "$homedrive\\Windows\\System32\\musdialoghandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A43C525D-EDF0-48d9-B7FB-9BABBD6DBD65}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4445657-BCB6-476E-8336-3A2ACD96E299}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A45AEC2B-549E-405F-AF3E-C6B03C4FDFBF}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\wmpnssui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a463fcb9-6b1c-4e0d-a80b-a2ca7999e25d}\InProcServer32" = "$homedrive\\Windows\\System32\\smartscreenps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A470F8CF-A1E8-4f65-8335-227475AA5C46}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{a47286bf-d624-4a30-acdf-2705bd3de0c3}\InProcServer32" = "$homedrive\\Windows\\System32\\winmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a47401f6-a8a6-40ea-9c29-b8f6026c98b8}\InprocServer32" = "$homedrive\\Windows\\system32\\srwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a479ddb1-2166-40d0-8fb0-892687d2fa12}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A47C0430-EDBD-464E-A2AF-3B17C26AFDF5}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4A1A128-768F-41E0-BF75-E4FDDD701CBA}\InProcServer32" = "($homedrive\\Windows\\System32\\ieproxy\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\ieproxy\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A4A74456-67F8-4F18-B96B-0F1F05DEF65A}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\NVIDIA Corporation\\Display\\nvmobls\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4B07E49-6567-4FB8-8D39-01920E3B2357}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a4b45c90-5d38-4452-a654-1b47ae7826c4}\InProcServer32" = "$homedrive\\Windows\\System32\\CXHProvisioningServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a4c31131-ff70-4984-afd6-0609ced53ad6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A4DDCA2B-E73C-40C5-83B1-9F40269D0B0D}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4E05936-2251-4634-B684-09D5122A8F72}\InprocServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A4F2A5C9-979A-4EC6-851F-341F15D3F67D}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5065670-136D-4FD6-A45F-00C85B90359C}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A508E5FE-7D8F-4006-AE92-A44E69F87DA3}\InprocServer32" = "$homedrive\\Windows\\System32\\MTFServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A530D54A-DBA0-4b17-9F99-51A7A2CC17CA}\InProcServer32" = "$homedrive\\Windows\\System32\\TetheringSettingHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A533BCB1-6D33-41FC-8C3B-63223FCCE9D2}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a542e116-8088-4146-a352-b0d06e7f6af6}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5448B7A-AA07-3C56-B42B-7D881FA10934}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{a558c6a5-b42b-4c98-b610-bf9559143139}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A56A841F-E974-45C1-8001-7E3F8A085917}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A571F412-E3D2-4A32-BF42-1D3B2203FF17}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a587dd8b-466f-4b66-a8d2-dc47272bebcb}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A58845F3-BC16-4689-883F-68A15916B660}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5890610-900C-4115-BAFF-767E05E10F1F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a5a3563a-5755-4a6f-854e-afa3230b199f}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5B020FD-E04B-4e67-B65A-E7DEED25B2CF}\InProcServer32" = "$homedrive\\Windows\\System32\\wisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5EAE54D-9886-4B8D-AA78-EAFF38D011CA}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5EBA07A-DAE8-4d15-B12F-728EFD8A9866}\InProcServer32" = "$homedrive\\Windows\\system32\\mssprxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5EFE073-B16F-474f-9F3E-9F8B497A3E08}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5F89494-76C3-4A05-8BB4-8EA500A3208A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5FA505C-DB54-403c-A744-9B3919EF096F}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Streaming\.ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A608A731-B6F2-4d08-AC1E-C22A65B64ACF}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6098E79-9C50-4F87-8973-5FB4532C93D8}\InProcServer32" = "$homedrive\\Windows\\system32\\btpanui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A61DDE94-66CE-4AC1-881B-71680588895E}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\InProcServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a62b9bb1-54cd-44b1-9f55-5a5914c37672}\InProcServer32" = "$homedrive\\Windows\\System32\\CredentialEnrollmentManagerForUser\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A63E13D5-5263-44A6-8A18-381EB6F181A2}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6439333-78D2-4FFD-A20D-53B0EDC704BA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a6482830-08eb-41e2-84c1-73920c2badb9}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A64CAF32-08CD-4054-BFD5-983BEDA9264A}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\InprocServer32" = "$homedrive\\Windows\\System32\\dxdiagn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A666634D-333F-4CC9-AF78-65ED7DB1D6C3}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6673C32-3943-3BBB-B476-C09A0EC0BCD6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{a671c915-d95d-4135-b2c3-089356ca694f}\InprocServer32" = "$homedrive\\Windows\\system32\\nlahc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A680CE8D-9CA7-43BF-B41E-5066973215AB}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostUser\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a682edd0-726b-4599-9f38-f0fda58b9714}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a6914418-134b-4bb8-8e3d-7fef7f456caf}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6B222AB-A5EA-4899-B230-084657EDDC7D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a6b5fe63-153c-4031-96db-79677ca10a9b}\InprocServer32" = "$homedrive\\Windows\\System32\\srmscan\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6BFEA43-501F-456F-A845-983D3AD7B8F0}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a6e02196-c1bf-4989-8a94-144eee4a9bb2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6EE35C6-87EC-47DF-9F22-1D5AAD840C82}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32" = "$homedrive\\Windows\\System32\\OneCoreCommonProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A70C977A-BF00-412C-90B7-034C51DA2439}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7136BDF-B141-3913-9D1C-9BC5AFF21470}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A7248EC6-A8A5-3D07-890E-6107F8C247E5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A73BEEB2-B0B7-11D2-8853-0000F80883E3}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a76de978-f3eb-4a4f-9f99-304ad619e2ab}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A79020BC-1F7E-4D20-AC2A-51D73012DDD5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7A63E5C-3877-4840-8727-C1EA9D7A4D50}\InProcServer32" = "$homedrive\\Windows\\System32\\fveui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7AA4814-7479-4047-BC99-32E757C8B850}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7B9649E-FECE-4AE3-958C-C36B133E937F}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7C06739-500F-4E8C-99A8-2BD6955899EB}\InprocServer32" = "$homedrive\\Windows\\System32\\wksprtPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7C452EF-8E9F-42EB-9F2B-245613CA0DC9}\InprocServer32" = "`"$env:homedrive\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\ProtectionManagement\.dll`""
	"HKEY_CLASSES_ROOT\CLSID\{a7c922a0-a197-4ae4-8fcd-2236bb4cf515}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a7ec30bd-4c22-4ca7-85dd-a7267dee78a4}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A7EDDCB5-6043-3988-921C-25E3DEE6322B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A7EE7F34-3BD1-427f-9231-F941E9B7E1FE}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8040703-2640-48B7-96CD-BC8108A4E8F1}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8159411-398E-4471-9521-A84B0BF2BE54}\InProcServer32" = "$homedrive\\Windows\\System32\\dsui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8159420-398E-4471-9521-A84B0BF2BE54}\InProcServer32" = "$homedrive\\Windows\\System32\\Dsui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8159421-398E-4471-9521-A84B0BF2BE54}\InProcServer32" = "$homedrive\\Windows\\System32\\Dsui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A82536D7-C8E6-4CEF-AA66-11E97EDDFC6D}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A82E50BA-8E92-41eb-9DF2-433F50EC2993}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A83EF168-CA8D-11D2-B33D-00104BCC4B4A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A860CE50-3910-11d0-86FC-00A0C913F750}\InProcServer32" = "$homedrive\\Windows\\System32\\imgutil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8616FB9-1D84-4F32-B46B-5D7B80214B8A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8679087-E64A-413A-9CBF-F38BE510C46C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a8679153-843f-467f-ad7e-f429328f7568}\InprocServer32" = "$homedrive\\Windows\\System32\\vmflexio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a86ca2f1-af74-4a74-980b-e185d4ca01b0}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8792A31-F385-493C-A893-40F64EB45F6E}\InProcServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A879E3C4-AF77-44fb-8F37-EBD1487CF920}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A87FA4A8-339A-48f3-A9B5-44CB8CFEF3F7}\InProcServer32" = "$homedrive\\Windows\\System32\\ActiveSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A888DF60-1E90-11CF-AC98-00AA004C0FA9}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A89003D7-25F1-47fd-B504-6B35E7A63A27}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a893aa73-054f-4dbc-9e53-f4ee5fe07fd3}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A894CA92-2E31-4AF2-BC7E-41079A8E5BE9}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A896FD50-87BE-449A-9149-D10BA1FAAEE2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8976A00-1FDE-4B5F-A6F0-FBF459DD32ED}\InProcServer32" = "$homedrive\\Windows\\System32\\ACPBackgroundManagerPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8A91A66-3A7D-4424-8D24-04E180695C7A}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8B25C0E-0894-4531-B668-AB1599FAF7F6}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a8c3476d-20e1-4d56-96e7-84e24952228b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrudt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8C680EB-3D32-11D2-9EE7-00C04F797396}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8CA4495-65AB-4333-9FF9-4FEB6FBF5169}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A8D058C4-D923-3859-9490-D3888FC90439}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{a8d93b39-2113-492e-b014-801d01c95eca}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8DCF3D5-0780-4EF4-8A83-2CFFAACB8ACE}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8DFB9A0-8A20-479F-B538-9387C5EEBA2B}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8E52322-8734-481D-A7E2-27B309EF8D56}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A8E64375-B645-4314-9EFC-C085981786FA}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A8F03BE3-EDB7-4972-821F-AF6F8EA34884}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A8F9F740-70C9-30A7-937C-59785A9BB5A4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{A907657F-6FDF-11D0-8EFB-00C04FD912B2}\InProcServer32" = "$homedrive\\Windows\\system32\\tcpipcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A910187F-0C7A-45AC-92CC-59EDAFB77B53}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A919EA73-490E-4D5C-9BA7-97CBC73119FE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A91DEAA6-9773-42B7-86A4-5AD24CFF440A}\InprocServer32" = "$homedrive\\Windows\\System32\\witnesswmiv2provider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9224722-48E4-4A66-8068-F90FA13A6D74}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9249952-F4C6-4BCD-9B44-6A5BA9B5209E}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A929C4CE-FD36-4270-B4F5-34ECAC5BD63C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nv3dappshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9397D66-3ED3-11D1-8D99-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A961F842-FC8E-4D53-8074-4AB67E8854B4}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9710FB5-1840-4224-BD42-86831E28E43A}\InProcServer32" = "$homedrive\\Windows\\System32\\UICOM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A973E7B2-131B-428E-8B2B-EAE73D731E98}\InProcServer32" = "$homedrive\\Windows\\system32\\ActionCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A97AA8AA-C8A0-491A-B931-2F4D068B0E6C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9927F85-A304-4390-8B23-A75F1C668600}\InprocServer32" = "$homedrive\\Windows\\System32\\MicrosoftAccountTokenProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9A33436-678B-4c9c-A211-7CC38785E79D}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a9ae6c91-1d1b-11d2-b21a-00c04fa357fa}\InProcServer32" = "$homedrive\\Windows\\system32\\msident\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9B005E5-AB63-4C1D-AE9E-AA120A50BB0F}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenContent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9B48EAC-3ED8-11d2-8216-00C04FB687DA}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{A9B5C10F-1FAC-422A-AE3F-875E09B8F64A}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxRanker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a9bdbb2f-8b01-455a-917f-0acf7b4a4a24}\InprocServer32" = "$homedrive\\Windows\\System32\\dmwmicsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9C3BF62-4524-4989-8AA9-DE019D2E551F}\InprocServer32" = "$homedrive\\Windows\\System32\\Geolocation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9CF0EAE-901A-4739-A481-E35B73E47F6D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{a9d7038d-b5ed-472e-9c47-94bea90a5910}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9F738C8-6B96-41FA-A155-15ECD67275D0}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA000926-FFBE-11CF-8800-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA04CA0B-7597-4F3E-99A8-36712D13D676}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA0EB6FC-A8EB-4FD9-A861-0014B374076E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aa1b0e54-7593-40a0-8135-ed0b6cbc0154}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aa28fbc7-59f1-4c42-9fd8-ba2be27ea319}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AA2E2C5B-0B0C-4ECC-B32B-3935269E0588}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA453FDC-5D6C-4C33-AD14-67680BF6F1DD}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aa509086-5ca9-4c25-8f95-589d3c07b48a}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA527A40-4D9A-11D2-93AD-00805F853771}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\dsprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA544D41-28CB-11D3-BD22-0000F80849BD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AA558FA2-A340-4a23-B765-614BA827CE1D}\InprocServer32" = "$homedrive\\Windows\\system32\\sppinst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA65DD7C-83AC-48C0-A6FD-9B61FEBF8800}\InProcServer32" = "$homedrive\\Windows\\system32\\domgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA67AF38-4AE0-4B49-BA56-ADF78DBED45A}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA70DDF4-E11C-11D1-ABB0-00C04FD9159E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\viewprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aa7313a4-03d8-44bb-b60d-0dcb7bdabf8c}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA7E3C50-864C-4604-BC04-8B0B76E637F6}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA87D6C0-777A-4483-B5BF-07B8668B2225}\InProcServer32" = "$homedrive\\Windows\\System32\\MiracastInputMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA94DCC2-B8B0-4898-B835-000AABD74393}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AA9D2C93-523E-4787-919D-4F698ADE2925}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aaa0d501-ec92-4c17-a930-90dd0d2f6c95}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Editing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAA27100-EFAD-11E3-AC10-0800200C9A66}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxInputRouter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}\InProcServer32" = "$homedrive\\Windows\\system32\\wpdshserviceobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAAE762B-A6A2-4c45-B5D8-9A83AFB6BB70}\InprocServer32" = "$homedrive\\Windows\\system32\\DRIVERS\\UMDF\\wpdmtpdr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAB8F985-EADA-428B-8636-270F58E1F1EF}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAB9C730-3C6C-4faa-A87E-77198D9E2A57}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AABE54D4-6E88-4c46-A6B3-1DF790DD6E0D}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AABFB2FA-3E1E-4A8f-8977-5556FB94EA23}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAC2B978-266D-48ae-AA28-60A3EBB872D0}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAC46A37-9229-4fc0-8CCE-4497569BF4D1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAC85F70-3395-4F9B-A609-D625A2F07CEF}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAD4BDD3-81AA-3ABC-B53B-D904D25BC01E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AADFA891-4F4D-46E6-BF6B-E9A260931A01}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAEAE72F-0328-4763-8ECB-23422EDE2DB5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\policman\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAF322D7-795E-4485-A92F-3D3F39269EDE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Perception\.Stub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AAFB92B5-B5FE-4DCE-B943-9CC1FFAF58C5}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ab0b37ec-56f6-4a0e-a8fd-7a8bf7c2da96}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB0D8B78-D7F8-4249-AC86-3A3E3D7BFBC4}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHT\\ChtChangjieDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB1890A0-E91F-11D2-BB91-00C04F8EE6C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB2A519B-03B0-43CE-940A-A73DF850B49A}\InProcServer32" = "$homedrive\\Windows\\system32\\StorageUsage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB2ECE69-56D9-4F28-B525-DE1B0EE44237}\InprocServer32" = "$homedrive\\Windows\\System32\\locationapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB300F71-01AB-46D2-AB6C-64906CB03258}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB40A5C1-804B-40BD-9DFE-A640691C6956}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\\\WMIPJOBJ\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB517586-73CF-489c-8D8C-5AE0EAD0613A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AB558A90-77EC-3C9A-A7E3-7B2260890A84}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AB790AA1-CDC1-478a-9351-B2E05CFCAD09}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB7BC55E-4BD8-430E-ADB2-D29A5DA20624}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB824EEF-7CF4-4c55-B415-B2D9CD30FE9E}\InProcServer32" = "$homedrive\\Windows\\System32\\prauthproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB944620-79C6-11D1-88F9-0080C7D771BF}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB968F1E-E20B-403A-9EB8-72EB0EB6797E}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoxev\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABB27087-4CE0-4E58-A0CB-E24DF96814BE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABBA0005-3075-11D6-88A4-00B0D0200F88}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABBA0006-3075-11D6-88A4-00B0D0200F88}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABBA001B-3075-11D6-88A4-00B0D0200F88}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABBB0332-21FC-4F9A-BBF0-C329B38611D9}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABCA6774-29B5-4aff-A776-C2551AE0FFE6}\InProcServer32" = "$homedrive\\Windows\\system32\\windows\.ui\.immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{abd2ad24-f1ff-47ad-82de-3a1edf38e7a1}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABDBD0B1-7D54-49fb-AB5C-BFF4130004CD}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABE40035-27C3-4A2F-8153-6624471608AF}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{abeb77d3-f67a-4e33-a412-86b310bc274e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Protection\.PlayReady\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ABF3F496-FB11-4C47-A3A2-0B97911ADAA9}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC14BBFA-7475-4E47-87A2-F36C170A7F66}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC3315C9-F481-45D7-826C-0B406C1F64B8}\InprocServer32" = "$homedrive\\Windows\\System32\\msac3enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC3AC249-E820-4343-A65B-377AC634DC09}\InProcServer32" = "$homedrive\\Windows\\System32\\BioCredProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC48FFE0-F8C4-11d1-A030-00C04FB6809F}\InprocServer32" = "$homedrive\\Windows\\System32\\tapi3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC4CE3CB-E1C1-44CD-8215-5A1665509EC2}\InprocServer32" = "$homedrive\\Windows\\system32\\wmphoto\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC59432D-8659-48C4-A584-AFEBC920256F}\InprocServer32" = "$homedrive\\Windows\\System32\\WpnClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC6B8DC1-3257-4a70-B1B2-A9C9215659AD}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC75D454-9F37-48f8-B972-4E19BC856011}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ac7d68a4-c4e5-450f-a89b-d630b25bb996}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AC7ED533-3E39-4350-A0E3-CCB7D8043825}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{AC82FF6D-E524-4c0f-8D0B-0C74C1ECAAEA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aca502b5-75d0-45ef-8c18-cb84c4b48ee5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ACA965C4-D406-4531-B6D9-C099D5D8EDEA}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ACA97E00-0C7D-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ACAA48D5-5C1E-45EB-8AC4-6D84B9F3A58E}\InProcServer32" = "$homedrive\\Windows\\System32\\AzureSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ACC56A05-E277-4B1E-A43E-7A73E3CD6E6C}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ACD453BC-C58A-44D1-BBF5-BFB325BE2D78}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ACD71912-705E-4C3E-90BD-14F31595D361}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ACE52D03-E5CD-4b20-82FF-E71B11BEAE1D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ace575fd-1fcf-4074-9401-ebab990fa9de}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{acfd176d-fea8-4afc-a4a1-c97def2baf71}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ad08dcc2-4e35-4486-9d49-547cbd30942d}\InprocServer32" = "$homedrive\\Windows\\System32\\MitigationClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD08DFE3-6C43-4CCD-A0E6-97EDE7B195BD}\InprocServer32" = "$homedrive\\Windows\\System32\\hascsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ad0f2733-6602-4c43-8f9a-df04977de988}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD1841CF-0EC5-4b59-ACC4-8329EED299F9}\InProcServer32" = "$homedrive\\Windows\\system32\\ndfhcdiscovery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD181A86-8540-4EAA-A3D5-68FD744F9A89}\InProcServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD325995-B74D-41E4-A240-C472A50D41C2}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD326409-BF80-3E0C-BA6F-EE2C33B675A5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AD374A9E-D7FC-453A-A146-16535FE9ECC1}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvxdplcy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD4C1B00-4BF7-422F-9175-756693D9130D}\InProcServer32" = "$homedrive\\Windows\\System32\\mfps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD581B00-7B64-4E59-A38D-D2C5BF51DDB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPMediaSharing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD5FBC96-ACFE-46bd-A2E2-623FD110C74C}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD664904-FE8A-3217-BBF5-E6AB1D998F5F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AD6B3B23-C74A-4B2C-839F-C1149CB42E7F}\InProcServer32" = "$homedrive\\Windows\\System32\\pwlauncher\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD6C8934-F31B-4F43-B5E4-0541C1452F6F}\InprocServer32" = "$homedrive\\Windows\\System32\\WSTPager\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{AD7572AD-86A5-4211-BC54-A438E550A740}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ad763fa6-3b90-41ab-bd44-4f832beee55f}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD76E74F-F730-4813-BF9F-BD139C13E9BF}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AD8E510D-217F-409B-8076-29C5E73B98E8}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ad974ae2-e292-4083-a280-0342d68daf55}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ADAB9B51-4CDD-4af0-892C-AB7FA7B3293F}\InProcServer32" = "$homedrive\\Windows\\System32\\gpsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{adacedf4-9c34-430e-a65f-488f0ab491da}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADB880A4-D8FF-11CF-9377-00AA003B7A11}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32" = "$homedrive\\Windows\\System32\\hhctrl\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{ADB9F5A4-E73E-49b8-99B6-2FA317EF9DBC}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADBDEF00-9A50-4DC6-B945-CB95B4233E3C}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADC6CB82-424C-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADC6CB86-424C-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADC6CB88-424C-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{add36aa8-751a-4579-a266-d66f5202ccbb}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADE27590-4C84-4ABB-AE56-8233CC73D80F}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADE6444B-C91F-4E37-92A4-5BB430A33340}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ADF95821-DED7-11D2-ACBE-0080C75E246E}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE03A0A5-DE98-45ff-8016-DDEFF70BCF61}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE0DB8A9-8183-4FA1-AFDA-C3506921D7E3}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE17FC35-F74E-45DB-9CCF-35193D4F7622}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE1E00AA-3FD5-403C-8A27-2BBDC30CD0E1}\InprocServer32" = "$homedrive\\Windows\\system32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ae2079d8-d764-4d79-ab4d-3543847a1a2c}\InProcServer32" = "$homedrive\\Windows\\System32\\recovery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE24FDAE-03C6-11D1-8B76-0080C744F389}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ae31b729-d5fd-401e-af42-784074835afe}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceDirectoryClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ae4bbad2-f56a-4dfd-af17-79c03af451d0}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE53ED01-CAB4-39CE-854A-8BF544EEEC35}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ae5c828c-66a3-46e5-83f0-5ba1d7aa7752}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Sockets\.PushEnabledApplication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE62C05D-0A02-30E7-9B51-E9D4DD157207}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\InProcServer32" = "$homedrive\\Windows\\system32\\msctfui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE6C819B-3A9B-4261-B4E5-14285EC46705}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE8AFD54-5B57-4961-8A9B-12ADF23B696A}\InprocServer32" = "$homedrive\\Windows\\System32\\cmstplua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE9472BF-B0C3-11D2-8D24-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AEB16279-B750-48f1-8586-97956060175A}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfasfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AEB2BF55-0B96-456C-A57F-B742ACD4775B}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsLexiconUpdateDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aeb6c755-2546-4881-82cc-e15ae5ebff3d}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVPXENC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AEB84C83-95DC-11D0-B7FC-B61140119C4A}\InProcServer32" = "$homedrive\\Windows\\System32\\dmview\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{AEC17CE3-A514-11D1-AFA6-00AA0024D8B6}\InProcServer32" = "$homedrive\\Windows\\System32\\dmsynth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AED5B1AA-CB76-41A7-B534-F99D4D6976F2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Shell\.ServiceHostBuilder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AED6483E-3304-11d2-86F1-006008B0E5D2}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AED6483F-3304-11d2-86F1-006008B0E5D2}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AEE2420F-D50E-405C-8784-363C582BF45A}\InProcServer32" = "$homedrive\\Windows\\system32\\DevicePairingFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{aef771da-f489-423e-bb0f-634ba8b0c56d}\InProcServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF02484C-A0A9-4669-9051-058AB12B9195}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{af076a15-2ece-4ad4-bb21-29f040e176d8}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{af13dff0-e40f-4e6b-b4cd-009b81be6f6d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF2440F6-8AFC-47d0-9A7F-396A0ACFB43D}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF279B30-86EB-11D1-81BF-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF2AC6EE-2B16-4756-9475-F319E543EFAA}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF4B1274-B78A-4979-AEF5-20E78FEE102E}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF4F6510-F982-11d0-8595-00AA004CD6D8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AF56838E-3362-472E-997E-C3370B486802}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{af5c828c-66a3-35d4-9401-5ba1d7aa7752}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Vpn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF60343F-6C7B-3761-839F-0C44E3CA06DA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AF604EFE-8897-11D1-B944-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF65E2EA-3739-4e57-9C5F-7F43C949CE5E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AF679D58-078E-48D4-A1E3-474F10DF76B8}\InProcServer32" = "$homedrive\\Windows\\system32\\cfmifsproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF75D6AD-E307-4052-8CB1-BF2052E734F0}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF8C5F8A-9999-3E92-BB41-C5F4955174CD}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AF8FA762-6286-46F6-9FA7-7D63B655C22F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF95DC76-16B2-47F4-B3EA-3C31796693E7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{af9d2278-060f-4a17-99a9-5044f7f843a8}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF9F2C0D-6B9F-4e32-A94D-A3E235A31BF7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFA470FE-371D-4F98-9592-39E3C7227E5C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AFAEF10F-1BC4-351F-886A-878A265C1862}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AFB40FFD-B609-40A3-9828-F88BBE11E4E3}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFB6C280-2C41-11D3-8A60-0000F81E0E4A}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{AFBA6B42-5692-48EA-8141-DC517DCF0EF1}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFC00D5E-BE1D-44A2-B875-7F7BDFAB1A18}\InProcServer32" = "$homedrive\\Windows\\System32\\CfgSPPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFC681CF-E82F-361A-8280-CF4E1F844C3E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AFC7B6DE-D642-41B7-AB0C-A01019510741}\InProcServer32" = "$homedrive\\Windows\\System32\\vp9fs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{afd198ac-5f30-4e89-a789-5ddf60a69366}\InprocServer32" = "$homedrive\\Windows\\system32\\BthRadioMedia\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFD7F94B-1627-436c-80C8-B464AA21CAD3}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{afe7d3f2-6d6d-4c15-838f-f38c19065629}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFE9E2F0-5BBA-4169-A33B-EE3727AC3482}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFEE8F8B-2FE6-4382-A0DE-8D713258B95E}\InProcServer32" = "$homedrive\\Windows\\System32\\LicensingCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFEF65AD-4577-447A-A148-83ACADD3D4B9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{AFFA1DA9-C637-4e6b-A0F3-276889D09F14}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B01106AD-25A5-4E11-A68A-BB880287DF53}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b020b123-89b9-46c6-8509-a8bf70447fea}\InProcServer32" = "$homedrive\\Windows\\system32\\tapilua\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0210780-89CD-11d0-AF08-00A0C925CD16}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B021FF57-A928-459c-9D6C-14DED0C9BED2}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0271158-70D2-4C5B-9F94-76F549D90FDF}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBSink\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b02a85bd-7898-4435-8e54-b300b866c385}\InprocServer32" = "$homedrive\\Windows\\System32\\advancedemojids\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B02E0336-9E13-4E74-8A0A-7F04A273ADE8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Connectivity\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B039282F-BE70-44BC-9862-966F4E95072F}\InProcServer32" = "$homedrive\\Windows\\System32\\Family\.Cache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0395DA5-6A15-4E44-9F36-9A9DC7A2F341}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B03B16C7-35A7-4A55-BEF1-8876E1CE2F45}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32" = "$homedrive\\Windows\\system32\\execmodelproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B03C7B74-40A6-4ED9-A900-A5873C15E8F1}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b040ea9e-3f5e-48c9-bcdc-304e9d02851f}\InprocServer32" = "$homedrive\\Windows\\System32\\sdengin2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B05DABD9-56E5-4FDC-AFA4-8A47E91F1C9C}\InprocServer32" = "$homedrive\\Windows\\System32\\encapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b07a5d8d-67f8-438f-b69d-4372fbe1dbb7}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B07CAC5C-9786-4F8A-8DC7-902A6386F3E7}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.Devices\.SerialCommunication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B084785C-DDE0-4d30-8CA8-05A373E185BE}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetsrc|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B091E540-83E3-11CF-A713-0020AFD79762}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B0A2AB46-F612-4469-BEC4-7AB038BC476C}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmicookr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b0a38a0c-0437-4e02-9b96-27f998020f46}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSoftwareInstallationClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0A8F3CF-4333-4bab-8873-1CCB1CADA48B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{b0c43320-2315-44a2-b70a-0943a140a8ee}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0D17FC2-7BC4-11d1-BDFA-00C04FA31009}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0D2B535-12E1-439F-86B3-BADA289510F0}\InProcServer32" = "$homedrive\\Windows\\System32\\WiFiCloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0D2C6E7-BF19-4360-9137-D951C9C7CA42}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ServiceDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0DC057D-FA13-4CB3-B54D-4CC05E125781}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0DDD260-9E44-4bf2-8602-6D9CE1D0B94F}\InprocServer32" = "$homedrive\\Windows\\system32\\ucmhc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0EDF163-910A-11D2-B632-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0F1B174-AC86-452D-BAE7-C105F0F98C5A}\InProcServer32" = "$homedrive\\Windows\\System32\\dmcsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B0F64827-79BB-3163-B1AB-A2EA0E1FDA23}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B115690A-EA02-48D5-A231-E3578D2FDF80}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC\\IMTCTIP\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{B11CD547-573E-4D53-8719-D55634E3F458}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b11d16d0-e195-4ca6-bbd5-1254ec098953}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B12AE898-D056-4378-A844-6D393FE37956}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b1325ef5-dd4d-4988-a2b3-c776ad45d0d6}\InProcServer32" = "$homedrive\\Windows\\system32\\shutdownux\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B138E92F-F502-4adc-89D9-134C8E580409}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B15B8DC0-C7E1-11d0-8680-00AA00BDCB71}\InprocServer32" = "$homedrive\\Windows\\System32\\urlmon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b15c0e47-c391-45b9-95c8-eb596c853f3a}\InprocServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B164BCEE-41B3-4F70-A53C-2ACA322DCCCB}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1840AE4-5D39-4B8E-BEDD-82F251A5FF70}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1853640-8B46-446C-A262-C04A45486885}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b1aebb5d-ead9-4476-b375-9c3ed9f32afc}\InprocServer32" = "$homedrive\\Windows\\System32\\sppcext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1AEC16F-2383-4852-B0E9-8F0B1DC66B4D}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1B77C00-C3E4-11CF-AF79-00AA00B67A42}\InprocServer32" = "$homedrive\\Windows\\System32\\qdv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1E29D59-A675-11D2-8302-00C04F8EE6C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1EBFC28-C9BD-47A2-8D33-B948769777A7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1F250C3-B7F8-4DA3-9C8D-382602F02424}\InprocServer32" = "ole32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B20D5479-88CB-418e-A2F6-B4343B7680FE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B210D694-C8DF-490d-9576-9E20CDBC20BD}\InprocServer32" = "$homedrive\\Windows\\System32\\mscms\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b21858c6-9711-4257-99c8-5c0084bebce1}\InProcServer32" = "$homedrive\\Windows\\System32\\dafDockingProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2215BF3-A946-416A-8854-DD4FB40982B2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.SmartCards\.Phone\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2236232-14ED-49C6-AB56-C1CF2E2D0C5D}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxInputRouter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B22C3339-87F3-4059-A0C5-037AA9707EAF}\InProcServer32" = "$homedrive\\Windows\\system32\\MFMediaEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2420E45-60BC-4466-AD5C-369EB092BEF8}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2445657-090D-11e4-AEDA-B4B52FE06611}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b27b520e-46db-4720-b9c5-5f80acab23a4}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b289af55-2833-44e0-a46f-96e5ebbd5c1b}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{b2952b16-0e07-4e5a-b993-58c52cb94cae}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Notepad\+\+\\NppShell_06\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B29D466A-857D-35BA-8712-A758861BFEA1}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B2A7FD52-301F-4348-B93A-638C6DE49229}\InprocServer32" = "$homedrive\\Windows\\system32\\wmpshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2B4A4D1-2754-4140-A2EB-9A76D9D7CDC6}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b2b4fb61-d2dd-4ddd-8001-20f98c6577ef}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{b2bcff59-a757-4b0b-a1bc-ea69981da69e}\InprocServer32" = "$homedrive\\Windows\\system32\\azroles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b2cabfe4-fe04-42b1-a5df-08d483d4d100}\InprocServer32" = "$homedrive\\Windows\\system32\\amsiproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2D7135C-01DB-4EE1-AA28-87AC790C5D1E}\InProcServer32" = "$homedrive\\Windows\\system32\\lockcontroller\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2E8D89A-7A99-4b43-9638-DF4FF83EAC11}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B2F2E083-84FE-4a7e-80C3-4B50D10D646E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B2F3A67C-29DA-4C78-8831-091ED509A475}\InprocServer32" = "$homedrive\\Windows\\System32\\MSNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{B2F586D4-5558-49D1-A07B-3249DBBB33C2}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b3179149-2b99-48b2-b44b-11aa2034c1a3}\InprocServer32" = "$homedrive\\Windows\\system32\\cngprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B31C5FAE-961F-415b-BAF0-E697A5178B94}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B31C6004-7EFE-4893-BD6F-B30F85F6D445}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Display\.BrightnessOverride\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B323F8E0-2E68-11D0-90EA-00AA0060F86C}\InProcServer32" = "$homedrive\\Windows\\System32\\sti\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B32D3949-ED98-4DBB-B347-17A144969BBA}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B32F4002-BB27-45FF-AF4F-06631C1E8DAD}\InProcServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B33F0D7A-1571-4022-B710-D26E9B87DEB8}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B3408A2F-8DDA-1197-FBD5-2CE69A2DEFC0}\InprocServer32" = "$homedrive\\Windows\\system32\\eqossnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3408A2F-8DDA-1197-FBD5-2CE69A2DEFC1}\InprocServer32" = "$homedrive\\Windows\\system32\\eqossnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3584E15-EB81-4A06-AEE4-38B4DAE71C54}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B35913A2-BE2E-4FA6-978C-3B130A7EFB98}\InprocServer32" = "$homedrive\\Windows\\System32\\QuickActionsPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B359B02E-55E2-4B7D-B582-01089BAAA6AE}\InProcServer32" = "$homedrive\\Windows\\System32\\XblGameSaveProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B35EA47E-FA71-34FD-B7E2-EBC050A4FB5A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B37BF7D7-B78E-4465-98DE-71732453B03D}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B3AADFEA-8404-4CBE-A62E-B0B715412C9E}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcRefreshTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3B76E11-BD89-492C-A174-136D65742E96}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3CE8400-5847-41CA-BA98-428676007696}\InprocServer32" = "$homedrive\\Windows\\System32\\FsNVSDeviceSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3E82D1C-E5A9-49a5-A189-2A38ACC1B2D7}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3EE7802-8224-4787-A1EA-F0DE16DEABD3}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3FB2931-D1BC-44C8-96A7-A5401DFBD4E3}\InProcServer32" = "$homedrive\\Windows\\system32\\MFMediaEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3FD5602-EB0F-415E-9F32-75DA391D6BF9}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3FE7F3F-B175-4159-A2DC-0F7F6606A878}\InProcServer32" = "$homedrive\\Windows\\System32\\ClipboardServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B3FF88A4-96EC-4CC1-983F-72BE0EBB368B}\InprocServer32" = "$homedrive\\Windows\\System32\\gpsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B401C5EB-8457-427F-84EA-A4D2363364B0}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B406AC70-4D7E-3D24-B241-AEAEAC343BD9}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B4077BA8-776F-4695-9D26-D786A03C4364}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B41DB860-64E4-11D2-9906-E49FADC173CA}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\WinRAR\\rarext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B43C4EEC-8C32-4791-9102-508ADA5EE8E7}\InprocServer32" = "$homedrive\\Windows\\System32\\encapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B43D0B31-3495-40B5-8416-8AB30BC37E3C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\appxman\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b4414d52-69c9-4666-b62a-d82620bed434}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B44392DA-499B-446b-A4CB-005FEAD0E6D5}\InProcServer32" = "$homedrive\\Windows\\System32\\MFMediaEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4463941-6512-4B2D-A54E-107DD721B4E1}\InprocServer32" = "$homedrive\\Windows\\system32\\Win32AppInventoryCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b455f46e-e4af-4035-b0a4-cf18d2f6f28e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4601B57-1905-40E0-A33C-804B3AD24F2E}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagnosticLogCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B488CB7E-98BC-4FA9-9FCA-E461728EFDCE}\InProcServer32" = "$homedrive\\Windows\\System32\\SystemSettings\.DataModel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B490264C-8D8F-40FD-B1BE-CD69AD779EC1}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B49FE003-49CC-4f36-BD61-9E6AE9C2175C}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4A02D72-2A34-41DB-B37F-05DFDB27E933}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4A6821D-4D2E-40DD-9EE0-89C2CD07BF69}\InprocServer32" = "$homedrive\\Windows\\System32\\storagewmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4B3AECB-DFD6-11d1-9DAA-00805F85CFE3}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4BBC560-45F3-46F6-A253-AB6A13C4CE75}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{b52ab030-8ef5-4621-b480-4d20975d1d26}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B532B342-0E34-448B-9EDF-1D55C04041F8}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B53EBC0C-2251-4AE2-9818-FD6AAF843EC2}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b545fb2e-878f-4400-8a6b-ed42a63a8b14}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B54BE40D-6E32-461A-8187-C1D35FD46580}\InProcServer32" = "$homedrive\\Windows\\system32\\mmgaproxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B54E38F8-17FF-3D0A-9FF3-5E662DE2055F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B54E85D9-FE23-499F-8B88-6ACEA713752B}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B54F3742-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B54F3743-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32" = "$homedrive\\Windows\\System32\\vbscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5607793-24AC-44c7-82E2-831726AA6CB7}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B5730A90-1A2C-11CF-8C23-00AA006B6814}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{b5866878-bd99-11d0-b04b-00c04fd91550}\InprocServer32" = "($homedrive\\Windows\\system32\\rpcrt4\.dll|rpcrt4\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B591A192-A405-4FC3-8323-4C5C542578FC}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5965ACC-842D-4ABE-A618-9292BB3EE666}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5A123C0-3893-4F1C-8599-00F4B82F2C99}\InprocServer32" = "$homedrive\\Windows\\system32\\fhsrchph\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b5a60a9e-a4c7-4a93-ac6e-0b76d1d87dc4}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5C8B898-0074-459F-B700-860D4651EA14}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b5cdee74-7392-4954-9aca-8a1338ec04c1}\InprocServer32" = "$homedrive\\Windows\\System32\\srmclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5CFEB0E-9C01-4942-A5CB-F62EB09D808F}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5EBAFB9-253E-4A72-A744-0762D2685683}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b5f8350b-0548-48b1-a6ee-88bd00b4a5e7}\InprocServer32" = "$homedrive\\Windows\\System32\\oleacc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B5F8FB3B-393F-4F7C-84CB-504924C2705A}\InProcServer32" = "$homedrive\\Windows\\system32\\msctfp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B60D6653-FDE4-4045-B5FD-F47B1BD45CA0}\InProcServer32" = "$homedrive\\Windows\\System32\\WinRtTracing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B62A910C-9FDD-4F19-9993-16DA9009A61C}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6390DB1-4C44-4BA4-BA51-BBF4BED47C37}\InProcServer32" = "$homedrive\\Windows\\System32\\XblAuthManagerProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B64016F3-C9A2-4066-96F0-BD9563314726}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B65449EC-4319-4C96-9ABD-E9257D00DB84}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetAdapterCim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b67c0b5e-c0ff-41c6-885d-5bdcd71837aa}\InProcServer32" = "$homedrive\\Windows\\system32\\ustprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B68DE4BD-6824-42CD-9581-CD571249411D}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetNat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B699E5E8-67FF-4177-88B0-3684A3388BFB}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6AFFB50-6F46-49B1-B912-C3F7A876CCCA}\InProcServer32" = "$homedrive\\Windows\\System32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b6baabcf-8c41-4ccc-82e7-bc867662b833}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6D83264-AC99-4C7B-B230-5A15CE7A1F72}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b6dc98b1-0bec-45e1-b2e4-3a2d943f0be4}\InprocServer32" = "$homedrive\\Windows\\system32\\dpapiprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6EB52D5-BB1C-3380-8BCA-345FF43F4B04}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}\InProcServer32" = "$homedrive\\Windows\\System32\\scrptadm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6FFEC3A-07F7-42D0-8829-B722F46DB533}\InprocServer32" = "$homedrive\\Windows\\system32\\WinOpcIrmProtector\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B7041BBE-2E0D-4337-A896-3CDA33A8A0F9}\InProcServer32" = "$homedrive\\Windows\\System32\\provisioningcommandscsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B71E484D-93ED-4B56-BFB9-CEED5134822B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B727ED66-3CF2-42fa-A5DA-C08121B33443}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B72F8FD8-0FAB-4dd9-BDBF-245A6CE1485B}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b7373566-8ff2-45d8-af1f-da39f289bcf9}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B742E827-EDE6-400F-8312-CD522198BE86}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B744304E-083F-42d0-B969-A9F4EFC67610}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b75ac000-9bdd-11d0-852c-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b77b1cbf-e827-44a9-a33a-6ccfeeaa142a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B786ECB7-8942-4FE1-9DCD-230E30DE5AFF}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B79848C3-4F26-4D9D-BF1D-81FDF2704CF8}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B7B4F949-65EE-47C0-A6FA-586844E15B68}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B7BBD408-F09C-4aa8-B65E-A00B8FE0F0B9}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B7BFFB5A-EFA8-4D8C-BBDE-C8D5FAAF54A1}\InprocServer32" = "$homedrive\\Windows\\system32\\WofTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b7f5540c-5012-4acd-a4c6-b4b7efdcd851}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.internal\.shell\.broker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8069D2E-4A49-475A-8FD2-533992303C2C}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B80AB0A0-7416-11D2-9EEB-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B81CB5ED-E654-399F-9698-C83C50665786}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B81FF171-20F3-11d2-8DCC-00A0C9B00525}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B832674A-F36F-4780-AE4C-1566AAE3A4F4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8445657-C149-4F95-8CFF-49D39B615F27}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b855b632-7dfb-4826-a172-3600ebd86948}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b85ea052-9bdd-11d0-852c-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B862BC49-E7E7-427E-868A-DE0F7A75BC07}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B86BB667-9FEC-4285-A03A-10BC98C1CA1C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B86F86AF-AA5D-47C2-AB44-17AB64F907B4}\InprocServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B87BEB7B-8D29-423F-AE4D-6582C10175AC}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B890AF56-AC8C-11D1-8CB7-00C04FC3261D}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b8967f85-58ae-4f46-9fb2-5d7904798f4b}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8A27942-ADE7-4085-AA6E-4FADC7ADA1EF}\InprocServer32" = "$homedrive\\Windows\\System32\\PNPXAssoc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8A3CFD8-6F13-4B39-8FE9-0CA01EF372E0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\TecProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b8a97152-cda0-4d4d-9526-49d044faf1fa}\InProcServer32" = "$homedrive\\Windows\\System32\\MicrosoftAccountWAMExtension\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8B3F797-E237-4D1C-998A-1411D95B8C82}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8BE1E19-B9E4-4ebb-B7F6-A8FE1B3871E0}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8C54ECD-6BCE-4664-8DFD-016B751870D0}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B8EFFCEF-7AFA-4C39-8E96-211D1846B9E9}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.ui\.storage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9033E87-33CF-4D77-BC9B-895AFBBA72E4}\InprocServer32" = "$homedrive\\Windows\\System32\\mapsupdatetask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9162A23-45F9-47CC-80F5-FE0FE9B9E1A2}\InprocServer32" = "$homedrive\\Windows\\System32\\bidispl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b918dbc4-162c-43e5-85bf-19059a776e9e}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b91a4db4-3630-11dc-9eaa-00161718cf63}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{B91D5831-B1BD-4608-8198-D72E155020F7}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B927879C-95D3-44BE-81C5-D76FC25ED221}\InprocServer32" = "$homedrive\\Windows\\System32\\ActiveSyncCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B92E345D-F52D-41F3-B562-081BC772E3B9}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B932D772-B787-4FBD-B82F-B2499A8269A4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B957A89F-1F2C-4D0F-ABEE-E61E5F698B22}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGSpeakerPropPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b958f73c-9bdd-11d0-852c-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B96F67A2-30C2-47E8-BD85-70A2C948B50F}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B977CB2D-EC6E-4A8F-BFFE-D18682BB0D52}\InProcServer32" = "$homedrive\\Windows\\system32\\sharemediacpl\.(dll|cpl)"
	"HKEY_CLASSES_ROOT\CLSID\{b9815375-5d7f-4ce2-9245-c9d4da436930}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B98D13E7-55DB-4385-A33D-09FD1BA26338}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVSplitter\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{B9931692-A2B3-4FAB-BF33-9EC6F9FB96AC}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9A160BE-0EB0-46A4-9942-30EB90BD792D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b9b61a03-caa7-43bb-b859-acd26d73b3f7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9BC2A50-43C3-41AA-A086-5DB14E184BAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputSwitch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9BC2A50-43C3-41AA-A087-5DB14E184BAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputSwitch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9BC2A50-43C3-41AA-A092-5DB14E184BAE}\InProcServer32" = "$homedrive\\Windows\\System32\\InputSwitch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9E84FFD-AD3C-40A4-B835-0882EBCBAAA8}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9F8535E-BF74-41C2-A6A6-7124442450DC}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B9F8AC3E-0F71-11D2-B72C-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{BA0F250B-EBED-4A99-B386-E0260524FA54}\InProcServer32" = "$homedrive\\Windows\\System32\\HoloSI\.PCShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA126AD8-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA126AE0-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA126AE1-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA126AE2-2166-11D1-B1D0-00805FC1270E}\InprocServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA126E01-2166-11D1-B1D0-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\system32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA126F01-2166-11D1-B1D0-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\system32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA441419-0B3F-4FB6-A903-D16CC14CCA44}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA4EAC04-AFCE-441A-A4F0-C4A97545425A}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA5BDA58-9D0A-47BB-93D1-6655AEDA6517}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA69F7E1-C6D8-4fb1-924A-A5308B99391C}\InprocServer32" = "$homedrive\\Windows\\System32\\ihds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA75691E-9FF3-492C-9053-4A91A40C556E}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA7C0D29-81CA-4901-B450-634E20BB8C34}\InprocServer32" = "$homedrive\\Windows\\system32\\prntvpt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ba818ce5-b55f-443f-ad39-2fe89be6191f}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA8735EF-E3A9-4F1B-BADD-DBF3A5909915}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA9BB214-D930-4206-8F8F-BF0F1EAA4A6B}\InProcServer32" = "$homedrive\\Windows\\system32\\wsmplpxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA9FCBAC-3AE4-46BF-B7BA-669498CCC8DE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BAB56818-0360-4D47-BD5F-8F0683737DA8}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BABC0FE1-E9B9-49A3-BBE6-3F16B71DC052}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Google\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}\InprocServer32" = "$homedrive\\Windows\\System32\\appmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BADCC35D-8542-4A5C-A457-0ECCCF62508A}\InprocServer32" = "$homedrive\\Windows\\system32\\DscCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BAE3E62C-37D4-49AC-A6F1-0E485ECD6757}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BAE86DDD-DC11-421C-B7AB-CC55D1D65C44}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BAEA8DC9-45F5-4DF8-A27F-2A277D524B15}\InprocServer32" = "$homedrive\\Windows\\System32\\WiaExtensionHost64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{baffdff4-240b-4c36-8173-70c8301d7753}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB002029-DC5F-45FC-A8D9-A6BE23A748AB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB0D7187-3C44-11D2-BB98-3078302C2030}\InprocServer32" = "$homedrive\\Windows\\system32\\cfgbkend\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB0DB60E-FFA0-4756-9F04-A0FCE6A97809}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB2D41DF-7E34-4F06-8F51-007C9CAD36BE}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB2FEB41-0FF4-4BE9-A9A8-DAD0FAE602AA}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHT\\ChtQuickDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bb32d5df-dbe0-4776-82b3-0dc0d48afc81}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB331DDE-CA08-4436-9C2F-4A84964703F4}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.ApplicationData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB44391D-6ABD-422f-9E2E-385C9DFF51FC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB49EAD1-0DC5-41FA-AFE0-8EFBDEAA4AF6}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB530C63-D9DF-4B49-9439-63453962E598}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB5331F1-D8FF-4DDB-8A8F-2DF901123B33}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB68A765-9FB7-4D2C-A423-7AE4CD4B006C}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcWebFilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB847B8A-054A-11d2-A894-0000F8084F96}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB89EB37-081E-4F5D-BA35-8D636BB47440}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB918E32-2A5C-4986-AB40-1686A034390A}\InprocServer32" = "$homedrive\\Windows\\System32\\termmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bba13638-b802-497a-8403-a5fe8689f814}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBA922ED-0AB7-40A7-9E69-495984866A23}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAudDecMFT\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bbb5d0e2-6f4b-4c31-8744-22d0029c4b40}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBB7D605-8639-49D0-849E-32C4A5DBB9C3}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBB9389D-CB46-4855-ADA6-4570E7342B3C}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBC035D1-E5A1-44F5-A166-E70DAED1CB02}\InProcServer32" = "$homedrive\\Windows\\System32\\(RADCUI|tsworkspace)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBC29D47-09E4-453E-9A08-B0AE77CAD120}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.Background\.SystemEventsBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBC40082-8ABB-4DDD-B1C6-4EE0A9A5DB52}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBCD9053-4392-41cf-BA00-5CB5DA2CEF71}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBD5AFE4-1417-40f7-94B3-A10719535CB4}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBD8C065-5E6C-4e88-BFD7-BE3E6D1C063B}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBEC4F81-C2BC-43a7-BD95-9738EE9B6CCA}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBEE8848-8591-468B-BB04-10E9BF479CDB}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv110p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bbeea841-0a63-4f52-a7ab-a9b3a84ed38a}\InprocServer32" = "$homedrive\\Windows\\System32\\mp3dmod\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BBFCD054-8AAC-45DE-A1EB-7B246C9028AF}\InProcServer32" = "$homedrive\\Windows\\System32\\fcon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC03C0E4-1528-4299-89B2-419644FA48AC}\InprocServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC065925-E8EF-4EF7-B8C5-006C8DB832D5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC08386A-9952-40CD-BA50-9541D64A4B4E}\InProcServer32" = "$homedrive\\Windows\\System32\\portabledeviceclassextension\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bc13e0f8-164a-47f9-ae4b-21947643a06e}\InProcServer32" = "$homedrive\\Windows\\System32\\provisioningcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC197CD3-A9C8-44ED-80FB-A8229777C3C0}\InProcServer32" = "$homedrive\\Windows\\System32\\edgemanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC271022-28CD-468A-BBB0-EF7091D8625E}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC29A660-30E3-11D0-9E69-00C04FD7C15B}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_4\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bc47fcfe-98a0-4f27-bb07-698af24f2b38}\InprocServer32" = "$homedrive\\Windows\\System32\\mfh263enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC48B32F-5910-47F5-8570-5074A8A5636A}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC5062B6-79E8-3F19-A87E-F9DAF826960C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{bc65fb43-1958-4349-971a-210290480130}\InprocServer32" = "$homedrive\\Windows\\System32\\NcdProp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BC94D813-4D7F-11d2-A8C9-00AA00A71DCA}\InprocServer32" = "$homedrive\\Windows\\system32\\iassdo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCA7305F-56F7-43A4-BF2C-BFD674E7BBE8}\InProcServer32" = "$homedrive\\Windows\\System32\\SpatializerApo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{bcb6a0cb-8d0a-4b14-9942-d9df601db5ea}\InProcServer32" = "$homedrive\\Windows\\System32\\BTAGService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_7\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCC9FF78-A268-4907-97AB-109C5C62C45B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCDA6B1B-5C8A-4D3C-9053-3DCF6A6E3F01}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCDE0395-E52F-467C-8E3D-C4579291692E}\InprocServer32" = "$homedrive\\Windows\\System32\\MMDevApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCE288DB-2EFF-4C5E-8046-7E84C71B67DE}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedPCCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bce9c4d2-0bd2-4ff7-8f94-d69225bb2c7f}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCEA735B-4DAC-4B71-9C47-1D560AFD2A9B}\InprocServer32" = "$homedrive\\Windows\\System32\\DfsShlEx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCED617B-EC03-420b-8508-977DC7A686BD}\InprocServer32" = "$homedrive\\Windows\\System32\\WSMAUTO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{BD0D38E4-74C8-4904-9B5A-269F8E9994E9}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD24FF86-6723-47B6-9C73-DA362CA6418F}\InProcServer32" = "$homedrive\\Windows\\System32\\BackgroundMediaPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bd3739e8-3cf5-45fb-9cc3-28163c2e9ffd}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD472F60-27FA-11cf-B8B4-444553540000}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD4F77B3-70B0-4464-83A5-785F205B823B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD5EB95F-1F8A-4D34-8F1E-C90BC772E64E}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bd69ecaa-ae5c-40d0-b968-7848f3778f56}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD6EDFCA-2890-482F-B233-8D7339A1CF8D}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD72668E-6BFF-4CD1-8480-D465708B336B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{BD7A2E7B-21CB-41b2-A086-B309680C6B7E}\InprocServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD7BDFFF-FCF5-439C-ABE7-01D244849BFB}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD84B380-8CA2-1069-AB1D-08000948F534}\InProcServer32" = "$homedrive\\Windows\\system32\\fontext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD84B381-8CA2-1069-AB1D-08000948F534}\InProcServer32" = "$homedrive\\Windows\\system32\\panmap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\servdeps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD96C556-65A3-11D0-983A-00C04FC29E33}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadco\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BD96C556-65A3-11D0-983A-00C04FC29E36}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadco\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDA7BEE5-85F1-3B66-B610-DDF1D5898006}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{BDCD51FB-55A0-4486-908C-5240F23698AC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDE24877-01D7-4103-9704-F0EC82FA7CE9}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDE5D4D6-E450-46D2-B925-976CA3E989B4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsynthstor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDE5D4D7-E450-46D2-B925-976CA3E989B4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsynthstor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bde9ee7c-329f-4fcf-ba7a-f8c6e9b4579d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{BDEADEF5-C265-11D0-BCED-00A0C90AB50F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDF23680-C1E5-11D2-9EF7-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDF9E8B8-6C66-4E45-BA15-E050393DD079}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDFDB94D-C788-4AD5-A113-6169B8B774F2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDFEE05A-4418-11DD-90ED-001C257CCFF1}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDFEE05B-4418-11DD-90ED-001C257CCFF1}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BDFEE05C-4418-11DD-90ED-001C257CCFF1}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BE0A9830-2B8B-11D1-A949-0060181EBBAD}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\msiprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{be318a3f-3ef0-4635-b97d-3be120dd088f}\InProcServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{be382474-a1dd-4dc9-aa9b-2a934d67bd10}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{BE43CF28-943E-4BA2-9B74-00CC57E7B1FC}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BE5C1432-6A36-47c6-9C07-9BF8ED15B9C1}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BE8E0170-72DC-11D2-952A-0060081840BC}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BE90B672-7D6F-4318-B953-B43544A80207}\InProcServer32" = "$homedrive\\Windows\\System32\\CfgSPCellular\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BE9B3133-250B-44A5-A278-C532B7B7FF76}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32" = "$homedrive\\Windows\\pyshellext\.amd64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{beb5488b-9954-402d-89df-1aedfe18ca1c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BEB579D7-29C7-43B2-8D9C-53FC410AE9F3}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncUtil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BEC09223-B018-416D-A0AC-523971B639F5}\InProcServer32" = "$homedrive\\Windows\\System32\\BioCredProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{becab11e-6629-4237-a9a4-5684579392a2}\InProcServer32" = "$homedrive\\Windows\\System32\\msvproc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BED4D415-7971-4310-AA07-6AC15EA06ACC}\InprocServer32" = "$homedrive\\Windows\\system32\\winethc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BEDAA0DF-7127-402D-9617-B26DB4AF2382}\InProcServer32" = "$homedrive\\Windows\\System32\\dialclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BEF723E2-01AD-438B-A441-D0112DF5142A}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF0AC53F-D51C-419F-92E3-2298E125F004}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{BF3408BB-E44D-43CE-9267-03E2BD9EA52D}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF426F7E-7A5E-44D6-830C-A390EA9462A3}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf50b68e-29b8-4386-ae9c-9734d5117cd5}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF583E12-3C8B-4767-B732-CC8B34D1D65F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf5c828c-66a3-35d4-9401-5ba1d7aa7752}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.Vpn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF5CB148-7C77-4d8a-A53E-D81C70CF743C}\InprocServer32" = "$homedrive\\Windows\\system32\\msdrm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf641d1c-29fd-4721-b3b8-48d92d35f7df}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{BF6E2DC4-960B-49C4-BE73-A2334AAB6D69}\InprocServer32" = "$homedrive\\Windows\\system32\\ddpchunk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF71DF7C-D121-47D9-AB50-D960D0FB223D}\InprocServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf734930-7763-494e-a6c6-5b8a6aa37d77}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF73A0FD-9772-45A8-AA69-26D6866667DD}\InProcServer32" = "$homedrive\\Windows\\System32\\WinBioExt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf75430d-51dd-483f-bc3a-4542e6c9dce4}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF77196E-24EF-4A02-BD52-A626D7AE837E}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf78a650-d489-4360-a0b7-c32471e07692}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF85540E-0DF3-47bc-AC5D-305442704708}\InProcServer32" = "$homedrive\\Windows\\System32\\powercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF87B6E0-8C27-11D0-B3F0-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF87B6E1-8C27-11D0-B3F0-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF981FDD-B743-11D1-A69A-00C04FB9988E}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFC26EED-19D0-4567-801D-0DB77E84B3EF}\InProcServer32" = "$homedrive\\Windows\\System32\\ApplicationControlCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFC7DC7B-8F11-4A40-8DB2-207302E2D61B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFC880F1-7484-11d0-8309-00AA00B6015C}\InProcServer32" = "$homedrive\\Windows\\System32\\inseng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFCD4A0C-06B6-4384-B768-0DAA792C380E}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFD468D2-D0A0-4bdc-878C-E69C2F5B435D}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFD55B0B-D784-47ED-8359-878DB8F23271}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFD6E7B9-2FDE-413E-9AC9-52FC8656908C}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFDE0400-02ED-40A6-BC30-C7AF99D2D588}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\LGJoyDriverAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFDE0402-02ED-40A6-BC30-C7AF99D2D588}\InProcServer32" = "$homedrive\\(Program Files\\Logitech\\Direct Input Force Feedback\\1_1_5\\jerry_forcefeedback_x64\.dll|Program Files\\Logitech Gaming Software\\Drivers\\LGJoyHid\\LgJoyFrc\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{BFE18E9C-6D87-4450-B37C-E02F0B373803}\InProcServer32" = "$homedrive\\Windows\\System32\\(usoapi|wuapi)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFEC0C93-0B7D-4F2C-B09C-AFFFC4BDAE78}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFFECCA7-4069-49F9-B5AB-7CCBB078ED91}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c00d8ee5-7325-49b5-b83d-e4f42ba7e073}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C016A313-9606-36D3-A823-33EBF5006189}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C01B9BA0-BEA7-41BA-B604-D0A36F469133}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C02C9230-46BD-4F89-BDFD-81A2539E2A01}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03880A5-0B5E-39AD-954A-CE0DCBD5EF7D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C03A0FA8-76AC-4e62-B42A-1F8D8186B0F6}\InProcServer32" = "$homedrive\\Windows\\System32\\prauthproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8500-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8511-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8512-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8513-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8521-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8522-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8523-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8524-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8531-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8532-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8533-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8534-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8541-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8542-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8551-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8552-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8553-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8554-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8555-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8556-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8557-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8561-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8565-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8566-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8568-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8569-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8571-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8572-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8581-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8582-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8583-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8584-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8585-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\(rasgcw|xwizards)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8586-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8588-781E-49a1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8591-781E-49A1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C03E8592-781E-49A1-8190-CE902D0B2CE7}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c047c5a9-c407-4a1e-ad7f-11d0861344b7}\InprocServer32" = "$homedrive\\Windows\\System32\\L2SecHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c04b329e-5823-4415-9c93-ba44688947b0}\InProcServer32" = "$homedrive\\Windows\\system32\\themeui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C04D65CF-B70D-11D0-B188-00AA0038C969}\InProcServer32" = "$homedrive\\Windows\\system32\\mlang\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C05D20C2-15E5-4567-95C7-1546EF9C52F3}\InprocServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.conversationalagent\.proxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0932C62-38E5-11d0-97AB-00C04FC2AD98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqloledb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c0aa878e-97a5-44df-b7ef-2e732f7b2fec}\InprocServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC\\applets\\imtccac\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0AA9D93-2EF5-47FB-960C-F90FC644B48E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WMIPJOBJ\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0AB2A0D-F2D2-46E2-9DF9-8885A424C29A}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0B19DEF-9E2A-48cd-B438-26663E22B025}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0B35746-EBF5-11D8-BBE9-505054503030}\InProcServer32" = "$homedrive\\Windows\\system32\\ndproxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0B4E2F3-BA21-4773-8DBA-335EC946EB8B}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c0b9675c-a5e1-408c-b5df-f3bba520827c}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imefiles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0BC4B4A-A406-4EFC-932F-B8546B8100CC}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c0c56f46-29b1-44e9-9939-a32ce86867e2}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_0\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c0cabfe8-6860-435b-a8a0-44b20718a737}\InprocServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0CD7D12-31FC-4BBC-B363-7322EE3E1879}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAlacDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0DCC3A6-BE26-4bad-9833-61DFACE1A8DB}\InprocServer32" = "$homedrive\\Windows\\system32\\netcenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0E13E61-0CC6-11d1-BBB6-0060978B2AE6}\InProcServer32" = "$homedrive\\Windows\\System32\\DATACLEN\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{C0E2E55A-5222-4810-BEA0-6AEF8092A000}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0EFA91A-EEB7-41C7-97FA-F0ED645EFB24}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BE9A-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\System32\\wcnapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEA3-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\System32\\wcnapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEBB-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\system32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEBC-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\system32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BED0-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BED3-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BED4-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BED7-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEDA-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEDB-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEDC-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEDD-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEDE-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE1-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE2-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE3-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE5-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE9-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEEA-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEEB-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEEC-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEED-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEEE-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C10B4771-4DA0-11D2-A2F5-00C04F86FB7D}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C10E23A2-BFF0-4113-BCE8-C91BE754E281}\InProcServer32" = "$homedrive\\Windows\\System32\\msflacdecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C120DE80-FDE4-49f5-A713-E902EF062B8A}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c1243ca0-bf96-11cd-b579-08002b30bfeb}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1282A7B-9455-48dc-BBBB-46C2EB525AF5}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c12a0aa6-acf8-4947-acf3-81bdce609353}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Background\.PS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C12EC999-9D91-425E-84AF-DC15443A6B81}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1373050-E8C9-4AE4-A0C5-1DCF07274587}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C139C040-532D-451b-80CA-44D1F0839D2A}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c153e702-afcc-4f45-9a75-a70217f72db8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c15e6bf0-6351-4588-ac4f-ef7d5ec8c16e}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C168CDC0-6292-46DF-B34D-29D7580D2CE5}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C17CABB2-D4A3-47D7-A557-339B2EFBD4F1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C185ECE5-0720-472c-B407-9BB4E8DD5E72}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C196B2BE-BA06-4049-8518-322E1E04282B}\InprocServer32" = "$homedrive\\Windows\\system32\\configmanager2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C19CBBED-8E33-4B9B-8F00-B044415E8764}\InProcServer32" = "$homedrive\\Windows\\system32\\settingsync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c19f162c-c5aa-478e-9013-52b0a9be48b6}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C19FBD0E-7663-44ea-8265-74130671A1D6}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C1A7EA66-D490-4DF5-A159-9557C5AF56D2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1ABB475-F198-39D5-BF8D-330BC7189661}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C1B22BC2-5EE5-4A3E-BA37-A188922BC827}\InProcServer32" = "$homedrive\\Windows\\system32\\cellulardatacapabilityhandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_1\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1E565E2-F2DE-4537-9612-2F30A160EB5C}\InProcServer32" = "$homedrive\\Windows\\System32\\MSPhotography\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\InProcServer32" = "$homedrive\\Windows\\system32\\msimtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1F400A0-3F08-11D3-9F0B-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C1F400A4-3F08-11D3-9F0B-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c1f85ef8-bcc2-4606-bb39-70c523715eb3}\InprocServer32" = "$homedrive\\Windows\\System32\\sdiagschd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C20447FC-EC60-475E-813F-D2B0A6DECEFE}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c206f324-bb45-4765-93ff-3bca7306ff2e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C20CE506-5DA9-4B9C-9662-D88BD30E10A1}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C20ED5C4-0A2E-4F66-9BE2-86A1C823DD68}\InProcServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C21B45B8-5D76-4575-BA27-54823098C491}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C22020C6-EEAB-455E-BEC2-A2CC8FDFF976}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C228A457-53F5-4a76-8035-DF2DA33E76C8}\InProcServer32" = "$homedrive\\Windows\\system32\\DxpTaskSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2303761-3D88-4BA0-9D05-D2C03AE8FC02}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C23FC28D-C55F-4720-8B32-91F73C2BD5D1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c2467d33-71c5-4057-977c-e847c2286882}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C2566514-DD44-4c6c-AAAD-FBD2F18D8DEE}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2745EC3-CF23-4601-92EF-D189B711F933}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C274CC5B-44A9-4093-A686-71F88079C450}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c278aba7-cc1c-4717-bdfb-db2bca78246e}\InprocServer32" = "$homedrive\\Windows\\system32\\Groupinghc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2796011-81BA-4148-8FCA-C6643245113F}\InProcServer32" = "$homedrive\\Windows\\System32\\pnidui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c27f6b1d-fe0b-45e4-9257-38799fa69bc8}\InprocServer32" = "$homedrive\\Windows\\System32\\usbceip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C28C7795-22F8-467F-BD15-183453C27491}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2B136E2-D50E-405C-8784-363C582BF43E}\InProcServer32" = "$homedrive\\Windows\\system32\\DeviceCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c2b94e6d-6ebd-44ee-aac1-eb809c984699}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c2d2c3a4-9a7e-11da-8bf7-0007e95ead8d}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2D67532-D0FA-4022-89F7-8C1DF8A0C412}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2D6D98F-09CA-4524-AF64-1049B5665C9C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2DAE44D-C850-425c-B466-D8CBC1469F5D}\InProcServer32" = "$homedrive\\Windows\\system32\\PortableDeviceStatus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2E88C2F-6F5B-4AAA-894B-55C847AD3A2D}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2EA74E0-0ED2-11CF-A9BB-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C2FBB630-2971-11d1-A18C-00C04FD75D13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C2FBB631-2971-11d1-A18C-00C04FD75D13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C2FEEEAC-CFCD-11D1-8B05-00600806D9B6}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C30ABD41-7B5A-3D10-A6EF-56862E2979B6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c3278e90-bea7-11cd-b579-08002b30bfeb}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c350f6ad-f45f-45c9-9e62-1f50bb3fc25f}\InProcServer32" = "$homedrive\\Windows\\system32\\frprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C3701884-B39B-11D1-9D68-00C04FC30DF6}\InprocServer32" = "$homedrive\\Windows\\system32\\oleprn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c39b7f77-976c-4983-b888-dbdc948d5364}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c39ee728-d419-4bd4-a3ef-eda059dbd935}\InprocServer32" = "$homedrive\\Windows\\System32\\wininet\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C3A43F75-FE02-47d8-B3EE-0B568C0C5043}\InProcServer32" = "$homedrive\\Windows\\System32\\werconcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C3BDF740-0B58-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C3C39131-B182-4801-B437-6D1E65B72F57}\InProcServer32" = "$homedrive\\Windows\\System32\\shacct\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c3d48774-5f69-4580-b51b-5020c2b4aec2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C3E5D3D2-1A03-11CF-942D-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{C3E5D3D3-1A03-11CF-942D-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{C3EA5C5C-31DF-437F-95E2-BCE4B2E83EE9}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4050BC4-29E1-4c8f-BF6E-6EBAD21E0673}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c40935a0-cc79-4f4d-98d1-adc6762e7172}\InProcServer32" = "$homedrive\\Windows\\System32\\lxss\\LxssManagerProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C40D66A0-E90C-46C6-AA3B-473E38C72BF2}\InprocServer32" = "$homedrive\\Windows\\System32\\fde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C40FBD00-88B9-11d2-84AD-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C41D0B30-A518-3093-A18F-364AF9E71EB7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C41FA05C-8A7A-3157-8166-4104BB4925BA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C41FF872-07B1-4926-819B-8C94E6B1FBB9}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C424F25A-6774-48BC-9F1E-02CCA8C1BE62}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4270827-4F39-45DF-9288-12FF6B85A921}\InProcServer32" = "$homedrive\\Windows\\System32\\EditionUpgradeHelper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C437AB2E-865B-321D-BA15-0C8EC4CA119B}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C439A42A-583F-4609-8C30-E3681E2A0E78}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4457F51-993A-4b98-A19B-EC2B4F0DA087}\InprocServer32" = "$homedrive\\Windows\\system32\\SrpUxNativeSnapIn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C45268A2-FA81-4E19-B1E3-72EDBD60AEDA}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4567821-B687-427C-A1D0-E820B7D704ED}\InProcServer32" = "$homedrive\\Windows\\System32\\WinBioDataModel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C459DF76-7545-4671-A85D-A42903991174}\InProcServer32" = "$homedrive\\Windows\\System32\\PinEnrollmentHelper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c463a0fc-794f-4fdf-9201-01938ceacafa}\InProcServer32" = "$homedrive\\Windows\\system32\\rasmbmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C47195EC-CD7A-11D1-8EA3-00C04F9900D7}\InprocServer32" = "$homedrive\\Windows\\system32\\cic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c472004d-44fb-41e9-ac0a-7b920384a850}\InProcServer32" = "$homedrive\\Windows\\system32\\fdprint\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C47A07F6-E6B4-4300-B512-6A95325D6EF8}\InProcServer32" = "$homedrive\\Windows\\System32\\usosvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C47A41B7-B729-424f-9AF9-5CB3934F2DFA}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4819C8D-9AB8-4B2F-B8AE-C77DABF553D5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmitimep\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C489A4B4-D8D1-4A74-924A-D01A6DF7DF51}\InProcServer32" = "$homedrive\\Windows\\system32\\StorSvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C498F2D9-A77C-3D4B-A1A5-12CC7B99115D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C4A29158-1A7E-425f-B25E-80FA382AAA14}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvsvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c4b741f5-5582-4c98-8f8b-2e082933c396}\InprocServer32" = "$homedrive\\Windows\\System32\\vmserial\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c4bbedb4-e9b9-4e41-8fe1-0786480a2173}\InprocServer32" = "$homedrive\\Windows\\System32\\RasDiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4BF2784-AE00-41BA-9828-9C953BD3C54A}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4C4C4F2-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4D2D8E0-D1DD-11CE-940F-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{C4D77430-755D-4E19-A6E1-AA8CA5E0E7BC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4D81942-0607-11D2-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4D81943-0607-11D2-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4EC38BD-4E9E-4b5e-935A-D1BFF237D980}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C4F088E1-63B3-4070-80F6-2BD4FB7C29F3}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c51b83e5-9edd-4250-b45a-da672ee3c70e}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C51F0A6B-2A63-4cf4-8938-24404EAEF422}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C529C7EF-A3AF-45F2-8A47-767B33AA5CC0}\InprocServer32" = "$homedrive\\Windows\\system32\\ndfapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C52FF1FD-EB6C-42CF-9140-83DEFECA7E29}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C531D9FD-9685-4028-8B68-6E1232079F1E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5388469-F816-40D2-9E6B-D6C68986996E}\InProcServer32" = "$homedrive\\Windows\\System32\\fhcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.StateRepositoryPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5599E1B-FC7B-4883-9FF4-581BBAEF8DBA}\InprocServer32" = "$homedrive\\Windows\\System32\\fdBthProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C55E0038-9B1B-45DA-BB96-C8B4A4490A72}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C561816C-14D8-4090-830C-98D994B21C7B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\micaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5621364-87CC-4731-8947-929CAE75323E}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\msdbg2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5624CEB-47EF-4637-9AE4-1354A156E5E6}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c56f065e-de49-4e42-be7c-305c45609d25}\InProcServer32" = "$homedrive\\Windows\\System32\\PrinterCleanupTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5702CCC-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5702CCD-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5702CCE-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5702CCF-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5702CD0-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5702CD6-9B79-11D3-B654-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C578375F-8441-4733-BF71-027683AF538B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c57a6066-66a3-4d91-9eb9-41532179f0a5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c585dc93-540e-4f56-b0dc-69f58f813e04}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c5872cfd-52d1-4494-aa0d-22d42bbb2e30}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C58BD103-E87F-4B78-A0FA-7A5C95970EE2}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C591F150-4106-4141-B5C1-30B2101453BD}\InProcServer32" = "$homedrive\\Windows\\System32\\mfmkvsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c5aec3ec-e812-4677-a9a7-4fee1f9aa000}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Icaros\\64-bit\\IcarosThumbnailProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5B0F5F4-726F-49B8-B63E-42CC2D069BED}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5B19592-145E-11d3-9F04-006008039E37}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c5b3bb9c-ed93-41c2-b340-e62b0d07652a}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.UserProfile\.DiagnosticsSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5B454CD-3CA1-4b3a-A1D0-2CB5CD6BD985}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5B6E376-979F-4175-92E1-1F0C2D8BAF7D}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5C5C5F0-3ABC-11D6-B25B-00C04FA0C026}\InprocServer32" = "$homedrive\\Windows\\System32\\tvratings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5C5C5F1-3ABC-11D6-B25B-00C04FA0C026}\InprocServer32" = "$homedrive\\Windows\\System32\\tvratings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5D708DB-8FB0-40E3-9855-275C1D087DE3}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5D7540A-CD51-453B-B22B-05305BA03F07}\InProcServer32" = "$homedrive\\Windows\\System32\\cxcredprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5E2E36E-0D2D-4FAC-A9F4-DDAD14633222}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\NetEventPacketCapture\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c5efd803-50f8-43cd-9ab8-aafc1394c9e0}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C5FF080D-D761-4996-B7C4-D6A93FB05A09}\InProcServer32" = "$homedrive\\Windows\\System32\\mdmpostprocessevaluator\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C605507B-9613-4756-9C07-E0D74321CB1E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C608E099-892D-4628-B6A2-97257B014E2E}\InProcServer32" = "$homedrive\\Windows\\system32\\UIRibbon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C60F637A-07F3-411D-B577-22E519F8B63B}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C624BA95-FBCB-4409-8C03-8CCEEC533EF1}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C62A69F0-16DC-11CE-9E98-00AA00574A4F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{c63382be-7933-48d0-9ac8-85fb46be2fdd}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C6365470-F667-11d1-9067-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6445657-1FB6-11e3-A6E4-18A905C16311}\InprocServer32" = "$homedrive\\Windows\\System32\\trie\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C64501F6-E6E6-451f-A150-25D0839BC510}\InprocServer32" = "$homedrive\\Windows\\System32\\speech\\engines\\tts\\MSTTSEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6465C2C-7943-452a-9A57-F61DB6B452E9}\InProcServer32" = "$homedrive\\Windows\\System32\\msTextPrediction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C647B5C0-157C-11D0-BD23-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C64B9B66-E53D-4c56-B9AE-FEDE4EE95DB1}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c662d912-e4d6-44a3-89a0-20550514951d}\InProcServer32" = "$homedrive\\Windows\\System32\\dsregtask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C666E115-BB62-4027-A113-82D643FE2D99}\InprocServer32" = "$homedrive\\Windows\\System32\\Mpeg2Data\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{C68411EA-1396-48f3-AF98-B7F657E35C20}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c6887882-a444-4b32-960d-e40d0af7851e}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C6A4CF44-5069-4CD0-BD40-4437E4BE57EC}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c6a50e1e-d34c-45e9-9b0c-1d92eb71e49c}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6B14B32-76AA-4A86-A7AC-5C79AAF58DA7}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6B400E2-20A7-4E58-A2FE-24619682CE6C}\InprocServer32" = "$homedrive\\Windows\\System32\\msac3enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6B5F214-0743-3868-B1EA-C4C23CE2AF52}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c6cc0d21-895d-49cc-98f1-d208cd71e047}\InProcServer32" = "$homedrive\\Windows\\System32\\IERtUtil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6CC49B0-CE17-11D0-8833-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\System32\\certcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6E13343-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{C6E13344-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{C6E13350-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{C6E13360-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{C6E13370-30AC-11D0-A18C-00A0C9118956}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{c6edf23e-75e7-4809-b44f-dd807dae52ae}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6FABB24-E332-46FB-BC91-FF331B2D51F0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6FCE351-A02B-466A-9235-D03134892D25}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C707F6A6-A1F3-45d7-99AA-A2B9491E84AD}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C70D0E90-6FF8-40CC-B679-6CCFF0B2E673}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C71566F2-561E-11D1-AD87-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c71c41f1-ddad-42dc-a8fc-f5bfc61df957}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C72BE2EC-8E90-452c-B29A-AB8FF1C071FC}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_4\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c73f6f30-97a0-4ad1-a08f-540d4e9bc7b9}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7468EC6-2D19-4349-A30F-68A10B329B68}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ASUS\\Aac_AIOFan\\AacAIOFanHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c7643375-1eb5-44de-a062-623547d933bc}\InprocServer32" = "$homedrive\\Windows\\System32\\srmscan\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7657C4A-9F68-40fa-A4DF-96BC08EB3551}\InProcServer32" = "$homedrive\\Windows\\system32\\PhotoMetadataHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C76B435D-86C2-30FD-9329-E2603246095C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c77a3c40-03fd-47f9-a279-356b38f36e26}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C789449C-48C9-4E5A-93F8-D6EFFA4A6AD2}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulation\\SixDofControllerManager\.ProxyStubs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C79A574C-63BE-44b9-801F-283F87F898BE}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c79d1575-b8c6-4862-a284-788836518b97}\InProcServer32" = "$homedrive\\Windows\\system32\\(display|themeui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c79f8f33-e5dc-4b89-8ea9-51dd1f5828f2}\InProcServer32" = "$homedrive\\Windows\\System32\\DaOtpCredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7A3A54B-0250-11D3-9CD1-00105A1F4801}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\smtpcons\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7B9C313-2FD4-4384-8571-7ABC08BD17E5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C7BCD216-4A04-4EF4-A9EE-21EFD6948C9B}\InProcServer32" = "$homedrive\\Windows\\System32\\usermgrproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7CA6167-2F46-4C4C-98B2-C92591368971}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7D83DDF-EAD2-4536-86F5-6E88B89213AC}\InProcServer32" = "$homedrive\\Windows\\System32\\ClipboardServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7DFFDF1-BD1F-450A-B98D-96B6D30BA4C1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\ONFILTER\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{C7E9D3B9-E62B-4A90-8CC5-A3C5F662DA7B}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7EA3783-77E7-47B7-A68D-A298CC902126}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7F2775F-FC5C-44F9-858A-CAA061604440}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7F2FB0F-ACC2-4ddf-9D8A-5E6E80D61024}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C8059EB6-D2FC-4ecf-A15F-AF427F5E4DB6}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeedsbs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c827f149-55c1-4d28-935e-57e47caed973}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c82fa008-bce8-4ebc-89f4-5b0061861c6e}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8367320-6f85-11e0-a1f0-0800200c9a66}\InprocServer32" = "$homedrive\\Windows\\System32\\BthTelemetry\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C84471EC-FD16-4832-AA65-7DD197DA6F2F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C844C79D-AED8-4DCE-AB25-4D359BED84F8}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcRefreshTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C86D6E59-E9E6-489B-A6C3-37ED73ADBF5A}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C87CCFB7-8D32-45B8-A532-FFA533F44150}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C885AA15-1764-4293-B82A-0586ADD46B35}\InprocServer32" = "$homedrive\\Windows\\System32\\FaceCredentialProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C88A4279-5ADC-4465-927F-6B19777AA5F9}\InprocServer32" = "$homedrive\\Windows\\System32\\srmshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C89AC250-E18A-4FC7-ABD5-B8897B6A78A5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{c89e334c-e65f-4156-842e-ea89cec71dea}\InprocServer32" = "$homedrive\\Windows\\system32\\fphc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C89FC33C-E60A-4C97-BEF4-ACC5762B6404}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{c8b522cb-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdasql\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8b522cc-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdasql\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8b522cd-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdasql\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C8B522CF-5CF3-11CE-ADE5-00AA0044773D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8b522d0-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8b522d1-5cf3-11ce-ade5-00aa0044773d}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8c97725-c948-4720-bf0f-e3c2273bfb7d}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C8DFF91D-B243-4797-BAE6-C461B65EDED3}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c8e6f269-b90a-4053-a3be-499afcec98c4}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C8F113AE-A2C9-47CB-8DAE-9376C64665AD}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\InProcServer32" = "$homedrive\\Windows\\System32\\ActXPrxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C907F3EA-0EB4-40BD-AAC0-D3D8C32B1840}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c9298eef-69dd-4cdd-b153-bdbc38486781}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C93CF9D5-031B-4AAA-AB0B-EF802347B381}\InProcServer32" = "$homedrive\\Windows\\System32\\MBMediaManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C96401CC-0E17-11D3-885B-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C96401CF-0E17-11D3-885B-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C96401D1-0E17-11D3-885B-00C04F72C717}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C96C4A08-12E9-4f87-8E6C-3DCF98518E11}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C973DA94-CBDF-4E77-81D1-E5B794FBD146}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C97AC1B3-8698-4BF6-8DBB-60F6064FA320}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.FaceAnalysis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C985DF59-A91B-446B-93C3-FB2705D529BC}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C98F3822-3658-4D75-8A25-6621665ECD56}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c99217e2-951d-40b6-b4e4-6af203dadf89}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C992C58D-313B-469c-8202-456FF574FF4E}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C9A14CDA-C339-460B-9078-D4DEBCFABE91}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C9E37C15-DF92-4727-85D6-72E5EEB6995A}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c9ea5d14-cef7-4e37-851a-8043f0fb74e9}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C9F0A842-3CE1-338F-A1D4-6D7BB397BDAA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{C9F5FE02-F851-4EB5-99EE-AD602AF1E619}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C9F61CBD-287F-3D24-9FEB-2C3F347CF570}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CA0AC604-8EF2-448A-AE97-62A2C2CC3C46}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA0F511A-FAF2-4942-B9A8-17D5E46514E8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CA116708-1727-4E71-93F5-CA43081DC62A}\InProcServer32" = "$homedrive\\Windows\\system32\\PlayToStatusProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca1575f8-bf1e-4c2f-a1f9-b3aa45c92794}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\applets\\imjpskey\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA236752-2E77-4386-B63B-0E34774A413D}\InProcServer32" = "$homedrive\\Windows\\System32\\werconcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca24c16a-24e8-4d7c-80e8-c546d9fb2abe}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA2AF3B4-C15E-412b-B453-557746675FB7}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WmiPerfInst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca34fe0a-5722-43ad-af23-05f7650257dd}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfcore|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA35CB3D-0357-11D3-8729-00C04F79ED0D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CA38D8DA-C75D-11D1-8F99-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA38D8DB-C75D-11D1-8F99-00600895E7D5}\InprocServer32" = "$homedrive\\Windows\\system32\\msdtctm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA3FDCA2-BFBE-4eed-90D7-0CAEF0A1BDA1}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca47b0ae-6f7b-4aeb-8d57-24b3f2aa3d44}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CA5171D0-95CB-3DA8-A095-A70B39FD6EE0}\InprocServer32" = "mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca52a260-24fa-457a-8a17-119f4f505874}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA554A15-4410-45C9-B5C1-20DE052D9CD3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\\\coloader80\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca767aa8-9157-4604-b64b-40747123d5f2}\InprocServer32" = "$homedrive\\Windows\\System32\\regidle\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA805B13-468C-3A22-BF9A-818E97EFA6B7}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CA80BE9F-02DB-4B14-9B52-A72D27B5FBF5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ca8c87c1-929d-45ba-94db-ef8e6cb346ad}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA8EB365-E97F-4cfa-965C-B3E8986ABD8F}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CAA1B979-07A6-439C-A38C-2BE2B99C3B4A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CAA817CC-0C04-4D22-A05C-2B7E162F4E8F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CAAFDD83-CEFC-4E3D-BA03-175F17A24F91}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_7\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CAC59BFB-5547-456C-80D8-F6428C8F5456}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cac5c8a7-b4fe-4bf7-a3fc-ccd1dcf04d65}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Data\.Activities\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CACA7238-3C7E-4a25-AD73-DE1A4F8C7214}\InProcServer32" = "$homedrive\\Windows\\System32\\werconcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CACEB1A2-F424-489B-8ED5-3614926A8512}\InProcServer32" = "$homedrive\\Windows\\System32\\ACPBackgroundManagerPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CAEC7D4F-0B02-3579-943F-821738EE78CC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{cb0255a6-3cfd-4f5c-b027-326b0c136d81}\InProcServer32" = "$homedrive\\Windows\\System32\\HoloShellRuntime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cb0eed72-a1ee-4df3-94c8-b1022bf900b4}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB0FC8E5-686A-478B-A252-FDECF8E167B7}\InprocServer32" = "$homedrive\\Windows\\System32\\wiascanprofiles\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB17E772-E1CC-4633-8450-5617AF577905}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmjpegdec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB18B8D1-12E4-4AFD-886E-94AEFE1C70D5}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB1DFE3A-EDFF-4d1f-867D-8ADB02926F4B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{cb25220c-76c7-4fee-842b-f3383cd022bc}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB2F6723-AB3A-11d2-9C40-00C04FA30A3E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CB35832D-0C2C-41A9-84E1-A7CD1E0C6254}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB39A782-E5E4-11D1-8CC0-00C04FC3261D}\InprocServer32" = "$homedrive\\Windows\\system32\\catsrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB46E850-FC2F-11D2-B126-00805FC73204}\InProcServer32" = "$homedrive\\Windows\\system32\\stclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB6E2B90-25FA-4F08-B46C-696F5A2B6CA5}\InprocServer32" = "$homedrive\\Windows\\System32\\sppwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cb82ea12-9f71-446d-89e1-8d0924e1256e}\InProcServer32" = "$homedrive\\Windows\\system32\\((credprovs|authui)legacy|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB8555CC-9128-11D1-AD9B-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cba9e78b-49a3-49ea-93d4-6bcba8c4de07}\InprocServer32" = "$homedrive\\Windows\\System32\\mp43decd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CBD51D89-C22E-4388-A553-FFE638C76E36}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CBD600D7-2256-4ADB-8E3A-185F56EA9353}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvGameS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CBE0FED3-4B91-4E90-8354-8A8C84EC6872}\InProcServer32" = "$homedrive\\Windows\\System32\\thumbcache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CBEAA915-4D2C-3F77-98E8-A258B0FD3CEF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CC0648AE-7E85-483C-B1DB-9335C9D6F8C7}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC1101F2-79DC-11D2-8CE6-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC19079B-8272-4D73-BB70-CDB533527B61}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC20C6DF-A054-3F09-A5F5-A3B5A25F4CE6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CC23F537-18D4-4ECE-93BD-207A84726979}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC2EB4A6-2558-43E2-860A-552196F58157}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC3FA696-93B8-4745-B935-0599ACB97747}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC48A47F-EFD6-4925-A515-28C40C5A78B6}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC55EE92-FE67-43C9-95E7-E646918A4A04}\InProcServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC58989A-EB4A-41B6-9654-163C73CF6B11}\InProcServer32" = "$homedrive\\Windows\\System32\\MSAProfileNotificationHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC58E280-8AA1-11D1-B3F1-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC58E281-8AA1-11D1-B3F1-00AA003761C5}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cc5bbec3-db4a-4bed-828d-08d78ee3e1ed}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC6EEFFB-43F6-46c5-9619-51D571967F7D}\InProcServer32" = "$homedrive\\Windows\\System32\\shwebsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC6F1005-CAE0-4892-B602-65A5FD7EC2D6}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC776E57-E6C5-43D5-AE94-534923129147}\InprocServer32" = "$homedrive\\Windows\\System32\\RuleBasedDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC77F5F3-222D-3586-88C3-410477A3B65D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CC785860-B2CA-11CE-8D2B-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC7BFB42-F175-11d1-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC7BFB43-F175-11d1-A392-00E0291F3959}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC829A2F-3365-463F-AF13-81DBB6F3A555}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CC89BA65-661C-494a-85C0-5D697DFEB30C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CC9072AB-C000-49D8-A5AA-00266C8DBB9B}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCAA63AC-1057-4778-AE92-1206AB9ACEE6}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCAE9D9B-E430-4454-8949-666D9F739994}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCAEAA6D-3A50-488F-A664-5FACF424BC46}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ccb1d8cb-d39f-41c9-b793-0196214bdc4e}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imecfm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCB38336-0B46-4153-BF74-6EA9A8C07EDF}\InProcServer32" = "$homedrive\\Windows\\System32\\prauthproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCB4EC60-B9DC-11D1-AC80-00A0C9034873}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCBA37FC-982B-433B-8AC2-455E616A8559}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCBB2B20-2C99-4B08-AB27-64A29AF5F467}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenv141p\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCC8D08D-DD79-4550-8F3E-C57D4F8A5F40}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostUser\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCDEDADE-AE23-47f3-A588-B09A05CA1A00}\InProcServer32" = "$homedrive\\Windows\\System32\\diagcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCEC11F2-00C4-4266-9932-B9E49442711E}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CCF306AE-33BD-3003-9CCE-DAF5BEFEF611}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CCF75159-F7DA-4763-B10C-7A13F92DF226}\InprocServer32" = "$homedrive\\Windows\\system32\\SmartCardBackgroundPolicy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000001-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000002-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000004-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000005-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000006-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000007-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000008-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000009-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000010-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000011-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD000012-8B95-11D1-82DB-00C04FB1625D}\InprocServer32" = "$homedrive\\Windows\\System32\\cdosys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD061333-3AEF-4887-9871-A33E34BF265A}\InprocServer32" = "$homedrive\\Windows\\System32\\MtfDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cd0d66ec-8057-43f5-acbd-66dfb36fd78c}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine2_7\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD12A3CE-9C42-11D2-BEED-0060082F2054}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD184336-9128-11D1-AD9B-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD1ABFC8-6C5E-4A8D-B90B-2A3B153B886D}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cd3aa379-93f4-421b-9802-aeab68b06771}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA70-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA71-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA72-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA73-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA74-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA76-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA77-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA78-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA7A-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA7B-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA7C-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA7D-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA7E-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA7F-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA83-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA84-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA88-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA89-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA8F-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA90-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA92-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA93-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA94-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA95-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA96-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA97-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA98-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA99-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA9A-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA9B-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA9C-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD3AFA9D-B84F-48F0-9393-7EDC34128127}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cd4b7782-eb37-4bfe-b9ce-685f634a08dc}\InprocServer32" = "$homedrive\\Windows\\System32\\sdengin2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD607C8B-17CA-4D2E-BA26-B748553BB0B2}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD6C7868-5864-11D0-ABF0-0020AF6B0B7A}\InprocServer32" = "$homedrive\\Windows\\system32\\dmocx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD70A734-B6DB-4588-9813-FF2E37A4661F}\InprocServer32" = "$homedrive\\Windows\\system32\\wkspbrokerAx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cd711afe-4ab9-44fd-a059-9ecb64a9bac5}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnServiceDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD764A50-D1BD-453E-BE7E-8230F6C1F4BB}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD7791B9-43FD-42C5-AE42-8DD2811F0419}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{CD9AD0DD-A811-460E-B5D1-18CF5F5CC67C}\InProcServer32" = "$homedrive\\Windows\\System32\\UPPrinterInstallsCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDA42200-BD88-11D0-BD4E-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDA8ACB0-8CF5-4F6C-9BA2-5931D40C8CAE}\InprocServer32" = "$homedrive\\Windows\\System32\\fxscomex\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDAEB70C-E686-4299-93EB-7D63D77B7F63}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDBD8D00-C193-11D0-BD4E-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDBEC9C0-7A68-11D1-88F9-0080C7D771BF}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDC70043-D56B-3799-B7BD-6113BBCA160A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CDC7B0EB-EE28-4914-9128-64689D3F34F0}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDC82860-468D-4d4e-B7E7-C298FF23AB2C}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cde7427e-9d90-4788-8415-765c156c9bc2}\InProcServer32" = "$homedrive\\Windows\\System32\\AuthBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDF5DD86-4F10-4386-92AF-DF0F30719FDF}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CDFA7117-B2A4-3A3F-B393-BC19D44F9749}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CE23534B-56D8-4978-86A2-7EE570640468}\InProcServer32" = "$homedrive\\Windows\\System32\\XblAuthManagerProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CE264EED-3CD3-4BC5-9774-D3A18BE9B0F2}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CE2BB7DC-73F3-482F-90B6-5BFAA04D0157}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ce2f5d02-a575-4f4c-ad73-34baf96f8512}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imeapis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CE39D6F3-DAB7-41b3-9F7D-BD1CC4E92399}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CE47E952-2ADE-45b9-8F64-F829BB4BAA34}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CE510457-55EC-4f86-91BE-323BC91AC34F}\InProcServer32" = "$homedrive\\Windows\\system32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cee8ccc9-4f6b-4469-a235-5a22869eef03}\InprocServer32" = "$homedrive\\Windows\\System32\\PNPXAssoc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ceec07ce-cde4-4b1b-ba82-e36910d1c465}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CEEE3B62-8F56-4056-869B-EF16917E3EFC}\InprocServer32" = "$homedrive\\Windows\\System32\\imapi2fs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ceefea1b-3e29-4ef1-b34c-fec79c4f70af}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{cf07b455-3dd0-46c4-98ae-5d058dfafb99}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF0F2F7C-F7BF-11d0-900D-00C04FD9189D}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF142CA5-83C5-4E06-8FEA-310AA519A945}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\.*\\DropboxOfficeAddin64\.14\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF2CF428-325B-48d3-8CA8-7633E36E5A32}\InprocServer32" = "$homedrive\\Windows\\system32\\msdrm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF3D2E50-53F2-11D2-960C-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cf4270f5-2e43-4468-83b3-a8c45bb33ea1}\InProcServer32" = "$homedrive\\Windows\\System32\\pstask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiutils\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cf572d73-d6e5-4d45-acad-f18f4f76656f}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cf5eeedf-0e92-4b3b-a161-bd0ffe545e4b}\InProcServer32" = "$homedrive\\Windows\\System32\\mfaudiocnv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF67796C-F57F-45f8-92FB-AD698826C602}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\wab32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF6784F7-D677-49FD-9368-CB47AEE9D1AD}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CF8F7FCF-94FE-3516-90E9-C103156DD2D5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{CF948561-EDE8-11CE-941E-008029004347}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{CFA8E0EF-DFC7-49EA-9C1C-827FF9B1168F}\InProcServer32" = "$homedrive\\Windows\\System32\\lockappbroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cfb16474-0a2e-48dc-88ce-8c0adb7e5e46}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFBF07CB-F962-4D92-9CA0-6A84148B1AAE}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFC399AF-D876-11D0-9C10-00C04FC99C8E}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFC44584-E947-47fe-B9C4-99168114C866}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFC81939-3886-4ACF-9692-DA58037AE716}\InprocServer32" = "$homedrive\\Windows\\System32\\mfnetsrc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFCCC7A0-A282-11D1-9082-006008059382}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{cfd82661-9b9e-4c87-9dcb-e0fd11681b44}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFE8B367-77A7-41D7-9C90-75D16D7DC6B6}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFE8FB61-46C8-4152-A609-CF9FD673DC1B}\InProcServer32" = "$homedrive\\Windows\\System32\\provplatformdesktop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFF49D53-EE51-49F2-A807-7E3DF4EA36E3}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CFF9990B-6414-43F1-A526-14EA5EEAFBDA}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D00A9E84-6BB6-4379-99EB-2B947FF8BC6B}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicRuntimes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D01B8F28-0BD1-4652-A415-8229F5EE506C}\InProcServer32" = "$homedrive\\Windows\\System32\\wercplsupport\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D02AAC50-027E-11D3-9D8E-00C04F72D980}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D02B1F72-3407-48ae-BA88-E8213C6761F1}\InProcServer32" = "$homedrive\\Windows\\System32\\AdmTmpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D02B1F73-3407-48ae-BA88-E8213C6761F1}\InProcServer32" = "$homedrive\\Windows\\System32\\AdmTmpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D034B02A-093B-46B7-8C75-61B9104C71E9}\InProcServer32" = "$homedrive\\Windows\\System32\\LockScreenContentHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d035e24c-c877-42d7-a795-2a8a339b472f}\InProcServer32" = "$homedrive\\Windows\\System32\\mfaudiocnv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D049B20C-5DD0-44FE-B0B3-8F92C8E6D080}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D049DC2B-82C3-3350-A1CC-BF69FEE3825E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D04D550D-1EA8-4E37-830E-700FEA447688}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D0520B5D-1B5F-4ECF-A940-6E57476AE4B0}\InprocServer32" = "$homedrive\\Windows\\System32\\iscsiwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}\InprocServer32" = "$homedrive\\Windows\\system32\\es\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D06342BD-9057-4673-B43A-0E9BBBE99F11}\InprocServer32" = "$homedrive\\Windows\\system32\\pmcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d064d602-c470-4162-8ae6-880edc553b89}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Enumeration.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d06df0d0-8518-441e-822f-5451d5c595b8}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_5\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D0A6D872-3655-4E58-832B-3C7095672B40}\InProcServer32" = "$homedrive\\Windows\\System32\\rdprelaytransport\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D0B22D03-D05D-4C6D-8AB7-9392E84A87B9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{d0b7e02c-e1a3-11dc-81ff-001185ae5e76}\InProcServer32" = "$homedrive\\Windows\\System32\\diagcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d0da2915-3f89-4519-a4ca-5e02528c8ec4}\InProcServer32" = "$homedrive\\Windows\\system32\\playlistfolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D105A4D4-344C-48EB-9866-EE378D90658B}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1202225-F099-47FE-A965-8A78ABD6DE7D}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D13B741D-051F-322F-93AA-1367A3C8AAFB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D1456EF1-172B-49C0-8CB7-FAC3C01AB446}\InProcServer32" = "$homedrive\\Windows\\System32\\easwrt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1545328-2417-4E4A-801A-A7CED274AAE5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Patriot\\Aac_Patriot Viper M2 SSD RGB\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1621129-45C4-41AD-A1D1-AF7EAFABEEDC}\InProcServer32" = "$homedrive\\Windows\\System32\\wiadefui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1681A3F-DA52-4B58-901A-407C3158B1E2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Usb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D16B87DE-029E-4C85-92C8-ED8BBC5E882C}\InprocServer32" = "$homedrive\\Windows\\system32\\mssrch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D183B45C-8099-4cd3-BE91-2441E5906738}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1915118-9D27-4C69-B82E-7955DAF57201}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d1934e71-740b-47cf-b051-6551e5b80fd5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D194386A-04E3-4814-8100-B2B0AE6D78C7}\InProcServer32" = "$homedrive\\Windows\\System32\\RTMediaFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d1a42999-0adf-11da-b070-0011856571de}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1C5A1E7-CC47-4E32-BDD2-4B3C5FC50AF5}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1E460DC-A564-4B5F-8B7D-CA3C1AC0C27C}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1E7EE36-6AA6-4dc2-90BB-16A722623B7D}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1ED435B-0A34-4591-BFFD-7CB276E78BE5}\InProcServer32" = "$homedrive\\Windows\\System32\\BitLockerCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1F447C5-D55A-4149-A364-52EB93D7B2F9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Scanners\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D1FE6762-FC48-11D0-883A-3C8B00C10000}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtrans\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2020DEA-EB40-45D5-B420-B9FB623C4FD1}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\DiagnosticsHub\.Collection\.Service\\amd64\\DiagnosticsHub\.StandardCollector\.Host\.Proxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2035EDF-75CB-4EF1-95A7-410D9EE17170}\InProcServer32" = "$homedrive\\Windows\\System32\\dlnashext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D20EA4E1-3957-11d2-A40B-0C5020524153}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D215781D-019E-4FA0-903D-0CDCDE13A4F5}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\mofd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d23b90d0-144f-46bd-841d-59e4eb19dc59}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvencod\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D23D2F41-1D69-3E03-A275-32AE381223AC}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{d23e6477-b104-4707-81cb-e1ca19a07016}\InProcServer32" = "$homedrive\\Windows\\System32\\mf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2423620-51A0-11D2-9CAF-0060B0EC3D39}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D245983C-67FC-4923-AA19-3F048C495E8B}\InprocServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2517915-48CE-4286-970F-921E881B8C5C}\InprocServer32" = "($homedrive\\Windows\\System32\\WindowsLiveLogin\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D2548BF2-801A-36AF-8800-1F11FBF54361}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D25D8842-8884-4A4A-B321-091314379BDD}\InProcServer32" = "$homedrive\\Windows\\System32\\UIAnimation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D25E0260-AAB7-48CB-A192-4D73D2FD375F}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D26165CD-5994-4614-976D-CB45750C5F80}\InprocServer32" = "$homedrive\\Windows\\System32\\BingFilterDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D269BF5C-D9C1-11D3-B38F-00105A1F473A}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemdisp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D26AA4A5-92AD-48DB-8D59-95EF0DCE6939}\InprocServer32" = "$homedrive\\Windows\\System32\\setup\\rasmigplugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d26c7a0a-83a0-48d3-9174-529db999b4a4}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D26DE5C1-C061-43F7-9C40-7517526CF1C1}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D274437F-CB24-4D9D-9DFC-E17AC3902A47}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D277DF13-EB33-47e1-A3B9-0AC04B1F24F4}\InProcServer32" = "$homedrive\\Windows\\System32\\InternetMail\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d284acc0-ceed-46cc-9484-38709e695510}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpranker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2942F8E-478E-41D3-870A-35A16238F4EE}\InprocServer32" = "$homedrive\\Windows\\System32\\console\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D29AD1A2-EF35-45D5-991E-721D5E518C30}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2A6EDAE-B3CB-493E-975D-414A358748BC}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulation\\VirtualDisplayManager\.ProxyStubs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2AC2892-B39B-11D1-8704-00600893B1BD}\InProcServer32" = "$homedrive\\Windows\\System32\\dmloader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2C13906-51EF-454e-BC67-A52475FF074C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2C3681E-FCB2-4D0C-8E1C-E806345B3164}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d2cdd0e2-bf87-41b1-a9ee-ab94c072ddf7}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2D28389-85EE-4F9C-B45F-58BD9E664976}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2D79DF5-3400-11d0-B40B-00AA005FF586}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2D79DF7-3400-11d0-B40B-00AA005FF586}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2D94E72-DCDD-420A-B779-197EF796CC85}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2D95CF1-195D-45C8-BB2F-22BC0131A3AE}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2E0FE7F-D23E-48E1-93C0-6FA8CC346474}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2E7041B-2927-42fb-8E9F-7CE93B6DC937}\InProcServer32" = "$homedrive\\Windows\\System32\\colorui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d2e86c4f-ea06-4a89-bf00-b49706db46e6}\InprocServer32" = "$homedrive\\Windows\\System32\\DDORes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d2ea46a7-c2bf-426b-af24-e19c44456399}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2EAA715-DAC7-4771-AF5C-931611A1853C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D2EC4F1C-F91E-4F58-9329-016E444FD199}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2ED260C-38F1-4ABE-8B2B-D4A088C54416}\InProcServer32" = "$homedrive\\Windows\\System32\\wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D2FA69BC-FC2D-45E6-BA83-60B70D9F003C}\InProcServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3075F87-A7BD-4231-9F6A-60C5E07374A7}\InprocServer32" = "$homedrive\\Windows\\system32\\acppage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D31B6A3F-9350-40DE-A3FC-A7EDEB9B7C63}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\cimwin32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D32CD718-970D-4496-B7A7-337BE8890145}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}\InProcServer32" = "$homedrive\\Windows\\system32\\xactengine3_2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3341472-B542-4985-AACD-BE1403B96E6D}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d34a6ca6-62c2-4c34-8a7c-14709c1ad938}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D34BD150-6D84-443E-83EE-04C7682377E4}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D34BD155-6D84-443E-83EE-04C7682377E4}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanconn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3588AB0-0781-11CE-B03A-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D36D2090-4DF3-4bd4-A22F-0D91975F7964}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D37DAC4A-CEDC-453D-8659-6AD9451C9AA8}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ENE\\Aac_ENE_AIC_Marvell_HAL\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D385E909-3F89-4ECD-B38F-AC11F9FE6F1C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D385FDAD-D394-4812-9CEC-C6575C0B2B38}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3A1BCE4-8217-423D-8934-3823F395B5C2}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Logitech Gaming Software\\Drivers\\USBAudio\\LGRenderPropPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d3c0b79d-0fd2-4b5d-9bf6-5e41d6f15c08}\InprocServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3C4B7DB-E7BB-4778-89A2-E4B0EE41C29F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d3ca534d-3342-42b2-900b-1aceaff85e8a}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3DCB472-7261-43ce-924B-0704BD730D5F}\InprocServer32" = "$homedrive\\Windows\\System32\\fdwsd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D406E841-B82A-4790-99A8-975768E37157}\InProcServer32" = "$homedrive\\Windows\\System32\\wups2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d41748f8-737c-4edb-bb21-18d8b37c511e}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D41969A6-C394-34B9-BD24-DD408F39F261}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D41A1872-3740-41CE-A1EE-4522AB82F991}\InprocServer32" = "$homedrive\\Windows\\System32\\vmbusvdev\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D422512D-2BF2-4752-809D-7B82B5FCB1B4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsynthstor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d43f6fd5-904a-407f-97bc-5f8be75f532d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D44377B8-1F2F-4FAA-9C8E-6C4AD2928E47}\InProcServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d450a8a1-9568-45c7-9c0e-b4f9fb4537bd}\InProcServer32" = "$homedrive\\Windows\\System32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{D451359E-D6F4-45BB-8A05-271E8A98C740}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4514024-95CA-45A5-B7B4-A38768D31513}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D46443F6-133B-4938-9C52-23B9EDD62CC3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D465D87D-6339-4FF4-93D9-7353E388D889}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4692569-5A04-351D-8BA7-5F43AB458DF6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D474EBC0-2851-4389-893D-030D2B6BCED1}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4872B74-3AFC-47CD-B8A2-9E4F998539BC}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D48DAF56-ADD3-4FDF-BC8C-C1F239115BBA}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4950C79-806D-4ECE-9DB1-11B34D33F514}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4C4F382-D9B2-41C9-8817-0DA701BB213B}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4CA0E2D-6DA7-4b75-A97C-5F306F0EAEDC}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4DCD3D7-B4C2-47D9-A6BF-B89BA396A4A3}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4EFF9CD-16DE-446e-83C5-9537543CF4A1}\InProcServer32" = "$homedrive\\Windows\\System32\\sud\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d4f01ada-979c-491e-bac3-cd3c0e7bcf82}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4F4D30B-0B29-4508-8922-0C5797D42765}\InprocServer32" = "$homedrive\\Windows\\System32\\sti\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D4FEC120-CF8D-44B6-9703-5836B0C41513}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnInputRouter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5029E5D-F109-4BC0-B6DB-07F92D6ABAE7}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d509c21a-b88c-4ad1-8fad-d6a7572728e5}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5120AA3-46BA-44C5-822D-CA8092C1FC72}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D51BD5A1-7548-11CF-A520-0080C77EF58A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D51BD5A2-7548-11CF-A520-0080C77EF58A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D51BD5A3-7548-11CF-A520-0080C77EF58A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D51BD5A5-7548-11CF-A520-0080C77EF58A}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d53cd902-7edc-430f-a1e0-c38c01b6fe8b}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D54EEE56-AAAB-11D0-9E1D-00A0C922E6EC}\InprocServer32" = "$homedrive\\Windows\\System32\\itss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D555645E-D4F8-4c29-A827-D93C859C4F2A}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D565943C-F4E8-4053-8319-064E8A7A4F26}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5753BBB-C5A8-4F50-9D81-210BAB0C5FB6}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg2splt\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{d58960ba-2ef3-4910-9e34-c911b1710180}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D593A7D5-658F-4FE1-9D05-0B13E10D1A12}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5978620-5B9F-11D1-8DD2-00AA004ABD5E}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D5978630-5B9F-11D1-8DD2-00AA004ABD5E}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D5978640-5B9F-11D1-8DD2-00AA004ABD5E}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D5978650-5B9F-11D1-8DD2-00AA004ABD5E}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{d5a04d91-6fe6-4fe4-a98a-feb4500c5af7}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5AB5662-131D-453D-88C8-9BBA87502ADE}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D5B0F757-A97F-4311-B864-78D6094217C6}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5B97D79-6DC3-403d-B178-59C0930C5DAC}\InprocServer32" = "$homedrive\\Windows\\System32\\ConsentUX\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5BD69C0-5126-4721-8668-F0783F3640FB}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5C07EDB-E628-47B4-8463-E761D7DE7FA8}\InProcServer32" = "$homedrive\\Windows\\System32\\PersonalizationCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5C66BE1-C209-11d1-8DEC-00C04FC2E0C7}\InprocServer32" = "$homedrive\\Windows\\system32\\clbcatq\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d5c88c8b-eca2-4921-a2e4-b1a390bad510}\InProcServer32" = "$homedrive\\Windows\\System32\\SecurityCenterBrokerPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5CB383D-99F4-3C7E-A9C3-85B53661448F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D5EC4D34-77DA-4F7A-B8C4-8A910C1C1CFE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\ACEDAO\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D5ED6B03-EDA3-4cbc-9FF1-60182438C8F6}\InprocServer32" = "$homedrive\\Windows\\System32\\WSDPrintProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5F7E36B-5B38-445D-A50F-439B8FCBB87A}\InProcServer32" = "$homedrive\\Windows\\system32\\wscapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D63A1416-FCEC-4431-862F-E8056223DD03}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\cimwin32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D63AA156-D534-4BAC-9BF1-55359CF5EC30}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d63c23c5-53e6-48d5-adda-a385b6bb9c7b}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D648FEA1-EA00-4FF4-B8BD-034BD2B25A23}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.appcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D65B9994-6416-41ED-84EE-08733558C381}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D65D42B4-E225-4A93-B7A4-72F2786B4FCD}\InProcServer32" = "$homedrive\\Windows\\System32\\rdsxvmaudio\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D66949A0-C766-48D7-B2C6-4A85382BE9C1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\srloc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D669B7BA-845E-4e1c-932F-75E895173E5F}\InprocServer32" = "$homedrive\\WINDOWS\\System32\\WSDScDrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d66c2605-9d5d-475e-a5b8-3790743ee2ff}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D66D6F99-CDAA-11D0-B822-00C04FC9B31F}\InProcServer32" = "$homedrive\\Windows\\system32\\mlang\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D66DC78C-4F61-447F-942B-3FB6980118CF}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\VISSHE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D6707039-94AB-490A-95D6-C268524D8B8F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}\InProcServer32" = "$homedrive\\Windows\\system32\\wpdshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D682C4BA-A90A-42FE-B9E1-03109849C423}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6886603-9D2F-4EB2-B667-1971041FA96B}\InProcServer32" = "$homedrive\\Windows\\System32\\ngccredprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D697132B-FCA4-4401-8869-D3B39D0750DB}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\MPCVR\\MpcVideoRenderer64\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{d69df9c0-ded9-4290-958f-93e82ea6a146}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d69e0717-dd4b-4b25-997a-da813833b8ac}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6ABE021-1DE0-49F4-895D-E9694D28F0A4}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6AC71F0-D4A7-41DD-88C4-B9985855D546}\InProcServer32" = "$homedrive\\Windows\\System32\\AppointmentActivation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6AD10F3-70AB-41E1-96B3-4C36E35D333C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6D2034D-5F67-30D7-9CC5-452F2C46694F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D6EBC66B-8921-4193-AFDD-A1789FB7FF57}\InProcServer32" = "$homedrive\\Windows\\system32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6F8EC75-A388-47de-BA3A-903B12A38E86}\InProcServer32" = "$homedrive\\Windows\\system32\\mssvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6FCA954-F7AE-4EAC-8783-85F5E4ABD840}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\pdmproxy100\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6FEDB1D-CF21-4BD9-AF3B-C5468E9C6684}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D7053240-CE69-11CD-A777-00DD01143C57}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D707877E-4D9C-11d2-8784-F6E920524153}\InProcServer32" = "$homedrive\\Windows\\system32\\netplwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D73733C8-CC80-11D0-B225-00C04FB6C2F5}\InprocServer32" = "$homedrive\\Windows\\System32\\fxscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d74a07b1-ea36-4f32-a85a-9777a4ae12aa}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\IMEKR.*\\imkrapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D74D613D-F27F-311B-A9A3-27EBC63A1A5D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D74DFA88-D5E3-41F6-B677-66FFB6591B00}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D751DCF1-EEAC-42b1-9593-E4B77CCB42ED}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D76334CA-D89E-4BAF-86AB-DDB59372AFC2}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D76E2820-1563-11CF-AC98-00AA004C0FA9}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D76E9DED-E5D8-4802-8B28-4A09BDB90C3F}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D772327B-027D-48BE-AD01-9FD96388255F}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D78C3A7D-9018-41b6-9CE3-2BFDD45D45A1}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D7B197F9-D109-4e8e-97B0-FC3886431A66}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D7B70EE0-4340-11CF-B063-0020AFC2CD35}\InprocServer32" = "($homedrive\\Windows\\system32\\ddraw\.dll|ddraw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{d7bfd8f3-678c-4827-b84b-0e5fc6d15be3}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D7C1AEB5-10F2-48cb-A182-F7EF79C51B19}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D7C3453E-1F1C-48CD-AFE6-CFF2A937D337}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\RacWmiProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d7ca55ab-5022-4db3-a599-abafa358e6f3}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D7F1C02D-48AC-40ED-8996-AF704232C9F6}\InprocServer32" = "$homedrive\\Windows\\System32\\ContactHarvesterDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D7F9888F-E3FC-49b0-9EA6-A85B5F392A4F}\InprocServer32" = "($homedrive\\Windows\\System32\\wlidprov\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\WLIDPROV\.DLL)"
	"HKEY_CLASSES_ROOT\CLSID\{D7FCB63B-5C55-11D1-8F00-00C04FC2C17B}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8013EEF-730B-45E2-BA24-874B7242C425}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D8013EF1-730B-45E2-BA24-874B7242C425}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D8013FF1-730B-45E2-BA24-874B7242C425}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D805F2C8-ABA9-41E8-AA22-9F7392A27E72}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D82BE2B0-5764-11D0-A96E-00C04FD705A2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{d83a980e-88ae-45f3-90e2-8e665d567f84}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d83e8cbe-841d-4397-b6e4-f64f2e3ab469}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8435933-B158-4755-B669-5E00CEEEE34D}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D84C3A54-4501-436D-B4F9-750E5F727802}\InprocServer32" = "$homedrive\\ProgramData\\Microsoft\\VisualStudio\\SetupWMI\\x64\\Microsoft\.VisualStudio\.Setup\.Management\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d84fa0c2-b0b3-4470-9345-75db0ec5a83a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D8636558-AAF6-49c1-8171-FFA6668B65A7}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8872739-DF50-4ED5-B8A7-F03DCD0DCD5A}\InProcServer32" = "$homedrive\\Windows\\System32\\rasdlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d88dc591-4172-4a00-a6b1-7b657d2a6643}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d8a04f01-4570-45cc-bffa-37c79cf7208c}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8A4F3EB-E7EC-3620-831A-B052A67C9944}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D8A8B20F-98D2-4EFF-8CE1-EF094F1A8043}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8AC8159-ABAA-4016-BF74-DE98C5917269}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\IHDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8BD090D-3F39-45FD-B29A-7FC62C2E59C3}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{D8BF32A2-05A5-44c3-B3AA-5E80AC7D2576}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8C2122B-6CE0-433C-99A1-65F03037979D}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulation\.ProxyStubs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8C45162-25C5-4B77-A3D0-17676B63B413}\InProcServer32" = "$homedrive\\Windows\\System32\\edpcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8D133CD-3F26-402F-86DA-90B710751C2C}\InprocServer32" = "$homedrive\\Windows\\System32\\D3DSCache\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8E090A5-4149-467D-8103-BFB8F51E8BCB}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8E7D23D-D9F4-4384-BDBD-10EA37AF5D66}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VS7Debug\\vsjitdebuggerps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D8F0F5E7-11C5-4E95-BBFF-0F110C0221C4}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9035152-6B1F-33E3-86F4-411CD21CDE0E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{d912f8cf-0396-4915-884e-fb425d32943b}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d9162b5b-ca81-476e-a310-cb32d932733c}\InprocServer32" = "$homedrive\\Windows\\system32\\(raschapext|raschap)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d92bd3b9-99a0-4334-a497-11bcb093e9d2}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D93CE8B5-3BF8-462C-A03F-DED2730078BA}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9403860-297F-4A49-BF9B-77898150A442}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D94EDF02-EFE5-4F0D-85C8-F5A68B3000B1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D957171F-4BF9-4de2-BCD5-C70A7CA55836}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D969A300-E7FF-11d0-A93B-00A0C90F2719}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{d9b3211d-e57f-4426-aaef-30a806add397}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9BB4CEE-B87A-47F1-AC92-B08D9C7813FC}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9EF8727-CAC2-4e60-809E-86F80A666C91}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d9efb25b-80e9-4832-bad8-ab2186bc95b0}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imelm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9F6EE60-58C9-458B-88E1-2F908FD7F87C}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9F9C262-6231-11D3-8B1D-00C04FB6BD3D}\InprocServer32" = "$homedrive\\Windows\\System32\\qasf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA13DC3D-3F88-4A85-A89E-5735588A65E5}\InprocServer32" = "$homedrive\\Windows\\system32\\WsmAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA1413F9-03DB-4FBD-A49F-EF0B46E46118}\InProcServer32" = "$homedrive\\Windows\\System32\\InternetMail\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA17539A-3DC3-42C1-A749-A183B51F085E}\InProcServer32" = "$homedrive\\Windows\\System32\\MFMediaEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA1C5437-37A2-4A68-B6AA-8D0F8F11AD40}\InProcServer32" = "$homedrive\\Windows\\System32\\KnobsCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{da216253-d503-497c-b068-6391030a0d1e}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA317BE2-1A0D-37B3-83F2-A0F32787FC67}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DA3BC7D8-C8F3-4169-AA71-D65C40AA7129}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA46D181-07D6-441D-B314-019AEB10148A}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\MPCVR\\MpcVideoRenderer64\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{da5a95c1-cb6b-4798-88a9-473c087d9464}\InProcServer32" = "$homedrive\\Windows\\System32\\provdatastore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA63DCB5-6ABC-45FE-933C-8FDE834DE2C8}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA67B8AD-E81B-4c70-9B91-B417B5E33527}\InProcServer32" = "$homedrive\\Windows\\System32\\srchadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{da7e4657-8fa8-4b76-9a14-9bf380fa3738}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imesearchdll\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA825E1B-6830-43D7-835D-0B5AD82956A2}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DA93E903-C843-11D2-A084-00C04F8EF9B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DAA132BF-1170-3D8B-A0EF-E2F55A68A91D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DAB7CCB2-EC94-4c7e-AB52-826D6ACD5249}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DAC9F469-0C67-4643-9258-87EC128C5941}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsreng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DACA056E-216A-4FD1-84A6-C306A017ECEC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender\\AMMonitoringProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DACE006F-9846-4D70-A0BE-6EF90FA99392}\InprocServer32" = "$homedrive\\Windows\\System32\\windows\.applicationmodel\.conversationalagent\.internal\.proxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{dacfcde5-4790-45ea-a357-a8388c6a587b}\InProcServer32" = "$homedrive\\Windows\\System32\\CallButtons\.proxystub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DAD309AA-FA00-42DF-BABB-5E71586257FE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Haptics\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{daf95313-e44d-46af-be1b-cbacea2c3065}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DAFB2462-2A5B-3818-B17E-602984FE1BB0}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DAFD8210-5711-4B91-9FE3-F75B7AE279BF}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB082FF5-F7BA-4C88-8589-3760FCB59248}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB13092B-FB8F-4AB0-8B5C-29B208C479A1}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.Graphics\.Display\.DisplayEnhancementManagement\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB13821E-9835-3958-8539-1E021399AB6C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DB3E3CFA-4CEE-4427-A2EB-33F85534B7F3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB49BBEB-C744-49F8-81AC-AF97669D4CB0}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB4CBE92-74B3-4027-8B37-7B67927A7034}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdevtools\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB5286F5-C166-4032-95E2-70D62C8D26DA}\InProcServer32" = "$homedrive\\Windows\\System32\\vaultcli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB5D1FF4-09D7-11D1-BB10-00C04FC9A3A3}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB5D1FF5-09D7-11D1-BB10-00C04FC9A3A3}\InprocServer32" = "$homedrive\\Windows\\system32\\filemgmt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB6153E3-7AB7-4A67-AE62-1CAAEFBC64F4}\InProcServer32" = "$homedrive\\Windows\\System32\\eUICCsCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{db6efb73-5153-43b7-8078-c6ffc4c0238c}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB70412E-EEC9-479C-BBA9-BE36BFDDA41B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\FileZilla FTP Client\\fzshellext_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB8B9818-B4BB-4725-B99D-B4612716B6B4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBB22EE7-4810-4363-A758-75D21C2AC266}\InProcServer32" = "$homedrive\\Windows\\System32\\DiagnosticInvoker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBC85A2C-C0DC-4961-B6E2-D28B62C11AD4}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBCE7E40-7345-439D-B12C-114A11819A09}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBD71B6B-F717-4A61-A914-2337BC50B0D6}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBD9EDF9-630D-4B43-BA5D-CC34465EEF72}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBF393FC-230C-46CC-8A85-E9C599A81EFB}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DBFCA500-8C31-11D0-AA2C-00A0C92749A3}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC09760E-9FDA-454A-B9D2-7E663E58C39D}\InProcServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\NVXDBat\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC0C0FE7-0485-4266-B93F-68FBF80ED834}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{DC1C5A9C-E88A-4dde-A5A1-60F82A20AEF7}\InProcServer32" = "$homedrive\\Windows\\System32\\comdlg32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC5DA001-7CD4-11D2-8ED9-D8C857F98FE3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DC626A64-D684-4627-83CB-44420ABDBD1A}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC651A43-0720-4a2b-9971-BD2EF1329A3D}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC664FDD-D868-46EE-8780-8D196CB739F7}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC79A5C8-CCAD-4698-9034-C4C8068011C5}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncHostPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC923725-0FDD-45E1-AE74-EA09182E739B}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\esscli\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCA0ED3C-B95D-490f-9C60-0FF3726C789A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{DCA55752-E6D5-4080-8E35-A21546DA8295}\InProcServer32" = "$homedrive\\Windows\\System32\\IoTAssignedAccessLockFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCA8D857-1A63-4045-8F36-8809EB093D04}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Mozilla Firefox\\AccessibleHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCB00009-570F-4A9B-8D69-199FDBA5723B}\InProcServer32" = "$homedrive\\Windows\\System32\\nlmproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}\InProcServer32" = "$homedrive\\Windows\\System32\\netprofm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{dcbd6fa8-032f-11d3-b5b1-00c04fc324a1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpTip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCC42FB9-F88D-43C2-B874-727DF0F75586}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{dccc0bed-6066-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCD33DDD-2A79-40D1-8319-864D416440AA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Sensors\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCED8DB0-11A5-4b16-AB9D-4E28CA38C99F}\InProcServer32" = "$homedrive\\Windows\\system32\\netcfgx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCF33DF4-B510-439F-832A-16B6B514F2A7}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\fastprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DCFD3EA8-D960-4719-8206-490AE315F94F}\InProcServer32" = "$homedrive\\Windows\\System32\\discan\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD06A84F-83BD-4d01-8AB9-2389FEA0869E}\InProcServer32" = "$homedrive\\Windows\\system32\\WlanMM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD13DE77-D3BA-42D4-B5C6-7745FA4E2D4B}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD1432D7-B76B-4227-9C57-D82E9D844441}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD1484D0-5721-4525-99A6-087FC81975F8}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD313E04-FEFF-11d1-8ECD-0000F87A470C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DD327221-7139-4D2E-8B0B-018B525DFEFF}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD3FC71D-26C0-4FE1-BF6F-67F633265BBA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Oracle\\VirtualBox\\VBoxC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD468E14-AF42-4D63-8908-EDAC4A9E67AE}\InprocServer32" = "$homedrive\\Windows\\System32\\wlangpui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD4CB8C5-F540-47ff-84D7-67390D2743CA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{DD5856E5-8151-3334-B8E9-07CB152B20A4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{dd5cf606-9ea7-49e1-8e82-b789e4443b4f}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\Applets\\imjpcac\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{dd767e9d-cc0f-47b1-8f27-bb890491339d}\InProcServer32" = "$homedrive\\Windows\\System32\\PlayToReceiver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD783C90-F9A6-41D5-A635-DA5DBBB87D75}\InProcServer32" = "$homedrive\\Windows\\System32\\wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD7CE375-32BC-47a6-B816-AB70DF782969}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDACC952-01A7-4D00-8809-EEEE479779BC}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ddafaea2-8842-4e96-bade-d44a8d676fdb}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDB93701-527B-4250-B619-672EFD3C5B21}\InProcServer32" = "$homedrive\\Windows\\System32\\OneDriveSettingSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDC05A5A-351A-4E06-8EAF-54EC1BC2DCEA}\InProcServer32" = "$homedrive\\Windows\\System32\\ApplicationFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDC0EED2-ADBE-40b6-A217-EDE16A79A0DE}\InProcServer32" = "$homedrive\\Windows\\system32\\(credprovs|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ddcc6bb8-4cd6-462a-9289-d82d2bee1ffd}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ddcd33d7-f53c-4554-a71f-f86f49079827}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Devices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDD6F54C-326E-44c1-9CFC-C89D997FFCCD}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDE33513-774E-4BCD-AE79-02F4ADFE62FC}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDE5783A-88B9-11d2-84AD-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDE944C8-1C10-46AA-BF25-B8BAE99F2F64}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Tec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDECE4B2-979F-4CDB-9F58-B036FE5A510C}\InProcServer32" = "$homedrive\\Windows\\System32\\FirewallControlPanel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDEF97F5-723E-47D2-87B1-14C39EFBAE11}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DDFE337F-4987-4EC8-BDE3-133FA63D5D85}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{DE010DA1-289B-4232-8CD0-5112DCA6A7B3}\InprocServer32" = "$homedrive\\Windows\\System32\\vdsbas\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE0549BD-F34D-4748-AD94-0F2F22749F4F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE0C8422-0096-4240-9A06-FF4D7611EF04}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{de2d022d-2480-43be-97f0-d1fa2cf98f4f}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE3F3560-3032-41B4-B6CF-F703B1B95640}\InProcServer32" = "$homedrive\\Windows\\System32\\wsepno\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{de434264-8fe9-4c0b-a83b-89ebeebff78e}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DE47D9CF-0107-3D66-93E9-A8ACB06B4583}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DE4874D1-FEEE-11d1-A0B0-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE4874D2-FEEE-11d1-A0B0-00C04FA31A86}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{de54af92-ead8-4a7e-88ab-135b6e1a3a23}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.HardwareId\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE5E0969-1B70-48FC-8AF9-74931E995953}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE661907-527D-4d6a-B6A6-EBC7F88D9B95}\InprocServer32" = "$homedrive\\Windows\\System32\\PeerDistCleaner\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE6CDC86-E1FB-4940-801B-C3C1A26C4DA4}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE75D012-7A65-11D2-8CEA-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE77BA04-3C92-4d11-A1A5-42352A53E0E3}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE815B00-9460-4F6E-9471-892ED2275EA5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE83650F-8CE4-40EA-A08E-6F0E5CD46F6B}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DE9C1288-0F09-40ff-BA84-7F19279FA74B}\InProcServer32" = "$homedrive\\Windows\\System32\\IdListen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEA8AFA0-CC85-11D0-9CE2-0080C7221EBD}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsecsnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEA8AFA1-CC85-11D0-9CE2-0080C7221EBD}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsecsnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEA8AFA2-CC85-11D0-9CE2-0080C7221EBD}\InprocServer32" = "$homedrive\\Windows\\System32\\ipsecsnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEB01010-3A37-4d26-99DF-E2BB6AE3AC61}\InprocServer32" = "$homedrive\\Windows\\System32\\dmintf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{deca92e0-af85-439e-9204-86679978da08}\InProcServer32" = "$homedrive\\Windows\\System32\\AppLockerCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DECBDC16-E824-436e-872D-14E8C7BF7D8B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{dedf110a-8df2-4a67-b18d-b3b3dda7474f}\InProcServer32" = "$homedrive\\Windows\\System32\\accountaccessor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEE0CE93-8376-4DB5-A4F0-010596888B49}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEEF2A9B-B3B7-46F2-A07F-D53340BF9E0F}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEF03231-9688-11E2-BE7F-B4B52FD966FF}\InprocServer32" = "$homedrive\\Windows\\System32\\pnpclean\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{def065bd-a9fa-402b-8775-ab48d88775db}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DEFBBFC0-D326-4B24-B876-8AA724C1335B}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF0B3D60-548F-101B-8E65-08002B2BD119}\InprocServer32" = "$homedrive\\Windows\\System32\\oleaut32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF24A1AC-F041-4E59-B7DA-EB2634A93CFE}\InProcServer32" = "($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)F12AppFrame\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF2FCE13-25EC-45bb-9D4C-CECD47C2430C}\InprocServer32" = "$homedrive\\Windows\\System32\\iertutil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{df3460ae-d92d-40f3-b5cd-f83259936f23}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF392B70-BBFC-4A99-A269-C0B56CDA7757}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\ENE\\Aac_ENE_EHD_M2_HAL\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF436197-C14C-4F1D-99CC-4C7BBB399A2F}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\oobecoreadapters\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF46C02A-3568-4765-AAD3-88F5E1D42F92}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF5440C1-FFB1-4F14-99A9-D692CC978E07}\InProcServer32" = "$homedrive\\Windows\\System32\\MSPhotography\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF58FA85-1071-4B44-8CBC-841B9116E9DB}\InProcServer32" = "$homedrive\\Windows\\System32\\EmailApis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF5C33B8-3120-4cd4-991F-300385B66FDE}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF60686C-2941-4893-80C0-F13173B719D3}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{df6775de-380d-4c14-8b62-fb69912e6d30}\InProcServer32" = "$homedrive\\Windows\\system32\\usbui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{df6b5e0d-ff61-4cdd-b181-1c6f88315f87}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjplmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF9144AE-8785-4B2B-93AD-A775CE6B6C42}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFA226E7-D28D-407D-95ED-5A79D9745BB5}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvlicensings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFA22B8E-E68D-11d0-97E4-00C04FC2AD98}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqloledb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFC05778-5E71-494B-BE6D-B532038FA397}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{dfc8bdc0-e378-11d0-9b30-0080c7e9fe95}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaosp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFD181E0-5E2F-11CE-A449-00AA004A803D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{DFD74844-990B-4410-9DA0-2848EFA85D14}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFD888A7-A6B0-3B1B-985E-4CDAB0E4C17D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{DFE49CFE-CD09-11D2-9643-00C04f79ADF0}\InProcServer32" = "$homedrive\\Windows\\system32\\cabview\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe|shdocvw)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFFFAE4D-F0CF-46CD-9586-FE891237AB8A}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E018945B-AA86-4008-9BD4-6777A1E40C11}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e019c036-162f-4f57-a5bc-850e313210b7}\InprocServer32" = "$homedrive\\Windows\\system32\\(eappcfgui|eappcfg)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E031F9E8-A35A-45EA-B263-F85FDED0D539}\InProcServer32" = "$homedrive\\Windows\\system32\\PackageStateRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0393303-90D4-4A97-AB71-E9B671EE2729}\InprocServer32" = "$homedrive\\Windows\\System32\\vds_ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E03E85B0-7BE3-4000-BA98-6C13DE9FA486}\InProcServer32" = "$homedrive\\Windows\\System32\\StructuredQuery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E041C90B-68BA-42C9-991E-477B73A75C90}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e04d75b6-ee0a-48a9-acd5-e39e0b1bb434}\InProcServer32" = "$homedrive\\Windows\\system32\\CapabilityAccessHandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E05592E4-C0B5-11D0-A439-00A0C9223196}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{E05BE1C8-92A8-4757-B575-ACAECB4E6A40}\InprocServer32" = "$homedrive\\Windows\\System32\\UsbTask\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E07647F7-AED2-48D9-9720-939BC24A8A3C}\InProcServer32" = "$homedrive\\Windows\\System32\\wosc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e07dfaca-e658-4ce5-89b2-05bbbf75e708}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{e084f594-a1de-4038-b8d1-6c3c5fc3617c}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e0936539-81db-4574-b9f8-34fd0bff6f2e}\InProcServer32" = "$homedrive\\Windows\\System32\\winmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0B13464-EE28-4AA6-A3D9-38978AF44414}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e0ca5340-4534-11cf-b952-00aa0051fe20}\InprocServer32" = "$homedrive\\Windows\\system32\\nlhtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0CBC546-8950-43DD-99A9-A418DB7DD0B5}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e0da66c1-3ac5-4346-8b18-93f5075a2a01}\InProcServer32" = "$homedrive\\Windows\\System32\\PhoneProviders\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0DCC2CC-3354-45F2-8914-519E07809082}\InProcServer32" = "$homedrive\\Windows\\system32\\AppListBackupLauncher\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0DF7408-44FF-47D8-BE3B-79729980CAD8}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e0ec8de2-d4e2-4e48-93ab-edcddbbcf7eb}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.StateRepositoryClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0F158E1-CB04-11d0-BD4E-00A0C911CE86}\InprocServer32" = "$homedrive\\Windows\\System32\\devenum\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E0FA581D-2188-11D2-A739-00C04FA377A1}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E10A508F-1699-40ba-A0DD-9DEB2D4DCAC3}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\InProcServer32" = "$homedrive\\Windows\\system32\\USERENV\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1150CE9-5BD4-4044-8FE9-98CF40137A41}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E11685D3-11AF-4E03-9E55-895445C87F48}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.ApplicationModel\.LockScreen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e126b7dd-1c3b-4821-b861-a6da9ce6f096}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP.*\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1377990-BDFB-4D43-AD16-DF7F6DCB4EFE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E137B0D0-7A93-11D2-8CEA-00A0C9441E20}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E13B6686-3F39-11D0-96F6-00A0C9191601}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E13B6688-3F39-11D0-96F6-00A0C9191601}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E13B9A7F-EC39-4E7F-9970-12F348C89FD0}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E13EF4E4-D2F2-11d0-9816-00C04FD91972}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E1553E07-5939-4CFD-BE24-3BCEBA2F148C}\InProcServer32" = "$homedrive\\Windows\\System32\\(XpsDocumentTargetPrint|XpsPrint)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\WinSCP\\DragExt64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e1625daf-d7c8-474b-b5c0-1525431d462c}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E164F996-FF93-4675-BDD8-6C47AB0B86B1}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E16C0593-128F-11D1-97E4-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\txflog\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E16C0594-128F-11D1-97E4-00C04FB9618A}\InprocServer32" = "$homedrive\\Windows\\system32\\txflog\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1779AD4-B31D-46be-BFA3-C1677A0A2851}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e1790c6b-8727-4598-bad3-6ba88a49c25d}\InProcServer32" = "$homedrive\\Windows\\System32\\mcrecvsrc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E17A999C-97F7-4213-BF6F-DE08E9D7ECF5}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\DMWmiBridgeProv1\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E18AF75A-08AF-11D3-B64A-00C04F79498E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E18FEC31-2EA1-49A2-A7A6-902DC0D1FF05}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E19AF835-9413-48A3-BDCC-28BA0286E348}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E19FF627-4C38-406D-9B4A-7973E0F539BA}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1A6AFD2-7F54-4FD9-BF1D-F075EC94BB3F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1A8B82A-32CE-4B0D-BE0D-AA68C772E423}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\madVR\\madVR64\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{E1BA88BA-7A83-421A-A05D-71F96C3FFFD0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.PointOfService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1C5D730-7E97-4D8A-9E42-BBAE87C2059F}\InprocServer32" = "$homedrive\\Windows\\System32\\wiaaut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1D0AB13-2FE6-4DF0-8917-ED80CF0FEF6B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1DE74AD-C368-4104-ADB1-57D00577247A}\InProcServer32" = "$homedrive\\Windows\\system32\\WlanMM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1F1A0B8-BEEE-490D-BA7C-066C40B5E2B9}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2adec\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1F5AA5B-065C-4E29-B454-C1BBFE0819D2}\InprocServer32" = "$homedrive\\Windows\\System32\\wlidprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}\InprocServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2183960-9d58-4e9c-878a-4acc06ca564a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_1\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E227FD04-7208-4A7A-B965-DF7B64E1323F}\InProcServer32" = "$homedrive\\Windows\\System32\\UNP\\UNPUX\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e22ad333-b25f-460c-83d0-0581107395c9}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e22b3065-b83a-4ffd-9b08-9e73841a442f}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E230022C-8258-41a4-AFF4-A917FE75C58B}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E23A07D1-1E89-4B22-8411-051B40A0A357}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\schedprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E23CE3EB-5608-4E83-BCEF-27B1987E51D7}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2403e98-663b-4df6-b234-687789db8560}\InprocServer32" = "$homedrive\\Windows\\system32\\rtffilt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2448508-95DA-4205-9A27-7EC81E723B1A}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E24AA6F7-199B-4FE6-987D-2485C9D60DEE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2510970-F137-11CE-8B67-00AA00A3F1A6}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2550429-5df2-48cd-9ea3-26ff682d8a17}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E25E3D72-2E16-435D-88FC-27475DA85152}\InProcServer32" = "$homedrive\\Windows\\System32\\WudfSMCClassExt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E25E57E9-DA9C-4A35-A0D8-CFB5EA6AF7E6}\InprocServer32" = "$homedrive\\Windows\\system32\\AuditNativeSnapIn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E26B366D-F998-43ce-836F-CB6D904432B0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2765AC3-564C-40F9-AC12-CD393FBAAB0F}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E296669F-B787-4A34-B23D-56F0AF1D450B}\InProcServer32" = "$homedrive\\Windows\\System32\\WiFiConfigSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2A4E630-7AD8-44f0-B6EE-D36EA4C6EB94}\InprocServer32" = "$homedrive\\Windows\\system32\\ndfapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2AD2F90-AC32-4DF6-B47A-61458E559320}\InprocServer32" = "$homedrive\\Windows\\system32\\dscproxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2AE5372-5D40-11D2-960E-00C04F8EE628}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2b07466-5250-4fc2-8949-46bf91f8cad0}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2B71183-B72F-496A-8F5A-F1AC0D331471}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairingProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2bf9676-5f8f-435c-97eb-11607a5bedf7}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2CBCB87-9C07-4523-A78F-061499C83987}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmipcima\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2DECFDB-BA0A-46F9-9452-8218C1A9AE45}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2E5A310-ECED-444F-81D7-ACCA6AC8A1A8}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Win32_TPM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2E760C5-BF0D-4241-BFD6-6D0AAB648AC9}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2E7969E-7186-4FE5-AAC9-1D9071AAFE4E}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Background\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2eb4ca4-c96e-4da4-94b1-673c8334a5bb}\InProcServer32" = "$homedrive\\Windows\\system32\\shcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2F33E30-B587-4f08-BF1A-F28D0F41000A}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2F5480E-ED5A-4DDE-B8A8-F9F297479F62}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\ODFFILT\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{E2F7A62A-862B-40AE-BBC2-5C0CA9A5B7E1}\InprocServer32" = "$homedrive\\Windows\\System32\\MMDevApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e2fb4720-f45f-4a3c-8cb2-2060e12425c3}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E2FE048A-318B-4c79-A934-95AF2BCADEAC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E302CB55-5F9D-41A3-9EF3-61827FB8B46D}\InProcServer32" = "$homedrive\\Windows\\System32\\PresentationHostProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E30629D1-27E5-11CE-875D-00608CB78066}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E30629D2-27E5-11CE-875D-00608CB78066}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e317d729-81b0-4257-926b-b8de5f3b0288}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3195F96-5415-4179-B295-77F00B87C7F4}\InprocServer32" = "$homedrive\\Windows\\System32\\ihds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E31A5806-8FD2-48EC-A132-7C1E614AC5B1}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E31E87C4-86EA-4940-9B8A-5BD5D179A737}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E3250274-3AE3-472D-AA33-7BC11F195BAC}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E325CAFA-C39E-4EFB-9A9A-09BEEB580F1C}\InProcServer32" = "$homedrive\\Windows\\System32\\BarcodeProvisioningPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e345f35f-9397-435c-8f95-4e922c26259e}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3633C03-DF7A-41E0-B903-CC349A05E021}\InProcServer32" = "$homedrive\\Windows\\system32\\blb_ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E36C2344-AF40-4FC0-B24C-4930B809F3E1}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3784839-6BD5-4702-A7B0-59C7592FB7B8}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E37A73F8-FB01-43dc-914E-AAEE76095AB9}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}\InProcServer32" = "$homedrive\\Windows\\System32\\dfshim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E37EF07F-8266-448B-8059-C2B35BAFE0CF}\InprocServer32" = "$homedrive\\Windows\\System32\\puiobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E388F56A-D03B-4A08-ADC3-E44CA937AD91}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E38DA416-8050-3786-8201-46F187C15213}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E3956DCF-D1C7-4375-AAAA-22FF8191C479}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office.*\\msoshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3AAF548-C9A4-4C6E-234D-5ADA374B0000}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVP9DEC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3C22B30-8502-4B2F-9133-559674587E51}\InProcServer32" = "$homedrive\\Windows\\System32\\MrmCoreR\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3C82929-EDB4-475e-85A4-29AAA2A30C2D}\InprocServer32" = "$homedrive\\Windows\\System32\\vmdynmem\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3D5D93C-1663-4A78-A1A7-22375DFEBAEE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3E1D967-0829-48AC-B3AD-C5AE4CA171C4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqlxmlx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e3e459d6-2fde-4229-a85d-ea3693218b90}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.PlatformDiagnosticsAndUsageDataSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e3e478d6-a2f2-4791-89a3-21f5c78dc3ec}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e3e7ca72-7466-4aa1-906b-f6d23347f48b}\InProcServer32" = "$homedrive\\Windows\\System32\\DesktopView\.Internal\.Broker\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E3E8B9D5-EA6E-4ECD-AC1F-933087551378}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E410F8AE-00A1-4A1B-8247-924705718354}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E413D040-6788-4C22-957E-175D1C513A34}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4206432-01A1-4BEE-B3E1-3702C8EDC574}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E423AF7C-FC2D-11d2-B126-00805FC73204}\InprocServer32" = "$homedrive\\Windows\\system32\\stclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4288337-873B-11D1-BAA0-00AA00BBB8C0}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsIFEComp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows NT\\TableTextService\\TableTextService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E430E93D-09A9-4DC5-80E3-CBB2FB9AF28E}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\prchauto\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB1-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB2-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB3-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB5-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB6-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB7-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E436EBB8-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E444E1B9-502C-44f9-B714-30DA330D0E8E}\InprocServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e46787a1-4629-4423-a693-be1f003b2742}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfsrcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E46C6E1E-8ADE-4EDD-AFAA-446D1999911B}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E474E05A-AB65-4f6a-827C-218B1BAAF31F}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E476E4C0-409C-43CD-BBC0-5905B4138494}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4785230-0E43-47DC-826A-07DBC3AA63D8}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e4796550-df61-448b-9193-13fc1341b163}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E48B2549-D510-4A76-8A5F-FC126A6215F0}\InprocServer32" = "$homedrive\\Windows\\System32\\ieapfltr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E49741E9-93A8-4AB1-8E96-BF4482282E9C}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{E4979309-7A32-495E-8A92-7B014AAD4961}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E49F7E50-C070-11DF-AC23-18A90531A85A}\InProcServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4BCAC13-7F99-4908-9A8E-74E3BF24B6E1}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4C1D9A2-CBF7-48BD-9A69-34A55E0D8941}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\VMware\\VMware Workstation\\x64\\vmdkShellExt64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4D5B02C-82A9-4363-BD02-8BA595200BCF}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e4e55606-2ffb-4558-a601-7693efc5481c}\InProcServer32" = "$homedrive\\Windows\\System32\\winmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4E915A9-8344-4F88-9326-2ADC071D4FF6}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4EFA193-F8D6-4DDD-8D60-DA71614825D3}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceFlows\.DataModel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E50CFA77-9BAD-47A3-A1E2-038C7AD0051A}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E51522D1-93B8-4AE2-B5C4-D397B8595EF2}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxHAPDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E51B7EF6-4A7F-4780-AAAE-D4B291AACD2E}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E524CB3D-29DF-49AD-BF4E-AFF32F8551AC}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e53cd6ee-5c5c-4701-9ff2-c204bfed819d}\InProcServer32" = "$homedrive\\Windows\\System32\\LicenseManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E54CDFAF-2381-4cad-AB99-F38517127D5C}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E54E4714-22AE-40c5-BB24-F839845C7C98}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E565CAF2-2B8D-4499-9148-7EBAD978D4EF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\embeddedlockdownwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E573236F-55B1-4EDA-81EA-9F65DB0290D3}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e5899c7c-0fc7-499e-a262-174fd692dc9f}\InprocServer32" = "$homedrive\\Windows\\system32\\capiprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E593941A-F61C-49C3-85F1-D00EBF0D4EB2}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxAdvancedDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E598560B-28D5-46aa-A14A-8A3BEA34B576}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E5A040E9-1097-4D24-B89E-3C730036D615}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e5b35059-a1be-4977-9bee-5c44226340f7}\InProcServer32" = "$homedrive\\Windows\\System32\\Chakra\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E5B4EAA0-B2CA-11CE-8D2B-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E5B5B938-52A0-4B37-8659-24EB5165B9A0}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\netdacim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E5B8E079-EE6D-4E33-A438-C87F2E959254}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E5CA59F5-57C4-4DD8-9BD6-1DEEEDD27AF4}\InprocServer32" = "$homedrive\\Windows\\System32\\Inked\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E5CB7A31-7512-11D2-89CE-0080C792E5D8}\InProcServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E61B54C9-1261-4929-8A64-4DEFAF49191B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.RetailInfo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersShell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6290C32-443A-4529-AEC3-320ADF0F9622}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6335F02-80B7-4DC4-ADFA-DFE7210D20D5}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E64164EB-1AE0-4C50-BAEF-A413C2B3A4BC}\InprocServer32" = "$homedrive\\Windows\\system32\\ms3dthumbnailprovider\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{E68d2B3E-192D-448E-827E-239082D74DC6}\InProcServer32" = "$homedrive\\Windows\\System32\\NetworkUXBroker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E69FD98D-7EBE-4C01-BFED-67B4E4616A49}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6C77299-37E8-4810-B28B-528A7D4BE7AF}\InprocServer32" = "$homedrive\\Windows\\System32\\RuleBasedDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6D78900-BB40-4039-9C54-593A242B65DA}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenvp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6E46E80-CA08-49DD-93E8-A2DDB88FD14B}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6E73D20-0C8A-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E6EE9AAC-F76B-4947-8260-A9F136138E11}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e6f721c1-034a-48b6-96dd-ce36ced74a03}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Ocr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e6fe8c05-1500-4754-8b9a-14bf27c3b1d8}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E71B4063-3E59-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E724B749-18D6-36AB-9F6D-09C36D9C6016}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{e74e57b0-6c6d-44d5-9cda-fb2df5ed7435}\InprocServer32" = "$homedrive\\Windows\\system32\\certCredProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e755468c-02f5-4d96-8487-3be68ffe633a}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E756C791-2001-4de5-83C7-DE61D88831D0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.NetworkOperators\.HotspotAuthentication\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e760e244-abb3-4c3c-b925-0781c8ceb46c}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E77026B0-B97F-4cbb-B7FB-F4F03AD69F11}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e770cb37-6874-43c9-80d3-a43a36d2bf3b}\InProcServer32" = "$homedrive\\Windows\\System32\\aadtb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E772BBE6-CB52-3C19-876A-D1BFA2305F4E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E77DB53F-039E-4301-9572-8ECFD3814D64}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E786FB32-B659-3D96-94C4-E1A9FC037868}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{e79167d7-1b85-4d78-b603-798e0e1a4c67}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e7a7a3e2-c61b-4f1f-ab41-e929dd7fa60d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7A8B38F-AE80-4753-B520-433D402E6379}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7B0F685-6247-4E7D-823E-06DEE79A8AA9}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7D35CFA-348B-485E-B524-252725D697CA}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7D574D5-2E51-3400-9FB6-A058F2D5B8AB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E7DE514C-BBBC-41D4-8838-4BB0FE21229A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e7e3cce4-9845-449c-b882-be963d31bd1a}\InProcServer32" = "$homedrive\\Windows\\System32\\LicensingWinRT\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7E6A098-87CE-420D-91AE-413312AC8FA6}\InprocServer32" = "$homedrive\\Windows\\system32\\WfHc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7E977EF-BE01-447B-8108-B9C84F45B946}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E800E945-780D-48D3-89E7-D822EA18F0A2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E801D4C9-C485-46AF-B839-7A16D4895182}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Gaming\.XboxLive\.Storage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E810CEE7-6E51-4cb0-AA3A-0B985B70DAF7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E816B022-B276-4CA0-B42A-E3EF8927EFD2}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E822F35C-DDC2-3FB2-9768-A2AEBCED7C40}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{e82a2d71-5b2f-43a0-97b8-81be15854de8}\InProcServer32" = "$homedrive\\Windows\\System32\\dfshim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E838B72C-83C9-4a08-8DD1-144CB14616F1}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E846F0A0-D367-11D1-8286-00A0C9231C29}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E847030C-BBBA-4657-AF6D-484AA42BF1FE}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E851CB66-C839-4E96-8363-8535EB16FE2C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvgames\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E8B54CDF-0B5C-48A9-BE4A-347CF70D8BBE}\InProcServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E8C40B98-FCF5-4047-86DA-11A11590CB98}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e8e4dbb7-bfa1-4a0c-a168-b0568d4654e2}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E8E73B6B-4CB3-44A4-BE99-4F7BCB96E491}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{E8E9D2D1-130A-4460-98BB-48C9A6F280B9}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E8FD5270-2AFB-4345-A75B-C8F5C3A412A3}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9148312-A9BF-3A45-BBCA-350967FD78F5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{e916b6b2-22bd-4afc-b337-d3d9fb27670e}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9218AE7-9E91-11D1-BF60-0080C7846BC0}\InprocServer32" = "$homedrive\\Windows\\system32\\iassdo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9225296-C759-11d1-A02B-00C04FB6809F}\InprocServer32" = "$homedrive\\Windows\\System32\\tapi3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e9309678-18b4-414b-ba7a-2c9a7bcf9684}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E94137E0-92ED-4579-9251-18AF2A08CCD1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\(tabskb|tipskins)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E947A0B0-D47F-3AA3-9B77-4624E0F3ACA4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E9495B87-D950-4ab5-87A5-FF6D70BF3E90}\InProcServer32" = "$homedrive\\Windows\\system32\\wscui\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{E95186C7-7D80-4311-843D-0702CBC8B1E4}\InProcServer32" = "$homedrive\\Windows\\system32\\RemoveDeviceContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9571AB2-AD92-4ec6-8924-4E5AD33790F5}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E96767E0-7EAA-45E1-8E7D-64414AFF281A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E96F5460-09CE-4f46-88B1-F4B6B4A8E252}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e9711a2f-350f-4ec1-8ebd-21245a8b9376}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{E9729012-8271-4e1f-BC56-CF85F914915A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{E974D26D-3D9B-4D47-88CC-3872F2DC3585}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E979DAD9-25E8-45D7-AB42-43FB7B9F38CC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E97D552D-9AE9-46AA-9151-D2DA4BBB5E96}\InProcServer32" = "$homedrive\\Windows\\System32\\execmodelclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E97DEC16-A50D-49bb-AE24-CF682282E08D}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nv3dappshext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E98B8DC5-72E3-48E4-A4BC-9393F3EA0DA5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.Workplace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9957D25-7EB7-42C8-AD32-06AF7776A788}\InprocServer32" = "$homedrive\\Program Files (x86)\\Google\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e9970fa4-b6aa-11d9-b032-000d56c25c27}\InprocServer32" = "$homedrive\\Windows\\system32\\sdohlp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9A4A80A-44FE-4DE4-8971-7150B10A5199}\InprocServer32" = "$homedrive\\Windows\\system32\\msheif\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9A6AB1B-0C9C-44AC-966E-560C2771D1E8}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9D4CE0B-0183-4D55-9F86-90F7B06E3D37}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9F4EBAB-D97B-463e-A2B1-C54EE3F9414D}\InprocServer32" = "$homedrive\\Windows\\System32\\(mfnetsrc|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA206668-C63A-4A05-ABA8-65298048230E}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ea297d29-fc9f-41ef-a2e0-666891b01c6e}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA2C6B24-C590-457B-BAC8-4A0F9B13B5B8}\InProcServer32" = "$homedrive\\Windows\\System32\\UserAccountControlSettings\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA30C654-C62C-441f-AC00-95F9A196782C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA502722-A23D-11D1-A7D3-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA678830-235D-11d2-A8B6-0000F8084F96}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ea72d00e-4960-42fa-ba92-7792a7944c1d}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA770D9E-D1C9-454B-99B7-B2F8CDD2482F}\InProcServer32" = "$homedrive\\Windows\\System32\\Geolocation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA778DB4-CE69-4da5-BC1D-34E2168D5EED}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{ea8b451c-5a19-49cf-bc5e-98accca49ef3}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA92B647-F9C1-48ED-A0FF-433E54FF0D73}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Web\.Diagnostics\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EAA78D4A-20A3-3FDE-AB72-D3D55E3AEFE6}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EAB16C5D-EED1-4E95-868B-0FBA1B42C092}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EAB22AC3-30C1-11CF-A7EB-0000C05BAE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EAC8A024-21E2-4523-AD73-A71A0AA2F56A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiutils\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ead1a538-3bb4-45d9-b6c9-dc167e21d959}\InProcServer32" = "$homedrive\\Windows\\System32\\CapabilityAccessManagerClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EAE440DB-57fC-4E74-8C8B-BD10FCB18223}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EAE50EB0-4A62-11CE-BED6-00AA00611080}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{EAE6E758-ECC5-41ED-8FF8-7559C4AEBE43}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxAPDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EAE826D3-ECB5-49ff-BC55-7B318E78C6DD}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3dlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{eb124705-128b-40d4-8dd8-d93ed12589a4}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EB36A2D2-BA9E-457F-8023-66EE08D4D955}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{eb4d075a-65c0-476b-956c-c605eade03f7}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EB56EAE8-BA51-11d2-B121-00805FC73204}\InprocServer32" = "$homedrive\\Windows\\system32\\stclient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EB6B4457-F013-4E5A-9B05-1D44E4D6FAEB}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiutils\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EB949F48-A506-482E-8DF8-8856B421CC2A}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskFlowDataEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EB9D0A19-E64D-4C85-A6A1-45EFAB463E6F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Printers\.Extensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EBAA029C-01C0-32B6-AAE6-FE21ADFC3E5D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EBB08C45-6C4A-4FDC-AE53-4EB8C4C7DB8E}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EBB236B1-F57F-480D-9DE9-B15A87298EEC}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EBDA5D88-AA7D-4A8C-A20C-C01FADB43EDA}\InProcServer32" = "$homedrive\\Program Files (x86)\\BraveSoftware\\Update\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ebe53edd-8816-43b2-9c4f-47c7e2e2fb3b}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EBFE7BA0-628D-11D2-AE0F-006097B01411}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EC00BA63-C73A-4679-AC8D-69366C766989}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC04D82C-AA59-4ba4-96B1-27BE3FF05E00}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ec05b81f-ec57-47c9-a6ce-eebc9b35861b}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC0AE07D-6A4C-49a4-8A40-F130C525D7D9}\InProcServer32" = "$homedrive\\Windows\\System32\\audiokse\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC231970-6AFD-4215-A72E-97242BB08680}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC278F3A-BFE8-42d5-99C0-E25F5EF4A3D1}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC3DAC94-DF80-3017-B381-B13DCED6C4D8}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ec4db96f-6872-4903-a448-6dffc454ae6d}\InProcServer32" = "$homedrive\\Windows\\System32\\PlayToDevice\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC529B00-1A1F-11D1-BAD9-00609744111A}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{ec57976f-0796-42b5-a699-6a24933a48bc}\InProcServer32" = "$homedrive\\Windows\\System32\\CastLaunch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC860C1A-CD41-4AA4-AC8E-75ABB7B46E21}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulation\\VirtualCameraManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC8A7A18-FE68-403f-9625-CF63026F1BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC8F67F0-A2DE-4868-98E6-EAAD214BCDC6}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\Ch(s|x)ProxyDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EC9BA17D-60B5-462B-A6D8-14B89057E22A}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafaa-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafab-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafac-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafad-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafae-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafaf-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb1-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb2-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb3-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb4-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb5-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb6-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb7-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafb9-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafbc-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc2-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc3-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc4-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc6-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc7-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafc9-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafca-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafcb-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafcc-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafcd-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafce-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafcf-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafd0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECABAFD1-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ecabafd3-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0a8-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0aa-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0ab-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0ac-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0bd-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0be-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0bf-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0c0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0c4-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0c5-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0c7-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecabb0c8-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECABB0C9-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECABB0CA-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECB17B16-24AF-41E2-864C-34FE5427FF37}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECC82A10-B731-3A01-8A17-AC0DDD7666CF}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}\InprocServer32" = "$homedrive\\Windows\\System32\\DfsShlEx\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECD32AEA-746F-4dcb-BF68-082757FAFF18}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECD4FC4D-521C-11D0-B792-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECD4FC4E-521C-11D0-B792-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECD4FC4F-521C-11D0-B792-00A0C90312E1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECDB0924-4208-451E-8EE0-373C0956DE16}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECE71064-011D-45b7-AEF2-3B626985E937}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{ECF03A32-103D-11d2-854D-006008059367}\InProcServer32" = "$homedrive\\Windows\\system32\\mydocs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ecf5bf46-e3b6-449a-b56b-43f58f867814}\InProcServer32" = "$homedrive\\Windows\\System32\\IDStore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ECF622A8-028B-4275-B9F6-1C84EE411A3E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED0BC45C-2438-31A9-BBB6-E2A3B5916419}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ED3AF319-8B2B-455F-91A2-AC3B76111C43}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceElementSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED43BB3C-09E9-498a-9DF6-2177244C6DB4}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED475410-B0D6-11D2-8C3B-00104B2A6676}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\OLMAPI32\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{ED4B1828-CD88-460F-AEFF-3D63FC8BBF68}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\dnsclientpsprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ed6ae9cf-ad35-46b7-ac30-3f8b9eb5349f}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ed72f0d2-b701-4c53-adc3-f2fb59946dd8}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED78AC26-1ED5-460A-BD5C-DC0FE7E7688F}\InProcServer32" = "$homedrive\\Windows\\System32\\UNP\\UNPUX\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED7BA470-8E54-465E-825C-99712043E01C}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED8C108E-4349-11D2-91A4-00C04F7969E8}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED8C22CA-7722-464A-A522-7967ABF63C35}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED8F884B-5CD8-4970-B6B6-C493BF12C978}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.Internal\.Capture\.Pipeline\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED934789-80B8-4891-A1D5-BD97D2021F2B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\filetrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED999FF5-223A-4052-8ECE-0B10C8DBAA39}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ed9d80b9-d157-457b-9192-0e7280313bf0}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{eda4e1db-2e1f-450d-9e65-7ec502cc0a4f}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EDAC9CAA-4874-48C0-80DB-2D81B63EFE13}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{edb5f444-cb8d-445a-a523-ec5ab6ea33c7}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EDB9987A-FFF5-4bd2-8B05-2865F3EC621D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.ui\.immersive|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{edc3a8b5-2e25-466a-a1ad-21e2f19414ac}\InProcServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EDC978D6-4D53-4b2f-A265-5805674BE568}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EDD36029-D753-4862-AA5B-5BCCAD2A4D29}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{edd749de-2ef1-4a80-98d1-81f20e6df58e}\InProcServer32" = "$homedrive\\Windows\\System32\\l2nacp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EDE0C6E4-C5DE-4377-A472-E590B23B604C}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ede7f087-890f-491c-b906-9abb31896960}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EDEA4743-46D4-4C14-B358-64FD126052EC}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EDF6970E-4557-4BC5-86C2-C7E52A06B27F}\InProcServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUXPS\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{EE01EAAB-BC79-458C-B93F-FB59D89596B0}\InProcServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE09B103-97E0-11CF-978F-00A02463E06F}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE0BDDFA-8373-4cc4-85D8-0618E453187C}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE14E412-4988-458C-B863-76E3C1BF71C2}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE15C2BD-CECB-49F8-A113-CA1BFC528F5B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ee20eeba-df64-4a4e-b7bb-2d1c6b2dfcc1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE24A2C3-3AA2-33DA-8731-A4FCC1105813}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EE30215D-164F-4A92-A4EB-9D4C13390F9F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVVideo\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{EE366069-1832-420F-B381-0479AD066F19}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE372C60-0016-43B5-865C-D5BB2CDDAE6B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\PD\\Aac_Universal Holtek RGB DRAM\\AacHal_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE4DA6A4-8C52-4a63-BBB8-97C93D7E1B6C}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE5799D0-070A-49EE-8476-6A02E46E9FDD}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EE832CE3-06CA-33EF-8F01-61C7C218BD7E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EE8E4870-A889-4DC4-969F-F38F707F4AC2}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EE96F4E1-377E-315C-AEF5-874DC8C7A2AA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{eea0c191-dda8-4656-8fc4-72bdedba8a78}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EEBD2F15-87EE-4f93-856F-6AD7E31787B3}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EEC5DCCA-05DC-4B46-8AF7-2881C1635AEA}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EEC6993A-B3FD-11D2-A916-00C04FB98638}\InProcServer32" = "$homedrive\\Windows\\System32\\pid\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EED01FD5-42B6-4846-A81F-9C40D219197F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EEF05C76-5C98-3685-A69C-6E1A26A7F846}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EEF5290C-7F3D-4640-93F2-F189DC616510}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvdisps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF011F79-4000-406D-87AF-BFFB3FC39D57}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF114C90-CD1D-484E-96E5-09CFAF912A21}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF19FBF6-0212-4463-8B3E-14E1318DC616}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef1c0450-0b48-4384-94ae-d1cb35641f86}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EF24F689-14F8-4D92-B4AF-D7B1F0E70FD4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EF30258D-9897-45CD-A760-FE5C195CB00E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF30FFEE-87D2-414C-985D-473CA38D707E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF3E932C-D40B-4F51-8CCF-3F98F1B29D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF411752-3736-4CB4-9C8C-8EF4CCB58EFE}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef43ecfe-2ab9-4632-bf21-58909dd177f0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF544DC6-8DD8-4D8E-B867-BC728AC2B6D7}\InProcServer32" = "$homedrive\\Windows\\System32\\DuCsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF5C5336-1AF1-42E8-8AAD-FC2453B765DE}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef5db4c2-9312-422c-9152-411cd9c4dd84}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef636390-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef636391-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef636392-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef636393-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF6EF542-EB19-4986-89D3-143960609251}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF79AB42-5404-4BCA-8BD5-727160DDFAE5}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF7DEED8-27D0-42DC-B135-664EEFC69F52}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Web\.Http\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ef7e0655-7888-4960-b0e5-730846e03492}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF7F04A5-461B-4E32-840D-5841AB00713C}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF884939-F1EA-4EFB-B676-D2F802177C5F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvvitvs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EF985E71-D5C7-42D4-BA4D-2D073E2E96F4}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFA97F08-EE06-42EC-AAAF-F8CB106247A2}\InProcServer32" = "$homedrive\\Windows\\System32\\FileAppxStreamingDataSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFB23A09-A867-4BE8-83A6-86969A7D0856}\InProcServer32" = "$homedrive\\Windows\\system32\\cscobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFB4A0CB-A01F-451C-B6B7-56F02F77D76F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFB92EFB-9236-4bd7-B60D-51D1C7D1C87A}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFBD9A69-66AF-4D44-BB36-D477E5014216}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\OSFROAMINGPROXY\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{EFCA3D92-DFD8-4672-A603-7420894BAD98}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{efce38d3-8914-4674-a7df-ae1b3d654b8a}\InprocServer32" = "$homedrive\\Windows\\System32\\MFCaptureEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFE3FA02-45D7-4920-BE96-53FA7F35B0E6}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFE6208A-0A2C-49FA-8A01-3768B559B6DA}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBSource\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFE6629C-81F7-4281-BD91-C9D604A95AF6}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFEA49A2-DDA5-429D-8F42-B23B92C4C347}\InprocServer32" = "$homedrive\\Windows\\System32\\wksprtPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EFEB5035-1DA0-4B73-AFA2-68ED7A1D98E0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.RetailInfo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F00006F2-44BC-44EF-808B-B26002A183C2}\InProcServer32" = "$homedrive\\Windows\\System32\\dialserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F004F2CA-AEBC-4B0D-BF58-E516D5BCC0AB}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F00B4404-F8F1-11CE-A5B6-00AA00680C3F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F00C7B96-456E-4433-9138-542A2E87BEA8}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F00CA7A7-4B8D-3F2F-A5F2-CE4A4478B39C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F0152790-D56E-4445-850E-4F3117DB740C}\InprocServer32" = "$homedrive\\Windows\\system32\\remotepg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0183006-8A05-4180-846E-0A8452F6CA40}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F020E586-5264-11d1-A532-0000F8757D7E}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F022A390-2F1E-44d2-AA0A-0FEB28AE6517}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0285374-DFF1-11D3-B433-00C04F8ECD78}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InProcServer32" = "$homedrive\\Windows\\system32\\NetworkExplorer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F033F90C-548B-44C3-97A8-B434096FF876}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F04C3F9B-20B3-40E1-A824-3A41FE3D7931}\InprocServer32" = "$homedrive\\Windows\\system32\\DscCoreConfProv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F04CC277-03A2-4277-96A9-77967471BDFF}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F052299C-6DA4-40f0-BE0D-8BD02FAD080A}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F061FB61-2FE6-4BFF-ACF7-5FC2271CCEA9}\InprocServer32" = "$homedrive\\Program Files (x86)\\Microsoft\\EdgeUpdate\\.*\\psmachine.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F063A606-6748-4b89-82A0-3D19D94CE8D3}\InprocServer32" = "$homedrive\\Windows\\System32\\VaultRoaming\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F074C547-461C-4146-B35A-F1F845AF413B}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationWinPalMisc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f079ec7c-11a4-4c33-87fa-090d19772fac}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f07f3920-7b8c-11cf-9be8-00aa004b9986}\InprocServer32" = "$homedrive\\Windows\\system32\\OffFilt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0820DE1-3969-4BA6-A090-E99687AE929B}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Midi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F088DE73-BDD0-4E3C-81F8-6D32F4FE9D28}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F08C5AC2-E722-4116-ADB7-CE41B527994B}\InprocServer32" = "$homedrive\\Windows\\System32\\bthprops\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{F09D237B-3FD1-4900-BEF2-3471CA68142D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f0ae1542-f497-484b-a175-a20db09144ba}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0B1E31E-4FE1-49F5-84BC-4BA007655288}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f0ce6592-5bce-41cc-bf2d-ec4f3f55e711}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0DB4512-0E25-4A1F-A88B-8FF40351BFCD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0DF5C6B-249C-4FE8-9377-281E25DE200D}\InProcServer32" = "$homedrive\\Windows\\System32\\PaymentMediatorServiceProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1171280-BC35-45d1-8F53-8AB833267899}\InprocServer32" = "$homedrive\\Windows\\system32\\dnshc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1184172-589C-4ECA-B2C8-F330C903A76F}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1196F08-BAFE-4C9C-AEE7-71C69DA5B818}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\.*\\drivefsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F12FDE6A-9394-3C32-8E4D-F3D470947284}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F1390A9A-A3F4-4E5D-9C5F-98F3BD8D935C}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F14E8B03-D080-4D3A-AEBA-355E77B20F3D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{F159A1A7-462A-4FF3-8E51-E518DC011268}\InProcServer32" = "$homedrive\\Windows\\system32\\cfmifs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1851D8E-504F-48A9-ACF7-A8C7FF709ABE}\InProcServer32" = "$homedrive\\Windows\\System32\\wuuhosdeployment\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F198A89A-5042-4294-ADF1-CB163E549798}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Win32_EncryptableVolume\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1AAAA76-BD01-42e1-A6C0-34FA86ACBB90}\InprocServer32" = "$homedrive\\Windows\\system32\\wpdmtp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f1bd1079-9f01-4bdc-8036-f09b70095066}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1C3BF79-C3E4-11D3-88E7-00902754C43A}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F1C46D71-B791-4110-8D5C-7108F22C1010}\InProcServer32" = "$homedrive\\Windows\\System32\\wintypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1E752C3-FD72-11D0-AEF6-00C04FB6DD2C}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1EBA909-6621-346D-9CE2-39F266C9D011}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F1ED7D4C-F863-4de6-A1CA-7253EFDEE1F3}\InprocServer32" = "$homedrive\\Windows\\System32\\AppIdPolicyEngineApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f20133fb-d436-4a11-9ee0-1710ac9e558b}\InProcServer32" = "AppxDeploymentClient\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F20487CC-FC04-4B1E-863F-D9801796130B}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F20DA720-C02F-11CE-927B-0800095AE340}\InProcServer32" = "$homedrive\\Windows\\system32\\packager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2102C37-90C3-450C-B3F6-92BE1693BDF2}\InprocServer32" = "$homedrive\\Windows\\system32\\wscisvif\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f216b1bc-2310-49d6-930f-ae8837bda4b0}\InProcServer32" = "$homedrive\\Windows\\System32\\CastLaunch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F22D2A32-F1F4-4D62-AF5E-E5E8253AC6A6}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F22F5E05-585C-4def-8523-6555CFBC0CB3}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f235ce7d-b143-4d4f-ad93-64e48d53a5fb}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f2468580-af8a-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2472B49-5214-4D3A-A662-04F09250D694}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F249C9EA-8DB4-43DC-B2BC-146A61D23D99}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{f270c64a-ffb8-4ae4-85fe-3a75e5347966}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F27A4830-81C1-4D00-B6BD-0A7F44CE2D86}\InProcServer32" = "$homedrive\\Windows\\System32\\XboxGipSvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f29f4028-86d2-4b45-84ec-858dc97a123e}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2C2787D-95AB-40D4-942D-298F5F757874}\InProcServer32" = "$homedrive\\Windows\\system32\\vss_ps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f2c3faae-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2C4CDB0-2714-42AD-A948-2ED958A322E3}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2CF5485-4E02-4f68-819C-B92DE9277049}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f2ed4d41-11cb-4fe4-bd48-b90f2b0f46bd}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2FC1215-A7D9-4F02-AC1F-251B074B1829}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Payments\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F2FC5C3B-FC71-452c-AB56-47BC0873E46D}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F31091EA-B0A8-11D6-B6FC-005056C00008}\InprocServer32" = "$homedrive\\Windows\\system32\\AdvancedInstallers\\cmiv2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemess\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3199DD9-A65C-4E4C-9B25-6E9997AAE1D1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F32063EA-DF0C-437D-BD5E-5E718683E4A3}\InprocServer32" = "$homedrive\\Windows\\System32\\srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F324E4F9-8496-40b2-A1FF-9617C1C9AFFE}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.FileExplorer\.Common\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3252D7B-E51D-4B14-AA5E-8E3D4315F73C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F32E8FA6-A99F-4E9B-AF78-C929EBB73589}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F32FCFEC-9054-470A-ACEE-867F2277B772}\InProcServer32" = "$homedrive\\Windows\\System32\\CXHProvisioningServer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3368374-CF19-11d0-B93D-00A0C90312e1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f33915da-f694-41db-a87e-a0ad42ee00c3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\IpsPlugin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F352C9C1-D39D-4622-A279-978A60927CDE}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\madVR\\madVR64\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{f371728a-6052-4d47-827c-d039335dfe0a}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg4decd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F375FDC3-9DB0-4927-A84A-FC1215B3570F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}\InProcServer32" = "$homedrive\\Windows\\system32\\rshx32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f3a219c3-2698-4cbf-9c07-037edb8e72e6}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3B4F2E9-CCCC-49aa-B0B2-2C4A02E69A37}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3BDFAD3-F276-49e9-9B17-C474F48F0764}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3C502D1-96DE-4623-B22C-8373FC803AB4}\InProcServer32" = "$homedrive\\Windows\\System32\\WiredNetworkCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3C9F07B-A9F4-427b-8E48-4305971D472F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f3cc4ca3-22c2-40ec-ac3c-89d8a43373b0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F3CCAE10-A927-4D4E-9138-4A513C4B10FA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Import\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3CF6965-E8D3-44a9-9B7D-A04245EA7525}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F3D3F924-11FC-11D3-BB97-00C04F8EE6C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f407d01a-0bcb-4591-9bd6-ea4a71df0799}\InprocServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC.*\\IMTCCORE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f4086d4e-2e05-428b-92de-87d8d0bb4262}\InprocServer32" = "$homedrive\\Windows\\system32\\pnrphc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F412BFA1-8035-472B-8185-F13B8C29CF21}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f414c261-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f414c262-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F42F750A-64A8-4190-951D-C6F7EF4E4BA1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F43E8166-162C-4B12-8C2B-510D21516082}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\netswitchteamcim\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F440168E-A06A-4C25-B6EB-01705985E826}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F4477AD6-6B3A-411b-9ECC-7CE89B665401}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f447b69e-1884-4a7e-8055-346f74d6edb3}\InprocServer32" = "$homedrive\\Windows\\System32\\resampledmo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F46316E4-FB1B-46eb-AEDF-9520BFBB916A}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F4655419-DAF2-42ab-9178-3B6AC903170C}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_1\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F48B770A-CBE5-44C2-8D4F-931DE9CEE6FA}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Speech\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F4AEE847-AF64-4B92-A282-9C1CDEED71FF}\InProcServer32" = "$homedrive\\Windows\\System32\\KINSAPOPPage\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f4ba59cc-2506-45ae-84c8-78ea8d7f9b3e}\InprocServer32" = "$homedrive\\Windows\\System32\\invagent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f4be747e-45c4-4701-90f1-d49d9ac30248}\InProcServer32" = "$homedrive\\Windows\\System32\\diagperf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F4D36777-EAED-4cc5-9FE7-827BE5190B20}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f4d8c39a-f43d-42b4-9bdf-4e48d3044ba0}\InprocServer32" = "$homedrive\\Windows\\System32\\dnscmmc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F4E1E7F6-A035-41B3-9856-A3C3A1C4684F}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{f4e8bc67-9616-4a28-a332-cf27a5ca6736}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F5036A24-5888-4BC1-BA1A-1DFE5FB73388}\InprocServer32" = "$homedrive\\Windows\\System32\\Microsoft\.Uev\.PrinterCustomActions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F19-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F27-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F31-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F32-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F33-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F34-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F35-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F36-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F37-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F39-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F3F-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F40-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5078F41-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f507f854-308b-401e-a1b7-b55ba6ba679a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F515306D-0156-11d2-81EA-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F515306E-0156-11d2-81EA-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5175861-2688-11d0-9C5E-00AA00A45957}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F54309BB-0AFA-4BE0-B6D9-810F01F4DEE6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F557FEA8-0F82-4DB5-8D73-88028925F0A1}\InProcServer32" = "$homedrive\\Windows\\System32\\windowmanagement\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F55C5B4C-517D-11D1-AB57-00C04FD9159E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ntevt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5668FDF-340B-4BE2-8402-748EA156BB91}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}\InProcServer32" = "$homedrive\\Windows\\System32\\Actioncenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f580a09b-ea6e-4d83-9a03-add6cb756ab3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F582A54C-90D3-45b3-9860-EE3143AA85A0}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f59aa553-8309-46ca-9736-1ac3c62d6031}\InprocServer32" = "$homedrive\\Windows\\System32\\DeviceDisplayStatusManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F59D514C-F200-319F-BF3F-9E4E23B2848C}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5a8b627-4d46-4d65-92f3-73626ae31971}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5B63656-069D-4E80-B4FD-9E0DB16604D8}\InProcServer32" = "$homedrive\\Windows\\system32\\upnphost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5BC0AF0-63FC-468F-BC6F-D63EAE129A33}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5d121ed-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5d121ee-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5d121ef-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5d121f0-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5d121f3-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f5d121f4-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5D3E63B-CB0F-4628-A478-6D8244BE36B1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5E692D9-8A87-349D-9657-F96E5799D2F4}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmidcprv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{f60163ce-2b8d-458d-ab2c-40f215767514}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F60C3E02-214A-462b-9B07-56EA38545A13}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F6166DAD-D3BE-4ebd-8419-9B5EAD8D0EC7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F618C514-DFB8-11D1-A2CF-00805FC79235}\InprocServer32" = "$homedrive\\Windows\\System32\\Com\\comadmin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F61FFEC1-754F-11d0-80CA-00AA005B4383}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F62D062C-4732-44D2-BD62-124B8AE1657C}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f64945df-4fa9-4068-a2fb-61af319edd33}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpcredentialprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6914A11-D95D-324F-BA0F-39A374625290}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F6A1CA0F-AF39-4EE1-B637-F965CBDE1E3E}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f6b13ba7-d626-45e5-82c5-26e596114dc0}\InProcServer32" = "$homedrive\\Windows\\system32\\fphc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6B6768F-F99E-4152-8ED2-0412F78517FB}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F6B6E965-E9B2-444B-9286-10C9152EDBC5}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6B7425E-AF10-984F-9DD7-F14816179E2C}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6B96EDA-1A94-4476-A85F-4D3DC7B39C3F}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6BEC032-233E-4B58-BEE9-DE13942BF136}\InProcServer32" = "$homedrive\\Windows\\System32\\lltdapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f6c29334-47dc-4397-9150-f549cf1d4861}\InProcServer32" = "$homedrive\\Windows\\System32\\WinTypes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6C3AC3E-E642-4795-A9F2-9B3AB94EAC5D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6D90F11-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6D90F12-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6D90F14-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6D90F16-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6EFEABD-3370-4AA0-A4FD-88BADC3B1A39}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\SpeechServiceWinRTApi\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F6F05056-37FA-4DAF-8A51-40A8F14E0F62}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F72A76A0-EB0A-11D0-ACE4-0000C0CC16BA}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{F72A76E0-EB0A-11D0-ACE4-0000C0CC16BA}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{f7300245-1f4b-41ba-8948-6fd392064494}\InprocServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F73C1438-71B4-4D91-AD13-1F889A03AC67}\InProcServer32" = "$homedrive\\Windows\\system32\\winrssrv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F751293B-DC01-468D-925C-2B3619582720}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F753E28A-00AA-4537-A4C4-CAA197D44DD0}\InProcServer32" = "$homedrive\\Windows\\System32\\DisplayManager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F778C6B4-C08B-11D2-976C-00C04F79DB19}\InProcServer32" = "$homedrive\\Windows\\system32\\els\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F77C0A7D-7395-45c5-BDFC-B096BF6C4DA0}\InProcServer32" = "$homedrive\\Windows\\system32\\BWContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f792beee-aeaf-4ebb-ab14-8bc5c8c695a8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F79A6BF9-7415-4CF3-AE10-4559509ABC3C}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7A4F1DA-96C3-4BCF-BEB3-1D9FFDE89EE9}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7AFD75B-BF8C-4a11-BDB9-04AD66182F84}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7B9271E-46D8-4B6A-B5CF-E6A4F7F49732}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsreng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f7c0039a-4762-488a-b4b3-760ef9a1ba9b}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7DD51E6-1CA0-4A76-B503-F96E0E64CA91}\InProcServer32" = "$homedrive\\Windows\\System32\\MbSmsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7ECB841-7EB6-41EB-BAEA-E2145F7348C6}\InProcServer32" = "$homedrive\\Windows\\system32\\dot3conn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7F4A1B6-8E87-452f-A2D7-3077F508DBC0}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7FE6BA6-9441-49E8-858F-936D8E774A2D}\InProcServer32" = "$homedrive\\Windows\\System32\\DeploymentCsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7FF39BA-FA79-11E4-87DA-8F461D5D46B0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f7ffe0a0-a4f5-44b5-949e-15ed2bc66f9d}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvsencd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F80FC80C-6A04-46FB-8555-D769E334E9FC}\InProcServer32" = "$homedrive\\Windows\\System32\\windowsdefenderapplicationguardcsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f81b1b56-7613-4ee4-bc05-1fab5de5c07e}\InProcServer32" = "$homedrive\\Windows\\System32\\(mfmp4srcsnk|mf)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f8278c54-a712-415b-b593-b77a2be0dda9}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F82B4EF1-93A9-4DDE-8015-F7950A1A6E31}\InprocServer32" = "$homedrive\\Windows\\system32\\Syncreg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F82EFF51-99FA-4393-A31D-6D5D9F3972C3}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8383852-FCD3-11d1-A6B9-006097DF5BD4}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F8388A40-D5BB-11D0-BE5A-0080C706568E}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f83cbf45-1c37-4ca1-a78a-28bcb91642ec}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F84431A3-A1BE-40FC-BAFA-84851B344AF8}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8462F08-715D-4AA3-8A6E-3D3B5EC282D7}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F857B5CD-68AD-4012-8527-AB3A8E56F620}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f85d5d94-6851-44f7-bb3a-bfd0949abf1d}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F885120E-3789-4fd9-865E-DC9B4A6412D2}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{F8900A80-4885-4722-A655-7A60F7596E3A}\InProcServer32" = "$homedrive\\Windows\\System32\\UpdateCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\InProcServer32" = "$homedrive\\Windows\\system32\\softkbd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}\InProcServer32" = "($homedrive\\Windows\\system32\\wlidcredprov\.dll|$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\WLIDCREDPROV\.DLL)"
	"HKEY_CLASSES_ROOT\CLSID\{F8A1793B-7873-4046-B2A7-1F318747F427}\InprocServer32" = "$homedrive\\Windows\\system32\\fidocredprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f8a56d3e-e304-4a9f-a916-5187019d7759}\InprocServer32" = "$homedrive\\Windows\\system32\\bcdprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f8b8412b-dea3-4130-b36c-5e8be73106ac}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8BE2AD5-4E99-3E00-B10E-7C54D31C1C1D}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{f8c2ab3b-17bc-41da-9758-339d7dbf2d88}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8CF7A98-2C45-4c8d-9151-2D716989DDAB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8D0708C-A86F-4CBA-A55A-F2081BD47721}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f8d1da80-9aea-4ca4-ba41-bee6fca037b1}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F8D253D9-89A4-4daa-87B6-1168369F0B21}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8E307FB-6D45-4AD3-9993-66CD5A529659}\InProcServer32" = "$homedrive\\Windows\\System32\\MFMediaEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8E61EDD-EA25-484e-AC8A-7447F2AAE2A9}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office.*\\Interceptor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F8FB6E07-55E6-4BB9-96BC-2393A039CEE7}\InprocServer32" = "$homedrive\\Windows\\System32\\puiapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F90B5F36-367B-402A-9DD1-BC0FD59D8F62}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F90DFE0C-CBDF-41FF-8598-EDD8F222A2C8}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{F90FE5FE-E88B-4578-9C81-79210FD53D41}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f91b9abc-985b-4c04-b5e7-9c7099fc2cda}\InprocServer32" = "$homedrive\\Windows\\system32\\adprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F91D96C7-8509-4D0B-AB26-A0DD10904BB7}\InprocServer32" = "$homedrive\\Windows\\System32\\Mpeg2Data\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{F942C606-0914-47AB-BE56-1321B8035096}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F94985D5-29F9-4743-9805-99BC3F35B678}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSI Tools\\MergeMod\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F94CDF40-02D6-4E79-89F7-B5357F3B1A39}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F963C5CF-A659-4A93-9638-CAF3CD277D13}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F975AF2C-9A51-4AF0-91EA-06038698CE38}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F9769A06-7ACA-4E39-9CFB-97BB35F0E77E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F97B8A60-31AD-11CF-B2DE-00DD01101B85}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F98724AB-2CBB-4696-B39B-98EFF79219B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F9A7AB61-C0BC-490e-A7FE-BFF26B327A3F}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{F9B189D7-228B-4F2B-8650-B97F59E02C8C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f9bcb2f0-7df0-4a39-932e-bdef29dfb16b}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F9EBBF2D-0C5D-4BF1-AE24-A30F7796D178}\InProcServer32" = "$homedrive\\Windows\\system32\\SyncInfrastructurePS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F9EFBEC2-4302-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA06375D-F0A4-4A47-AD8D-148595F1E0B8}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA0B54D5-F221-3648-A20C-F67A96F4A207}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FA10746C-9B63-4b6c-BC49-FC300EA5F256}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA2C37A7-2D1E-444F-AD7B-D946823A7072}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA3E1D55-16DF-446d-872E-BD04D4F39C93}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA3F3DD9-4C1A-456B-A8FA-C76EF3ED83B8}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA42979C-4CA9-42BE-B192-DC9EFCB5ACA4}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\appxman\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA4B375A-45B4-4D45-8440-263957B11623}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{FA5FE7C5-6A1D-4B11-B41F-F959D6C76500}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fa61e9f8-580e-4575-ab01-4a62c31fcf43}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FA6C507D-A9AF-4385-86C0-80115F0AE20B}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA6D33D4-9405-4BA5-9983-12604AC8E77A}\InProcServer32" = "$homedrive\\Windows\\System32\\mcrecvsrc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA702D88-6A1B-4809-AE49-97005E45E110}\InProcServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Shell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA735D10-205D-451B-9EE8-E171F2214EF0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA77A74E-E109-11D0-AD6E-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA782574-F39C-40FD-A733-763723814AF3}\InProcServer32" = "$homedrive\\Windows\\System32\\printticketvalidation\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA7C375B-66A7-4280-879D-FD459C84BB02}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA869D29-BA80-4D7D-A867-0DF126F980A5}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA8A68B2-C864-4BA2-AD53-D3876A87494B}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FA9342F0-B15B-473C-A746-14FCD4C4A6AA}\InprocServer32" = "$homedrive\\Windows\\system32\\azroleui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fa996453-47cf-4e5a-8df6-67f93a046ebb}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAC1D9C0-0296-11D1-A840-00A0C92C9D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_0\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAC67227-E178-4fab-9FEA-B4E77D3DBE7D}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{fad63700-aafb-463a-8c1f-4c2dbc28ae57}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAD7C22E-971B-4681-B836-83FAB87D74C2}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAE517E7-1B31-47B6-840B-14D7D910AD48}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{faeb54c4-f66f-4806-83a0-805299f5e3ad}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAF405AE-6AF6-4431-82DD-2170B66FE190}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\InprocServer32" = "$homedrive\\Windows\\System32\\ES\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{faf85f2e-a8e7-414d-a3e9-6b9e7b4a51ed}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAFA8FFA-8AD8-460D-A1B6-774FB72CA6BA}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtAdvancedDS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB012959-F4F6-44D7-9D09-DAA087A9DB57}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB11047A-4051-4d1d-9DCA-C80C5DF98D70}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB1E042E-6772-4834-B1BF-F03F120E5F36}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB2FDC4F-7DD0-4ACE-9B1E-36E5C2F98D27}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB383896-E78A-47A2-9DD1-D30A0F158D28}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnDecoder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB40360C-547E-4956-A3B9-D4418859BA66}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB453AD8-2EF4-44D3-98A8-8C6474E63CE4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{FB4D76FE-8863-4027-9D8A-4A00BEDF74D7}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fb647f50-2192-49e0-a68f-5775434058c7}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB64825E-498C-45E8-ADD4-37E0C4FC68A6}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB67F8D9-03A1-42b5-979A-1577F0193611}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB74F625-7D25-4455-B840-7B870B5B9322}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FBDBD7C2-8E45-4468-A76C-8C832456E850}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{fbebb71b-a592-4880-b096-9429ebe119db}\InprocServer32" = "$homedrive\\Windows\\System32\\L2SecHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FBF113F1-D7C8-477C-A23A-E600E7937E11}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\paint\.net\\PaintDotNet\.ShellExtension\.x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FBFA21E1-BBB8-46B3-95EB-791E29BA42F3}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC13A7D5-E2B3-37BA-B807-7FA6238284D5}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FC220AD8-A72A-4EE8-926E-0B7AD152A020}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC31D09D-D059-4551-9A28-B88A4181EC29}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC3CD69D-BD08-436F-A284-1641E2236DDA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC46B571-5D16-4DCE-8F26-F7138C09C768}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC47060E-6153-4B34-B975-8E4121EB7F3C}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FC48CC30-4F3E-4fa1-803B-AD0E196A83B1}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC5B8A24-DB05-4A01-8388-22EDF6C2BBBA}\InprocServer32" = "$homedrive\\Windows\\System32\\bidispl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC5EEAF6-2001-11DF-ADB9-F4CE462D9137}\InprocServer32" = "$homedrive\\Windows\\System32\\wifinetworkmanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC6123C7-7F25-4D1F-97A7-6C83019AB088}\InProcServer32" = "$homedrive\\Windows\\System32\\officecsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC772AB0-0C7F-11D3-8FF2-00A0C9224CF4}\InprocServer32" = "$homedrive\\Windows\\System32\\psisrndr\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{FC7AA68D-EAFB-4ce9-A012-9C33E7B02B49}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC80316A-0752-400d-AA2E-86DE4F6C26EF}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC8F7769-98CE-4ED3-B8F6-888B9D028657}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FCA7405F-710E-4438-ADEE-FB35BBF9BACD}\InprocServer32" = "$homedrive\\Windows\\system32\\CredProv2faHelper\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FCC152B7-F372-11D0-8E00-00C04FD7C08B}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fcc2867c-69ea-4d85-8058-7c214e611c97}\InProcServer32" = "$homedrive\\Windows\\system32\\(tssessionux|authui)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FCC74B77-EC3E-4dd8-A80B-008A702075A9}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
	"HKEY_CLASSES_ROOT\CLSID\{fccf70c8-f4d7-4d8b-8c17-cd6715e37fff}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FCDC2CF5-ABCD-4BA5-94DA-1823AE06FE2B}\InProcServer32" = "$homedrive\\Windows\\system32\\corrEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FCDECE00-A39D-11D0-ABE7-00AA0064D470}\InprocServer32" = "$homedrive\\Windows\\System32\\scripto\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FCF7A6F2-3300-4386-9A4F-0DD4E3226507}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WmiPerfInst\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD0A5AF3-B41D-11D2-9C95-00C04F7971E0}\InprocServer32" = "$homedrive\\Windows\\System32\\bdaplgin\.ax"
	"HKEY_CLASSES_ROOT\CLSID\{FD209E2E-813B-41C0-8646-4C3E9C917511}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ipmiprv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD215A13-A26A-44FF-BA3A-9109F278E28F}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD30033D-C508-491E-AE43-0075E46DED83}\InProcServer32" = "$homedrive\\Windows\\system32\\msctfuimanager\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD30583B-C085-4B28-9D77-0185C987CC13}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD351EA1-4173-4AF4-821D-80D4AE979048}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fd3577c4-b2b2-11e5-cb1e-848f2ee78d31}\InprocServer32" = "$homedrive\\Windows\\System32\\mtfappserviceds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD4F53E0-65DC-11D1-AB64-00C04FD9159E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ntevt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD5A78D9-C2F5-45FF-9097-C615ACD0AA51}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD5CD8B1-6FE0-44F3-BBFB-65E3655B096E}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FD688BBD-31ED-4DB7-A723-934927D38367}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD6F2917-326E-405B-8B10-DC93A013A73B}\InProcServer32" = "$homedrive\\Windows\\System32\\CryptoWinRT\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD76C304-255F-4446-A895-6E1967EC4FDC}\InprocServer32" = "$homedrive\\Windows\\system32\\SrpUxNativeSnapIn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD78DA08-2964-40BF-AE00-72EA8155CB53}\InProcServer32" = "$homedrive\\Windows\\System32\\MSVideoDSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD7F2B29-24D0-4B5C-B177-592C39F9CA10}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CD9-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CDB-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CDC-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CDD-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CDE-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CDF-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE0-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE1-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE2-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE3-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE6-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE7-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE8-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CE9-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CEA-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CEB-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD853CED-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD8C8FCE-4F85-36B2-B8E8-F5A183654539}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{fd8d3a5f-6066-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fdb00e52-a214-4aa1-8fba-4357bb0072ec}\InprocServer32" = "$homedrive\\Windows\\system32\\amsi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FDB2DC94-B5A0-3702-AE84-BBFA752ACB36}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FDD10506-9AE7-4C7D-A407-C109DDEA1845}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Core\.TextInput\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FDD384CC-78C6-4E6D-8694-1DACBEE57F96}\InProcServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FDDB1402-6A7D-4044-B85B-3AC449824BE8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FDEA20DB-AC7A-42f8-90EE-82208B9B4FC0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{FDF9C30D-CCAB-3E2D-B584-9E24CE8038E3}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{fe081f7f-67dc-4f4e-a74a-d6555cdc8efb}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fe0bfe76-18b7-4ea4-a9ca-7277eef48747}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE12CD81-5158-4bd8-A37C-A621BC0E143B}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE217CB2-0B2C-48c9-90CA-8D8BCA79248D}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE2BEA70-520D-470E-A69F-F75F245A7581}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE3C02B0-B9FF-4A45-AE19-E9A8D4893511}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE58C767-BFC9-4B9B-9E9B-462DDBE9B4D9}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fe5afcf2-e681-4ada-9703-ef39b8ecb9bf}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B}\InProcServer32" = "$homedrive\\Windows\\System32\\cdp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE6B11C3-C72E-4061-86C6-9D163121F229}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE7A7E7B-BB31-498C-9299-4F4DDC10B26F}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fe7c0d2b-27f1-4e97-951b-cf6e165eeab6}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fe841493-835c-4fa3-b6cc-b4b2d4719848}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE883157-CEBD-4570-B7A2-E4FE06ABE626}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE92BB18-77C1-451A-83E8-8420D74E4B1C}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FE9AF5C0-D3B6-11CE-A5B6-00AA00680C3F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEA4300C-7959-4147-B26A-2377B9E7A91D}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEA6E63B-45DA-4E32-8B3D-1873B2CE50E7}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsmb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEB50740-7BEF-11CE-9BD9-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEC52D45-D657-42c3-B43E-BF64B95E7072}\InprocServer32" = "$homedrive\\Windows\\System32\\sti\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fecd606e-7161-4cbc-a868-4703867823ea}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FED4ACC3-87C9-45E9-A026-5B59A855E687}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEDB2179-2335-48F1-AA28-5CDA35A2B36D}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\.*\\MmcAspExt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEEAAA2B-16F4-46F6-84BB-831197DD3D75}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEEE9C23-C4E2-4A34-8C73-FE8F9786C8B4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender Advanced Threat Protection\\WATPCSP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FEF10FA2-355E-4e06-9381-9B24D7F7CC88}\InProcServer32" = "($homedrive\\Windows\\System32\\shell32\.dll|$homedrive\\Windows\\System32\\shdocvw\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FF036D13-5D4B-46DD-B10F-106693D9FE4F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF151822-B0BF-11D1-A80D-000000000000}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF156C11-5895-42DA-B2F3-D1FCDF62FC54}\InProcServer32" = "$homedrive\\Windows\\System32\\UefiCsp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff183a37-b6da-4d32-bb24-157b282ffa48}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF2A742B-CA25-4507-BD93-6BA9B8E8965F}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF2AB3A5-5EEA-4538-8F8F-C169CCD40200}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Radios\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF2F95A4-C6A1-4B48-BC87-8709250E0D03}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Cortana\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF302BD3-3DC6-4680-9384-621A7FF574F4}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff363bfe-4941-4179-a81c-f3f1ca72d820}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF3AE31D-55B0-4945-BDE9-622ABB334C1A}\InprocServer32" = "$homedrive\\Windows\\system32\\WABSyncProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff48dba4-60ef-4201-aa87-54103eef594e}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF51D680-9190-4B6C-87DA-0062ABBBFF2E}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imebrokerps\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF5265E8-6D8B-4BD4-A52D-8D99008E04C8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.UI\.BioEnrollment\.ProxyStub\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff609cc7-d34d-4049-a1aa-2293517ffcc6}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff679da1-8ff2-4474-9c9e-52bbd409b557}\InProcServer32" = "$homedrive\\Windows\\system32\\pla\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF806D42-727C-4663-A497-A898FAE3C637}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff89cdc6-6535-49df-8c70-19ea5acd4948}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff8a32e3-a9a7-4093-b9c4-5b5b4f30ab63}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff8a71c2-7eb8-418b-950d-3b49f43f024f}\InprocServer32" = "$homedrive\\Windows\\system32\\wincredprovider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF97298A-DE83-4D65-84EA-821C06206C47}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF99E1C1-7F9A-4C83-8A57-305992EDD07B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ff9e6131-a8c1-4188-aa03-82e9f10a05a8}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FFC9F9AE-E87A-3252-8E25-B22423A40065}\InprocServer32" = "($homedrive\\Windows\\System32\\mscoree\.dll|mscoree\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{FFCDB781-D71C-4D10-BD5F-0492EAFFD90A}\InProcServer32" = "$homedrive\\Windows\\System32\\faultrep\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FFCECE86-332F-49B4-B9EE-7FECEFAD3E10}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncUtil\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ffd90217-f7c2-4434-9ee1-6f1b530db20f}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ffe1df5f-9f06-46d3-af27-f1fc10d63892}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FFE8C349-2BB1-411F-93CE-0364C5F9FD9F}\InprocServer32" = "$homedrive\\Windows\\System32\\mtfserver\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FFFDC614-B694-4AE6-AB38-5D6374584B52}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\.*\\ONBttnIELinkedNotes\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00393519-3A67-4507-A2B8-85146167ACA7}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00597829-82CE-44d4-8B0B-40BE695973B5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0086c339-9c0e-4c09-9a2f-ff3d19a44a18}\InProcServer32" = "$homedrive\\Windows\\System32\\msscp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00BC7EAE-28D5-4310-BE9F-11526A7FA37F}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{00C6D95F-329C-409a-81D7-C46C66EA7F33}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0142e4d0-fb7a-11dc-ba4a-000ffe7ab428}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0142e4d1-fb7a-11dc-ba4a-000ffe7ab428}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0142e4d2-fb7a-11dc-ba4a-000ffe7ab428}\InProcServer32" = "$homedrive\\Windows\\System32\\biocpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0142e4d3-fb7a-11dc-ba4a-000ffe7ab428}\InProcServer32" = "$homedrive\\Windows\\System32\\biocpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{01BD2313-DAF5-4e02-AE3F-F66613712278}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{02703d01-d9ab-422c-bbb7-37a0fabc7642}\InprocServer32" = "$homedrive\\Windows\\system32\\DevicePairingHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03A0E2CD-23A9-45ed-968F-6FDA22B2285E}\InProcServer32" = "$homedrive\\Windows\\system32\\pnidui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32" = "$homedrive\\Windows\\System32\\msdri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{03C93300-8AB2-41C5-9B79-46127A30E148}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{045473BC-A37B-4957-B144-68105411ED8E}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{045EFB3B-3EC4-4D6D-99A5-E87E23AEE929}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05376005-47A0-4BDA-8B5F-7EB84D50CFEF}\InProcServer32" = "$homedrive\\Windows\\ehome\\CreateDisc\\SBEServerPS\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{05943B92-0930-4129-B689-BC657A94B280}\InprocServer32" = "$homedrive\\Windows\\System32\\mcmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{06DA0625-9701-43da-BFD7-FBEEA2180A1E}\InProcServer32" = "$homedrive\\Windows\\System32\\HotStartUserAgent\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07461CC0-878C-4C0F-9255-7DDB269B363B}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehchsime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{075DB5A6-4C67-4816-AE00-7451EC2AAA51}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{07B0E5E9-D635-4CD3-B98D-7C10E700DEA0}\InprocServer32" = "c:\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{07C0A9A9-6308-4C15-B818-225D4F3FBF48}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\OpenOffice 4\\program\\shlxthdl\\shlxthdl_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{09E67AD4-950A-447a-826E-BD5DFCEF5D99}\InprocServer32" = "$homedrive\\Windows\\System32\\mspbda\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0AE89F03-C538-4471-9B12-A8E8EF246A0D}\InProcServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0B3F871D-38D9-4677-8853-A247C6366483}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehTrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5030-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5031-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5032-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5034-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5035-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5036-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5037-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb5038-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0cbb503a-f2b2-4b38-8cbc-895cec57db03}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0ce3e86f-d5cd-4525-a766-1abab1a752f5}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0E2988ED-1DCB-44D0-B9E0-C3AE1D25BE8A}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{0ef801bb-24e7-4059-aeb0-d8727eeaf04c}\InProcServer32" = "$homedrive\\Windows\\system32\\WwanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{10CFC467-4392-11d2-8DB4-00C04FA31A66}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{11FD394B-6C4C-49d8-9918-7D212CD311CB}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12367cf8-6222-4b34-8ca8-3ce703999e28}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1277B60F-34D5-48D1-B7BB-59BCA9BC71A8}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{12CE94A0-DEFB-11D2-B31D-00600893A857}\InprocServer32" = "$homedrive\\Windows\\system32\\chsbrkr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{15D633E2-AD00-465b-9EC7-F56B7CDF8E27}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\TipBand\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{17A898FB-3FC5-455C-87A9-DB06F9D0A557}\InProcServer32" = "$homedrive\\Windows\\SYSTEM32\\ime\\IMESC5\\IMSCCORE\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{1821B62A-B2A5-4e0a-98C5-9FA0D5BAAAEC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{188db6a1-5b9a-489e-bb92-0f900822ac9d}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{18b726bb-6fe6-4fb9-9276-ed57ce7c7cb2}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpcorekmts\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{190BA3F6-0205-4f46-B589-95C6822899D2}\InprocServer32" = "$homedrive\\Windows\\System32\\memdiag\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{19916E01-B44E-4e31-94A4-4696DF46157B}\InprocServer32" = "$homedrive\\Windows\\System32\\icardie\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A056BDB-8B45-462f-8D85-CAC6BDCD2A31}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1A56451B-1315-4012-861E-8587333DD631}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpsrcwp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1AE53973-2F5C-4F9E-9B68-619D309E47A3}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B0D2365-B3A3-4759-9533-D6861E86DE32}\InProcServer32" = "$homedrive\\Windows\\system32\\BWUnpairElevated\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B76DD18-2CB4-41A4-BD69-5FB8287F7814}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1B7D4AD0-A1B1-43A8-9A46-FB36AB4C1868}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BB05961-5FBF-11D2-A521-44DF07C10000}\InprocServer32" = "$homedrive\\Windows\\system32\\quartz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1BF18D30-223C-4E0F-9074-C78C1256FD43}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1DB68FCC-3C8C-49DB-8C76-9A89DE76B8CF}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E1DAECB-F640-416d-96A3-2BC8AFDF6059}\InProcServer32" = "$homedrive\\Windows\\system32\\BWUnpairElevated\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E5300BE-0762-4527-8140-C0FF22DDFC56}\InProcServer32" = "$homedrive\\Windows\\System32\\wpcao\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1E589E9D-8A8D-46d9-A2F9-E6D4F8161EE9}\InProcServer32" = "$homedrive\\Windows\\System32\\(mf|mfmpeg2srcsnk)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1e887b90-7201-431d-820e-36aa566e52f4}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1F247DC0-902E-11D0-A80C-00A0C906241A}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{1FF28512-6C1F-4CC2-BB1D-948DD60DB711}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21167137-B7E3-40B6-8863-8386E8C05716}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{21ABC687-760C-41F3-B005-F2C5BA222054}\InprocServer32" = "$homedrive\\Windows\\eHome\\BmlDataCarousel\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{223E7283-D39D-40d9-9BE9-AA61A39FBC5E}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{232b501c-348c-457e-972c-7c3adb1552c1}\InprocServer32" = "$homedrive\\Windows\\system32\\sdautoplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2331D136-E39D-4019-92D6-7CE5579962FB}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{243EDD7B-1ED1-4aa4-974C-0A370DA9DAFA}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{24800CD0-0F4E-4df7-9F69-3C6903C89224}\InprocServer32" = "$homedrive\\Windows\\system32\\MSCorEE\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{26fa7c37-2cd3-4897-9499-33330e075cbd}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehkorime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{271C3902-6095-4c45-A22F-20091816EE9E}\InprocServer32" = "$homedrive\\Windows\\System32\\(mf|mfmp4srcsnk)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2781761E-28E1-4109-99FE-B9D127C57AFE}\InprocServer32" = "c:\\Program Files( \(x86\))?\\Microsoft Security Client\\MpOAv\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{286F484D-375E-4458-A272-B138E2F80A6A}\InProcServer32" = "($homedrive\\Windows\\system32\\dpnet\.dll|dpnet\.dll)"
	"HKEY_CLASSES_ROOT\CLSID\{289AE5EE-562C-4350-A8CB-0CB0587A12FF}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2A2699C5-775A-42e9-BF4A-A36FE41BA4CB}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2B362208-CB07-4fa5-8076-8DB4AA890561}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2BB8B28A-58DC-449C-A89B-DAEFD0A8933D}\InProcServer32" = "$homedrive\\Windows\\System32\\(tsworkspace|RADCUI)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C2CEA16-CC79-4C01-B3CE-B5B7CE47101F}\InprocServer32" = "$homedrive\\Windows\\system32\\ime\\shared\\imepadsm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C676B7B-796E-4C59-8209-4D0473E32A17}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpsrcwp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2C9F6BEB-C5B0-42B6-A5EE-84C24DC0D8EF}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2CB6CDA4-1C14-4392-A8EC-81EEF1F2E079}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2E483DC9-7E4D-4861-B496-7E00B7FA184F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{2EA7A549-7BFF-4aae-BAB0-22D43111DE49}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2EB444B3-0C42-490f-9F28-C77129ACA136}\InprocServer32" = "$homedrive\\Windows\\System32\\mcsrchPH\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2EEEED04-0908-4cdb-AF8F-AC5B768A34C9}\InprocServer32" = "$homedrive\\Windows\\System32\\mf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F248FAD-47C5-42a8-9672-61095D712258}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2F7EE4B6-6FF5-4EB4-B24A-2BFC41117171}\InprocServer32" = "$homedrive\\Windows\\ehome\\MSTVCapn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FD934BC-E860-4898-A581-B7C6486CA332}\InprocServer32" = "$homedrive\\Windows\\System32\\itvdata\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{2FE9B39E-0062-41E5-A842-518E212C2CE0}\InProcServer32" = "$homedrive\\Windows\\System32\\WMPCM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3109CFE8-DCA4-4272-BD4E-605AF9D675A1}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31C88FF0-2111-44BD-A121-61DE9CD0412D}\InprocServer32" = "$homedrive\\Windows\\ehome\\cbva\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{31DCBC0C-20D8-40b0-A409-F4474A942358}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32714800-2E5F-11d0-8B85-00AA0044F941}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\wabfind\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32BAED44-34B5-11D3-9315-00C04F72D6CF}\InprocServer32" = "$homedrive\\Windows\\System32\\msscp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{32d186a7-218f-4c75-8876-dd77273a8999}\InprocServer32" = "$homedrive\\Windows\\System32\\(msmpeg2adec|MSAudDecMFT)\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{343D770D-7788-47c2-B62A-B7C4CED925CB}\InProcServer32" = "$homedrive\\Windows\\System32\\wpcmig\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{348C9CFF-CB90-4024-AE22-F17259A3934B}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34A19196-274E-4D75-9D30-D7A45A0A4178}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Sidebar\\wlsrvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{34c219bd-85c1-4338-95e8-788a36901dc2}\InProcServer32" = "$homedrive\\Windows\\System32\\wpdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{355DFFAA-3B9F-435c-B428-5D44290BC5F2}\InprocServer32" = "$homedrive\\Windows\\System32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3697C5FA-60DD-4B56-92D4-74A569205C16}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBMapTIP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{37BEC31C-370A-4324-8933-50E30B1C9901}\InProcServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{383b69fa-5486-49da-91f5-d63c24c8e9d0}\InprocServer32" = "$homedrive\\Windows\\system32\\DevicePairingHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3908C3CD-4478-4536-AF2F-10C25D4EF89A}\InprocServer32" = "$homedrive\\Windows\\system32\\wiavideo\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{39A4740D-2C8E-4186-A2DF-E3F5DD6025C2}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\OpenOffice 4\\program\\shlxthdl\\shlxthdl_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B0FB8F1-8882-4C9D-9E35-6C23FB9D8110}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3B2D194D-F107-4489-ABF8-57A125275E4E}\InProcServer32" = "$homedrive\\Windows\\system32\\BWContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{3D96ED94-5D75-4165-9E1F-1A642C7BA316}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{408A179C-A68C-4c49-ACD3-65BA221E6A71}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}\InProcServer32" = "$homedrive\\Windows\\System32\\mediametadatahandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{417BAB8B-9D22-4A88-9DA0-98C4AB6745D5}\InProcServer32" = "$homedrive\\Windows\\System32\\wpdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{41DADF7D-609C-11DB-B5B9-000CF179CDD7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{427FD3D4-F30A-4033-84EF-CBB1A955D9F7}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4345A2F4-05F5-48D6-B8A2-99D4A2E7B950}\InProcServer32" = "$homedrive\\Windows\\system32\\display\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{44C39C96-0167-478F-B68D-783294A2545D}\InProcServer32" = "$homedrive\\Windows\\System32\\netprof\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{45EACA36-DBE9-4E4A-A26D-5C201902346D}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{45F26E9E-6199-477F-85DA-AF1EDFE067B1}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{46C0A7DC-928A-485a-959F-1F9EF8686A11}\InProcServer32" = "$homedrive\\Windows\\system32\\DXPTaskRingtone\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{478DD7E7-228D-44B7-9854-DFB0E818D8A7}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehchtime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{483B0283-25DB-4C92-9C15-A65925CB95CE}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{49FC0B81-206C-407F-9F5B-106E5A3EE2D7}\InProcServer32" = "$homedrive\\Windows\\SYSTEM32\\ime\\IMESC5\\IMSCCFG\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{4a8dbdfc-6c55-4c0d-9cb8-65bb711e4a4e}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4A8ECCAC-181D-4c1b-BF8F-5D52C4008FB9}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4b6657e4-b973-46cd-9bb3-6e5ebd82448f}\InprocServer32" = "$homedrive\\Windows\\System32\\portabledevicewmdrm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4b7601c1-d292-4902-89f4-583a5ce0c535}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4BDD6232-2E55-4A1F-AAAD-961D76F439BA}\InProcServer32" = "$homedrive\\Windows\\System32\\portabledevicewmdrm\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4DF7BC39-C84D-4c80-8950-EDC1D77C9D4B}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4E9963B7-B2BF-4685-9378-8FEBEA364EF8}\InprocServer32" = "mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4EA9D6EF-694B-4218-8816-CCDA8DA74BBA}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4f61ec50-acef-4ae7-b4c6-b19bddc0f745}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F695794-BFCF-48B0-A323-F874F9BD45F2}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4F71C8B1-F8DE-4773-A6CB-E507C2D5819C}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4fabef66-4cf2-4222-a7c4-0acd3fe75b17}\InprocServer32" = "$homedrive\\Windows\\System32\\mcmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FAF64F1-A3BA-4172-B922-E6A22ACF7E3D}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{4FDDEA74-513D-4454-90B4-4AB1011157AD}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5034A1B7-99A3-43F4-83DB-34B94B13CBA4}\InprocServer32" = "c:\\Program Files( \(x86\))?\\Microsoft Security Client\\MsMpCom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{503739d0-4c5e-4cfd-b3ba-d881334f0df2}\InProcServer32" = "$homedrive\\Windows\\System32\\VaultCredProvider\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50422459-63B3-4e9f-93C7-7B068517C027}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5068B32E-DFE0-48C2-9816-4549033447DB}\InprocServer32" = "$homedrive\\Windows\\System32\\wpdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50A7B286-7D23-41E6-9440-4DAEE00DC5F0}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{50cc2c18-b48c-4764-8f3f-0331ed295ce4}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52CFFDFE-A115-4164-AFB1-EAD719C52C15}\InProcServer32" = "$homedrive\\Windows\\system32\\biocpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52e4e90a-f4af-460a-9e60-fdfb86c9dd5d}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{52FD5C49-A63D-45EC-8687-98DA8B7BFE6A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\DVD Maker\\wmm2clip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\InProcServer32" = "$homedrive\\Windows\\SYSTEM32\\ime\\IMETC10\\IMTCTIP\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{5323BCB5-0431-42be-A482-5EE76F243A28}\InprocServer32" = "$homedrive\\Windows\\System32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5437FDFA-9EC9-4CCC-8531-42F8D9C19AF7}\InprocServer32" = "mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{546BF232-C9DD-4F28-8E38-30AE2D964D46}\InprocServer32" = "c:\\Program Files( \(x86\))?\\Microsoft Security Client\\MsMpCom\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{55DFB4F7-4175-4B3B-B247-D9B399ADB119}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\MSTTSFrontendENU\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{565E978D-AC10-443A-A2C8-165C2DA1B5FC}\InprocServer32" = "$homedrive\\Windows\\system32\\SNTSearch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{56C4F5A2-E217-4610-83CC-89F09E07782B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{56ff6ee0-0f4e-4bb1-bf37-ed8a49c455ae}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{57f8510b-a5e2-41da-a8f0-8a5ae85dfffd}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141B3-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehiTvHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D2-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D4-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D5-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D6-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D7-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D8-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141D9-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141DA-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141DB-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141DC-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141DD-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{599141DE-B243-11DB-8460-00123F76E1F7}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A09F97B-708A-404D-871F-1D414F6F83B4}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5A41EFA3-6C01-43DC-8C49-110151B36C70}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpsrcwp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BBACA3E-9775-46F8-8301-48817E09D92A}\InprocServer32" = "$homedrive\\Windows\\eHome\\MhegVM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5BFD515E-4ABA-4483-A1C5-6651B7110AB6}\InprocServer32" = "$homedrive\\Windows\\System32\\audioses\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5C140836-43DE-11d3-847D-00C04F79DBC0}\InprocServer32" = "$homedrive\\Windows\\System32\\msscp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5CDCB131-A1A1-4FE9-9A10-80EFFE042AE0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\DVD Maker\\wmm2clip\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{5D05A4EB-54EA-4B7F-A28D-CE51F6BCBAF2}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{60542247-0249-417D-949B-2F0CC7EE1165}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{61FFC721-B206-45d0-B02E-6AA7E52E1575}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{62ADD3C3-2648-41E3-A142-5F379BE9229A}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\OpenOffice 4\\program\\shlxthdl\\shlxthdl_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{63A865AB-859E-4f15-8AEC-77FC615653D9}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{649c5690-507e-494a-9e89-1eb24e4bce3d}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65bbb826-08fd-48da-922f-99dbd23a8590}\InprocServer32" = "$homedrive\\Windows\\System32\\mcmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{65E6AC96-4B9B-47EA-AF5C-5DFCC72DCE26}\InProcServer32" = "$homedrive\\Windows\\system32\\IPBusEnumProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{662C0206-72AD-4ee9-899F-5E1735F60A55}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{66588FF3-290B-41b9-99CA-A90A86C73499}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{673F14E0-1875-42a1-90F9-647F4AD9DB92}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B7C8A70-35FC-478A-B652-ADD50536E270}\InProcServer32" = "$homedrive\\Windows\\ehome\\ehiTvHost\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Sidebar\\sbdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6CE51F75-0448-438e-B9CA-69C352A248A7}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6D54E523-3B26-41CB-9478-BAECBC255189}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6e2822ca-f234-45da-8c4c-1408e18981d1}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6efeae9e-014c-436a-8aac-35da9535adc0}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6F8DAE82-43A2-47AA-B0E7-47B7E82F705F}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpsrcwp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6FDEDD65-AC51-43CA-B2D0-9EB5D1155D03}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehSSO\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{6FEF44D0-39E7-4C77-BE8E-C9F8CF988630}\InprocServer32" = "$homedrive\\Windows\\system32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7007ACCF-3202-11D1-AAD2-00805FC1270E}\InProcServer32" = "$homedrive\\Windows\\System32\\netshell\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECD0-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7071ECD5-663B-4bc1-A1FA-B97F3B917C55}\InProcServer32" = "$homedrive\\Windows\\system32\\connect\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{70799824-b3ba-4157-96cb-a34d6170c96f}\InprocServer32" = "$homedrive\\Windows\\system32\\DeviceMetadataParsers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7098BB2E-EB80-4433-BEF6-DF45206A41DC}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7122A82D-E722-4AFC-AA87-EAA77D8CFCE1}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{71B804C5-5577-471D-8FE5-C4A45B654EB8}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7295965A-230A-4F34-AD5F-B15C9120F6E4}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{730F6CDC-2C86-11D2-8773-92E220524153}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76052C5C-2EB4-4C40-B1F1-2A5C8554590A}\InprocServer32" = "$homedrive\\Windows\\system32\\NetProjW\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{760C4B83-E211-11D2-BF3E-00805FBE84A6}\InprocServer32" = "$homedrive\\Windows\\System32\\msnetobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76AE5F57-B7C9-421f-B55E-FB25144317B6}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76DC8129-0A40-45eb-B0DC-09E8C6CDDE9D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{76EFD608-E0CE-4887-98E2-F931363C4BC5}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayDriverLib\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{76FD18F9-45AC-456d-8449-E1DA59B5E3D2}\InprocServer32" = "$homedrive\\Windows\\eHome\\wtv2dvrms\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7754801c-b01d-4d74-84cb-dfd70669ffbe}\InprocServer32" = "$homedrive\\Windows\\system32\\DeviceMetadataParsers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{77FAEBF1-5708-4413-8CF1-2F92F75EE71D}\InProcServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7886B467-66D4-4163-82BA-D9212FDB4CA8}\InprocServer32" = "$homedrive\\Windows\\System32\\mssha\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78F0BBC7-A4EE-4c39-B27B-7BB3955745F8}\InprocServer32" = "$homedrive\\Windows\\System32\\mspbda\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{78F3955E-3B90-4184-BD14-5397C15F1EFC}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7b6f5efb-45f0-4672-ab4d-4463c5957854}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\OpenOffice 4\\program\\shlxthdl\\ooofilt_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7CCA6768-8373-4d28-8876-83E8B4E3A969}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7d13f939-b90e-42ea-8fb6-c2183f14c578}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7D9239E5-782C-4126-99AD-81F0E8DA8F5C}\InProcServer32" = "$homedrive\\Windows\\system32\\pnidui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7d9ad905-b754-4297-b2eb-8371abe25540}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7EFD3C7E-9E4B-4A93-9503-DECD74C0AC6D}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7f5d25f8-78a5-49a8-a33c-2c0e11831c66}\InprocServer32" = "$homedrive\\Windows\\System32\\wmdrmsdk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{7FA3A1C3-3C87-40de-AC16-B6E2815A4CC8}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehTrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{805EA2A3-DF77-4171-9EDE-CB6C676C449F}\InProcServer32" = "$homedrive\\Windows\\system32\\wups\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\InProcServer32" = "$homedrive\\Windows\\SYSTEM32\\ime\\IMESC5\\IMSCTIP\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{82435bdf-f7c1-4df9-8103-eeabebf3d6e1}\InprocServer32" = "$homedrive\\Windows\\System32\\wmdrmsdk\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8278d39b-969e-464e-9f87-fba297879ce3}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{868A2E25-D6C1-450b-8510-734A4AFEE8BC}\InprocServer32" = "$homedrive\\Windows\\system32\\wlanconn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{86950435-ED12-42ef-A807-061E5E7CA99F}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8752858E-C146-4a7b-9CE8-A978DCAD03C6}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}\InProcServer32" = "$homedrive\\Windows\\System32\\mediametadatahandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{87DBE38C-A22E-43D3-8128-27FFA848A113}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8821c0e8-73ba-4448-8b46-23824e0d7831}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{888D5481-CABB-11D1-8505-00A0C91F9CA0}\InprocServer32" = "$homedrive\\Windows\\system32\\qdvd\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{88EBC1EE-F90A-484A-B9C5-8F9C0F37A828}\InprocServer32" = "$homedrive\\Windows\\System32\\itvdata\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{89A502FC-857B-4698-A0B7-027192002F9E}\InProcServer32" = "$homedrive\\Windows\\system32\\BWContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A51DC27-5A35-4E02-95A3-428BC6244A3C}\InprocServer32" = "$homedrive\\Windows\\System32\\itvdata\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8A539A30-0653-4E54-91B8-C8CF5DE862A1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\InkSeg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8BA2F157-CC2D-4d7a-BE0B-99C53DB78F10}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8BD9A7C7-6370-4A3C-A13F-6EA023A1E75C}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8C24BE77-7E9E-4d5c-85F7-EFC393B5FEC4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{8c74d361-c6d8-4e14-b9bf-5412b1530f8d}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8CBEED49-18A6-4D9C-8EF5-E4DD9AB04A83}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D26D9AA-5DA8-4b95-949A-B74954A229A6}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8D9B1EC0-181B-4d6d-987E-2754B506B242}\InprocServer32" = "$homedrive\\Windows\\SYSTEM32\\IME\\imesc5\\applets\\pintlcsa\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8DAC2D4D-A139-468e-94F4-522362EBD7D2}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8e35b548-f174-4c7d-81e2-8ed33126f6fd}\InProcServer32" = "$homedrive\\Windows\\system32\\biocpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F0A1029-0DF8-4765-A5FD-16E8ECB3545C}\InProcServer32" = "$homedrive\\Windows\\system32\\ime\\shared\\imjkapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F84CF05-3F6B-43FF-8851-0EC42B4F3849}\InProcServer32" = "$homedrive\\Windows\\ehome\\ehPresenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{8F9B42DD-9491-451a-8CCE-812DB368210C}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{901AB1E6-3EC9-4aae-AEE5-188013A5CC21}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\InkSeg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91081579-EE4D-4991-9451-E1725A9DF347}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{91162401-6E6B-478A-A7FF-994EBA35B9C3}\InProcServer32" = "$homedrive\\Windows\\system32\\ime\\shared\\imeapis\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{917D1F24-F668-4B1F-A8E6-7C426ADD48EC}\InProcServer32" = "$homedrive\\Windows\\eHome\\mstvcapn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{923BFC9D-0F16-4B02-AF1B-39A2504D9873}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{93126582-5402-4DB1-A102-33D330BC9B69}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9381D8F5-0288-11d0-9501-00AA00B911A5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msadcf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{954F1760-C1BC-11D0-9692-00A0C908146E}\InprocServer32" = "$homedrive\\Windows\\system32\\chtbrkr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{95A18FCB-6850-420F-979B-CB3A149F2CC8}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{96AE8D84-A250-4520-95A5-A47A7E3C548B}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{96FAC3B9-0273-4c0d-84F0-3A207A5EB38B}\InProcServer32" = "$homedrive\\Windows\\system32\\NetworkMap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{97103AE5-6248-4E04-97B5-36663159967C}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{97EFC6C3-695B-4637-A6E6-9A28895F410E}\InProcServer32" = "$homedrive\\Windows\\System32\\wpcao\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98037168-078f-4e5a-b235-a41aa5fd3bf5}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{987BBF42-5500-46D6-BAF0-A825828BC4EF}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{98D99750-0B8A-4c59-9151-589053683D73}\InprocServer32" = "$homedrive\\Windows\\System32\\mcsrchPH\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9968FA8D-401B-41c1-8987-362AABA71C2D}\InprocServer32" = "$homedrive\\Windows\\System32\\mspbda\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{996d2d72-4c19-47f8-8f58-0bb13e80a659}\InProcServer32" = "$homedrive\\Windows\\System32\\pnidui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9A630456-078D-43d3-9F1D-DF7A5BC0FA44}\InProcServer32" = "$homedrive\\Windows\\System32\\defaultlocationcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CB535DD-4354-42a1-8281-BBB58DEFA741}\InProcServer32" = "$homedrive\\Windows\\System32\\PerfCenterCPL\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9CE24FD4-94CB-4a9a-A19D-1B0F819005B7}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9d1b93f1-2e5f-4fdb-a95b-dad8d47e28d8}\InprocServer32" = "$homedrive\\Windows\\system32\\RPCNDFP\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9DBA709C-B3E1-4013-95B7-5ED33A2E8561}\InprocServer32" = "$homedrive\\Windows\\System32\\audioses\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9e3b7257-da6e-419c-9601-fcf13774a9aa}\InprocServer32" = "$homedrive\\Windows\\System32\\mcmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F0139EC-2195-42d7-A7B6-41E1DA530AD9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Sidebar\\wlsrvc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{9F22CFEA-CE07-41ab-8BA0-C7364AF90AF9}\InprocServer32" = "$homedrive\\Windows\\ehome\\MSTVCapn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A09C534C-0057-462E-8402-2A21D38BFCA1}\InProcServer32" = "$homedrive\\Windows\\system32\\pnidui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A167B942-CD17-4d00-BDD9-8FDC2DC158F2}\InProcServer32" = "$homedrive\\Windows\\System32\\wpccpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A1A6B99D-497F-11D1-9217-00C04FBBBFB3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\msadc\\msdfmap\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A2D8CFE7-7BA4-4bad-B86B-851376B59134}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A48E70A4-8E15-4465-9D85-CCE9E63F8AAB}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A49211A1-022F-43D7-BC55-D787C66ACF8E}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a4a8d991-cc85-493e-ae66-9a847402dad9}\InProcServer32" = "$homedrive\\Windows\\system32\\DevicePairing\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a4a8d991-cc85-493e-ae66-9a847402dada}\InProcServer32" = "$homedrive\\Windows\\system32\\DevicePairingProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A5CF917A-0F75-4b29-A0A0-5348E501DA59}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehTrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A68B20E5-0E4B-4E79-8310-FEF1912C9C66}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6A3E580-083F-471b-8F08-87D34F678C95}\InprocServer32" = "$homedrive\\Windows\\system32\\sysmain\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A6F1684D-AED6-401b-9786-A3E3B53C6641}\InProcServer32" = "$homedrive\\Windows\\System32\\wpccpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a81d181b-0fd4-4442-91a1-b6febfaf1dc6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\JNTFiltr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{a8cc4a39-8f83-44eb-a73e-e2848c4f585f}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A96434FF-30F1-430E-B568-DCCCB831FFCE}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehjpnime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A989DC2B-5E13-4426-9BD4-F666D96F15F8}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{A9FC132B-096D-460B-B7D5-1DB0FAE0C062}\InprocServer32" = "$homedrive\\Windows\\System32\\msnetobj\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AB9D6472-752F-43F6-B29E-61207BDA8E06}\InprocServer32" = "$homedrive\\Windows\\system32\\DShowRdpFilter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\OpenOffice 4\\program\\shlxthdl\\propertyhdl_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AEF1693C-839C-4066-82D6-6CC0324C9D20}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AF44BF80-36DD-4118-B4CF-8B1E3F4FB9CE}\InProcServer32" = "c:\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{AFE0D06B-E242-47ea-A987-74EB2D1030E6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{AFF4A44B-1897-453F-B6A1-BE152D0A0F75}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B056521A-9B10-425E-B616-1FCD828DB3B1}\InProcServer32" = "$homedrive\\Windows\\system32\\mssprxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B106900C-4E8D-4147-8B22-CC60C6B285A8}\InprocServer32" = "$homedrive\\Windows\\System32\\WMPCM\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B1C3DB01-7D82-4BA2-AA5D-4F1371302241}\InProcServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4124623-FC0E-47CE-BCA9-126A6104ADA1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\Journal\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B4D85BBD-C1E6-4F2B-BF43-75CB28500A08}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b5827163-52b0-42c2-940f-f1d72cab1251}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpmde\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B6B44A97-B802-4d6e-9846-3AB9C0965C43}\InProcServer32" = "$homedrive\\Windows\\System32\\defaultlocationcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{b70cc729-28ae-11dd-9676-000000000000}\InProcServer32" = "$homedrive\\Windows\\system32\\wwanadvui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B76AD54C-51A2-4230-B516-2CCAA95F8D29}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{B7A44F26-0114-4285-B4BA-C9E78C4F9416}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\MSPVWCTL\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{B8CD2E5E-AACF-4F92-9F3B-2E753B9410EE}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BA5BD097-67CF-48f0-8661-38A49BF4903F}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BAA94581-C092-425C-B4D3-7B5EE0BAC3C4}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BB18C7A0-2186-4be0-97D8-04847B628E02}\InprocServer32" = "$homedrive\\Windows\\System32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BCA2CD56-422C-44F8-B3F4-A1B7885AC007}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{BF0B4450-B1F8-4238-98B1-9CE4544D5673}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BF27441E-CDCD-4659-AEBE-06F6E069714E}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpsrcwp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{bf29a3a2-d2bf-4a22-96cc-9aceb0f94cba}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{BFC006EE-B806-4C2A-A938-6D3344781512}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\mraut\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{BFD6C433-4B17-4F6D-A93C-B03FCC4E586E}\InprocServer32" = "$homedrive\\Windows\\System32\\wpdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C02F29F0-DFCA-4DC1-8B80-ED3216E1B5E0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C0A4145B-E627-40E3-AECC-FD392DC9B959}\InProcServer32" = "$homedrive\\Windows\\system32\\xwizards\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEB7-D33A-4a4b-BF23-BBEF4663D017}\InprocServer32" = "$homedrive\\Windows\\System32\\wzcdlg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BED1-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BED9-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE6-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEE7-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEF0-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEF1-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEF2-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C100BEF3-D33A-4a4b-BF23-BBEF4663D017}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C24B9728-35A2-4C36-B763-2B007CFAF70F}\InprocServer32" = "$homedrive\\Windows\\ehome\\mfcongestioncontroller\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c282ddad-08b1-494e-951f-d32b89024142}\InprocServer32" = "$homedrive\\Windows\\system32\\DeviceMetadataParsers\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c2c4f00a-720e-4389-aeb9-e9c4b0d93c6f}\InprocServer32" = "$homedrive\\Windows\\System32\\icardie\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C39E156D-F621-48CF-B0EE-9C47C430543B}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C3A61ACF-9BE4-4e35-9A76-810AF62191E6}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcplayer\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C447080C-D0C3-48AE-B31E-BB3E93591C69}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpsrcwp\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\OpenOffice 4\\program\\shlxthdl\\shlxthdl_x64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{c5a40261-cd64-4ccf-84cb-c394da41d590}\InProcServer32" = "$homedrive\\Windows\\System32\\mediametadatahandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C6D7AB70-3D91-433D-8D9E-E1B52035C47F}\InProcServer32" = "$homedrive\\Windows\\System32\\Display\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C77A3910-BAB0-4A38-A0A1-405FA9257C1B}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehentt\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C78A4622-A033-4dab-94E8-43DE54B461F4}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehTrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C7B6C04A-CBB5-11d0-BB4C-00C04FC2F410}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{C9D849E0-FBF6-4C26-B1EC-B5D5B4E3F29D}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA4DEAB8-2C34-42B7-B4A5-78CD28A2D54F}\InProcServer32" = "$homedrive\\Windows\\ehome\\ehskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CA81B096-1D6F-4635-956E-F08C0B2EC342}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB1B7F8C-C50A-4176-B604-9E24DEE8D4D1}\InProcServer32" = "$homedrive\\Windows\\system32\\OobeFldr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CB445657-116F-11D8-941D-00065B83EE53}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CBC84B69-69EA-439B-B791-DF15F60333CF}\InProcServer32" = "$homedrive\\Windows\\system32\\biocpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cca22cf4-59fe-11d1-bbff-00c04fb97fda}\InprocServer32" = "$homedrive\\Windows\\system32\\Thawbrkr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CCFB7955-B4DC-42CE-893D-884D72DD6B19}\InProcServer32" = "$homedrive\\Windows\\system32\\biocpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD773740-B187-4974-A1D5-E0FF91372277}\InprocServer32" = "$homedrive\\Windows\\System32\\audioses\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{CD8534F7-B1CE-4A6B-B7CD-AA4AE578A20A}\InprocServer32" = "$homedrive\\Windows\\system32\\sppcomapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{cedc01c7-59fe-11d1-bbff-00c04fb97fda}\InprocServer32" = "$homedrive\\Windows\\system32\\Thawbrkr\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D032FDC6-3736-4AF0-BE08-6F6E52979BBD}\InProcServer32" = "$homedrive\\Windows\\system32\\pnidui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32" = "$homedrive\\Windows\\eHome\\ehProxy\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D10DF471-8E15-4524-A8B6-00779A1231FD}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D145BF00-4389-49E9-B3A0-4178719550CD}\InprocServer32" = "$homedrive\\Windows\\ehome\\netbridge\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d1a4299a-0adf-11da-b070-0011856571de}\InProcServer32" = "$homedrive\\Windows\\System32\\wcnwiz\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32" = "$homedrive\\Windows\\system32\\Macromed\\Flash\\Flash64_12_0_0_38\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32" = "$homedrive\\Windows\\system32\\Macromed\\Flash\\Flash64_12_0_0_38\.ocx"
	"HKEY_CLASSES_ROOT\CLSID\{D3667F1E-CCB8-4A69-99DF-59A2B2A6753F}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D39E7BDD-7D05-46b8-8721-80CF035F57D7}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D3C536B8-D0EC-48AB-838F-D4CC9A281BB5}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUX\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{D5307D61-F9BC-4de1-94EA-154a2764d49}\InprocServer32" = "$homedrive\\Windows\\system32\\ime\\shared\\imever\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D5C82393-AB49-47e9-BE80-B78DEF24DF4BB2}\InprocServer32" = "$homedrive\\Windows\\System32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{d54e0450-f515-42ac-bf22-b201443BE43}\InProcServer32" = "$homedrive\\Windows\\System32\\defaultlocationcpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D6108DC8-FBAC-426e-8A3C-1BCA926E5805}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D722AF63-6A0D-4e37-BD40-CF6FAC79A83C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D88B44DB-6C5C-4501-B7FC-3E7476275C84}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D88EC52B-8D57-49e1-9EB3-4D267D68A2AE}\InProcServer32" = "$homedrive\\Windows\\system32\\BWContextHandler\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D978F0CB-DEBA-4388-83BE-D3E106E02A4F}\InprocServer32" = "$homedrive\\Windows\\System32\\infocardapi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{D9B59177-33A7-4D76-9D51-2A996699EB25}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehPresenter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA2B8720-3354-4FAB-B838-B1472667C8E9}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DA77D991-4499-4f01-81D4-5127E93495BE}\InprocServer32" = "$homedrive\\Windows\\System32\\mspbda\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DAA92564-78C8-40A3-96D2-9115A76B8F29}\InProcServer32" = "$homedrive\\Windows\\System32\\wpdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DB285FF6-02D5-4D5D-BC48-A793BF9A90F2}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{db4f3fa7-5a08-4100-95de-b46df509b902}\InProcServer32" = "$homedrive\\Windows\\system32\\van\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC79858F-F8D2-47F7-9A1E-C879CB59A4F9}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DC8A3F5A-92B9-4C38-A81F-296612813880}\InProcServer32" = "$homedrive\\Windows\\System32\\OnLineIDCPL\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DD8D8457-6DE1-40d3-83B2-53AAC340715C}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DF1E92F3-F333-4EF5-9C38-B75CB65FFC39}\InprocServer32" = "$homedrive\\Windows\\System32\\jsIntl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFA14C43-F385-4170-99CC-1B7765FA0E4A}\InProcServer32" = "$homedrive\\Windows\\System32\\wpcumi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{DFBBDBF8-18DE-49b8-83DC-EBC727C62D94}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E06A0DDD-E81A-4E93-8A8D-F386C3A1B670}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e20543b9-f785-4ea2-981e-c4ffa76bbc7c}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E23B1CED-5E47-4FDB-AF66-B20370261B5E}\InprocServer32" = "c:\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{e44e9428-bdbc-4987-a099-40dc8fd255e7}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E4E54B1D-1AC1-405c-B62A-E11CD87F2261}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E51DFD48-AA36-4B45-BB52-E831F02E8316}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayServices\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E55A0B49-2F73-44D4-AD66-48966DED31BA}\InprocServer32" = "$homedrive\\Windows\\ehome\\Mcx2Filter\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E640F415-539E-4923-96CD-5F093BC250CD}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E64CCC22-8E66-4822-9F2F-7FC385645A03}\InProcServer32" = "$homedrive\\Windows\\System32\\OnLineIDCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E77CC89B-7401-4c04-8CED-149DB35ADD04}\InprocServer32" = "$homedrive\\Windows\\System32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E77E1B8B-ECF3-4af0-8B5E-EB13739D5344}\InprocServer32" = "$homedrive\\Windows\\System32\\Wpc\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E787250A-F3B3-4e8d-A300-F58FB129B709}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7DE9B1A-7533-4556-9484-B26FB486475E}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E7F34D0A-582E-4a48-98BA-6E58AAA3AD4C}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E882F102-F626-49E9-BD68-CE2BE7E59EA0}\InprocServer32" = "$homedrive\\Windows\\system32\\WavDest\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E882F102-F626-49E9-BD68-CE2BE7E59EB0}\InprocServer32" = "$homedrive\\Windows\\system32\\WavDest\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E882F102-F626-49E9-BD68-CE2BE7E59EC0}\InprocServer32" = "$homedrive\\Windows\\system32\\WavDest\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E95A4861-D57A-4be1-AD0F-35267E261739}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E97CED00-523A-4133-BF6F-D3A2DAE7F6BA}\InprocServer32" = "$homedrive\\Windows\\System32\\SensorsApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E98DBAEF-45AD-4de1-84E7-3FCFA79FF1FA}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{E9950154-C418-419e-A90A-20C5287AE24B}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EA9155A3-8A39-40b4-8963-D3C761B18371}\InprocServer32" = "$homedrive\\Windows\\System32\\perftrack\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ea9a0595-056e-4d74-980f-bb53f6bb9f8d}\InProcServer32" = "$homedrive\\Windows\\system32\\wups2\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EACFAA1F-A6CB-4d4a-83D9-810F84C11803}\InProcServer32" = "$homedrive\\Windows\\System32\\SensorsCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EBDD6BF3-AF35-4bf1-9EE3-335A3F5DE0FF}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\MSPVWCTL\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{ED233797-F47D-475e-9FCA-3D549E4DDAA4}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehTrace\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED81C073-1F84-4ca8-A161-183C776BC651}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ED87EFF3-FF22-404E-B2BD-BC3841BDCB2C}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehdrop\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{ee2e9ce0-0fe1-4eea-8f30-e4728b56f183}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{EEBEACC0-D281-4557-A0F4-B2193F86B1EA}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F056D291-A2AB-45f7-8EE4-40454493B351}\InProcServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayCpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F0B14D86-2673-443b-AE9B-1E274E229D19}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F1CA3CE9-57E0-4862-B35F-C55328F05F1C}\InprocServer32" = "$homedrive\\Windows\\system32\\Wat\\Watweb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f1f3b524-b27f-4a64-8d26-c654800b79d3}\InprocServer32" = "$homedrive\\Windows\\system32\\sdautoplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f2ce09f6-d836-4029-be4c-5793ba9f14ec}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehReplay\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3EFA86C-6B4F-434d-A6FF-BA797494C9B2}\InprocServer32" = "$homedrive\\Windows\\ehome\\ehskb\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F3F5824C-AD58-4728-AF59-A1EBE3392799}\InprocServer32" = "$homedrive\\Windows\\system32\\SNTSearch\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f4a5145b-260d-437f-89c4-66d81c22e9b6}\InprocServer32" = "$homedrive\\Windows\\ehome\\mcxdatapath\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F4DE8551-2C38-4D43-AD16-674CE04A2081}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Live\\Mail\\wlmimefilter64\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F51C7B23-6566-424C-94CF-2C4F83EE96FF}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSEngine\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F54879F6-3424-4d7a-999F-9095ABCDC3FC}\InprocServer32" = "$homedrive\\Windows\\System32\\mspbda\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F64A6DA6-E8AF-4B7B-BCA8-847AE765D538}\InprocServer32" = "$homedrive\\Windows\\System32\\audioses\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F66A6818-F490-431B-8CA4-4CFDA287327B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\MSTTSCommon\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f713df56-e581-482c-9453-3e934eac5899}\InProcServer32" = "$homedrive\\Windows\\System32\\sharemediacpl\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f77d9c1c-5aff-4341-b028-57f7510aa91c}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F7A465EE-13FB-409A-B878-195B420433AF}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F80608CB-5A88-4046-9E4B-3C1BB368F2DA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Media Player\\WMPDMCCore\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F87CB264-80B7-4df8-9E62-ABC259074CF6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\MSPVWCTL\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{F88A4455-BEB8-4D91-8C13-6807B0147727}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehchhime\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{f92e8c40-3d33-11d2-b1aa-080036a75b03}\InProcServer32" = "$homedrive\\Windows\\system32\\deskperf\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F979439C-48B7-4525-AB0E-EEE06439227A}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F9AE8980-7E52-11d0-8964-00C04FD611D7}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F9AE8981-7E52-11d0-8964-00C04FD611D7}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{F9F4D292-87F5-4E2D-98A1-590391932490}\InprocServer32" = "$homedrive\\Windows\\System32\\wmpencen\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FABD6EA5-AE10-4E7A-B83B-5F07ACC84214}\InProcServer32" = "$homedrive\\Windows\\System32\\wpdwcn\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FAC07F06-B005-49df-A25A-BD5D091FCC81}\InprocServer32" = "$homedrive\\Windows\\eHome\\ehGLID\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FB4CDF30-A741-421d-BCFA-6CC530D053FB}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlceoledb30\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{fbe5c2f7-027e-4033-afcd-faa04af9be8d}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FC138128-D766-4f2a-9EA6-6C88E3EC2301}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\NBDoc\.DLL"
	"HKEY_CLASSES_ROOT\CLSID\{FC8E372E-8847-4E45-B724-F676B1CACC7D}\InprocServer32" = "$homedrive\\Windows\\System32\\MsDri\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FD8D7237-49E4-4B99-A580-ACA91ED6FCDA}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Journal\\InkSeg\.dll"
	"HKEY_CLASSES_ROOT\CLSID\{FF87090D-4A9A-4f47-879B-29A80C355D61}\InprocServer32" = "$homedrive\\Windows\\System32\\AuxiliaryDisplayServices\.dll"
}

    $server_2022_coms = @{
        "HKEY_CLASSES_ROOT\CLSID\{021812bc-ae59-4f3c-9e04-72adc0ac9da5}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{04AF2416-5F4C-4FEB-A9A8-BBF9893A4E6B}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{053C9CB8-5BA1-4F47-A6F1-D1D748C7DA93}\InProcServer32" = "$homedrive\\Windows\\System32\\BcastDVRHelper\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{06BF8E77-0FEC-4bd3-AFD6-C949AE21E34B}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0814BEF4-2971-429A-B694-2F3E63912DCF}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0A235AB7-264B-4D1A-B533-DD7AB44AD94E}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0A4B5474-4226-4D28-B4FC-369CC68A7211}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0BEBFF02-C139-4f43-AE23-333A4E635ECE}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0C11C759-23B0-4731-8D48-5FE3EA62051F}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0DC1AB8B-A52D-4BA8-BD76-E2819386FB2F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0FFD3B05-5194-4e02-A4C8-A1449209F10E}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{10493933-661B-4083-9CE0-EFE48ADD0770}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{10C1EF5E-6155-4c58-B33B-5D5A78532EE8}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1153ACC9-1943-4b3b-B365-0CB8EF9CDE9B}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{11D893E6-ED32-4826-BCB1-E5F9E15C4036}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1438B859-8F3B-4053-9C45-EE3D2BAB4611}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{186cda7f-de22-4b95-99b7-49efba0a08f4}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{19198abd-d4b9-4e14-b156-725f85205f0f}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1A32449E-4C06-4d34-B674-452A952511CE}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1B9B1983-753C-47ab-9C02-A94EF23154DA}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1E66C960-3DF9-4d3a-A1A7-CEC25E938C60}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{215B68E5-0E78-4505-BE40-962EE3A0C379}\InProcServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC2_v0400\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{21AEC8CC-EF8C-422a-8CBC-D3FB3735D855}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{21FE04BD-0FCE-4d3f-A89E-D00CB1421371}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{264FFAF3-9A9C-42B7-AEDB-34896CDBC7C1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{26DFFE05-90B8-4744-8A17-50B9B64E0009}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{27569A8A-5891-4ad0-A0CE-74D6CBC035A9}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{280ECF1B-B8F6-41B6-BC14-0E58035C4DCC}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{28890E39-A124-4216-B3D8-686F4203AD20}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{288B5845-2831-42c3-861B-0ADB30446513}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{30B33640-5250-4328-92C5-A1618E406A3A}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{32be5ed2-5c86-480f-a914-0ff8885a1b3f}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpencom\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{351F7C7A-6186-405E-91A8-32DF82F437C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Pal\.Desktop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{366D4750-AB08-4957-BF80-82133AF2BC86}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{366F6FDF-839D-4ED5-BFC6-7301A42A2F20}\InProcServer32" = "$homedrive\\Windows\\System32\\FSClient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{370BF38C-0451-42e8-9B03-0CAFA95081B6}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{376666C8-61CF-4152-8398-7015FFE165EE}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{38795471-5D0E-452d-BEF8-5339CAF9E30B}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3B2B92B7-5787-4eb5-931D-9F69E47497A9}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3D85CB81-C520-436f-8C9A-8292041A9BDD}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3E54D3BF-8EFA-400f-B875-B86A309E1CBF}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4234d49b-0245-4df3-b780-3893943456e1}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{427B34A5-2199-467e-BAC2-112AC1A48391}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{44090B31-CDF9-4ad1-8182-DB5DA3627974}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4487FB5A-9D22-4718-AA9F-C6ED6C4EC169}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{44A50F5F-78E2-4D17-930C-68BB9F69EC9E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{451256BC-E7E8-4506-90F3-8746E107BF08}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{45874AC3-B98F-4851-9046-5CFE1E747DD4}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{470C0EBD-5D73-4d58-9CED-E91E22E23282}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4d56df98-e082-4bf4-9a09-df655d8427b6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4DB61F89-EECE-4317-89D2-EC17BF6B27DB}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4ED3A719-CEA8-4BD9-910D-E252F997AFC2}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{503E9FD4-127C-4d72-84BF-CF3EC3F80D40}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{50FDBB99-5C92-495E-9E81-E2C2F48CDDAE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{51208789-BD2C-475E-8265-438DFBF78F9C}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{51C0B2CF-5994-4c2c-93F1-1C2CE21DFF4B}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{51CAFEF2-C040-4022-A152-53033EE9A02B}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{51CEDF03-4316-47C9-8100-CAC54EC2E33F}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{52B20D0F-167D-4701-9AAF-9E6C3161E735}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{56E0B3FF-1E09-4c99-88B0-C5AAA22E4105}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5A8A3AAA-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5A8A3AAB-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5A8A3AAC-D614-46B9-B814-18D168A4B838}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5C8422A6-F64B-4AA6-8D3C-78A3E988AA9E}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v4\.0\.30319\\WPF\\PenIMC2_v0400\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5D2F9804-2614-47e5-9B39-C9F74F51FE98}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5DA8B048-EEB0-4c15-9BB9-F2CF953C4F47}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5F293F05-14BA-40b9-AE65-58B034579917}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5FB6752A-59BD-4385-8753-13DEFB1AE728}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{638DA67A-FAF8-4148-8DAE-9AB433DE470D}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6447ABFE-B1CF-4F4D-BE2D-4924C8C8FE00}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{64EE4BAC-1027-4736-904D-8BE23B93F82C}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{660b90c8-73a9-4b58-8cae-355b7f55341b}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{671FCFDA-4BE4-432c-A6D3-4179179C3856}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6D14D8F9-DCB2-427c-91BB-E161E5870FFD}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{70351E05-D2BD-4817-9FFD-A6D4A9A90282}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7658816D-64C1-4483-B831-DDC4470014B2}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{78DE489B-7931-4f14-83B4-C56D38AC9FFA}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{794873D1-35DB-44c2-8BD2-F332A433C80E}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7b40792d-05ff-44c4-9058-f440c71f17d4}\InprocServer32" = "$homedrive\\Windows\\System32\\mintdh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7D0E1FD9-E110-45A9-9C24-95E7680D9CB8}\InProcServer32" = "$homedrive\\Windows\\System32\\CastingShellExt\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7D892F85-CC71-48fe-BFF6-72B7BD4F9C27}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7ED25D63-48E5-4BE3-8539-3040B0B8991C}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7F4F2318-4AF6-432b-B957-B30D0779234E}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7FE402D6-B253-28D1-B35F-6189448727C0}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8097A103-F7BC-4a17-876C-EE8446752464}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{82c588e7-e54b-408c-9f8c-6af9adf6f1e9}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{84A3979A-6DD5-4a45-87B9-CBB47E0BF185}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8754DA31-5CF5-49c7-BDCF-C03045DA5A09}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{878EC44B-7E5A-4e88-B688-7138196240C7}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{87D5FBE0-B972-450B-A488-5FE6347B45C8}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{88004A5C-CEAC-41b9-A7A8-D5E166D32ACF}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{88B02583-527D-43fa-B2C3-7A4C93D37C94}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8AE85776-D1E6-4043-A94C-1529D0E26E41}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8C19ADE1-A894-4f78-BCB1-854A1464E442}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8E757038-BE02-4bce-9680-E4BE0C6C70CD}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8FF711AE-1954-4f87-B94B-3D8C4C50CAE4}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{92BF3D3E-E9D0-48a7-A459-98992E92A96B}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{93AAD2A0-036A-4B11-A078-DA8776B38139}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{96AC7453-0B2A-451e-9A1A-203CA034AF96}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{99acf7f6-ef55-4ef9-8e27-3b784a6b4639}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9A1A6626-E967-4E10-A74E-4A51895E4F93}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9B39610A-38D1-43f1-9FAF-D4E5CA50B4B2}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9B467978-A0CF-480B-965B-5A5FAC1D8277}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9B78F0E6-3E05-4A5B-B2E8-E743A8956B65}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpencom\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9c15e692-86da-4ab8-8b5e-6ac79deb6f20}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9EB7C6FC-0C96-4EE0-9B8A-F4BDA7D305E1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A0CAF057-8D9E-4d01-8CDD-5F469B153A9F}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A21FC522-F671-4013-9339-0828E5C70DD9}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A47C0430-EDBD-464E-A2AF-3B17C26AFDF5}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A56A841F-E974-45C1-8001-7E3F8A085917}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A9249952-F4C6-4BCD-9B44-6A5BA9B5209E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AC59432D-8659-48C4-A584-AFEBC920256F}\InprocServer32" = "$homedrive\\Windows\\System32\\NotificationObjFactory\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ACA965C4-D406-4531-B6D9-C099D5D8EDEA}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AD5FBC96-ACFE-46bd-A2E2-623FD110C74C}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AD76E74F-F730-4813-BF9F-BD139C13E9BF}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B20D5479-88CB-418e-A2F6-B4343B7680FE}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B3E82D1C-E5A9-49a5-A189-2A38ACC1B2D7}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B49FE003-49CC-4f36-BD61-9E6AE9C2175C}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B727ED66-3CF2-42fa-A5DA-C08121B33443}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{b7f5540c-5012-4acd-a4c6-b4b7efdcd851}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B8C54ECD-6BCE-4664-8DFD-016B751870D0}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B932D772-B787-4FBD-B82F-B2499A8269A4}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BBCD9053-4392-41cf-BA00-5CB5DA2CEF71}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BD7BDFFF-FCF5-439C-ABE7-01D244849BFB}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BE5C1432-6A36-47c6-9C07-9BF8ED15B9C1}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BF583E12-3C8B-4767-B732-CC8B34D1D65F}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BFEC0C93-0B7D-4F2C-B09C-AFFFC4BDAE78}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C4F2-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32" = "$homedrive\\Windows\\System32\\\\Windows\.StateRepository\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C5621364-87CC-4731-8947-929CAE75323E}\InProcServer32" = "(($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)msdbg2\.dll|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\msdbg2\.dll)"
        "HKEY_CLASSES_ROOT\CLSID\{C5624CEB-47EF-4637-9AE4-1354A156E5E6}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C6A4CF44-5069-4CD0-BD40-4437E4BE57EC}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{c71c41f1-ddad-42dc-a8fc-f5bfc61df957}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C907F3EA-0EB4-40BD-AAC0-D3D8C32B1840}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{CE47E952-2ADE-45b9-8F64-F829BB4BAA34}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{cf572d73-d6e5-4d45-acad-f18f4f76656f}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D105A4D4-344C-48EB-9866-EE378D90658B}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D183B45C-8099-4cd3-BE91-2441E5906738}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D46443F6-133B-4938-9C52-23B9EDD62CC3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D5BD69C0-5126-4721-8668-F0783F3640FB}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D6FCA954-F7AE-4EAC-8783-85F5E4ABD840}\InProcServer32" = "($homedrive\\Windows\\system32\\F12\\|$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\)pdmproxy100\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D751DCF1-EEAC-42b1-9593-E4B77CCB42ED}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DD7CE375-32BC-47a6-B816-AB70DF782969}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DDD6F54C-326E-44c1-9CFC-C89D997FFCCD}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DEE0CE93-8376-4DB5-A4F0-010596888B49}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DF5C33B8-3120-4cd4-991F-300385B66FDE}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E1779AD4-B31D-46be-BFA3-C1677A0A2851}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E230022C-8258-41a4-AFF4-A917FE75C58B}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E8E9D2D1-130A-4460-98BB-48C9A6F280B9}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh.*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f580a09b-ea6e-4d83-9a03-add6cb756ab3}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FDDB1402-6A7D-4044-B85B-3AC449824BE8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E3D5D93C-1663-4A78-A1A7-22375DFEBAEE}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E3E1D967-0829-48AC-B3AD-C5AE4CA171C4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\sqlxmlx\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e3e459d6-2fde-4229-a85d-ea3693218b90}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.PlatformDiagnosticsAndUsageDataSettings\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e3e478d6-a2f2-4791-89a3-21f5c78dc3ec}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e3e7ca72-7466-4aa1-906b-f6d23347f48b}\InProcServer32" = "$homedrive\\Windows\\System32\\DesktopView\.Internal\.Broker\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E3E8B9D5-EA6E-4ECD-AC1F-933087551378}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E410F8AE-00A1-4A1B-8247-924705718354}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E413D040-6788-4C22-957E-175D1C513A34}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4206432-01A1-4BEE-B3E1-3702C8EDC574}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E423AF7C-FC2D-11d2-B126-00805FC73204}\InprocServer32" = "$homedrive\\Windows\\system32\\stclient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4288337-873B-11D1-BAA0-00AA00BBB8C0}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\(CHS|SHARED)\\ChsIFEComp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows NT\\TableTextService\\TableTextService\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E430E93D-09A9-4DC5-80E3-CBB2FB9AF28E}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\prchauto\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB1-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB2-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB3-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB5-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB6-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB7-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E436EBB8-524F-11CE-9F53-0020AF0BA770}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E444E1B9-502C-44f9-B714-30DA330D0E8E}\InprocServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e46787a1-4629-4423-a693-be1f003b2742}\InProcServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E46C6E1E-8ADE-4EDD-AFAA-446D1999911B}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E474E05A-AB65-4f6a-827C-218B1BAAF31F}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E476E4C0-409C-43CD-BBC0-5905B4138494}\InProcServer32" = "$homedrive\\Windows\\system32\\SecurityHealthAgent\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4785230-0E43-47DC-826A-07DBC3AA63D8}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceSetupManagerAPI\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e4796550-df61-448b-9193-13fc1341b163}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E48B2549-D510-4A76-8A5F-FC126A6215F0}\InprocServer32" = "$homedrive\\Windows\\System32\\ieapfltr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E49741E9-93A8-4AB1-8E96-BF4482282E9C}\InprocServer32" = "$homedrive\\Windows\\System32\\sysmon\.ocx"
        "HKEY_CLASSES_ROOT\CLSID\{E4979309-7A32-495E-8A92-7B014AAD4961}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E49F7E50-C070-11DF-AC23-18A90531A85A}\InProcServer32" = "$homedrive\\Windows\\System32\\fhengine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4BCAC13-7F99-4908-9A8E-74E3BF24B6E1}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4C1D9A2-CBF7-48BD-9A69-34A55E0D8941}\InProcServer32" = "$homedrive\\Windows\\system32\\dpnet\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\VMware\\VMware Workstation\\x64\\vmdkShellExt64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4D5B02C-82A9-4363-BD02-8BA595200BCF}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e4e55606-2ffb-4558-a601-7693efc5481c}\InProcServer32" = "$homedrive\\Windows\\System32\\winmde\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4E915A9-8344-4F88-9326-2ADC071D4FF6}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E4EFA193-F8D6-4DDD-8D60-DA71614825D3}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceFlows\.DataModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E50CFA77-9BAD-47A3-A1E2-038C7AD0051A}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E51522D1-93B8-4AE2-B5C4-D397B8595EF2}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxHAPDS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E51B7EF6-4A7F-4780-AAAE-D4B291AACD2E}\InprocServer32" = "$homedrive\\Windows\\System32\\vmchipset\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E524CB3D-29DF-49AD-BF4E-AFF32F8551AC}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e53cd6ee-5c5c-4701-9ff2-c204bfed819d}\InProcServer32" = "$homedrive\\Windows\\System32\\LicenseManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E54CDFAF-2381-4cad-AB99-F38517127D5C}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E54E4714-22AE-40c5-BB24-F839845C7C98}\InProcServer32" = "$homedrive\\Windows\\System32\\usercpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E565CAF2-2B8D-4499-9148-7EBAD978D4EF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\embeddedlockdownwmi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E573236F-55B1-4EDA-81EA-9F65DB0290D3}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e5899c7c-0fc7-499e-a262-174fd692dc9f}\InprocServer32" = "$homedrive\\Windows\\system32\\capiprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E593941A-F61C-49C3-85F1-D00EBF0D4EB2}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxAdvancedDS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E598560B-28D5-46aa-A14A-8A3BEA34B576}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5A040E9-1097-4D24-B89E-3C730036D615}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e5b35059-a1be-4977-9bee-5c44226340f7}\InProcServer32" = "$homedrive\\Windows\\System32\\Chakra\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5B4EAA0-B2CA-11CE-8D2B-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5B5B938-52A0-4B37-8659-24EB5165B9A0}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\netdacim\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5B8E079-EE6D-4E33-A438-C87F2E959254}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5CA59F5-57C4-4DD8-9BD6-1DEEEDD27AF4}\InprocServer32" = "$homedrive\\Windows\\System32\\Inked\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5CB7A31-7512-11D2-89CE-0080C792E5D8}\InProcServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E61B54C9-1261-4929-8A64-4DEFAF49191B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.RetailInfo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E61BF828-5E63-4287-BEF1-60B1A4FDE0E3}\InProcServer32" = "$homedrive\\Windows\\System32\\WorkfoldersShell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6290C32-443A-4529-AEC3-320ADF0F9622}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6335F02-80B7-4DC4-ADFA-DFE7210D20D5}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E64164EB-1AE0-4C50-BAEF-A413C2B3A4BC}\InprocServer32" = "$homedrive\\Windows\\system32\\ms3dthumbnailprovider\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{E68d2B3E-192D-448E-827E-239082D74DC6}\InProcServer32" = "$homedrive\\Windows\\System32\\NetworkUXBroker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E69FD98D-7EBE-4C01-BFED-67B4E4616A49}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6C77299-37E8-4810-B28B-528A7D4BE7AF}\InprocServer32" = "$homedrive\\Windows\\System32\\RuleBasedDS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6D78900-BB40-4039-9C54-593A242B65DA}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSEnv\\msenvp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6E46E80-CA08-49DD-93E8-A2DDB88FD14B}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6E73D20-0C8A-11d2-A484-00C04F8EFB69}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6EE9AAC-F76B-4947-8260-A9F136138E11}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e6f721c1-034a-48b6-96dd-ce36ced74a03}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Ocr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e6fe8c05-1500-4754-8b9a-14bf27c3b1d8}\InProcServer32" = "$homedrive\\Windows\\System32\\provhandlers\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E71B4063-3E59-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E724B749-18D6-36AB-9F6D-09C36D9C6016}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e74e57b0-6c6d-44d5-9cda-fb2df5ed7435}\InprocServer32" = "$homedrive\\Windows\\system32\\certCredProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e755468c-02f5-4d96-8487-3be68ffe633a}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E756C791-2001-4de5-83C7-DE61D88831D0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.NetworkOperators\.HotspotAuthentication\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e760e244-abb3-4c3c-b925-0781c8ceb46c}\InprocServer32" = "$homedrive\\Windows\\system32\\colbact\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E77026B0-B97F-4cbb-B7FB-F4F03AD69F11}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e770cb37-6874-43c9-80d3-a43a36d2bf3b}\InProcServer32" = "$homedrive\\Windows\\System32\\aadtb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E772BBE6-CB52-3C19-876A-D1BFA2305F4E}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32" = "$homedrive\\Windows\\system32\\upnp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E77DB53F-039E-4301-9572-8ECFD3814D64}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E786FB32-B659-3D96-94C4-E1A9FC037868}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e79167d7-1b85-4d78-b603-798e0e1a4c67}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e7a7a3e2-c61b-4f1f-ab41-e929dd7fa60d}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpdapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7A8B38F-AE80-4753-B520-433D402E6379}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7B0F685-6247-4E7D-823E-06DEE79A8AA9}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7D35CFA-348B-485E-B524-252725D697CA}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemsvc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7D574D5-2E51-3400-9FB6-A058F2D5B8AB}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7DE514C-BBBC-41D4-8838-4BB0FE21229A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e7e3cce4-9845-449c-b882-be963d31bd1a}\InProcServer32" = "$homedrive\\Windows\\System32\\LicensingWinRT\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7E6A098-87CE-420D-91AE-413312AC8FA6}\InprocServer32" = "$homedrive\\Windows\\system32\\WfHc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7E977EF-BE01-447B-8108-B9C84F45B946}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E800E945-780D-48D3-89E7-D822EA18F0A2}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E801D4C9-C485-46AF-B839-7A16D4895182}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Gaming\.XboxLive\.Storage\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E810CEE7-6E51-4cb0-AA3A-0B985B70DAF7}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E822F35C-DDC2-3FB2-9768-A2AEBCED7C40}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e82a2d71-5b2f-43a0-97b8-81be15854de8}\InProcServer32" = "$homedrive\\Windows\\System32\\dfshim\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E838B72C-83C9-4a08-8DD1-144CB14616F1}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E846F0A0-D367-11D1-8286-00A0C9231C29}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E847030C-BBBA-4657-AF6D-484AA42BF1FE}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E851CB66-C839-4E96-8363-8535EB16FE2C}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispig|nvlei)\.inf_amd64_.*\\nvgames\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E8C40B98-FCF5-4047-86DA-11A11590CB98}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e8e4dbb7-bfa1-4a0c-a168-b0568d4654e2}\InprocServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E8E73B6B-4CB3-44A4-BE99-4F7BCB96E491}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVAudio\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{E8FD5270-2AFB-4345-A75B-C8F5C3A412A3}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9148312-A9BF-3A45-BBCA-350967FD78F5}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e916b6b2-22bd-4afc-b337-d3d9fb27670e}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9218AE7-9E91-11D1-BF60-0080C7846BC0}\InprocServer32" = "$homedrive\\Windows\\system32\\iassdo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9225296-C759-11d1-A02B-00C04FB6809F}\InprocServer32" = "$homedrive\\Windows\\System32\\tapi3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e9309678-18b4-414b-ba7a-2c9a7bcf9684}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E94137E0-92ED-4579-9251-18AF2A08CCD1}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E947A0B0-D47F-3AA3-9B77-4624E0F3ACA4}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9495B87-D950-4ab5-87A5-FF6D70BF3E90}\InProcServer32" = "$homedrive\\Windows\\system32\\wscui\.cpl"
        "HKEY_CLASSES_ROOT\CLSID\{E95186C7-7D80-4311-843D-0702CBC8B1E4}\InProcServer32" = "$homedrive\\Windows\\system32\\RemoveDeviceContextHandler\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9571AB2-AD92-4ec6-8924-4E5AD33790F5}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E96767E0-7EAA-45E1-8E7D-64414AFF281A}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E96F5460-09CE-4f46-88B1-F4B6B4A8E252}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e9711a2f-350f-4ec1-8ebd-21245a8b9376}\InprocServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9729012-8271-4e1f-BC56-CF85F914915A}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{E974D26D-3D9B-4D47-88CC-3872F2DC3585}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsServices\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E979DAD9-25E8-45D7-AB42-43FB7B9F38CC}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E97D552D-9AE9-46AA-9151-D2DA4BBB5E96}\InProcServer32" = "$homedrive\\Windows\\System32\\execmodelclient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E97DEC16-A50D-49bb-AE24-CF682282E08D}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispig|nvlei)\.inf_amd64_.*\\nv3dappshext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E98B8DC5-72E3-48E4-A4BC-9393F3EA0DA5}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Management\.Workplace\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e9970fa4-b6aa-11d9-b032-000d56c25c27}\InprocServer32" = "$homedrive\\Windows\\system32\\sdohlp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9A4A80A-44FE-4DE4-8971-7150B10A5199}\InprocServer32" = "$homedrive\\Windows\\system32\\msheif\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9A6AB1B-0C9C-44AC-966E-560C2771D1E8}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9D4CE0B-0183-4D55-9F86-90F7B06E3D37}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9F4EBAB-D97B-463e-A2B1-C54EE3F9414D}\InprocServer32" = "$homedrive\\Windows\\System32\\mfnetsrc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA206668-C63A-4A05-ABA8-65298048230E}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxDecoder\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ea297d29-fc9f-41ef-a2e0-666891b01c6e}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA2C6B24-C590-457B-BAC8-4A0F9B13B5B8}\InProcServer32" = "$homedrive\\Windows\\System32\\UserAccountControlSettings\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA30C654-C62C-441f-AC00-95F9A196782C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA502722-A23D-11D1-A7D3-0000F87571E3}\InProcServer32" = "$homedrive\\Windows\\System32\\GPEdit\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA678830-235D-11d2-A8B6-0000F8084F96}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ea72d00e-4960-42fa-ba92-7792a7944c1d}\InProcServer32" = "$homedrive\\Windows\\System32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA770D9E-D1C9-454B-99B7-B2F8CDD2482F}\InProcServer32" = "$homedrive\\Windows\\System32\\Geolocation\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA778DB4-CE69-4da5-BC1D-34E2168D5EED}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{ea8b451c-5a19-49cf-bc5e-98accca49ef3}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA92B647-F9C1-48ED-A0FF-433E54FF0D73}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Web\.Diagnostics\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAA78D4A-20A3-3FDE-AB72-D3D55E3AEFE6}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAB16C5D-EED1-4E95-868B-0FBA1B42C092}\InprocServer32" = "$homedrive\\Windows\\system32\\mstscax\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAB22AC3-30C1-11CF-A7EB-0000C05BAE0B}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAC8A024-21E2-4523-AD73-A71A0AA2F56A}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiutils\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ead1a538-3bb4-45d9-b6c9-dc167e21d959}\InProcServer32" = "$homedrive\\Windows\\System32\\CapabilityAccessManagerClient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAE440DB-57fC-4E74-8C8B-BD10FCB18223}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAE50EB0-4A62-11CE-BED6-00AA00611080}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{EAE6E758-ECC5-41ED-8FF8-7559C4AEBE43}\InprocServer32" = "$homedrive\\Windows\\System32\\ChxAPDS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EAE826D3-ECB5-49ff-BC55-7B318E78C6DD}\InprocServer32" = "$homedrive\\Windows\\System32\\dot3dlg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{eb124705-128b-40d4-8dd8-d93ed12589a4}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB36A2D2-BA9E-457F-8023-66EE08D4D955}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{eb4d075a-65c0-476b-956c-c605eade03f7}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB56EAE8-BA51-11d2-B121-00805FC73204}\InprocServer32" = "$homedrive\\Windows\\system32\\stclient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB6B4457-F013-4E5A-9B05-1D44E4D6FAEB}\InProcServer32" = "$homedrive\\Windows\\System32\\listsvc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB87E1BD-3233-11D2-AEC9-00C04FB68820}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiutils\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB949F48-A506-482E-8DF8-8856B421CC2A}\InProcServer32" = "$homedrive\\Windows\\System32\\TaskFlowDataEngine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB9D0A19-E64D-4C85-A6A1-45EFAB463E6F}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Printers\.Extensions\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EBAA029C-01C0-32B6-AAE6-FE21ADFC3E5D}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EBB08C45-6C4A-4FDC-AE53-4EB8C4C7DB8E}\InProcServer32" = "$homedrive\\Windows\\System32\\msctf\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EBB236B1-F57F-480D-9DE9-B15A87298EEC}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ebe53edd-8816-43b2-9c4f-47c7e2e2fb3b}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EBFE7BA0-628D-11D2-AE0F-006097B01411}\InProcServer32" = "$homedrive\\Windows\\system32\\dpnet\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC00BA63-C73A-4679-AC8D-69366C766989}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC04D82C-AA59-4ba4-96B1-27BE3FF05E00}\InprocServer32" = "c:\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\vstoee\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ec05b81f-ec57-47c9-a6ce-eebc9b35861b}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC0AE07D-6A4C-49a4-8A40-F130C525D7D9}\InProcServer32" = "$homedrive\\Windows\\System32\\audiokse\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC231970-6AFD-4215-A72E-97242BB08680}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Microsoft\.Uev\.AgentWmi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC278F3A-BFE8-42d5-99C0-E25F5EF4A3D1}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC3DAC94-DF80-3017-B381-B13DCED6C4D8}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ec4db96f-6872-4903-a448-6dffc454ae6d}\InProcServer32" = "$homedrive\\Windows\\System32\\PlayToDevice\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC529B00-1A1F-11D1-BAD9-00609744111A}\InprocServer32" = "$homedrive\\Windows\\System32\\ksproxy\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{ec57976f-0796-42b5-a699-6a24933a48bc}\InProcServer32" = "$homedrive\\Windows\\System32\\CastLaunch\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC860C1A-CD41-4AA4-AC8E-75ABB7B46E21}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulation\\VirtualCameraManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC8A7A18-FE68-403f-9625-CF63026F1BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\InprocServer32" = "$homedrive\\Windows\\System32\\FirewallAPI\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC9BA17D-60B5-462B-A6D8-14B89057E22A}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafaa-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafab-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafac-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafad-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafae-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafaf-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb1-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb2-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb3-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb4-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb5-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb6-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb7-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafb9-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafbc-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc2-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc3-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc4-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc6-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc7-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafc9-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafca-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafcb-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafcc-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafcd-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafce-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafcf-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafd0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECABAFD1-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabafd3-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0a8-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0aa-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0ab-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0ac-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0bd-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0be-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0bf-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0c0-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0c4-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0c5-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\system32\\ES\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0c7-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecabb0c8-7f19-11d2-978e-0000f8757e2a}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECABB0C9-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECABB0CA-7F19-11D2-978E-0000F8757E2A}\InprocServer32" = "$homedrive\\Windows\\System32\\comsvcs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECB17B16-24AF-41E2-864C-34FE5427FF37}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXTaskFactory\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECC82A10-B731-3A01-8A17-AC0DDD7666CF}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}\InprocServer32" = "$homedrive\\Windows\\System32\\DfsShlEx\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECD32AEA-746F-4dcb-BF68-082757FAFF18}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\rtscom\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECD4FC4D-521C-11D0-B792-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECD4FC4E-521C-11D0-B792-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECD4FC4F-521C-11D0-B792-00A0C90312E1}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECDB0924-4208-451E-8EE0-373C0956DE16}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECE71064-011D-45b7-AEF2-3B626985E937}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{ECF03A32-103D-11d2-854D-006008059367}\InProcServer32" = "$homedrive\\Windows\\system32\\mydocs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ecf5bf46-e3b6-449a-b56b-43f58f867814}\InProcServer32" = "$homedrive\\Windows\\System32\\IDStore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ECF622A8-028B-4275-B9F6-1C84EE411A3E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED0BC45C-2438-31A9-BBB6-E2A3B5916419}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED3AF319-8B2B-455F-91A2-AC3B76111C43}\InProcServer32" = "$homedrive\\Windows\\System32\\DeviceElementSource\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED43BB3C-09E9-498a-9DF6-2177244C6DB4}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED475410-B0D6-11D2-8C3B-00104B2A6676}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office16\\OLMAPI32\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{ED4B1828-CD88-460F-AEFF-3D63FC8BBF68}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\dnsclientpsprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ed6ae9cf-ad35-46b7-ac30-3f8b9eb5349f}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ed72f0d2-b701-4c53-adc3-f2fb59946dd8}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED78AC26-1ED5-460A-BD5C-DC0FE7E7688F}\InProcServer32" = "$homedrive\\Windows\\System32\\UNP\\UNPUX\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED7BA470-8E54-465E-825C-99712043E01C}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecsext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED8C108E-4349-11D2-91A4-00C04F7969E8}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED8C22CA-7722-464A-A522-7967ABF63C35}\InProcServer32" = "$homedrive\\Windows\\system32\\hgcpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED8F884B-5CD8-4970-B6B6-C493BF12C978}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Mirage\.Internal\.Capture\.Pipeline\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED934789-80B8-4891-A1D5-BD97D2021F2B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\filetrace\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED999FF5-223A-4052-8ECE-0B10C8DBAA39}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemcore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ed9d80b9-d157-457b-9192-0e7280313bf0}\InProcServer32" = "$homedrive\\Windows\\system32\\zipfldr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{eda4e1db-2e1f-450d-9e65-7ec502cc0a4f}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EDAC9CAA-4874-48C0-80DB-2D81B63EFE13}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispig|nvlei)\.inf_amd64_.*\\nvvitvs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{edb5f444-cb8d-445a-a523-ec5ab6ea33c7}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{edc3a8b5-2e25-466a-a1ad-21e2f19414ac}\InProcServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EDC978D6-4D53-4b2f-A265-5805674BE568}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EDD36029-D753-4862-AA5B-5BCCAD2A4D29}\InprocServer32" = "$homedrive\\Windows\\System32\\FunDisc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{edd749de-2ef1-4a80-98d1-81f20e6df58e}\InProcServer32" = "$homedrive\\Windows\\System32\\l2nacp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EDE0C6E4-C5DE-4377-A472-E590B23B604C}\InProcServer32" = "$homedrive\\Windows\\System32\\HolographicExtensions\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ede7f087-890f-491c-b906-9abb31896960}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EDEA4743-46D4-4C14-B358-64FD126052EC}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EDF6970E-4557-4BC5-86C2-C7E52A06B27F}\InProcServer32" = "$homedrive\\Windows\\System32\\Speech\\SpeechUX\\SpeechUXPS\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{EE01EAAB-BC79-458C-B93F-FB59D89596B0}\InProcServer32" = "$homedrive\\Windows\\System32\\vmprox\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE09B103-97E0-11CF-978F-00A02463E06F}\InprocServer32" = "$homedrive\\Windows\\System32\\scrrun\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE0BDDFA-8373-4cc4-85D8-0618E453187C}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE14E412-4988-458C-B863-76E3C1BF71C2}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE15C2BD-CECB-49F8-A113-CA1BFC528F5B}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\73\.0\.4\.0\\drivefsext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ee20eeba-df64-4a4e-b7bb-2d1c6b2dfcc1}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE24A2C3-3AA2-33DA-8731-A4FCC1105813}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE30215D-164F-4A92-A4EB-9D4C13390F9F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\LAV64\\LAVVideo\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{EE366069-1832-420F-B381-0479AD066F19}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE372C60-0016-43B5-865C-D5BB2CDDAE6B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\PD\\Aac_Universal Holtek RGB DRAM\\AacHal_x64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE4DA6A4-8C52-4a63-BBB8-97C93D7E1B6C}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE5799D0-070A-49EE-8476-6A02E46E9FDD}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE832CE3-06CA-33EF-8F01-61C7C218BD7E}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE8E4870-A889-4DC4-969F-F38F707F4AC2}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE96F4E1-377E-315C-AEF5-874DC8C7A2AA}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{eea0c191-dda8-4656-8fc4-72bdedba8a78}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EEBD2F15-87EE-4f93-856F-6AD7E31787B3}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EEC5DCCA-05DC-4B46-8AF7-2881C1635AEA}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EEC6993A-B3FD-11D2-A916-00C04FB98638}\InProcServer32" = "$homedrive\\Windows\\System32\\pid\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EED01FD5-42B6-4846-A81F-9C40D219197F}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EEF05C76-5C98-3685-A69C-6E1A26A7F846}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EEF5290C-7F3D-4640-93F2-F189DC616510}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispig|nvlei)\.inf_amd64_.*\\nvdisps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF011F79-4000-406D-87AF-BFFB3FC39D57}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF114C90-CD1D-484E-96E5-09CFAF912A21}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF19FBF6-0212-4463-8B3E-14E1318DC616}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef1c0450-0b48-4384-94ae-d1cb35641f86}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF24F689-14F8-4D92-B4AF-D7B1F0E70FD4}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF30258D-9897-45CD-A760-FE5C195CB00E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF30FFEE-87D2-414C-985D-473CA38D707E}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.pcshell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF3E932C-D40B-4F51-8CCF-3F98F1B29D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF411752-3736-4CB4-9C8C-8EF4CCB58EFE}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef43ecfe-2ab9-4632-bf21-58909dd177f0}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF544DC6-8DD8-4D8E-B867-BC728AC2B6D7}\InProcServer32" = "$homedrive\\Windows\\System32\\DuCsps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF5C5336-1AF1-42E8-8AAD-FC2453B765DE}\InprocServer32" = "$homedrive\\Windows\\System32\\InkObjCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef5db4c2-9312-422c-9152-411cd9c4dd84}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef636390-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef636391-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef636392-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef636393-f343-11d0-9477-00c04fd36226}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\msdaps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF6EF542-EB19-4986-89D3-143960609251}\InprocServer32" = "$homedrive\\Windows\\system32\\ppcsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF79AB42-5404-4BCA-8BD5-727160DDFAE5}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF7DEED8-27D0-42DC-B135-664EEFC69F52}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Web\.Http\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ef7e0655-7888-4960-b0e5-730846e03492}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF7F04A5-461B-4E32-840D-5841AB00713C}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF884939-F1EA-4EFB-B676-D2F802177C5F}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispig|nvlei)\.inf_amd64_.*\\nvvitvs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF985E71-D5C7-42D4-BA4D-2D073E2E96F4}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFA97F08-EE06-42EC-AAAF-F8CB106247A2}\InProcServer32" = "$homedrive\\Windows\\System32\\FileAppxStreamingDataSource\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFB23A09-A867-4BE8-83A6-86969A7D0856}\InProcServer32" = "$homedrive\\Windows\\system32\\cscobj\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFB4A0CB-A01F-451C-B6B7-56F02F77D76F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFB92EFB-9236-4bd7-B60D-51D1C7D1C87A}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFBD9A69-66AF-4D44-BB36-D477E5014216}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office16\\OSFROAMINGPROXY\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{EFCA3D92-DFD8-4672-A603-7420894BAD98}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{efce38d3-8914-4674-a7df-ae1b3d654b8a}\InprocServer32" = "$homedrive\\Windows\\System32\\MFCaptureEngine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFE3FA02-45D7-4920-BE96-53FA7F35B0E6}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFE6208A-0A2C-49FA-8A01-3768B559B6DA}\InprocServer32" = "$homedrive\\Windows\\System32\\MSAMRNBSource\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFE6629C-81F7-4281-BD91-C9D604A95AF6}\InProcServer32" = "$homedrive\\Windows\\System32\\dsdmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFEA49A2-DDA5-429D-8F42-B23B92C4C347}\InprocServer32" = "$homedrive\\Windows\\System32\\wksprtPS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFEB5035-1DA0-4B73-AFA2-68ED7A1D98E0}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.System\.Profile\.RetailInfo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F00006F2-44BC-44EF-808B-B26002A183C2}\InProcServer32" = "$homedrive\\Windows\\System32\\dialserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F004F2CA-AEBC-4B0D-BF58-E516D5BCC0AB}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F00B4404-F8F1-11CE-A5B6-00AA00680C3F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F00C7B96-456E-4433-9138-542A2E87BEA8}\InprocServer32" = "$homedrive\\Windows\\System32\\srh.*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F00CA7A7-4B8D-3F2F-A5F2-CE4A4478B39C}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0152790-D56E-4445-850E-4F3117DB740C}\InprocServer32" = "$homedrive\\Windows\\system32\\remotepg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0183006-8A05-4180-846E-0A8452F6CA40}\InProcServer32" = "$homedrive\\Windows\\System32\\MbaeApiPublic\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F020E586-5264-11d1-A532-0000F8757D7E}\InProcServer32" = "$homedrive\\Windows\\system32\\dsquery\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F022A390-2F1E-44d2-AA0A-0FEB28AE6517}\InprocServer32" = "$homedrive\\Windows\\system32\\dxp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0285374-DFF1-11D3-B433-00C04F8ECD78}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0291081-E87C-4E07-97DA-A0A03761E586}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\InkObj\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InProcServer32" = "$homedrive\\Windows\\system32\\NetworkExplorer\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F033F90C-548B-44C3-97A8-B434096FF876}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F04C3F9B-20B3-40E1-A824-3A41FE3D7931}\InprocServer32" = "$homedrive\\Windows\\system32\\DscCoreConfProv\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F04CC277-03A2-4277-96A9-77967471BDFF}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F052299C-6DA4-40f0-BE0D-8BD02FAD080A}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F063A606-6748-4b89-82A0-3D19D94CE8D3}\InprocServer32" = "$homedrive\\Windows\\System32\\VaultRoaming\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F074C547-461C-4146-B35A-F1F845AF413B}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationWinPalMisc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f079ec7c-11a4-4c33-87fa-090d19772fac}\InprocServer32" = "$homedrive\\Windows\\system32\\(rastlsext|rastls)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f07f3920-7b8c-11cf-9be8-00aa004b9986}\InprocServer32" = "$homedrive\\Windows\\system32\\OffFilt\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0820DE1-3969-4BA6-A090-E99687AE929B}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Midi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F088DE73-BDD0-4E3C-81F8-6D32F4FE9D28}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F08C5AC2-E722-4116-ADB7-CE41B527994B}\InprocServer32" = "$homedrive\\Windows\\System32\\bthprops\.cpl"
        "HKEY_CLASSES_ROOT\CLSID\{F09D237B-3FD1-4900-BEF2-3471CA68142D}\InprocServer32" = "c:\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\VSTO\\10\.0\\VSTOLoader\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f0ae1542-f497-484b-a175-a20db09144ba}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0B1E31E-4FE1-49F5-84BC-4BA007655288}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f0ce6592-5bce-41cc-bf2d-ec4f3f55e711}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0DB4512-0E25-4A1F-A88B-8FF40351BFCD}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F0DF5C6B-249C-4FE8-9377-281E25DE200D}\InProcServer32" = "$homedrive\\Windows\\System32\\PaymentMediatorServiceProxy\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1171280-BC35-45d1-8F53-8AB833267899}\InprocServer32" = "$homedrive\\Windows\\system32\\dnshc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1184172-589C-4ECA-B2C8-F330C903A76F}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1196F08-BAFE-4C9C-AEE7-71C69DA5B818}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Google\\Drive File Stream\\73\.0\.4\.0\\drivefsext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F12FDE6A-9394-3C32-8E4D-F3D470947284}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1390A9A-A3F4-4E5D-9C5F-98F3BD8D935C}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F14E8B03-D080-4D3A-AEBA-355E77B20F3D}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{F159A1A7-462A-4FF3-8E51-E518DC011268}\InProcServer32" = "$homedrive\\Windows\\system32\\cfmifs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1851D8E-504F-48A9-ACF7-A8C7FF709ABE}\InProcServer32" = "$homedrive\\Windows\\System32\\wuuhosdeployment\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F198A89A-5042-4294-ADF1-CB163E549798}\InProcServer32" = "$homedrive\\Windows\\System32\\wbem\\Win32_EncryptableVolume\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1AAAA76-BD01-42e1-A6C0-34FA86ACBB90}\InprocServer32" = "$homedrive\\Windows\\system32\\wpdmtp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f1bd1079-9f01-4bdc-8036-f09b70095066}\InProcServer32" = "$homedrive\\Windows\\System32\\(BitsProxy|bitsprx\d{1}|qmgrprxy)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1C3BF79-C3E4-11D3-88E7-00902754C43A}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1C46D71-B791-4110-8D5C-7108F22C1010}\InProcServer32" = "$homedrive\\Windows\\System32\\wintypes\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1E752C3-FD72-11D0-AEF6-00C04FB6DD2C}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1EBA909-6621-346D-9CE2-39F266C9D011}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1ED7D4C-F863-4de6-A1CA-7253EFDEE1F3}\InprocServer32" = "$homedrive\\Windows\\System32\\AppIdPolicyEngineApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f20133fb-d436-4a11-9ee0-1710ac9e558b}\InProcServer32" = "AppxDeploymentClient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F20487CC-FC04-4B1E-863F-D9801796130B}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncCenter\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F20DA720-C02F-11CE-927B-0800095AE340}\InProcServer32" = "$homedrive\\Windows\\system32\\packager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2102C37-90C3-450C-B3F6-92BE1693BDF2}\InprocServer32" = "$homedrive\\Windows\\system32\\wscisvif\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f216b1bc-2310-49d6-930f-ae8837bda4b0}\InProcServer32" = "$homedrive\\Windows\\System32\\CastLaunch\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F22D2A32-F1F4-4D62-AF5E-E5E8253AC6A6}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F22F5E05-585C-4def-8523-6555CFBC0CB3}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvdspa\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f235ce7d-b143-4d4f-ad93-64e48d53a5fb}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32" = "$homedrive\\.*\\(Microsoft OneDrive|Microsoft\\OneDrive)\\.*\\FileSyncShell64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f2468580-af8a-11d0-8212-00c04fc32c45}\InprocServer32" = "$homedrive\\Windows\\System32\\amstream\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2472B49-5214-4D3A-A662-04F09250D694}\InprocServer32" = "$homedrive\\Windows\\System32\\wlandlg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F249C9EA-8DB4-43DC-B2BC-146A61D23D99}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f26a669a-bcbb-4e37-abf9-7325da15f931}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f270c64a-ffb8-4ae4-85fe-3a75e5347966}\InprocServer32" = "$homedrive\\Windows\\system32\\activeds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F27A4830-81C1-4D00-B6BD-0A7F44CE2D86}\InProcServer32" = "$homedrive\\Windows\\System32\\XboxGipSvc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f29f4028-86d2-4b45-84ec-858dc97a123e}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2C2787D-95AB-40D4-942D-298F5F757874}\InProcServer32" = "$homedrive\\Windows\\system32\\vss_ps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f2c3faae-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2C4CDB0-2714-42AD-A948-2ED958A322E3}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2CF5485-4E02-4f68-819C-B92DE9277049}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f2ed4d41-11cb-4fe4-bd48-b90f2b0f46bd}\InProcServer32" = "$homedrive\\Windows\\System32\\exsmime\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2FC1215-A7D9-4F02-AC1F-251B074B1829}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Payments\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F2FC5C3B-FC71-452c-AB56-47BC0873E46D}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F31091EA-B0A8-11D6-B6FC-005056C00008}\InprocServer32" = "$homedrive\\Windows\\system32\\AdvancedInstallers\\cmiv2\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wbemess\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3199DD9-A65C-4E4C-9B25-6E9997AAE1D1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore).*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F32063EA-DF0C-437D-BD5E-5E718683E4A3}\InprocServer32" = "$homedrive\\Windows\\System32\\srh.*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F324E4F9-8496-40b2-A1FF-9617C1C9AFFE}\InProcServer32" = "$homedrive\\Windows\\System32\\(Windows\.FileExplorer\.Common|shell32)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3252D7B-E51D-4B14-AA5E-8E3D4315F73C}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tabskb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F32E8FA6-A99F-4E9B-AF78-C929EBB73589}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F32FCFEC-9054-470A-ACEE-867F2277B772}\InProcServer32" = "$homedrive\\Windows\\System32\\CXHProvisioningServer\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3368374-CF19-11d0-B93D-00A0C90312e1}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f33915da-f694-41db-a87e-a0ad42ee00c3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\Ink\\IpsPlugin\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F352C9C1-D39D-4622-A279-978A60927CDE}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\madVR\\madVR64\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{f371728a-6052-4d47-827c-d039335dfe0a}\InprocServer32" = "$homedrive\\Windows\\System32\\mpg4decd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F375FDC3-9DB0-4927-A84A-FC1215B3570F}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}\InProcServer32" = "$homedrive\\Windows\\system32\\rshx32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f3a219c3-2698-4cbf-9c07-037edb8e72e6}\InProcServer32" = "$homedrive\\Windows\\System32\\InstallServiceTasks\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3B4F2E9-CCCC-49aa-B0B2-2C4A02E69A37}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tipskins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3BDFAD3-F276-49e9-9B17-C474F48F0764}\InProcServer32" = "$homedrive\\Windows\\system32\\WinSATAPI\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3C502D1-96DE-4623-B22C-8373FC803AB4}\InProcServer32" = "$homedrive\\Windows\\System32\\WiredNetworkCSP\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3C9F07B-A9F4-427b-8E48-4305971D472F}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f3cc4ca3-22c2-40ec-ac3c-89d8a43373b0}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3CCAE10-A927-4D4E-9138-4A513C4B10FA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Import\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3CF6965-E8D3-44a9-9B7D-A04245EA7525}\InprocServer32" = "$homedrive\\Windows\\System32\\vmuidevices\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f3d06e7c-1e45-4a26-847e-f9fcdee59be0}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3D3F924-11FC-11D3-BB97-00C04F8EE6C0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Common\\sapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f407d01a-0bcb-4591-9bd6-ea4a71df0799}\InprocServer32" = "$homedrive\\Windows\\system32\\IME\\IMETC\\IMTCCORE\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f4086d4e-2e05-428b-92de-87d8d0bb4262}\InprocServer32" = "$homedrive\\Windows\\system32\\pnrphc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F412BFA1-8035-472B-8185-F13B8C29CF21}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f414c261-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f414c262-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F42F750A-64A8-4190-951D-C6F7EF4E4BA1}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F43E8166-162C-4B12-8C2B-510D21516082}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\netswitchteamcim\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F440168E-A06A-4C25-B6EB-01705985E826}\InprocServer32" = "$homedrive\\Windows\\system32\\BrowserSettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F4477AD6-6B3A-411b-9ECC-7CE89B665401}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f447b69e-1884-4a7e-8055-346f74d6edb3}\InprocServer32" = "$homedrive\\Windows\\System32\\resampledmo\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F46316E4-FB1B-46eb-AEDF-9520BFBB916A}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F4655419-DAF2-42ab-9178-3B6AC903170C}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_1\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F48B770A-CBE5-44C2-8D4F-931DE9CEE6FA}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Media\.Speech\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F4AEE847-AF64-4B92-A282-9C1CDEED71FF}\InProcServer32" = "$homedrive\\Windows\\System32\\KINSAPOPPage\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f4ba59cc-2506-45ae-84c8-78ea8d7f9b3e}\InprocServer32" = "$homedrive\\Windows\\System32\\invagent\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f4be747e-45c4-4701-90f1-d49d9ac30248}\InProcServer32" = "$homedrive\\Windows\\System32\\diagperf\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F4D36777-EAED-4cc5-9FE7-827BE5190B20}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f4d8c39a-f43d-42b4-9bdf-4e48d3044ba0}\InprocServer32" = "$homedrive\\Windows\\System32\\dnscmmc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F4E1E7F6-A035-41B3-9856-A3C3A1C4684F}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f4e8bc67-9616-4a28-a332-cf27a5ca6736}\InprocServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5036A24-5888-4BC1-BA1A-1DFE5FB73388}\InprocServer32" = "$homedrive\\Windows\\System32\\Microsoft\.Uev\.PrinterCustomActions\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F19-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F27-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F31-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F32-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F33-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F34-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F35-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F36-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F37-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F39-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F3F-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F40-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5078F41-C551-11D3-89B9-0000F81FE221}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f507f854-308b-401e-a1b7-b55ba6ba679a}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F515306D-0156-11d2-81EA-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F515306E-0156-11d2-81EA-0000F87557DB}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5175861-2688-11d0-9C5E-00AA00A45957}\InProcServer32" = "$homedrive\\Windows\\System32\\webcheck\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F54309BB-0AFA-4BE0-B6D9-810F01F4DEE6}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\K-Lite Codec Pack\\Filters\\DirectVobSub64\\vsfilter\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F557FEA8-0F82-4DB5-8D73-88028925F0A1}\InProcServer32" = "$homedrive\\Windows\\System32\\windowmanagement\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F55C5B4C-517D-11D1-AB57-00C04FD9159E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ntevt\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5668FDF-340B-4BE2-8402-748EA156BB91}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHost\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}\InProcServer32" = "$homedrive\\Windows\\System32\\Actioncenter\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F582A54C-90D3-45b3-9860-EE3143AA85A0}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f59aa553-8309-46ca-9736-1ac3c62d6031}\InprocServer32" = "$homedrive\\Windows\\System32\\DeviceDisplayStatusManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F59D514C-F200-319F-BF3F-9E4E23B2848C}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmiprvsd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5a8b627-4d46-4d65-92f3-73626ae31971}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5B63656-069D-4E80-B4FD-9E0DB16604D8}\InProcServer32" = "$homedrive\\Windows\\system32\\upnphost\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5BC0AF0-63FC-468F-BC6F-D63EAE129A33}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_2\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5d121ed-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5d121ee-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5d121ef-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5d121f0-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5d121f3-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f5d121f4-c8ac-11d0-bcdb-00c04fd8d5b6}\InProcServer32" = "$homedrive\\Windows\\system32\\dsprop\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5D3E63B-CB0F-4628-A478-6D8244BE36B1}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5E692D9-8A87-349D-9657-F96E5799D2F4}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\wmidcprv\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f60163ce-2b8d-458d-ab2c-40f215767514}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F60C3E02-214A-462b-9B07-56EA38545A13}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6166DAD-D3BE-4ebd-8419-9B5EAD8D0EC7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F618C514-DFB8-11D1-A2CF-00805FC79235}\InprocServer32" = "$homedrive\\Windows\\System32\\Com\\comadmin\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F61FFEC1-754F-11d0-80CA-00AA005B4383}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F62D062C-4732-44D2-BD62-124B8AE1657C}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f64945df-4fa9-4068-a2fb-61af319edd33}\InprocServer32" = "$homedrive\\Windows\\system32\\rdpcredentialprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6914A11-D95D-324F-BA0F-39A374625290}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6A1CA0F-AF39-4EE1-B637-F965CBDE1E3E}\InprocServer32" = "$homedrive\\Windows\\System32\\mtf\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f6b13ba7-d626-45e5-82c5-26e596114dc0}\InProcServer32" = "$homedrive\\Windows\\system32\\fphc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6B6768F-F99E-4152-8ED2-0412F78517FB}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6B6E965-E9B2-444B-9286-10C9152EDBC5}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6B7425E-AF10-984F-9DD7-F14816179E2C}\InProcServer32" = "$homedrive\\Windows\\System32\\appresolver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6B96EDA-1A94-4476-A85F-4D3DC7B39C3F}\InprocServer32" = "$homedrive\\Windows\\System32\\psisdecd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6BEC032-233E-4B58-BEE9-DE13942BF136}\InProcServer32" = "$homedrive\\Windows\\System32\\lltdapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f6c29334-47dc-4397-9150-f549cf1d4861}\InProcServer32" = "$homedrive\\Windows\\System32\\WinTypes\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6C3AC3E-E642-4795-A9F2-9B3AB94EAC5D}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6D90F11-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6D90F12-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6D90F14-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6D90F16-9C73-11D3-B32E-00C04F990BB4}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6EFEABD-3370-4AA0-A4FD-88BADC3B1A39}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\SpeechServiceWinRTApi\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6F05056-37FA-4DAF-8A51-40A8F14E0F62}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F72A76A0-EB0A-11D0-ACE4-0000C0CC16BA}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{F72A76E0-EB0A-11D0-ACE4-0000C0CC16BA}\InprocServer32" = "$homedrive\\Windows\\System32\\kswdmcap\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{f7300245-1f4b-41ba-8948-6fd392064494}\InprocServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F73C1438-71B4-4D91-AD13-1F889A03AC67}\InProcServer32" = "$homedrive\\Windows\\system32\\winrssrv\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F751293B-DC01-468D-925C-2B3619582720}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F753E28A-00AA-4537-A4C4-CAA197D44DD0}\InProcServer32" = "$homedrive\\Windows\\System32\\DisplayManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F778C6B4-C08B-11D2-976C-00C04F79DB19}\InProcServer32" = "$homedrive\\Windows\\system32\\els\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F77C0A7D-7395-45c5-BDFC-B096BF6C4DA0}\InProcServer32" = "$homedrive\\Windows\\system32\\BWContextHandler\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f792beee-aeaf-4ebb-ab14-8bc5c8c695a8}\InprocServer32" = "$homedrive\\Windows\\System32\\mfds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F79A6BF9-7415-4CF3-AE10-4559509ABC3C}\InProcServer32" = "$homedrive\\Windows\\System32\\mfcore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7A4F1DA-96C3-4BCF-BEB3-1D9FFDE89EE9}\InprocServer32" = "$homedrive\\Windows\\system32\\mmcndmgr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7AFD75B-BF8C-4a11-BDB9-04AD66182F84}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7B9271E-46D8-4B6A-B5CF-E6A4F7F49732}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech\\Engines\\SR\\spsreng\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f7c0039a-4762-488a-b4b3-760ef9a1ba9b}\InprocServer32" = "$homedrive\\Windows\\System32\\PortableDeviceApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7DD51E6-1CA0-4A76-B503-F96E0E64CA91}\InProcServer32" = "$homedrive\\Windows\\System32\\MbSmsApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7ECB841-7EB6-41EB-BAEA-E2145F7348C6}\InProcServer32" = "$homedrive\\Windows\\system32\\dot3conn\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7F4A1B6-8E87-452f-A2D7-3077F508DBC0}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7FE6BA6-9441-49E8-858F-936D8E774A2D}\InProcServer32" = "$homedrive\\Windows\\System32\\DeploymentCsps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7FF39BA-FA79-11E4-87DA-8F461D5D46B0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f7ffe0a0-a4f5-44b5-949e-15ed2bc66f9d}\InprocServer32" = "$homedrive\\Windows\\System32\\wmvsencd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F80FC80C-6A04-46FB-8555-D769E334E9FC}\InProcServer32" = "$homedrive\\Windows\\System32\\windowsdefenderapplicationguardcsp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f81b1b56-7613-4ee4-bc05-1fab5de5c07e}\InProcServer32" = "$homedrive\\Windows\\System32\\mfmp4srcsnk\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f8278c54-a712-415b-b593-b77a2be0dda9}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F82B4EF1-93A9-4DDE-8015-F7950A1A6E31}\InprocServer32" = "$homedrive\\Windows\\system32\\Syncreg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F82EFF51-99FA-4393-A31D-6D5D9F3972C3}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8383852-FCD3-11d1-A6B9-006097DF5BD4}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8388A40-D5BB-11D0-BE5A-0080C706568E}\InprocServer32" = "$homedrive\\Windows\\System32\\qcap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f83cbf45-1c37-4ca1-a78a-28bcb91642ec}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F84431A3-A1BE-40FC-BAFA-84851B344AF8}\InProcServer32" = "$homedrive\\Windows\\System32\\mshtml\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8462F08-715D-4AA3-8A6E-3D3B5EC282D7}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudExperienceHostCommon\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F857B5CD-68AD-4012-8527-AB3A8E56F620}\InProcServer32" = "$homedrive\\Windows\\System32\\tsworkspace\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f85d5d94-6851-44f7-bb3a-bfd0949abf1d}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F885120E-3789-4fd9-865E-DC9B4A6412D2}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
        "HKEY_CLASSES_ROOT\CLSID\{F8900A80-4885-4722-A655-7A60F7596E3A}\InProcServer32" = "$homedrive\\Windows\\System32\\UpdateCsp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\InProcServer32" = "$homedrive\\Windows\\system32\\softkbd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}\InProcServer32" = "$homedrive\\Windows\\system32\\wlidcredprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8A1793B-7873-4046-B2A7-1F318747F427}\InprocServer32" = "$homedrive\\Windows\\system32\\fidocredprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f8a56d3e-e304-4a9f-a916-5187019d7759}\InprocServer32" = "$homedrive\\Windows\\system32\\bcdprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f8b8412b-dea3-4130-b36c-5e8be73106ac}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8BE2AD5-4E99-3E00-B10E-7C54D31C1C1D}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f8c2ab3b-17bc-41da-9758-339d7dbf2d88}\InProcServer32" = "$homedrive\\Windows\\system32\\twext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8CF7A98-2C45-4c8d-9151-2D716989DDAB}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office16\\Interceptor\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8D0708C-A86F-4CBA-A55A-F2081BD47721}\InprocServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f8d1da80-9aea-4ca4-ba41-bee6fca037b1}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8D253D9-89A4-4daa-87B6-1168369F0B21}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8E307FB-6D45-4AD3-9993-66CD5A529659}\InProcServer32" = "$homedrive\\Windows\\System32\\MFMediaEngine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8E61EDD-EA25-484e-AC8A-7447F2AAE2A9}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office16\\Interceptor\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F8FB6E07-55E6-4BB9-96BC-2393A039CEE7}\InprocServer32" = "$homedrive\\Windows\\System32\\puiapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F90B5F36-367B-402A-9DD1-BC0FD59D8F62}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F90DFE0C-CBDF-41FF-8598-EDD8F222A2C8}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\OFFFILTX\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{F90FE5FE-E88B-4578-9C81-79210FD53D41}\InProcServer32" = "$homedrive\\Windows\\system32\\wlanpref\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f91b9abc-985b-4c04-b5e7-9c7099fc2cda}\InprocServer32" = "$homedrive\\Windows\\system32\\adprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F91D96C7-8509-4D0B-AB26-A0DD10904BB7}\InprocServer32" = "$homedrive\\Windows\\System32\\Mpeg2Data\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{F935DC22-1CF0-11D0-ADB9-00C04FD58A0B}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx"
        "HKEY_CLASSES_ROOT\CLSID\{F935DC26-1CF0-11D0-ADB9-00C04FD58A0B}\InProcServer32" = "$homedrive\\Windows\\System32\\wshom\.ocx"
        "HKEY_CLASSES_ROOT\CLSID\{F942C606-0914-47AB-BE56-1321B8035096}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F94985D5-29F9-4743-9805-99BC3F35B678}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\MSI Tools\\MergeMod\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F94CDF40-02D6-4E79-89F7-B5357F3B1A39}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F963C5CF-A659-4A93-9638-CAF3CD277D13}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F975AF2C-9A51-4AF0-91EA-06038698CE38}\InProcServer32" = "$homedrive\\Windows\\system32\\dpnet\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9769A06-7ACA-4E39-9CFB-97BB35F0E77E}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F97B8A60-31AD-11CF-B2DE-00DD01101B85}\InprocServer32" = "$homedrive\\Windows\\System32\\qedit\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F98724AB-2CBB-4696-B39B-98EFF79219B5}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9A7AB61-C0BC-490e-A7FE-BFF26B327A3F}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9B189D7-228B-4F2B-8650-B97F59E02C8C}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\microsoft shared\\ink\\tiptsf\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f9bcb2f0-7df0-4a39-932e-bdef29dfb16b}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9EBBF2D-0C5D-4BF1-AE24-A30F7796D178}\InProcServer32" = "$homedrive\\Windows\\system32\\SyncInfrastructurePS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9EFBEC2-4302-11D2-952A-00C04FA34F05}\InprocServer32" = "$homedrive\\Windows\\System32\\Dxtmsft\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA06375D-F0A4-4A47-AD8D-148595F1E0B8}\InprocServer32" = "$homedrive\\Windows\\system32\\tscfgwmi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA0B54D5-F221-3648-A20C-F67A96F4A207}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA10746C-9B63-4b6c-BC49-FC300EA5F256}\InprocServer32" = "$homedrive\\Windows\\System32\\evr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA2C37A7-2D1E-444F-AD7B-D946823A7072}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA3E1D55-16DF-446d-872E-BD04D4F39C93}\InprocServer32" = "$homedrive\\Windows\\System32\\comsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA3F3DD9-4C1A-456B-A8FA-C76EF3ED83B8}\InProcServer32" = "$homedrive\\Windows\\System32\\cscui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA42979C-4CA9-42BE-B192-DC9EFCB5ACA4}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Windows Kits\\10\\App Certification Kit\\appxman\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA4B375A-45B4-4D45-8440-263957B11623}\InprocServer32" = "$homedrive\\Windows\\System32\\MSDvbNP\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{FA5FE7C5-6A1D-4B11-B41F-F959D6C76500}\InprocServer32" = "$homedrive\\Windows\\System32\\msmpeg2enc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fa61e9f8-580e-4575-ab01-4a62c31fcf43}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA6C507D-A9AF-4385-86C0-80115F0AE20B}\InProcServer32" = "$homedrive\\Windows\\System32\\PerceptionSimulationExtensions\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA6D33D4-9405-4BA5-9983-12604AC8E77A}\InProcServer32" = "$homedrive\\Windows\\System32\\mcrecvsrc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA702D88-6A1B-4809-AE49-97005E45E110}\InProcServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\Windows\.Speech\.Shell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA735D10-205D-451B-9EE8-E171F2214EF0}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Engines\\SR\\spsreng_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA77A74E-E109-11D0-AD6E-00C04FD8FDFF}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA782574-F39C-40FD-A733-763723814AF3}\InProcServer32" = "$homedrive\\Windows\\System32\\printticketvalidation\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA7C375B-66A7-4280-879D-FD459C84BB02}\InprocServer32" = "$homedrive\\Windows\\System32\\msvidctl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA869D29-BA80-4D7D-A867-0DF126F980A5}\InprocServer32" = "$homedrive\\Windows\\System32\\mfsrcsnk\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA8A68B2-C864-4BA2-AD53-D3876A87494B}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FA9342F0-B15B-473C-A746-14FCD4C4A6AA}\InprocServer32" = "$homedrive\\Windows\\system32\\azroleui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fa996453-47cf-4e5a-8df6-67f93a046ebb}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAC1D9C0-0296-11D1-A840-00A0C92C9D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\dmdskmgr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}\InProcServer32" = "$homedrive\\Windows\\system32\\XAudio2_0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAC67227-E178-4fab-9FEA-B4E77D3DBE7D}\InprocServer32" = "$homedrive\\Windows\\System32\\vidcap\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{fad63700-aafb-463a-8c1f-4c2dbc28ae57}\InProcServer32" = "$homedrive\\Windows\\System32\\AppxPackaging\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAD7C22E-971B-4681-B836-83FAB87D74C2}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAE517E7-1B31-47B6-840B-14D7D910AD48}\InProcServer32" = "$homedrive\\Windows\\System32\\(appresolver|shell32)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{faeb54c4-f66f-4806-83a0-805299f5e3ad}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAF405AE-6AF6-4431-82DD-2170B66FE190}\InProcServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\InprocServer32" = "$homedrive\\Windows\\System32\\ES\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{faf85f2e-a8e7-414d-a3e9-6b9e7b4a51ed}\InProcServer32" = "$homedrive\\Windows\\System32\\RDXService\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FAFA8FFA-8AD8-460D-A1B6-774FB72CA6BA}\InprocServer32" = "$homedrive\\Windows\\System32\\ChtAdvancedDS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB012959-F4F6-44D7-9D09-DAA087A9DB57}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB11047A-4051-4d1d-9DCA-C80C5DF98D70}\InProcServer32" = "$homedrive\\Windows\\System32\\coredpus\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB1E042E-6772-4834-B1BF-F03F120E5F36}\InprocServer32" = "$homedrive\\Windows\\system32\\rasgcw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB2FDC4F-7DD0-4ACE-9B1E-36E5C2F98D27}\InProcServer32" = "$homedrive\\Windows\\system32\\WLanConn\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64\.61\.0\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB383896-E78A-47A2-9DD1-D30A0F158D28}\InprocServer32" = "$homedrive\\Windows\\System32\\JpnDecoder\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB40360C-547E-4956-A3B9-D4418859BA66}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB453AD8-2EF4-44D3-98A8-8C6474E63CE4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{FB4D76FE-8863-4027-9D8A-4A00BEDF74D7}\InProcServer32" = "$homedrive\\Windows\\System32\\MessagingDataModel2\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fb647f50-2192-49e0-a68f-5775434058c7}\InProcServer32" = "$homedrive\\Windows\\System32\\provengine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB64825E-498C-45E8-ADD4-37E0C4FC68A6}\InprocServer32" = "$homedrive\\Windows\\System32\\sbe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB67F8D9-03A1-42b5-979A-1577F0193611}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FB74F625-7D25-4455-B840-7B870B5B9322}\InprocServer32" = "$homedrive\\Windows\\System32\\WMNetMgr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\Dropbox\\Client\\DropboxExt64.*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FBDBD7C2-8E45-4468-A76C-8C832456E850}\InProcServer32" = "$homedrive\\Windows\\System32\\enterprisecsps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fbebb71b-a592-4880-b096-9429ebe119db}\InprocServer32" = "$homedrive\\Windows\\System32\\L2SecHC\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FBF113F1-D7C8-477C-A23A-E600E7937E11}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\paint\.net\\PaintDotNet\.ShellExtension\.x64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FBFA21E1-BBB8-46B3-95EB-791E29BA42F3}\InprocServer32" = "$homedrive\\Program Files \(x86\)\\ASUS\\Update\\.*\\psmachine_64\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC13A7D5-E2B3-37BA-B807-7FA6238284D5}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC220AD8-A72A-4EE8-926E-0B7AD152A020}\InProcServer32" = "$homedrive\\Windows\\System32\\msxml3\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC31D09D-D059-4551-9A28-B88A4181EC29}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC3CD69D-BD08-436F-A284-1641E2236DDA}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Networking\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC46B571-5D16-4DCE-8F26-F7138C09C768}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC47060E-6153-4B34-B975-8E4121EB7F3C}\InProcServer32" = "$homedrive\\Windows\\system32\\dpnet\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC48CC30-4F3E-4fa1-803B-AD0E196A83B1}\InprocServer32" = "$homedrive\\Windows\\System32\\msaatext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC5B8A24-DB05-4A01-8388-22EDF6C2BBBA}\InprocServer32" = "$homedrive\\Windows\\System32\\bidispl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC5EEAF6-2001-11DF-ADB9-F4CE462D9137}\InprocServer32" = "$homedrive\\Windows\\System32\\wifinetworkmanager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC6123C7-7F25-4D1F-97A7-6C83019AB088}\InProcServer32" = "$homedrive\\Windows\\System32\\officecsp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC772AB0-0C7F-11D3-8FF2-00A0C9224CF4}\InprocServer32" = "$homedrive\\Windows\\System32\\psisrndr\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{FC7AA68D-EAFB-4ce9-A012-9C33E7B02B49}\InprocServer32" = "$homedrive\\Windows\\System32\\DriverStore\\FileRepository\\(nv_dispi|nvlei|nv_.*)\.inf_amd64_.*\\nvwss\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC80316A-0752-400d-AA2E-86DE4F6C26EF}\InProcServer32" = "$homedrive\\Windows\\System32\\provsvc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FC8F7769-98CE-4ED3-B8F6-888B9D028657}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjpapi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCA7405F-710E-4438-ADEE-FB35BBF9BACD}\InprocServer32" = "$homedrive\\Windows\\system32\\CredProv2faHelper\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCC152B7-F372-11D0-8E00-00C04FD7C08B}\InprocServer32" = "$homedrive\\Windows\\System32\\qdvd\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCC74B77-EC3E-4dd8-A80B-008A702075A9}\InProcServer32" = "$homedrive\\Windows\\system32\\appwiz\.cpl"
        "HKEY_CLASSES_ROOT\CLSID\{fccf70c8-f4d7-4d8b-8c17-cd6715e37fff}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCDC2CF5-ABCD-4BA5-94DA-1823AE06FE2B}\InProcServer32" = "$homedrive\\Windows\\system32\\corrEngine\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCDECE00-A39D-11D0-ABE7-00AA0064D470}\InprocServer32" = "$homedrive\\Windows\\System32\\scripto\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCF7A6F2-3300-4386-9A4F-0DD4E3226507}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WmiPerfInst\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD0A5AF3-B41D-11D2-9C95-00C04F7971E0}\InprocServer32" = "$homedrive\\Windows\\System32\\bdaplgin\.ax"
        "HKEY_CLASSES_ROOT\CLSID\{FD209E2E-813B-41C0-8646-4C3E9C917511}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ipmiprv\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD215A13-A26A-44FF-BA3A-9109F278E28F}\InprocServer32" = "$homedrive\\Windows\\System32\\mfmpeg2srcsnk\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD30033D-C508-491E-AE43-0075E46DED83}\InProcServer32" = "$homedrive\\Windows\\system32\\msctfuimanager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD30583B-C085-4B28-9D77-0185C987CC13}\InProcServer32" = "$homedrive\\Windows\\System32\\WpcApi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD351EA1-4173-4AF4-821D-80D4AE979048}\InprocServer32" = "$homedrive\\Windows\\System32\\MSVidCtl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fd3577c4-b2b2-11e5-cb1e-848f2ee78d31}\InprocServer32" = "$homedrive\\Windows\\System32\\mtfappserviceds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD4F53E0-65DC-11D1-AB64-00C04FD9159E}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ntevt\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD5A78D9-C2F5-45FF-9097-C615ACD0AA51}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD5CD8B1-6FE0-44F3-BBFB-65E3655B096E}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD688BBD-31ED-4DB7-A723-934927D38367}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD6F2917-326E-405B-8B10-DC93A013A73B}\InProcServer32" = "$homedrive\\Windows\\System32\\CryptoWinRT\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD76C304-255F-4446-A895-6E1967EC4FDC}\InprocServer32" = "$homedrive\\Windows\\system32\\SrpUxNativeSnapIn\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD78DA08-2964-40BF-AE00-72EA8155CB53}\InProcServer32" = "$homedrive\\Windows\\System32\\MSVideoDSP\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD7F2B29-24D0-4B5C-B177-592C39F9CA10}\InProcServer32" = "$homedrive\\Windows\\System32\\AudioSes\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CD9-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CDB-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CDC-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CDD-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CDE-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CDF-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE0-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE1-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE2-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE3-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE6-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE7-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE8-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CE9-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CEA-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CEB-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD853CED-7F86-11d0-8252-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\System32\\inetcomm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD8C8FCE-4F85-36B2-B8E8-F5A183654539}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fd8d3a5f-6066-11d1-8c13-00c04fd8d503}\InprocServer32" = "$homedrive\\Windows\\system32\\adsmsext\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fdb00e52-a214-4aa1-8fba-4357bb0072ec}\InprocServer32" = "$homedrive\\Windows\\system32\\amsi\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FDB2DC94-B5A0-3702-AE84-BBFA752ACB36}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FDD10506-9AE7-4C7D-A407-C109DDEA1845}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Core\.TextInput\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FDD384CC-78C6-4E6D-8694-1DACBEE57F96}\InProcServer32" = "$homedrive\\Windows\\System32\\hnetcfg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FDEA20DB-AC7A-42f8-90EE-82208B9B4FC0}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\VFS\\System\\FM20\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{FDF9C30D-CCAB-3E2D-B584-9E24CE8038E3}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fe081f7f-67dc-4f4e-a74a-d6555cdc8efb}\InProcServer32" = "$homedrive\\Windows\\System32\\wpnapps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fe0bfe76-18b7-4ea4-a9ca-7277eef48747}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\UserOOBE\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE12CD81-5158-4bd8-A37C-A621BC0E143B}\InprocServer32" = "$homedrive\\Windows\\System32\\catsrvut\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE217CB2-0B2C-48c9-90CA-8D8BCA79248D}\InProcServer32" = "$homedrive\\Windows\\system32\\netcorehc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE2BEA70-520D-470E-A69F-F75F245A7581}\InProcServer32" = "$homedrive\\Windows\\System32\\AboveLockAppHost\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE3C02B0-B9FF-4A45-AE19-E9A8D4893511}\InprocServer32" = "$homedrive\\Windows\\System32\\Windows\.Security\.Authentication\.Web\.Core\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE58C767-BFC9-4B9B-9E9B-462DDBE9B4D9}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fe5afcf2-e681-4ada-9703-ef39b8ecb9bf}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE67FBE0-B834-4424-880A-52D6F71BA90B}\InProcServer32" = "$homedrive\\Windows\\System32\\cdp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE6B11C3-C72E-4061-86C6-9D163121F229}\InProcServer32" = "$homedrive\\Windows\\System32\\msfeeds\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE7A7E7B-BB31-498C-9299-4F4DDC10B26F}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fe7c0d2b-27f1-4e97-951b-cf6e165eeab6}\InprocServer32" = "$homedrive\\Windows\\system32\\tsmf\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fe841493-835c-4fa3-b6cc-b4b2d4719848}\InprocServer32" = "$homedrive\\Windows\\System32\\EhStorAPI\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE883157-CEBD-4570-B7A2-E4FE06ABE626}\InprocServer32" = "$homedrive\\Windows\\system32\\wsecedit\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE92BB18-77C1-451A-83E8-8420D74E4B1C}\InprocServer32" = "$homedrive\\Windows\\System32\\fhcfg\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE9AF5C0-D3B6-11CE-A5B6-00AA00680C3F}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\stdprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEA4300C-7959-4147-B26A-2377B9E7A91D}\InprocServer32" = "$homedrive\\Windows\\System32\\dsound\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEA6E63B-45DA-4E32-8B3D-1873B2CE50E7}\InprocServer32" = "$homedrive\\Windows\\System32\\vmsmb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEB50740-7BEF-11CE-9BD9-0000E202599C}\InprocServer32" = "$homedrive\\Windows\\System32\\quartz\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEC52D45-D657-42c3-B43E-BF64B95E7072}\InprocServer32" = "$homedrive\\Windows\\System32\\sti\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fecd606e-7161-4cbc-a868-4703867823ea}\InprocServer32" = "$homedrive\\Windows\\system32\\wmp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FED4ACC3-87C9-45E9-A026-5B59A855E687}\InProcServer32" = "$homedrive\\Windows\\System32\\audioeng\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEDB2179-2335-48F1-AA28-5CDA35A2B36D}\InprocServer32" = "$homedrive\\Windows\\Microsoft\.NET\\Framework64\\v2\.0\.50727\\MmcAspExt\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEEAAA2B-16F4-46F6-84BB-831197DD3D75}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh.*\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEEE9C23-C4E2-4A34-8C73-FE8F9786C8B4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Defender Advanced Threat Protection\\WATPCSP\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FEF10FA2-355E-4e06-9381-9B24D7F7CC88}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF036D13-5D4B-46DD-B10F-106693D9FE4F}\InProcServer32" = "$homedrive\\Windows\\system32\\windowscodecs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF151822-B0BF-11D1-A80D-000000000000}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\Ole DB\\oledb32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF156C11-5895-42DA-B2F3-D1FCDF62FC54}\InProcServer32" = "$homedrive\\Windows\\System32\\UefiCsp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff183a37-b6da-4d32-bb24-157b282ffa48}\InProcServer32" = "$homedrive\\Windows\\System32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF2A742B-CA25-4507-BD93-6BA9B8E8965F}\InprocServer32" = "$homedrive\\Windows\\System32\\WLanHC\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF2AB3A5-5EEA-4538-8F8F-C169CCD40200}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Radios\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF2F95A4-C6A1-4B48-BC87-8709250E0D03}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Cortana\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF302BD3-3DC6-4680-9384-621A7FF574F4}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff363bfe-4941-4179-a81c-f3f1ca72d820}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF3AE31D-55B0-4945-BDE9-622ABB334C1A}\InprocServer32" = "$homedrive\\Windows\\system32\\WABSyncProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff48dba4-60ef-4201-aa87-54103eef594e}\InprocServer32" = "$homedrive\\Windows\\System32\\uiautomationcore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF51D680-9190-4B6C-87DA-0062ABBBFF2E}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imebrokerps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF5265E8-6D8B-4BD4-A52D-8D99008E04C8}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Internal\.UI\.BioEnrollment\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff609cc7-d34d-4049-a1aa-2293517ffcc6}\InProcServer32" = "$homedrive\\Windows\\system32\\stobject\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff679da1-8ff2-4474-9c9e-52bbd409b557}\InProcServer32" = "$homedrive\\Windows\\system32\\pla\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF806D42-727C-4663-A497-A898FAE3C637}\InProcServer32" = "$homedrive\\Windows\\System32\\modernexecserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff89cdc6-6535-49df-8c70-19ea5acd4948}\InProcServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff8a32e3-a9a7-4093-b9c4-5b5b4f30ab63}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff8a71c2-7eb8-418b-950d-3b49f43f024f}\InprocServer32" = "$homedrive\\Windows\\system32\\wincredprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF97298A-DE83-4D65-84EA-821C06206C47}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF99E1C1-7F9A-4C83-8A57-305992EDD07B}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ff9e6131-a8c1-4188-aa03-82e9f10a05a8}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage|shell32|twinui.*|SearchFolder|ieframe)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FFC9F9AE-E87A-3252-8E25-B22423A40065}\InprocServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FFCDB781-D71C-4D10-BD5F-0492EAFFD90A}\InProcServer32" = "$homedrive\\Windows\\System32\\faultrep\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FFCECE86-332F-49B4-B9EE-7FECEFAD3E10}\InProcServer32" = "$homedrive\\Windows\\System32\\SyncUtil\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ffd90217-f7c2-4434-9ee1-6f1b530db20f}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ffe1df5f-9f06-46d3-af27-f1fc10d63892}\InProcServer32" = "$homedrive\\Windows\\System32\\hgcpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Photo Viewer\\PhotoViewer\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FFE8C349-2BB1-411F-93CE-0364C5F9FD9F}\InprocServer32" = "$homedrive\\Windows\\System32\\mtfserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FFFDC614-B694-4AE6-AB38-5D6374584B52}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Microsoft Office\\root(\\VFS\\ProgramFilesX64\\Microsoft Office)?\\Office16\\ONBttnIELinkedNotes\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{005A9C68-E216-4B27-8F59-B336829B3868}\InprocServer32" = "$homedrive\\Windows\\system32\\tssdjet\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{007372E5-1023-4DAF-AEA1-D6CCCC93720B}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mistreamprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{022B358F-06B8-4E0D-ADD9-655A8F1E9EDD}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{042dc17c-023f-43df-a3ec-982b4dc78a64}\InProcServer32" = "$homedrive\\Windows\\system32\\propsys\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{047FC311-D163-4BF4-8B25-8005623C37DA}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{04DA8451-7F63-4870-A4D7-F55BE66BFDFB}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0502efc5-d13f-4198-89a4-f62e47f69795}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{05C9DA2B-6DFF-42C7-81CC-706DAE08BC7A}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{06EEE695-542D-46F6-AEAB-FA2F1B2102D3}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{07bfd22e-ac24-40a5-a056-6e72098ac6a0}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{08762EA6-B6EF-45FB-B0A5-2F940A849E12}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{08E4F995-1FB3-4705-AC33-6A2B83E9B5BB}\InProcServer32" = "$homedrive\\Windows\\System32\\CortanaMapiHelper\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0910dd01-df8c-11d1-ae27-00c04fa35813}\InprocServer32" = "$homedrive\\Windows\\system32\\tsuserex\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{095D3BE1-A874-46A5-B989-AE43E3427E3C}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0A522732-A626-11D0-8D60-00C04FD6202B}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\oeimport\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0A88C858-7D0C-4549-9499-7DB05F0CB0BF}\InProcServer32" = "$homedrive\\Windows\\system32\\ntshrui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0EB285C9-E821-4DA7-B705-360AD55A89AD}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0F0549A6-C2E0-442A-85D7-20E3DB9B6A1F}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{0FD19C73-25F5-4A25-B4C5-C77BC26D8E76}\InProcServer32" = "$homedrive\\Windows\\System32\\updatehandlers\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{101A8FB9-F1B9-11d1-9A56-00C04FA309D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{10A2BDBC-7130-420C-9320-A92CC1919206}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{12CE94A0-DEFB-11D2-B31D-00600893A857}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB70804\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{133D705F-25CD-40E4-AA79-B79B690BC283}\InProcServer32" = "$homedrive\\Windows\\System32\\wpncore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{136E0057-D7ED-4B85-9F62-1318CFE1573B}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{13F6A0B6-57AF-4BA7-ACAA-614BC89CA9D8}\InProcServer32" = "`"$env:homedrive\\Program Files( \(x86\))?\\Windows Defender\\mpuxhostproxy\.dll`""
        "HKEY_CLASSES_ROOT\CLSID\{1438E821-B6D2-11D0-8D86-00C04FD6202B}\InprocServer32" = "$homedrive\\Windows\\system32\\msoeacct\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1578080A-1AAA-42BD-AA70-254D5452A0AD}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.UI\.Immersive\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1719364F-1009-4F3F-A6F9-975CA0568D68}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{18277AB8-9922-4D26-A4F5-1D10069D106A}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1956ED66-CF4D-463A-8C9F-617AD590367D}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1A3ED173-B201-4470-9FC6-EC46CF8D56F1}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}\InprocServer32" = "$homedrive\\Windows\\System32\\mprsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1AA7F83A-C7F5-11D0-A376-00C04FC9DA04}\InprocServer32" = "$homedrive\\Windows\\System32\\mprsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1AA7F83B-C7F5-11D0-A376-00C04FC9DA04}\InprocServer32" = "$homedrive\\Windows\\System32\\mprsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1AA7F83F-C7F5-11D0-A376-00C04FC9DA04}\InprocServer32" = "$homedrive\\Windows\\System32\\mprsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1AA7F840-C7F5-11D0-A376-00C04FC9DA04}\InprocServer32" = "$homedrive\\Windows\\System32\\mprsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1C0D39B2-C788-40D2-B062-FDF8293D7BC6}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1CE6EAE3-08A9-4B65-B56F-72A7E75730EE}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1CE75EE1-E27E-4D22-804F-C76D53192D55}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1CF324EC-F905-4c69-851A-DDC8795F71F2}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1e0d47e5-a9dc-4998-a572-38c76ef0f5d7}\InProcServer32" = "$homedrive\\Windows\\system32\\(windows\.storage\.search|shell32|twinui.*|SearchFolder|Search)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1E69A8EB-0B11-40C3-AC27-906ED77CD946}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1E929228-A702-4239-8780-6DB6D1D83E6B}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Printers\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1fefd825-016b-484c-a0aa-616c5f371c1f}\InprocServer32" = "$homedrive\\Windows\\system32\\sdclient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1FF84C3B-1140-4eb6-BE38-4BE618D2E7D6}\InprocServer32" = "$homedrive\\Windows\\system32\\eapa3hst\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1FFDED41-8FC9-497D-BD70-B2E440736273}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlcecompact40\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{20D0DE8D-A98B-4DD4-BA78-612F87EBF890}\InprocServer32" = "$homedrive\\Windows\\System32\\SharedStartModelShim\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{212ADF89-1F86-49D0-914A-DF6C5613C81E}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{231e1b19-4085-441e-8265-3353beee68f8}\InprocServer32" = "$homedrive\\Windows\\System32\\indexeddbserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{233A9694-667E-11d1-9DFB-006097D50408}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{23F24B2D-516C-4E49-B81D-8F6EDDFBE4F2}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.CloudDomainJoinAUG\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{24954E9B-D39A-4168-A3B2-E5014C94492F}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{258B44B8-8CAC-82D7-3FD0-CDA054E9CD11}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{25F51130-BE08-49a9-B37B-1C4A49FEBD5B}\InprocServer32" = "$homedrive\\Windows\\System32\\IME\\IMEJP\\imjppred\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2652B813-2260-4EF3-A311-74A7AC6513D7}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{27E097EC-6D59-4F02-8457-FC647BCB64FA}\InProcServer32" = "$homedrive\\Windows\\System32\\updatehandlers\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{27FEB6AA-3BF1-4E2C-9E12-07EABEB0FBDB}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{29158F8E-ED31-4DFC-B16B-CD639E4BCA23}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\ualprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2AF141DE-8433-4FE1-A14B-D4AF981AB2F5}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2B489FDC-FBCE-4FB9-878B-D957619FD043}\InProcServer32" = "$homedrive\\Windows\\System32\\updatehandlers\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2B6DA137-316E-458B-A0AB-BE48C8EC39B9}\InProcServer32" = "$homedrive\\Windows\\System32\\Display\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2BD40F38-DE45-429D-9D04-24F7C24C78FD}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2C9F6BEB-C5B0-42B6-A5EE-84C24DC0D8EF}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2CB6CDA4-1C14-4392-A8EC-81EEF1F2E079}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2CB861BB-B1B4-4E14-A1A7-D3FB30C3F5CF}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2cba6529-b64d-4c0e-8f48-043b845ef9b3}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2CD19B3E-3897-4EAB-9AC6-B1438F520CA1}\InProcServer32" = "$homedrive\\Windows\\System32\\StoreAgent\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2e7583c7-7eba-4a1a-8468-d03d28477e6f}\InProcServer32" = "$homedrive\\Windows\\System32\\migration\\gameuxmig\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2EEEED04-0908-4cdb-AF8F-AC5B768A34C9}\InprocServer32" = "$homedrive\\Windows\\System32\\mfnetcore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2FFD1C83-BC94-4E39-AEE7-BE162E7D1F84}\InprocServer32" = "$homedrive\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3142DAE9-D79E-41DB-828D-3A989742E485}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{31B4248C-DE4C-408E-88EF-3B4C377E40C9}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\ServerManager\.DeploymentProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{31b7c920-2880-11d0-8d51-00a0c908dbf1}\InprocServer32" = "$homedrive\\Windows\\system32\\korwbrkr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{325524D7-854E-4989-9219-E1E1B8501823}\InProcServer32" = "$homedrive\\Windows\\System32\\EasPoliciesBrokerPS\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{32A8DF4D-2E8C-4983-A156-912D7FAB10EA}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{32B0C344-A3BB-4F6E-B8D9-E883BC150EEA}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{332A1615-9FCB-4D57-BD09-EA10759BC2B6}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3631271D-DDD3-40f2-AC17-B13A3742BA62}\InprocServer32" = "$homedrive\\Windows\\System32\\SmsDeviceAccessRevocation\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{36c6dc9a-2a74-4946-a72c-21a650d2d77d}\InprocServer32" = "$homedrive\\Windows\\system32\\scrdenrl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{37c84fa0-d3db-11d0-8d51-00a0c908dbf1}\InprocServer32" = "$homedrive\\Windows\\system32\\korwbrkr\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{37EABAF0-7FB6-11D0-8817-00A0C903B83C}\InprocServer32" = "$homedrive\\Windows\\system32\\certadm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{38373906-5433-4633-b0fb-29b7e78262e1}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{39981129-C287-11D0-8D8C-00C04FD6202B}\InprocServer32" = "$homedrive\\Windows\\system32\\msoeacct\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{39AE2AEA-D4D5-4DA0-AE47-C020E1BE4BE5}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3a40a10e-ab54-4d64-a2a8-ec81ac256c22}\InprocServer32" = "$homedrive\\Windows\\System32\\MSMiraDisp\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3A5B4772-7946-4E58-9310-B0D423749C1D}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlceoledb40\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3AF3E6DF-B847-4E25-A907-2F73D793B33D}\InProcServer32" = "$homedrive\\Windows\\System32\\CloudBackupSettings\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3BAF3FB2-421B-42ca-86BF-EBC2BB2145D3}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3BFADDE5-09ED-42AE-8190-2E68B650CFE6}\InProcServer32" = "$homedrive\\Windows\\System32\\CortanaMapiHelper\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3C9EE142-8A59-4813-A633-206E0C95EA23}\InProcServer32" = "$homedrive\\Windows\\System32\\IME\\SHARED\\imebrokerps\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3D0B8752-68F8-4F39-929D-DE20ED323F45}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3d5d035e-7721-4b83-a645-6c07a3d403b7}\InprocServer32" = "$homedrive\\Windows\\system32\\mstsmmc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3D5DF14F-649F-4CBC-853D-F18FEDE9CF5D}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3FAA93F3-79FB-4319-8387-B8FFE074FBDA}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{40036581-8ff3-4cec-bd86-fe9593832546}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{42001A23-ED2A-4582-8BCC-6320C543E102}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{448aee3b-dc65-4af6-bf5f-dce86d62b6c7}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4495524E-2E54-472D-86D7-D671CA588F01}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{45C8FAEC-0447-4BD7-A09E-A91BFF9AB53C}\InProcServer32" = "$homedrive\\Windows\\System32\\usocore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{45EACA36-DBE9-4E4A-A26D-5C201902346D}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{45ffc283-e417-4bc2-b0b8-6654081d10d7}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingsHandlers_SignInOptions\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4648F940-EFE3-4BAB-9211-3BE45CD5029D}\InprocServer32" = "$homedrive\\Windows\\system32\\vssui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4729BA91-6337-4013-A5DC-BB9EBFDA2B04}\InProcServer32" = "$homedrive\\Windows\\system32\\ShareHost\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{483B0283-25DB-4C92-9C15-A65925CB95CE}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{49FE263F-8F0A-4C17-BDD8-7D0603759837}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mttmprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4A16043F-676D-11d2-994E-00C04FA309D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Common Files\\System\\directdb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4A3F2F56-454A-4CC5-9734-BB7D8141AC0A}\InProcServer32" = "$homedrive\\Windows\\System32\\shpafact\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4C34A351-5CEC-47A5-8252-075D403C7BF6}\InProcServer32" = "$homedrive\\Windows\\system32\\settingsync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4C5EF749-A380-44FE-853D-FF928F2CD1AE}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4F0BCB98-A0D4-4371-92A7-EE6968A89E72}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{4FFA70E2-405E-4180-A9A7-728A26597B23}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{51F649D3-4BFF-42f6-A253-6D878BE1651D}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{52550DE3-15E4-4B53-9670-74FCF2B9EA21}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{52BE2F87-1638-408A-9A98-74239B0B7DB5}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{530CC6A4-357F-49E2-AB11-3C481DBEDE31}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{535CFF4C-170A-4308-A70E-8188313F3B08}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{53DA1CBB-0F45-46A4-AA6E-47CAAD84C921}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{552E723C-EA6A-499E-9C70-40BC01AEB718}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{56F62E3E-8904-43F6-B841-DAC177F7FEB9}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlcecompact40\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5A8371A3-0C6D-487b-B3C8-46D785C4C940}\InProcServer32" = "$homedrive\\Windows\\System32\\eapahost\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5c491dc5-218e-47c6-9857-d626c0713d09}\InprocServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5CAF7D9E-6DDC-409F-8C87-065FC3B194E6}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5F104B61-7998-4049-A7BB-C99EFB6B4A4E}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{603D2398-7D3C-40F0-8879-D7BB83343CB4}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{60A4C78C-E2B8-4E6E-876F-DA203B02C05E}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{60ABC2F2-6305-4E03-8645-5F9BA071954B}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{60EA900E-0F60-4246-8B09-4E890711701D}\InprocServer32" = "$homedrive\\Windows\\SYSTEM32\\IME\\IMETC\\IMTCCORE\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{610133F4-ED38-42E7-9C18-EB2A8F76B99A}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6129C4B2-9397-4E58-BCD8-CED219D0CD33}\InprocServer32" = "$homedrive\\Windows\\system32\\LocationFramework\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{61DBD86A-8D1A-4EB0-907C-E4C1BBC8F09A}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{626BAFE6-E5D6-11D1-B1DD-006097D503D9}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{65170AE4-0AD2-4FA5-B3BA-7CD73E2DA825}\InprocServer32" = "$homedrive\\Windows\\System32\\(MSWB7|NaturalLanguage6)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{654DF05B-E619-4664-8427-3A5F6D58B890}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{67872C69-5E6B-4D9F-A6C0-E400916C2F23}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\silprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6853E76A-BD3E-11D1-9A4D-00C04FC297EB}\InprocServer32" = "$homedrive\\Windows\\system32\\certadm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{68DC71DC-2327-4040-8F03-50D6A9805049}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{697E2FF0-7FA8-49F1-BB4A-E1D115AA2BBB}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{69C725BB-1A00-496F-A9D6-92F94AFB3DE8}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{69ED626B-904D-4DEF-B919-9EF7E4E339DD}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6B91AFEF-9472-11D1-8574-00C04FC31FD3}\InprocServer32" = "$homedrive\\Windows\\System32\\mprsnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6C53A912-47C6-4959-B342-DF6C9DA9D494}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6C5CFCDA-1F1A-4c9e-8D65-94771169D0B9}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6D1841AA-4F32-4FE6-8EF2-09F69CB32F14}\InProcServer32" = "$homedrive\\Windows\\system32\\settingsync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6DC5746E-1A01-11D3-9ED6-00C04F79731E}\InprocServer32" = "$homedrive\\Windows\\system32\\certadm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6DCF75A0-83C9-4175-A7A8-FE3DCF1F94A4}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6DEE10AC-959D-4df9-B219-DFCF7EDBF498}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6F74FDC5-E366-11d1-9A4E-00C04FA309D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6F74FDC6-E366-11d1-9A4E-00C04FA309D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{70878DCD-56F6-4681-BC52-BC7F58EDF723}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{70952C5B-517B-44a1-B9CA-23134DA7D565}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{709E2729-F883-441e-A877-ED3CEFC975E6}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{712720F4-F4FF-46CF-B6EC-2CC24FC873A5}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7173725A-9C0E-44B1-8319-69F7D983E8D6}\InprocServer32" = "$homedrive\\Windows\\System32\\PrintDialogs3D\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{745a5add-6a71-47b9-9bb9-31dd3a6913d4}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{750F15AE-EBDB-4B5A-9DBF-CA4F5EC295EA}\InprocServer32" = "$homedrive\\Windows\\system32\\PowerWmiProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{753C67E2-43A5-4753-8264-C47BD47544D7}\InprocServer32" = "$homedrive\\Windows\\system32\\WiFiDiscoveryPlugin\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7544405F-C0CE-DF45-26D0-5D5A37C708C7}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{75510190-5A2A-438E-BDC9-187951198FBF}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{75BF9604-626B-4F77-BB6E-8032EAD37D2D}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{76f014ec-1b0c-4a15-a029-4c0fdf12b5b1}\InProcServer32" = "$homedrive\\Windows\\system32\\SYNCUI\.DLL"
        "HKEY_CLASSES_ROOT\CLSID\{77307E00-9E44-D11C-536B-EAD7D6B311CD}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{773229CD-D53C-4211-ACD8-8F2C7BF2AE7C}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{776266FF-0DC5-4F45-BADA-39A7586FACE2}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{781C7DE4-515E-43AD-A394-3768176CAC41}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7A23DF19-D829-25BC-A3D4-5F4F3FEA9277}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7AB7DD72-B9BA-4731-94A0-59042760C18B}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7AE7416D-AD97-4A4B-B5AC-B3CA7865AFBE}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7C2450CD-E430-4DAC-94FA-CEFAC1068505}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7E352021-69D6-4553-86AC-430B0D8FF913}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7EFD3C7E-9E4B-4A93-9503-DECD74C0AC6D}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7F1B9A54-8155-43BB-857C-461DAEFA46BD}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicesFlowBroker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7f38c2ab-5136-428f-a8aa-40877f61dd05}\InProcServer32" = "$homedrive\\Windows\\system32\\indexeddbserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7F75058C-9A21-4F22-A7CA-110205479EF9}\InProcServer32" = "$homedrive\\Windows\\System32\\UserLanguagesCpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{802E19CB-06A0-445D-8297-7DFEEA406DDD}\InProcServer32" = "$homedrive\\Windows\\System32\\UserLanguagesCpl\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{80D6C479-7B70-47DB-AECF-AB5480ADE1E5}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{81442F68-A942-457E-9AF0-C6977E244A7C}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{818C68B0-D4C9-475C-B2CF-AF4242F27C8D}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{83781F70-1169-4489-A442-2C94FF328403}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSyncCore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{85076AB6-318F-4C72-AB29-8029D2CC28F9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{85183dd5-755d-4952-aa8f-c02e5c4f0651}\InprocServer32" = "$homedrive\\Windows\\System32\\InkAnalysisLegacyCom\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\syncui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{85C67146-6932-427C-A6F2-43FDBADF2BFC}\InprocServer32" = "$homedrive\\Windows\\system32\\mstsmhst\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8653057E-8D73-4884-A5D1-4FCCCFFA542C}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{86747AC0-42A0-1069-A2E6-08002B30309D}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{86781CF9-799C-4CFF-9AA5-43F4C23FF866}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{87824713-C8B0-4379-8556-1689764E4237}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{879795A1-A911-4FEF-984F-1A1CA4E14637}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{88A8465A-6789-4D8D-BACB-F3C1CDCE2E8F}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8920EB24-620E-4671-AFC9-CBAF732D6737}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{89F38560-A0AE-4D8C-9E8F-83D4DB8A9F85}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8A13B5B6-E5AE-467F-8C20-2968AFD886DC}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Bluetooth\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8A734961-C4AA-4741-AC1E-791ACEBF5B39}\InprocServer32" = "$homedrive\\Windows\\system32\\wmpshell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8A899610-150A-40DB-B57A-940EDB3203CE}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8B3302D7-95F6-4BC5-A06A-0D6DEF15DB69}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8D0D175C-1D8E-4099-92CE-84C9B8A5E386}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8D4B04E1-1331-11d0-81B8-00C04FD85AB4}\InprocServer32" = "$homedrive\\Windows\\system32\\msoeacct\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8E67B6EF-205D-490F-A004-7B04F8F65B62}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8E9ABF58-7A90-41B9-A0B1-ABF9F8BC0CED}\InprocServer32" = "$homedrive\\Windows\\System32\\SddcProv\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8F0C5675-AEEF-11d0-84F0-00C04FD43F8F}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{8F380D56-7ADE-449b-A748-D0F9595DBA6D}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9042E1B1-8FD4-4008-89FE-4040CC74575A}\InProcServer32" = "$homedrive\\Windows\\system32\\wbem\\servercompprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9068BF36-6F05-477E-B108-A4042237F884}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{92F2118A-E813-4A4D-9DE2-F96A9DC02C53}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{936812D2-D700-407B-BDF6-D00ACD1CC047}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Devices\.Sensors\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{93D5B54E-1F7E-4E6E-8701-35E81DD832E3}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\mgmtprovider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{94510291-3DB7-4F61-B62B-A5790CE92645}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlcecompact40\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{94F35585-C5D7-4D95-BA71-A745AE76E2E2}\InProcServer32" = "`"$env:homedrive\\Program Files( \(x86\))?\\Windows Defender\\mpuxhostproxy\.dll`""
        "HKEY_CLASSES_ROOT\CLSID\{954F1760-C1BC-11D0-9692-00A0C908146E}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB70404\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{961f180f-f55c-413d-a9b3-7d2af4d8e42f}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9902F3BC-88AF-4cf8-AE62-7140531552B6}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9AA45BB7-55FB-4601-BC09-D95A2CD0AC89}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9BC41095-B24D-4526-9CE7-8457BB81AAF4}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9CD31617-B303-4F96-8330-2EB173EA4DC6}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9CDA66BE-3271-4723-8D35-DD834C58AD92}\InProcServer32" = "$homedrive\\Windows\\System32\\ErrorDetailsUpdate\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9D0EAB8C-8EF4-4020-B867-2B1E04E4B8E5}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9DAA7B9D-CE5B-42CE-B942-32BBC284AC44}\InProcServer32" = "$homedrive\\Windows\\system32\\eapa3hst\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9f2b0085-9218-42a1-88b0-9f0e65851666}\InprocServer32" = "$homedrive\\Windows\\system32\\apprepsync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9F45ED9D-1F30-4A29-A13C-E568C38272C4}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\regprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9FE6E853-B35F-4FE4-B006-33148455093E}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A08AF898-C2A3-11d1-BE23-00C04FA31009}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A0A5A274-A190-4A81-997B-9593D6F6D462}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A0D465BE-92E9-4340-A5FE-5ACD9A67EB79}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A1006DE3-2173-11d2-9A7C-00C04FA309D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\oeimport\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A12D0F7A-1E84-11D1-9BD6-00C04FB683FA}\InprocServer32" = "$homedrive\\Windows\\system32\\certadm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A25A5CCD-80F4-4E02-AADD-7F39CC55E737}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A6358B41-04B3-477F-B8E5-7EDB1A5D7ACD}\InProcServer32" = "$homedrive\\Windows\\System32\\VEEventDispatcher\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A6787DB4-F958-4938-855B-594534865351}\InprocServer32" = "$homedrive\\Windows\\System32\\PrintDialogs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A6BA00FE-40E8-477C-B713-C64A14F18ADB}\InprocServer32" = "$homedrive\\Windows\\System32\\wuautoappupdate\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A7D04CE0-9FDE-4E03-9AB2-1DD9255BEE9C}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintDialogs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{a842a6e3-2bac-436f-bb7e-5645f65c01fc}\InProcServer32" = "$homedrive\\Windows\\System32\\LicenseManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A910D941-9DA9-4656-8933-AA1EAE01F76E}\InProcServer32" = "$homedrive\\Windows\\System32\\ngccredprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A9C6B8DD-3CBB-44CB-AA44-4B1C0DBB404D}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{aa4f5c02-8e7c-49c4-94fa-67a5cc5eadb4}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ab3d00ba-f2dd-4deb-b122-177b161ead5b}\InProcServer32" = "$homedrive\\Windows\\System32\\StoreAgent\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AB540CD3-2E37-450D-A095-D0651D9C379F}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ABB3FBAD-CFBB-41C6-8CD2-72F52EA60ADB}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\WEMSAL_WmiProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ACB77480-075F-4093-A47F-23C7C1377780}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicesFlowBroker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ADF2F380-ECE4-4969-91B8-FABA5681F2B9}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AE92E42B-4111-427A-8B0C-24A8D1A7D7F3}\InProcServer32" = "$homedrive\\Windows\\System32\\LocationFramework\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AEDAE7A2-E503-487B-8808-DF0BDDB5C422}\InProcServer32" = "$homedrive\\Windows\\System32\\shutdownUX\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AFD3074E-7656-4F03-9683-0C6BFD8BAE3E}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AFE2FA32-41B1-459d-A5DE-49ADD8A72182}\InprocServer32" = "$homedrive\\Windows\\system32\\certocm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B0E28D63-52F6-4e30-992B-78ECF97268E9}\InprocServer32" = "$homedrive\\Windows\\system32\\eapa3hst\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B20B4135-168D-47D0-A6CE-78DAD1F2AA30}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{b28b6e84-1729-4097-9db1-c7a65433aa33}\InProcServer32" = "$homedrive\\Windows\\system32\\indexeddbserver\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B2F926DB-49FA-4958-914D-A260575403F7}\InProcServer32" = "$homedrive\\Windows\\System32\\VEDataLayerHelpers\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B5148095-4805-4DE7-986D-2456A0B7C838}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}\InprocServer32" = "$homedrive\\Windows\\system32\\rasuser\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B52DC143-218C-4069-B443-9778DDBC95AA}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B58ED99D-A528-4E1B-A26C-0204D5A43718}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{b66d6057-5f10-403c-87a5-88dae2813806}\InProcServer32" = "$homedrive\\Windows\\System32\\wpninprc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B675B948-FBA8-46A4-A4C7-D4291785127B}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B6A585C5-804B-4837-8829-E43D85926DBF}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B7259EF0-83A6-4A3B-A2ED-93EE23DE7863}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B7529C11-7480-4DF7-A341-388411521F94}\InprocServer32" = "$homedrive\\Windows\\system32\\WiFiOnboardingPlugin\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{B8FD8075-9697-4699-BC64-0AAC0F76758E}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ba6f127a-44ab-4674-b8f3-7131fa4dc645}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.Shell\.Search\.UriHandler\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BA7C4EC0-1F74-4621-9423-BC96F2235EE7}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\WUAProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BB7BF430-E4E7-48CF-A803-B0CEDA968D2E}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BD9C9B8F-0403-49D5-8AC2-2354385DF5E5}\InProcServer32" = "$homedrive\\Windows\\System32\\usocore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BE09F473-7FEB-11d2-9962-00C04FA309D4}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{bf6f46d8-862f-470a-8b25-d763e410e808}\InprocServer32" = "$homedrive\\Windows\\System32\\PhonePlatformAbstraction\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{BF782CC9-5A52-4A17-806C-2A894FFEEAC5}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C1CE83B4-571E-4A16-B07A-7BBD8EDB61BB}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{c2409f61-9d38-48a4-995f-1cfdb390b1d9}\InprocServer32" = "$homedrive\\Windows\\System32\\FlightSettings\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C2C50971-D096-4706-9E8B-EB3E123BD076}\InProcServer32" = "$homedrive\\Windows\\System32\\SecondaryTileExperienceCallback\.ProxyStub\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C39FF590-56A6-4253-B66B-4119656D91B4}\InProcServer32" = "$homedrive\\Windows\\System32\\EasPoliciesBroker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4BF21DA-F1E5-4C7F-A611-2698645B19EF}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C481-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C482-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C483-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C491-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C492-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C493-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C4F1-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C4C4C4F3-0049-4E2B-98FB-9537F6CE516D}\InprocServer32" = "$homedrive\\Windows\\System32\\EncDec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C555438B-3C23-4769-A71F-B6D3D9B6053A}\InProcServer32" = "$homedrive\\Windows\\System32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C6C0D6F7-7BFD-4D5B-B106-E01CD098229C}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C700F6EF-A80F-4B24-922A-32308B6FF0C3}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C8A1FAD9-BC51-4031-A3CB-00EDB3FD7D63}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{c8b67f54-d1cb-44bf-9103-a1ab9a9ed8ad}\InProcServer32" = "$homedrive\\Windows\\System32\\mscoree\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{C8F19C79-F2F9-452B-A34E-8926333A4C7F}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{c9fcb054-949a-4088-ba5b-8ee5caec5c69}\InprocServer32" = "$homedrive\\Windows\\system32\\SDClient\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{CA22F5B1-E06F-4A2B-94FC-21E87FE53781}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{CAE80521-F685-11d1-AF32-00C04FA31B90}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{cca22cf4-59fe-11d1-bbff-00c04fb97fda}\InprocServer32" = "$homedrive\\Windows\\system32\\MSWB7001E\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{cedc01c7-59fe-11d1-bbff-00c04fb97fda}\InprocServer32" = "$homedrive\\Windows\\system32\\query\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D0458F37-2228-4FC7-9E66-34133DF4C929}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D23B1E3C-A750-422C-8314-2333F8936EBE}\InprocServer32" = "$homedrive\\Windows\\System32\\Srh\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D313A859-B510-461A-B4A7-70FF73AEF1F1}\InProcServer32" = "$homedrive\\Windows\\System32\\deviceaccess\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D3D742AB-0446-43C0-9899-1084DA4406FF}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D3F73511-92C9-47CB-8FF2-8D891A7C4DE4}\InprocServer32" = "$homedrive\\Windows\\system32\\certadm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D46A0B4F-4EEC-4A83-8DE5-9C86F0DFA34D}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D4FA3D55-FAE9-4F35-A3B5-0E26D98933AC}\InProcServer32" = "$homedrive\\Windows\\System32\\NotificationObjFactory\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D57CD7F4-C9E0-4830-936E-B3AEDB89B7E9}\InprocServer32" = "$homedrive\\Windows\\System32\\wbem\\SDNDiagnosticsProvider\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D7E10D43-6CB9-4a61-91F4-9C722C265CB3}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D85A2008-32B3-4747-8189-7FB809F3CFF1}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintDialogs3D\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D9581C03-9766-45A6-B970-1EABBE985986}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D9E859EA-9C2B-4916-9B39-BCF2BBD50B63}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{D9F1D595-2693-4F95-BFF8-A5BED203B77F}\InprocServer32" = "$homedrive\\Windows\\system32\\vssui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DC357AD1-94F3-4932-80D4-306B69004B46}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DC4701DE-1014-44CC-85A6-253F2B30FB9E}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DEF03232-9688-11E2-BE7F-B4B52FD966FF}\InprocServer32" = "$homedrive\\Windows\\System32\\pnpclean\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{DF1E92F3-F333-4EF5-9C38-B75CB65FFC39}\InProcServer32" = "$homedrive\\Windows\\System32\\(Windows\.Globalization|NaturalLanguage6)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E06A0DDD-E81A-4E93-8A8D-F386C3A1B670}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E0BBDE88-67BA-4A0A-A452-86EF70F69FFE}\InProcServer32" = "$homedrive\\Windows\\System32\\PrintDialogs\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E1E0A883-AB68-4C6C-9C8C-808AF2BA4CBA}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB70011\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E1FD7E9C-FDD3-463D-8717-58DF05CCAB03}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E2686BEB-8E07-8202-60B2-31B769F0671B}\InProcServer32" = "$homedrive\\Windows\\System32\\windows\.internal\.shell\.broker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}\InprocServer32" = "$homedrive\\Windows\\System32\\tapisnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E26D02A1-4C1F-11D1-9AA1-00C04FC3357A}\InprocServer32" = "$homedrive\\Windows\\System32\\tapisnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E26D02A2-4C1F-11D1-9AA1-00C04FC3357A}\InprocServer32" = "$homedrive\\Windows\\System32\\tapisnap\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E2E9CAE6-1E7B-4B8E-BABD-E9BF6292AC29}\InprocServer32" = "$homedrive\\Windows\\system32\\tsuserex\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E33596A6-9108-4C75-B1EE-2EB53D91B48C}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E3A9BD50-51AE-410f-9706-0BA0D68B9A94}\InProcServer32" = "$homedrive\\Windows\\system32\\scavengeui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E58FA315-E206-4CA4-81CE-F34E18E672C9}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E5B2CB7A-FD35-4D4B-A147-176FEB42244B}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e657ebe3-9854-4ee6-8d2a-2d885fc6e1db}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E6B1A103-277A-4D64-ABD0-90151F9CAB82}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingMonitor\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E70C92A9-4BFD-11d1-8A95-00C04FB951F3}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E73A797B-24CE-424A-AD4F-48E98B1E95B8}\InprocServer32" = "$homedrive\\Windows\\System32\\TokenBroker\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7B2FB72-D728-49B3-A5F2-18EBF5F1349E}\InProcServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7B6AEE0-84AE-46CE-B450-DEBF58C90889}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{e7ed314f-2816-4c26-aeb5-54a34d02404c}\InprocServer32" = "$homedrive\\Windows\\System32\\kernelceip\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E7F328B1-6095-41B0-94B7-3DD278EADAA1}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlcecompact40\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E8167EE2-AB45-4BAA-BD03-12590436D789}\InprocServer32" = "$homedrive\\Program Files( \(x86\))?\\Windows Mail\\msoe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{E9D5EFC8-AD7B-48F5-98D3-15A5FDF857F2}\InprocServer32" = "$homedrive\\Windows\\system32\\AllJoynDiscoveryPlugin\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ea96faaf-381c-4635-b3af-cebf7c1d7310}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Gaming\.UI\.GameBar\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EB6C9433-4AAB-4B71-8B18-8F7A3812E43A}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EC98D957-48AD-436D-90BE-BC291F42709C}\InprocServer32" = "$homedrive\\Windows\\system32\\tssdjet\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EE38A9FC-437F-4D03-A593-BB92AF0D153C}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EF54CA1A-1D2C-A774-27FA-D51E5A0BD755}\InProcServer32" = "$homedrive\\Windows\\System32\\SharedStartModel\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EFDB73A6-192F-4944-979E-4153CC8E8715}\InprocServer32" = "$homedrive\\Windows\\system32\\sqlcecompact40\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{f05cca50-64a6-47df-a4d1-ef4427ab32be}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F1759E97-0B98-49DA-8B38-372CD47DC97B}\InProcServer32" = "$homedrive\\Windows\\system32\\SettingSync\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F37AFD4F-E736-4980-8650-A486B1F2DF25}\InProcServer32" = "$homedrive\\Windows\\system32\\mssphtb\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F382DA49-9148-4a22-AF78-C378DFC32D02}\InprocServer32" = "$homedrive\\Windows\\System32\\gameux\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F3AEB884-58C8-40CF-AED3-E7EEFFFAA04A}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F6CF990F-5599-4554-9320-107221A61C4F}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7A465EE-13FB-409A-B878-195B420433AF}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F7B02D8A-65DB-41CB-894D-5BBBF96C1B42}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F86DEAA3-3A0C-4CF6-8E1F-747FED85AB4E}\InProcServer32" = "$homedrive\\Windows\\system32\\explorerframe\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F935A528-BA8A-4DD9-BA79-F283275CB2DE}\InprocServer32" = "$homedrive\\Windows\\system32\\certadm\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9BD3AE7-F595-47F0-B194-B6F40B8D9FFE}\InprocServer32" = "$homedrive\\Windows\\system32\\CbtBackgroundManagerPolicy\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{F9E7E51B-800C-4AE5-A662-E90BB01156E7}\InprocServer32" = "$homedrive\\Windows\\system32\\wbem\\platid\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fa7cfdb5-80b3-44d6-b564-f71e6ebb465d}\InProcServer32" = "$homedrive\\Windows\\System32\\wpninprc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FBA89535-BFAB-4EF7-804C-109186BF507B}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fc470800-12e0-4da3-81f3-e67240d19093}\InProcServer32" = "$homedrive\\Windows\\System32\\StoreAgent\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCB209E8-F668-4124-AC6B-2816E722728E}\InprocServer32" = "$homedrive\\Windows\\System32\\MSWB7\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FCE59DA7-7BAC-40DA-8D21-3E7311BA51CD}\InprocServer32" = "$homedrive\\Windows\\System32\\fssprov\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{fcf8ebcb-d6cd-4f87-be38-d40b90ef2fb8}\InProcServer32" = "$homedrive\\Windows\\system32\\(twinui|twinui\.appcore)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD339D76-EA3E-435F-AC29-3FFCE55EB35B}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FD51544B-8050-4C68-ABAE-3E1F7A8C01D3}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE285C8C-5360-41C1-A700-045501C740DE}\InProcServer32" = "$homedrive\\Windows\\System32\\ErrorDetailsUpdate\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE62FDE5-E0D8-4118-9FA3-45D31A5AEA0F}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FE6CBCD1-20A2-44F7-8A9C-BE3B161577A9}\InprocServer32" = "$homedrive\\Windows\\System32\\SrhInproc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{11236C00-2897-4F09-BCAA-B2BBD094AA88}\InprocServer32" = "$homedrive\\Windows\\System32\\PrintWorkflowProxy\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{1E4CEC13-76BD-4ce2-8372-711CB6F10FD1}\InProcServer32" = "$homedrive\\Windows\\System32\\XpsFilt\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{2D1F4498-D1B9-48C6-B488-7C2453F58A78}\InProcServer32" = "$homedrive\\Windows\\System32\\daxexec\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{39142420-C9BB-402A-863F-3C9FDB55B5AB}\InProcServer32" = "$homedrive\\Windows\\System32\\usocore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3AF15AD7-76FF-4BE6-A15A-83D981D975A9}\InProcServer32" = "$homedrive\\Windows\\System32\\Windows\.Graphics\.Printing\.Workflow\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{3fe444e2-bda1-4581-a5d4-5f62e8f2ec56}\InProcServer32" = "$homedrive\\Windows\\System32\\DolbyHrtfEnc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{44121072-A222-48f2-A58A-6D9AD51EBBE9}\InProcServer32" = "$homedrive\\Windows\\System32\\XPSSHHDR\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{45670FA8-ED97-4F44-BC93-305082590BFB}\InProcServer32" = "$homedrive\\Windows\\System32\\XPSSHHDR\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{53EBEA34-6911-462F-ABF0-CB64961CC4DF}\InProcServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{5E46F84B-3520-4A35-877A-083A2F0B7F59}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{658c9a86-2e6b-4989-8c11-80249907eda5}\InProcServer32" = "$homedrive\\Windows\\System32\\DolbyHrtfEnc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6A828F18-5556-48C8-A5C3-536202DF6F0D}\InProcServer32" = "$homedrive\\Windows\\System32\\UiaManager\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{6ee68766-738a-47fe-9531-fb7c0de21ccd}\InProcServer32" = "$homedrive\\Windows\\System32\\CoreShell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{7DE95A91-6443-4749-AFC4-AC4EEDCD4421}\InProcServer32" = "$homedrive\\Windows\\System32\\(twinui|twinui\.appcore)\.pcshell\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{905FCFCB-7937-43CD-B0B1-95284CF8422E}\InProcServer32" = "$homedrive\\Windows\\System32\\(Srh|SrhInproc)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{9D3F2BEA-70EC-45C4-B6A5-A071E47185F1}\InProcServer32" = "$homedrive\\Windows\\System32\\usocore\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{A5A842A5-2F24-28BA-0237-FA857C65B593}\InProcServer32" = "$homedrive\\Windows\\System32\\StartTileData\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{AACA92BE-029D-4006-ADA0-725B506CF9B2}\InProcServer32" = "$homedrive\\Windows\\System32\\DolbyMATEnc\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{c82fa008-bce8-4ebc-89f4-5b0061861c6e}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{d2b3db04-b843-11e7-abc4-cec278b6b50a}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{d95b041d-fb4e-4886-b307-ef043d5bbc48}\InProcServer32" = "$homedrive\\Windows\\System32\\SettingsHandlers_(User|nt)\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{EA7E2F2F-C713-4A10-8708-C9C40587BAD7}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
        "HKEY_CLASSES_ROOT\CLSID\{FF658520-21A7-4AE1-A72A-D5A2D937138C}\InProcServer32" = "$homedrive\\Windows\\System32\\XPSSHHDR\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{02E4CBEF-3B8B-4F42-85B9-2BD7BCEC17EE}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{0310cfdc-c8d3-4dec-b3de-d707b372b498}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCDICB\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{05827933-6FB3-4485-89F2-75615F94AAEA}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{09C20568-F30C-489B-AE9C-4930AD7F165F}\InProcServer32" = "$homedrive\\Windows\\system32\\QShvHost\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{0B4E4ABD-BAAC-4822-83A0-936A676196EE}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{0BE0E753-E119-4F07-A665-57EECDEF9AF1}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{0C109C45-5721-4a09-B102-38A207668661}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\MTFUtils\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{0F0C09C5-601E-4396-BCD0-CDB343D7F657}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{0FDE1D55-B32D-48D6-914C-FF77BB218491}\InprocServer32" = "$homedrive\\Windows\\System32\\SeVA\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{1138506a-b949-46a7-b6c0-ee26499fdeaf}\InprocServer32" = "$homedrive\\Windows\\system32\\wucltux\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{119DA856-EB4E-4230-8872-F0774D6E781C}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\MTFUtils\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{1274A710-819D-4AB1-BA5E-27D2D3D27925}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{12a66224-5e8a-4679-8941-0b9b960bf5ea}\InprocServer32" = "$homedrive\\Windows\\system32\\wuwebv\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{12DA6D0B-021F-4d79-8794-64145F503CA5}\InprocServer32" = "$homedrive\\Windows\\System32\\eapqec\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{12db95c0-aaa9-48e4-b571-a1273d139369}\InprocServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{13680CED-AEA0-48d5-A75C-5FD47A3F417A}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{1407023f-dfb0-4b9b-b1f0-40ea250e51cb}\InProcServer32" = "$homedrive\\Windows\\System32\\wups\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{14ce31dc-abc2-484c-b061-cf3416aed8ff}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{165455AA-DFB8-4B89-AFF6-D4C4FDD5FFD6}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\MTFUtils\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{17a898fb-3fc5-455c-87a9-db06f9d0a557}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCCORE\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{17B81E6A-3819-47EA-8382-354726FFA0B7}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{17E3383F-AD28-4E12-AE3E-1D2AADC3AD26}\InprocServer32" = "$homedrive\\Windows\\System32\\SeVA\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{18E6F425-4735-4DD4-94A0-EB2006451C30}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{1A60499D-2DDD-48E8-AA30-0EF7590BAFBA}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\StaticDictDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{1a6fe369-f28c-4ad9-a3e6-2bcb50807cf1}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\iedvtool\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{1BFFE0E7-396C-40DC-82A0-6D74C7011B34}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\StaticDictDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2067ECCC-D717-4b2e-9B39-2847A412F13C}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{21B82DE4-3BB2-4D10-B382-A614D665F4B5}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2241690B-2E92-46ab-B054-7518558B80DF}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{22BDC741-73F0-41DB-9463-E343DEF3E376}\InProcServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{23448CEA-DD83-4DC9-AD1C-0E2A70454A3B}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{23613363-0028-431D-A49E-A3CD482D3926}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2C22EB53-FDC0-4384-BD2A-8126E159AA39}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2D01F7CA-044B-4684-BD2E-E835F04F3D5D}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2DD80115-AD1E-41F6-A219-A4F4B583D1F9}\InProcServer32" = "$homedrive\\Windows\\System32\\WcsPlugInService\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2EAF57E6-3E96-4D68-8F06-ADC55A842EF9}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHS\\ChsPinyinDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2EEDA9C2-E412-453A-8CBA-54DBC5B28D0B}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{2F5C3DEB-80B1-484A-9843-BBCDF6CAA0B2}\InProcServer32" = "$homedrive\\Windows\\system32\\AepRoam\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{32374F0E-85D3-4408-9BD0-887E3EEAE7F0}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\jsprofilercore\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{32F1EEA8-D64C-4c24-8247-26E648A1D202}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{346c011f-3e1d-4029-b153-7aed109a1883}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.appcore\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{34a13fc7-86ab-42e6-a32c-b50666f04ff9}\InprocServer32" = "$homedrive\\Windows\\System32\\jscript9\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{34a3d570-67d9-4265-a9ee-8c3fa3dfeccf}\InProcServer32" = "$homedrive\\Windows\\System32\\ieframe\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{34F85D56-33E9-4CD0-BB19-D8C3BAA04025}\InProcServer32" = "$homedrive\\Windows\\System32\\wsclient\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{35117bca-71f9-4399-8709-f380c7aaa8bd}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{35298344-96A6-45E7-9B6B-62ECC6E09920}\InProcServer32" = "$homedrive\\Windows\\System32\\qutil\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{36eef7db-88ad-4e81-ad49-0e313f0c35f8}\InProcServer32" = "$homedrive\\Windows\\system32\\shdocvw\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{39124E35-C31A-4D85-BF08-667CC504D997}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3A30A0BD-0155-43A3-A9D6-E8434AEABA09}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3B881B82-5BF4-4657-A3A2-CCE17E4FD39A}\InprocServer32" = "$homedrive\\Windows\\System32\\QSvrMgmt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3EBBDA08-0E3A-46ff-B8DE-DDC1FB3B2BB7}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3F28C523-6880-4BF8-92AF-E7B2F3EA761B}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3F6953F0-5359-47FC-BD99-9F2CB95A62FD}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3F8424D7-0D88-4758-8720-62F8D66A1402}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3FA18119-F466-45FE-BA23-FFF9C133DA0B}\InprocServer32" = "$homedrive\\Windows\\System32\\ScwAuditExt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{3FECE929-9E54-42D2-A598-82A7C6D7B511}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{420F5E80-D985-440C-ACC4-93A31B67C239}\InprocServer32" = "$homedrive\\Windows\\System32\\ScwSceExt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{424bed78-ef88-4b7c-945c-b8cf46d56e20}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{452eee0c-a2d4-49c3-9f19-1493e7709220}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{48753D53-7819-41B0-A015-095B708D0399}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{4933656C-55E2-48e6-AD89-679CAE6295DF}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{49C69FAB-ED5E-4D48-9A65-E4816E5FE642}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{49fc0b81-206c-407f-9f5b-106e5a3ee2d7}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCCFG\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{4c2b3015-779e-421c-b54a-b8d5659e880a}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxProxyDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{4C69B0B9-E1BE-47E1-96D9-4A2C5C001ED6}\InprocServer32" = "$homedrive\\Windows\\System32\\ScwServiceExt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{4CDC41C7-C20F-4163-992D-10AC7FBF0BE3}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{4f7d48de-1045-48b0-adba-f0b6d93a18f4}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{52FEC728-4B3B-4B99-8875-B1E2D16E3D1F}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{548968f5-17f7-4751-a581-ff0f1c732995}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{5521E761-0180-4E59-B59F-F73FE9D5669B}\InprocServer32" = "$homedrive\\Windows\\System32\\SMEF\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{55A371BB-E795-4352-81EE-75721BE523F5}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{55B400DA-2B36-443e-9774-B8C2DAE12FFC}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{5635493f-7d77-4372-a839-8ad89f5b3726}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{56D53CCB-99EB-41AD-9762-CAADBC8ED6DD}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{57BFCFDD-EEE4-4DBB-A751-3CDEB169FF44}\InprocServer32" = "$homedrive\\Windows\\system32\\msched\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{57C06EAA-8784-11D0-83D4-00A0C911E5DF}\InProcServer32" = "$homedrive\\Windows\\System32\\netcfgx\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{59099400-57FF-11CE-BD94-0020AF85B590}\InProcServer32" = "$homedrive\\Windows\\system32\\diskcopy\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{599F9021-5643-4965-9949-E88975EFFF0E}\InProcServer32" = "$homedrive\\Windows\\System32\\QSvrMgmt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{59EFE487-E5B8-4fae-9D2C-FCDF0B70CE70}\InprocServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{5AA199A0-1CED-43A5-9B85-3226086738A3}\InProcServer32" = "$homedrive\\Windows\\System32\\netcfgx\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{5C917E9C-0B2F-40D6-928B-5C43FDB16DF4}\InProcServer32" = "$homedrive\\Windows\\System32\\wsclient\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{5fd4d76a-03e2-46d5-971e-9fe5b209f08e}\InprocServer32" = "$homedrive\\Windows\\System32\\scwengb\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{60134A79-1A65-41b5-AC93-8443DB17D3A2}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{602B8D3A-4102-44C5-AAA2-DEC8AEA11BAF}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6073884C-4C86-428F-8625-800DC2EFEE57}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{645E29EA-4B0A-464C-8B7D-1A6B9F9D92A8}\InprocServer32" = "$homedrive\\Windows\\system32\\msched\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{677126ed-2a91-40ff-8c52-06181c064573}\InprocServer32" = "$homedrive\\Windows\\system32\\qagent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{692A9F02-84DE-468b-A549-B30AEC43FFF2}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{693C76B7-39CA-4EF7-9D38-0DA4F54D3240}\InprocServer32" = "$homedrive\\Windows\\System32\\ActiveSockets\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{69B37063-2BB6-43b5-A109-60E69A77840F}\InprocServer32" = "$homedrive\\Windows\\System32\\WcsPlugInService\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{69e5f6f4-c7e1-4bec-9fac-05e283597632}\InprocServer32" = "$homedrive\\Windows\\System32\\scwengb\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{69E6F647-D485-4F09-948D-1DFD4B9C279B}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6A3D3995-C7A1-400c-8510-EE9241A7ACA2}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\MTF\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6A66A115-A748-4077-856C-D1B25276668E}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHT\\ChtPhoneticDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6B750899-F157-47D7-9C08-257E7A35141D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6BC096E2-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6BC096E3-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6BC096E4-0CE6-11D1-BAAE-00C04FC2E20D}\InprocServer32" = "$homedrive\\Windows\\system32\\iasnap\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6E65CBC0-926D-11D0-8E27-00C04FC99DCF}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6E65CBC1-926D-11D0-8E27-00C04FC99DCF}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6E65CBC3-926D-11D0-8E27-00C04FC99DCF}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6E65CBC4-926D-11D0-8E27-00C04FC99DCF}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6E65CBC5-926D-11D0-8E27-00C04FC99DCF}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6E65CBC6-926D-11D0-8E27-00C04FC99DCF}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{6EFED3B2-34B3-4612-BF6D-2F206C646AAB}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7177c4bd-e20a-4140-ad8a-998e7a2d18c0}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{71C99AB9-508A-4671-8B67-302E098FBFA8}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7467A15C-E984-4F14-8031-D569C7DE0E8E}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{74F5A028-DD3C-4724-B0E5-1D8A52C948DD}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7516F25D-FFD1-4038-9788-8AF34951D41D}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\JPN\\JpnRanker\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7986d495-ce42-4926-8afc-26dfa299cadb}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7A6065F5-E2C6-45c8-968D-306BCB145A68}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\MTFUtils\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7be9d83c-a729-4d97-b5a7-1b7313c39e0a}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7BF0129B-5BEF-4de4-9B0B-5EDB66AC2FA6}\InprocServer32" = "$homedrive\\Windows\\SYSTEM32\\IME\\IMESC\\IMSCCORE\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{7c27a1a1-0da5-45ac-a3d2-4fe7cb7a40e8}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7ECBF017-BDC3-46D1-B9DA-95FA555D9ECF}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{7F368827-9516-11D0-83D9-00A0C911E5DF}\InProcServer32" = "$homedrive\\Windows\\System32\\netcfgx\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{81d4e9c9-1d3b-41bc-9e6c-4b40bf79e35e}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\DesktopTIP\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8211a058-8b6b-4c7c-bb2b-8d88a20288f8}\InProcServer32" = "$homedrive\\Windows\\System32\\NdisImPlatform\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{85D83C7F-8452-4D31-AEC2-6A66444B07DA}\InprocServer32" = "$homedrive\\Windows\\System32\\SeVA\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{85F28455-662E-48c2-B5D1-7136BD71E224}\InprocServer32" = "$homedrive\\Windows\\System32\\ActiveSockets\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{865e5e76-ad83-4dca-a109-50dc2113ce9a}\InProcServer32" = "$homedrive\\Windows\\system32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{869F1B54-1D5D-4F16-A0F7-B3FDAE7BC730}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\MTF\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8b3ca2d7-9965-41a7-ad63-d113df1667fd}\InProcServer32" = "$homedrive\\Windows\\System32\\DevicePairingProxy\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8c4fce56-fc9a-4fcb-bd35-2ccabfd93844}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8D86D59A-71BD-45A4-B2EB-8B240EB5F3A1}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8E594310-16CA-4a00-932F-F70969F990C0}\InprocServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8EBB11FB-C16A-4555-BE11-B4607FF62385}\InprocServer32" = "$homedrive\\Windows\\System32\\scwengf\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{8fe85d00-4647-40b9-87e4-5eb8a52f4759}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\iedvtool\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{91BB29F9-50CF-4F39-8953-E373C3774354}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\KOR\\KorHanjaDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{92A9149E-2F1F-472B-B644-9535726E6187}\InprocServer32" = "$homedrive\\Windows\\System32\\ComplianceExtensions\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{92B0FB42-E9B6-4359-8C81-2496639DC7CD}\InProcServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\ChxEM\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{92BDB7E4-F28B-46A0-B551-45A52BDD5125}\InprocServer32" = "$homedrive\\Windows\\System32\\tschannel\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{93852550-5403-4E1B-AF8C-5806F151B2F5}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\jsdebuggeride\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{9443B89B-6564-496a-B19C-6C6D22709045}\InprocServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{95158CD0-A5EE-4BEF-B9AC-8DE5D820275F}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{9606A63A-890F-4518-B8C7-C4CA76373666}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCCORE\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{96AD53F7-92C8-479D-8B83-3D62E0E5EBA9}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobedui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{970782A8-76C6-40c1-9831-A0315577D5D9}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{99325BBE-E0A7-48A1-A23E-716582D09FEF}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{9b11e09d-e787-4bcf-9ca5-9173520a99c3}\InProcServer32" = "$homedrive\\Windows\\System32\\wu\.upgrade\.ps\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{9C483F92-DAD8-437d-9D0D-C8F64A6815AD}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{9C649633-9D4E-40A5-9F0A-32C35D9D6FE3}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{9f68efbe-28e1-433c-a353-95cf4ba1070a}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A03FB29D-1AF8-4632-9778-2DE93E21A4F1}\InProcServer32" = "$homedrive\\Windows\\system32\\AepRoam\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A102468F-8109-478E-8D94-E8AA958AC9EA}\InprocServer32" = "$homedrive\\Windows\\System32\\ScwFirewallExt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A1607060-5D4C-467a-B711-2B59A6F25957}\InProcServer32" = "$homedrive\\Windows\\System32\\AltTab\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A1E6EB1D-4E02-4DC8-A3B9-FABD9720700A}\InprocServer32" = "$homedrive\\Windows\\System32\\SMEF\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A2A54893-AAF2-49A3-B3F5-CC43CEBCC27C}\InprocServer32" = "$homedrive\\Windows\\system32\\napdsnap\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{a5fda055-899d-4895-97ae-0cc4fe4e977f}\InProcServer32" = "$homedrive\\Windows\\System32\\brdgcfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A61E83F9-7923-4b5c-85C7-1D9DCAB00E64}\InprocServer32" = "$homedrive\\Windows\\SYSTEM32\\IME\\IMESC\\IMSCCORE\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{a8a881fb-bee9-4cdf-b052-ae42e427e319}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{A8CD0ADC-23D6-4B79-BCC9-D3309DF34760}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{AA160628-8775-46e3-837C-F7A2AE66E2F5}\InprocServer32" = "$homedrive\\Windows\\System32\\qutil\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{AA49497A-AD46-46f7-A5E0-7C9E76543B99}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{AAD3DECB-03A4-4DF6-821F-F8A1357EB25D}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{aad40095-d757-481d-8b7b-b60fbbe67b7f}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{AB3B125A-120F-4444-B5EB-E14738782758}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{ABB78EBD-45BD-415B-9466-5C2A0F25CACE}\InprocServer32" = "$homedrive\\Windows\\system32\\napdsnap\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{ABCA6774-29B5-4aff-A776-C2551AE0FFE6}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{ACD883FE-C0E6-4293-AD35-B3ACBD3EF3B3}\InProcServer32" = "$homedrive\\Windows\\System32\\wups2\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{AD7B5554-C683-4C04-AAF9-9676822D2692}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{adfa80e7-9769-4ad9-992c-55dc57e1008c}\InProcServer32" = "$homedrive\\Windows\\System32\\shell32\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{B089413C-AF3B-4E55-AAC2-9A990E98C1AE}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{b1325ef5-dd4d-4988-a2b3-c776ad45d0d6}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{B176402A-8942-4161-B754-FB582EA57A1A}\InProcServer32" = "$homedrive\\Windows\\system32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{b1e4da65-b5f6-4302-8ff2-2276c1842090}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCDICB\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{B2B6867C-4AC5-4AC3-9195-B81056278BFB}\InprocServer32" = "$homedrive\\Windows\\System32\\scwengb\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{B30F39FD-4716-428C-A5F2-CE81228599CE}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\SHARED\\StaticDictDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{B475F925-E3F7-414C-8C72-1CEE64B9D8F6}\InProcServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{b905275e-d600-4aa4-9139-d7bd214d375b}\InprocServer32" = "$homedrive\\Windows\\System32\\WSShared\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{BB08E6F8-8877-4AC9-B224-E71D2ED5968F}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{BB82C84F-2E85-42bd-B0E4-152EF5DD5F6F}\InprocServer32" = "$homedrive\\Windows\\System32\\wuapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{BD254A13-FAA8-42A1-8132-42D9E8B320DD}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{BFCB2C6D-04AA-4fb9-BC72-58E1AF64BE39}\InprocServer32" = "$homedrive\\Windows\\System32\\QSvrMgmt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C1060E7E-7939-44A5-99C3-A6DCCD92AED0}\InProcServer32" = "$homedrive\\Windows\\System32\\kmsvc\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C1ADB7B7-B545-4FB2-8C83-DDB4344B3B56}\InprocServer32" = "$homedrive\\Windows\\System32\\InputMethod\\CHT\\ChtPhoneticDS\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C28DA8E5-39C2-4F62-82FA-C61D39A196DF}\InprocServer32" = "$homedrive\\Windows\\System32\\NaturalLanguage6\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C2A2E3EB-F596-4255-881E-237A0F3FE89F}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C3203275-7A13-425F-8F7E-828C2D750337}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C330DE32-29C7-4cf2-9807-74BCB5486A37}\InprocServer32" = "$homedrive\\Windows\\system32\\qcliprov\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C3599EA1-727E-4682-817A-F6A4C0A5AA7A}\InProcServer32" = "$homedrive\\Windows\\System32\\hcproviders\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C3A0B997-DD49-4A26-960D-A930CB921B02}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C89FC3EF-A0DC-4feb-BFBC-F13A9C334D4F}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{C90FB8CA-3295-4462-A721-2935E83694BA}\InProcServer32" = "$homedrive\\Windows\\system32\\Windows\.UI\.Search\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{CED43EC3-71D3-4534-826E-D499608BA83F}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{cfbc05bc-1b9e-4693-a49c-4e7181d69e0a}\InProcServer32" = "$homedrive\\Windows\\system32\\wucltux\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{D212B88E-8365-4CA9-BC4E-CFA4251F6B5F}\InProcServer32" = "$homedrive\\Windows\\System32\\ndiscapCfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{D36CDB24-BBF3-4035-BE13-0EC70AC00547}\InProcServer32" = "$homedrive\\Windows\\System32\\oobe\\msoobeplugins\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{d3c86d56-03a1-42d5-af4c-1b612be90448}\InProcServer32" = "$homedrive\\Windows\\system32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{D60795C3-F2A5-45b1-A731-2516E7EAB8EB}\InprocServer32" = "$homedrive\\Windows\\System32\\qagent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{D63D5073-E487-4412-A003-4B3E82514E3D}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{d6afe216-3106-4e91-953f-ffa26064c8ee}\InprocServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{D753D854-4427-4F8B-AB9A-CC13167C4BC0}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{D8D7A7BC-0A44-45A1-941A-C938CE6CFF05}\InProcServer32" = "$homedrive\\Windows\\System32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{DD1BD354-AA12-4468-B72B-E17D58898FF1}\InProcServer32" = "$homedrive\\Windows\\system32\\Uxtheme\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{DD373F1A-7227-4e3c-9AFB-98C288CF1956}\InprocServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{e0142b6f-a79d-451a-91a9-37e83ab696ec}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{E0519C57-3F89-4640-A63B-EF66268B52D9}\InProcServer32" = "$homedrive\\Windows\\system32\\twinapi\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{E182D996-AB8B-44AC-8B51-4D47B9C9C1DD}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{E29E3FFF-7088-4454-967F-30DC69C2F04F}\InprocServer32" = "$homedrive\\Windows\\System32\\scwengf\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{E52C9A25-F3E8-49E4-BAA7-FAD0EF620129}\InprocServer32" = "$homedrive\\Windows\\System32\\WSService\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{E8140D53-6535-46a5-B8A1-DA6C571DA9B9}\InprocServer32" = "$homedrive\\Windows\\System32\\qutil\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{e949da38-c39d-4460-8ea7-a39152c56836}\InProcServer32" = "$homedrive\\Windows\\System32\\rascfg\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{e9af4895-15f5-4b89-80d6-60d041cc5737}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCDICB\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{ea4a0a43-1c8f-4c7b-a4b1-28ecbd96ba8c}\InprocServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{eb082ba1-df8a-46be-82f3-35bf9e9be52f}\InprocServer32" = "$homedrive\\Windows\\System32\\QAgent\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{EBF024CD-CF8A-4D2A-9132-43CFD49ACBB3}\InProcServer32" = "$homedrive\\Windows\\System32\\SearchFolder\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{ED459A57-AA6F-4B63-9696-371079A6F3DF}\InprocServer32" = "$homedrive\\Windows\\System32\\SeVA\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{EFA53AE9-2604-4a34-9E67-674842B4CB35}\InProcServer32" = "$homedrive\\Windows\\system32\\authui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{F0469A3D-599F-4b0f-9690-ED89A167AA37}\InProcServer32" = "$homedrive\\Windows\\system32\\IME\\IMESC\\IMSCDICB\.DLL"
		"HKEY_CLASSES_ROOT\CLSID\{F74B1266-FF39-4B62-8B6B-29C09920852C}\InProcServer32" = "$homedrive\\Windows\\System32\\ieetwproxystub\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{F79AC7AC-E742-4F2F-A3FE-A466DD56919E}\InprocServer32" = "$homedrive\\Windows\\System32\\ScwRegistryExt\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{F7EB5CF5-DBFB-4AC1-BA2E-E2CBE985D804}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{FAB24754-0440-439b-A223-B1D360062D1D}\InprocServer32" = "$homedrive\\Windows\\System32\\dhcpqec\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{fb60e872-c2d9-4ce1-a29c-e3145c095be5}\InProcServer32" = "$homedrive\\Windows\\System32\\twinui\.appcore\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{FD7F26E3-9788-4070-BEEC-4EAECBCDDA60}\InProcServer32" = "$homedrive\\Program Files( \(x86\))?\\Internet Explorer\\jsprofilercore\.dll"
		"HKEY_CLASSES_ROOT\CLSID\{fe64acb0-e0e7-4b4a-8086-923b5031bca9}\InprocServer32" = "$homedrive\\Windows\\System32\\scwengb\.dll"
    }

    # HKCR
    $path = "HKCR\CLSID_SKIP"
    # https://learn.microsoft.com/en-us/windows/win32/sysinfo/hkey-classes-root-key
    # HKCR represents a merged view of HKLM and HKCU hives on a live machine - we will skip it in these checks and instead just check the relevant items in HKLM and each user hive
    if (Test-Path -Path "Registry::$path") {
        $items = Get-ChildItem -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $children = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($child in $children){
                $path = "Registry::"+$child.Name
                $data = Get-Item -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                if ($data.Name -match '.*InprocServer32'){
                    $datum = Get-ItemProperty $path
                    $datum.PSObject.Properties | ForEach-Object {
                        if ($_.Name -eq '(Default)'){
                            $verified_match = $false
                            $clsid_found = $false
                            $expected_value = "N/A"
                            if ($default_hkcr_com_lookups.ContainsKey($data.Name)){
                                $clsid_found = $true
                                $expected_value = $default_hkcr_com_lookups[$data.Name]
                                try{
                                    if ($_.Value -match $default_hkcr_com_lookups[$data.Name]){
                                        $verified_match = $true
                                    }
                                } catch {
                                    Write-Reportable-Issue "Regex Error while parsing string: $($default_hkcr_com_lookups[$data.Name])"
                                }
                            }

                            if ($server_2022_coms.ContainsKey($data.Name) -and $verified_match -ne $true){
                                $clsid_found = $true
                                $expected_value = $server_2022_coms[$data.Name]
                                try{
                                    if ($_.Value -match $server_2022_coms[$data.Name]){
                                        $verified_match = $true
                                    }
                                } catch {
                                    Write-Reportable-Issue "Regex Error while parsing string: $($server_2022_coms[$data.Name])"
                                }
                            }

                            # Each hive will have 3 rounds of detection
                            # First Detection - if we have the CLSID and there is a mismatch
                            $item = Get-Item -Path $_.Value -ErrorAction SilentlyContinue
                            if ($verified_match -ne $true -and $clsid_found){
                                $detection = [PSCustomObject]@{
                                    Name = 'Potential COM Hijack - Mismatch on stored CLSID'
                                    Risk = 'Medium'
                                    Source = 'Registry'
                                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                    Meta = [PSCustomObject]@{
                                        Location = $data.Name
                                        EntryName = $_.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $expected_value
                                        Hash = Get-File-Hash $_.Value
                                        Created = $item.CreationTime
                                        Modified = $item.LastWriteTime
                                    }
                                }
                                Write-Detection $detection
                            }

                            # Second Detection - if we do NOT have the cLSID and the file was created/modified within the last X days (configurable)
                            $created = ($item.CreationTime)
                            $modified = ($item.LastWriteTime)
                            if ((($created -ge $threshold_date) -or ($modified -ge $threshold_date)) -and $verified_match -ne $true){
                                $detection = [PSCustomObject]@{
                                    Name = 'Potential COM Hijack - Recently Modified or Created Entry'
                                    Risk = 'Low'
                                    Source = 'Registry'
                                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                    Meta = [PSCustomObject]@{
                                        Location = $data.Name
                                        EntryName = $_.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $expected_value
                                        Hash = Get-File-Hash $_.Value
                                        Created = $item.CreationTime
                                        Modified = $item.LastWriteTime
                                    }
                                }
                                Write-Detection $detection
                            }

                            # Third Detection - Suspicious Directory for entry value
                            foreach ($path in $suspicious_process_paths){
                                if ($_.Value -match $path){
                                    $detection = [PSCustomObject]@{
                                        Name = 'Potential COM Hijack - Suspicious Entry Path'
                                        Risk = 'Medium'
                                        Source = 'Registry'
                                        Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                        Meta = [PSCustomObject]@{
                                            Location = $data.Name
                                            EntryName = $_.Name
                                            EntryValue = $_.Value
                                            ExpectedValue = $expected_value
                                            Hash = Get-File-Hash $_.Value
                                            Created = $item.CreationTime
                                            Modified = $item.LastWriteTime
                                        }
                                    }
                                    Write-Detection $detection
                                }
                            }
                        }
                    }
                }
            }
        }
    }

    ## HKLM
    $default_hklm_com_lookups = @{}
    $default_hklm_com_server_lookups = @{}
    $local_regretarget = $regtarget_hklm+"SOFTWARE\Classes"
    #Write-Host $local_regretarget
    foreach ($hash in $default_hkcr_com_lookups.GetEnumerator()){
        $new_name = ($hash.Name).Replace("HKEY_CLASSES_ROOT", $local_regretarget)
        $default_hklm_com_lookups["$new_name"] = $hash.Value
    }
    foreach ($hash in $server_2022_coms.GetEnumerator()){
        $new_name = ($hash.Name).Replace("HKEY_CLASSES_ROOT", $local_regretarget)
        $default_hklm_com_server_lookups["$new_name"] = $hash.Value
    }

    #test AD5FBC96-ACFE-46bd-A2E2-623FD110C74C
    $local_regretarget2 = "$regtarget_hklm`SOFTWARE\Classes\CLSID"
    #$path = "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID"
    $path = $local_regretarget2
    if (Test-Path -Path "Registry::$path") {
        $items = Get-ChildItem -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $children = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($child in $children){
                $path = "Registry::"+$child.Name
                $data = Get-Item -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                if ($data.Name -match '.*InprocServer32'){
                    $datum = Get-ItemProperty $path
                    $datum.PSObject.Properties | ForEach-Object {
                        if ($_.Name -eq '(Default)'){
                            $verified_match = $false
                            $expected_value = "N/A"
                            if ($default_hklm_com_lookups.ContainsKey($data.Name)){
                                $expected_value = $default_hklm_com_lookups[$data.Name]
                                try{
                                    if ($_.Value -match $default_hklm_com_lookups[$data.Name]){
                                        $verified_match = $true
                                    }
                                } catch {
                                    Write-Reportable-Issue "Regex Error while parsing string: $($default_hklm_com_lookups[$data.Name])"
                                }
                            }

                            if ($default_hklm_com_server_lookups.ContainsKey($data.Name) -and $verified_match -ne $true){
                                $expected_value = $default_hklm_com_server_lookups[$data.Name]
                                try{
                                    if ($_.Value -match $default_hklm_com_server_lookups[$data.Name]){
                                        $verified_match = $true
                                    }
                                } catch {
                                    Write-Reportable-Issue "Regex Error while parsing string: $($default_hklm_com_server_lookups[$data.Name])"
                                }
                            }


                            # Each hive will have 3 rounds of detection
                            # First Detection - if we have the CLSID and there is a mismatch
                            $item = Get-Item -Path $_.Value -ErrorAction SilentlyContinue
                            if ($verified_match -ne $true -and $clsid_found){
                                $detection = [PSCustomObject]@{
                                    Name = 'Potential COM Hijack - Mismatch on stored CLSID'
                                    Risk = 'Medium'
                                    Source = 'Registry'
                                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                    Meta = [PSCustomObject]@{
                                        Location = $data.Name
                                        EntryName = $_.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $expected_value
                                        Hash = Get-File-Hash $_.Value
                                        Created = $item.CreationTime
                                        Modified = $item.LastWriteTime
                                    }
                                }
                                Write-Detection $detection
                            }

                            # Second Detection - if we do NOT have the cLSID and the file was created/modified within the last X days (configurable)
                            $created = ($item.CreationTime)
                            $modified = ($item.LastWriteTime)
                            if ((($created -ge $threshold_date) -or ($modified -ge $threshold_date)) -and $verified_match -ne $true){
                                $detection = [PSCustomObject]@{
                                    Name = 'Potential COM Hijack - Recently Modified or Created Entry'
                                    Risk = 'Low'
                                    Source = 'Registry'
                                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                    Meta = [PSCustomObject]@{
                                        Location = $data.Name
                                        EntryName = $_.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $expected_value
                                        Hash = Get-File-Hash $_.Value
                                        Created = $item.CreationTime
                                        Modified = $item.LastWriteTime
                                    }
                                }
                                Write-Detection $detection
                            }

                            # Third Detection - Suspicious Directory for entry value
                            foreach ($path in $suspicious_process_paths){
                                if ($_.Value -match $path){
                                    $detection = [PSCustomObject]@{
                                        Name = 'Potential COM Hijack - Suspicious Entry Path'
                                        Risk = 'Medium'
                                        Source = 'Registry'
                                        Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                        Meta = [PSCustomObject]@{
                                            Location = $data.Name
                                            EntryName = $_.Name
                                            EntryValue = $_.Value
                                            ExpectedValue = $expected_value
                                            Hash = Get-File-Hash $_.Value
                                            Created = $item.CreationTime
                                            Modified = $item.LastWriteTime
                                        }
                                    }
                                    Write-Detection $detection
                                }
                            }
                        }
                    }
                }
            }
        }
    }

    ## HKCU/HKU
    $default_hkcu_com_lookups = @{}
    $default_hkcu_com_server_lookups = @{}
    foreach ($hash in $default_hkcr_com_lookups.GetEnumerator()){
        foreach ($p in $regtarget_hkcu_class_list){
            $new_name = ($hash.Name).Replace("HKEY_CLASSES_ROOT", "$p\CLSID")
            $default_hkcu_com_lookups["$new_name"] = $hash.Value
    }}
    foreach ($hash in $server_2022_coms.GetEnumerator()){
        foreach ($p in $regtarget_hkcu_class_list){
            $new_name = ($hash.Name).Replace("HKEY_CLASSES_ROOT", "$p\CLSID")
            $default_hkcu_com_server_lookups["$new_name"] = $hash.Value
    }}
    foreach ($p in $regtarget_hkcu_class_list){
        $path = "$p\CLSID"
        if (Test-Path -Path "Registry::$path") {
            $items = Get-ChildItem -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($item in $items) {
                $path = "Registry::"+$item.Name
                $children = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                foreach ($child in $children){
                    $path = "Registry::"+$child.Name
                    $data = Get-Item -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                    if ($data.Name -match '.*InprocServer32'){
                        $datum = Get-ItemProperty $path
                        $datum.PSObject.Properties | ForEach-Object {
                            if ($_.Name -eq '(Default)'){
                                $verified_match = $false
                                $expected_value = "N/A"
                                if ($default_hkcu_com_lookups.ContainsKey($data.Name)){
                                    $expected_value = $default_hkcu_com_lookups[$data.Name]
                                    try{
                                        if ($_.Value -match $default_hkcu_com_lookups[$data.Name]){
                                            $verified_match = $true
                                        }
                                    } catch {
                                        Write-Reportable-Issue "Regex Error while parsing string: $($default_hkcu_com_lookups[$data.Name])"
                                    }

                                }

                                if ($default_hkcu_com_server_lookups.ContainsKey($data.Name) -and $verified_match -ne $true){
                                    $expected_value = $default_hkcu_com_server_lookups[$data.Name]
                                    try{
                                        if ($_.Value -match $default_hkcu_com_server_lookups[$data.Name]){
                                            $verified_match = $true
                                        }
                                    } catch {
                                        Write-Reportable-Issue "Regex Error while parsing string: $($default_hkcu_com_server_lookups[$data.Name])"
                                    }
                                }

                            # Each hive will have 3 rounds of detection
                            # First Detection - if we have the CLSID and there is a mismatch
                            $item = Get-Item -Path $_.Value -ErrorAction SilentlyContinue
                            if ($verified_match -ne $true -and $clsid_found){
                                $detection = [PSCustomObject]@{
                                    Name = 'Potential COM Hijack - Mismatch on stored CLSID'
                                    Risk = 'Medium'
                                    Source = 'Registry'
                                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                    Meta = [PSCustomObject]@{
                                        Location = $data.Name
                                        EntryName = $_.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $expected_value
                                        Hash = Get-File-Hash $_.Value
                                        Created = $item.CreationTime
                                        Modified = $item.LastWriteTime
                                    }
                                }
                                Write-Detection $detection
                            }

                            # Second Detection - if we do NOT have the cLSID and the file was created/modified within the last X days (configurable)
                            $created = ($item.CreationTime)
                            $modified = ($item.LastWriteTime)
                            if ((($created -ge $threshold_date) -or ($modified -ge $threshold_date)) -and $verified_match -ne $true){
                                $detection = [PSCustomObject]@{
                                    Name = 'Potential COM Hijack - Recently Modified or Created Entry'
                                    Risk = 'Low'
                                    Source = 'Registry'
                                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                    Meta = [PSCustomObject]@{
                                        Location = $data.Name
                                        EntryName = $_.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $expected_value
                                        Hash = Get-File-Hash $_.Value
                                        Created = $item.CreationTime
                                        Modified = $item.LastWriteTime
                                    }
                                }
                                Write-Detection $detection
                            }

                            # Third Detection - Suspicious Directory for entry value
                            foreach ($path in $suspicious_process_paths){
                                if ($_.Value -match $path){
                                    $detection = [PSCustomObject]@{
                                        Name = 'Potential COM Hijack - Suspicious Entry Path'
                                        Risk = 'Medium'
                                        Source = 'Registry'
                                        Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                                        Meta = [PSCustomObject]@{
                                            Location = $data.Name
                                            EntryName = $_.Name
                                            EntryValue = $_.Value
                                            ExpectedValue = $expected_value
                                            Hash = Get-File-Hash $_.Value
                                            Created = $item.CreationTime
                                            Modified = $item.LastWriteTime
                                        }
                                    }
                                    Write-Detection $detection
                                }
                            }
                            }
                        }
                    }
                }
            }
        }
    }
}

function Write-Reportable-Issue($msg) {
    Write-Warning $msg
    Write-Warning "Please report this issue at https://github.com/joeavanzato/Trawler/issues"
}

function Service-Reg-Checks {
    # TODO - Check FailureCommand for abnormal entries
    # Supports Drive Retargeting
    Write-Message "Checking Service Registry Entries"
    # Service DLL Inspection
    $homedrive = $env_homedrive

    $image_path_lookup = @{
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ZoomCptService" = "`"[A-Za-z]{1}:\\Program Files\\Common Files\\Zoom\\Support\\CptService\.exe`" -user_path `"[A-Za-z]{1}:\\Users\\.*\\AppData\\Roaming\\Zoom`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\xinputhid" = "System32\\drivers\\xinputhid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XboxNetApiSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XboxGipSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\1394ohci" = "System32\\drivers\\1394ohci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\3ware" = "System32\\drivers\\3ware\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AarSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k AarSvcGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AarSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k AarSvcGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ACPI" = "System32\\drivers\\ACPI\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AcpiDev" = "System32\\drivers\\AcpiDev\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\acpiex" = "System32\\Drivers\\acpiex\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\acpipagr" = "System32\\drivers\\acpipagr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AcpiPmi" = "System32\\drivers\\acpipmi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\acpitime" = "System32\\drivers\\acpitime\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Acx01000" = "system32\\drivers\\Acx01000\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ADP80XX" = "System32\\drivers\\ADP80XX\.SYS"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AFD" = "system32\\drivers\\afd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\afunix" = "system32\\drivers\\afunix\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ahcache" = "system32\\DRIVERS\\ahcache\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AJRouter" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ALG" = "[A-Za-z]{1}:\\Windows\\System32\\alg\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\amdgpio2" = "System32\\drivers\\amdgpio2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\amdi2c" = "System32\\drivers\\amdi2c\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AmdK8" = "System32\\drivers\\amdk8\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AmdPPM" = "System32\\drivers\\amdppm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\amdsata" = "System32\\drivers\\amdsata\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\amdsbs" = "System32\\drivers\\amdsbs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\amdxata" = "System32\\drivers\\amdxata\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppID" = "system32\\drivers\\appid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppIDSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Appinfo" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppleKmdfFilter" = "System32\\drivers\\AppleKmdfFilter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppleLowerFilter" = "System32\\drivers\\AppleLowerFilter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\applockerfltr" = "system32\\drivers\\applockerfltr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppMgmt" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppReadiness" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k AppReadiness.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppVClient" = "[A-Za-z]{1}:\\Windows\\system32\\AppVClient\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppvStrm" = "system32\\drivers\\AppvStrm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppvVemgr" = "system32\\drivers\\AppvVemgr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppvVfs" = "system32\\drivers\\AppvVfs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppXSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k wsappx.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\arcsas" = "System32\\drivers\\arcsas\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ArmouryCrateService" = "`"[A-Za-z]{1}:\\Program Files\\ASUS\\ARMOURY CRATE Lite Service\\ArmouryCrate\.Service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\asComSvc" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\ASUS\\AXSP\\.*\\atkexComSvc\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AssignedAccessManagerSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k AssignedAccessManagerSvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\asus" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\ASUS\\Update\\AsusUpdate\.exe`" /svc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AsusCertService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\ASUS\\AsusCertService\\AsusCertService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AsusFanControlService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\ASUS\\AsusFanControlService\\.*\\AsusFanControlService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Asusgio2" = "\\??\\[A-Za-z]{1}:\\Windows\\system32\\drivers\\AsIO2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Asusgio3" = "\\??\\[A-Za-z]{1}:\\Windows\\system32\\drivers\\AsIO3\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\asusm" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\ASUS\\Update\\AsusUpdate\.exe`" /medsvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AsusUpdateCheck" = "[A-Za-z]{1}:\\Windows\\System32\\AsusUpdateCheck\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AsyncMac" = "System32\\drivers\\asyncmac\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\atapi" = "System32\\drivers\\atapi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\atvi-randgrid_sr" = "\\??\\D:\\SteamLibrary\\steamapps\\common\\Call of Duty HQ\\randgrid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AudioEndpointBuilder" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Audiosrv" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\autotimesvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k autoTimeSvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AxInstSV" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k AxInstSVGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\b06bdrv" = "System32\\drivers\\bxvbda\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bam" = "system32\\drivers\\bam\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BasicDisplay" = "System32\\(DriverStore\\FileRepository\\basicdisplay\.inf_amd64_.*|drivers)\\BasicDisplay\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BasicRender" = "System32\\(DriverStore\\FileRepository\\basicrender\.inf_amd64_.*|drivers)\\BasicRender\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BcastDVRUserService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k BcastDVRUserService"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BcastDVRUserService_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k BcastDVRUserService"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bcmfn2" = "System32\\drivers\\bcmfn2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BDESVC" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BEService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Common Files\\BattlEye\\BEService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BFE" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe .*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bindflt" = "system32\\drivers\\bindflt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BITS" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BluetoothUserService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k BthAppGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BluetoothUserService_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k BthAppGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bowser" = "system32\\DRIVERS\\bowser\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BrokerInfrastructure" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BTAGService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthA2dp" = "System32\\drivers\\BthA2dp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthAvctpSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthEnum" = "System32\\drivers\\BthEnum\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthHFEnum" = "System32\\drivers\\bthhfenum\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthLEEnum" = "System32\\drivers\\Microsoft\.Bluetooth\.Legacy\.LEEnumerator\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthMini" = "System32\\drivers\\BTHMINI\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BTHMODEM" = "System32\\drivers\\bthmodem\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthPan" = "System32\\drivers\\bthpan\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BTHPORT" = "System32\\drivers\\BTHport\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bthserv" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k (LocalService.*|bthsvcs)"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BTHUSB" = "System32\\drivers\\BTHUSB\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bttflt" = "System32\\drivers\\bttflt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\buttonconverter" = "System32\\drivers\\buttonconverter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CAD" = "System32\\drivers\\CAD\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\camsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k appmodel.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CaptureService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CaptureService_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cbdhsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k ClipboardSvcGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cbdhsvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k ClipboardSvcGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cdfs" = "system32\\DRIVERS\\cdfs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CDPSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CDPUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CDPUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cdrom" = "System32\\drivers\\cdrom\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CertPropSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cht4iscsi" = "System32\\drivers\\cht4sx64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cht4vbd" = "System32\\drivers\\cht4vx64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\circlass" = "System32\\drivers\\circlass\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CldFlt" = "system32\\drivers\\cldflt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CLFS" = "System32(\\drivers)?\\CLFS\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ClickToRunSvc" = "`"[A-Za-z]{1}:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun\.exe`" /service"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ClipSVC" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k wsappx.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cloudidsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k CloudIdServiceGroup.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CmBatt" = "System32\\drivers\\CmBatt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CNG" = "System32\\Drivers\\cng\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cnghwassist" = "System32\\DRIVERS\\cnghwassist\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\com.docker.service" = "`"[A-Za-z]{1}:\\Program Files\\Docker\\Docker\\com\.docker\.service`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CompositeBus" = "(System32\\DriverStore\\FileRepository\\compositebus\.inf_amd64_.*\\CompositeBus\.sys|system32\\DRIVERS\\CompositeBus\.sys)"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\COMSysApp" = "[A-Za-z]{1}:\\Windows\\system32\\dllhost\.exe /Processid:{.*}"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\condrv" = "System32\\drivers\\condrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ConsentUxUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ConsentUxUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CoreMessagingRegistrar" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNoNetwork.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairGamingAudioConfig" = "[A-Za-z]{1}:\\Windows\\System32\\CorsairGamingAudioCfgService64\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairGamingAudioService" = "\\??\\[A-Za-z]{1}:\\Windows\\System32\\drivers\\CorsairGamingAudio64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D" = "\\??\\[A-Za-z]{1}:\\Program Files\\Corsair\\CORSAIR iCUE 4 Software\\CorsairLLAccess64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairLLAService" = "`"[A-Za-z]{1}:\\Program Files\\Corsair\\CORSAIR iCUE 4 Software\\CueLLAccessService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairService" = "`"[A-Za-z]{1}:\\Program Files\\Corsair\\CORSAIR iCUE 4 Software\\Corsair\.Service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairUniwillService" = "`"[A-Za-z]{1}:\\Program Files\\Corsair\\CORSAIR iCUE 4 Software\\CueUniwillService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairVBusDriver" = "System32\\drivers\\CorsairVBusDriver\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CorsairVHidDriver" = "System32\\drivers\\CorsairVHidDriver\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cpuz152" = "\\??\\[A-Za-z]{1}:\\Windows\\temp\\cpuz152\\cpuz152_x64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cpuz153" = "\\??\\[A-Za-z]{1}:\\Windows\\temp\\cpuz153\\cpuz153_x64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cpuz154" = "\\??\\[A-Za-z]{1}:\\Windows\\temp\\cpuz154\\cpuz154_x64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CredentialEnrollmentManagerUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\CredentialEnrollmentManager\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CredentialEnrollmentManagerUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\CredentialEnrollmentManager\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CryptSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CSC" = "system32\\drivers\\csc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CscService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CTIAIO" = "\\??\\[A-Za-z]{1}:\\Windows\\system32\\drivers\\CtiAIo64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dam" = "system32\\drivers\\dam\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dbupdate" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Dropbox\\Update\\DropboxUpdate\.exe`" /svc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dbupdatem" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Dropbox\\Update\\DropboxUpdate\.exe`" /medsvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DbxSvc" = "[A-Za-z]{1}:\\Windows\\system32\\DbxSvc\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dc1-controller" = "System32\\drivers\\dc1-controller\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DcomLaunch" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dcsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\defragsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k defragsvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceAssociationBrokerSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceAssociationBrokerSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceAssociationService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceInstall" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevicePickerUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevicePickerUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevicesFlowUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevicesFlowUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DevicesFlow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevQueryBroker" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Dfsc" = "System32\\Drivers\\dfsc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Dhcp" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\diagnosticshub.standardcollector.service" = "[A-Za-z]{1}:\\Windows\\system32\\DiagSvcs\\DiagnosticsHub\.StandardCollector\.Service\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\diagsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k diagnostics"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DiagTrack" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k utcsvc.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DialogBlockingService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DialogBlockingService"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\disk" = "System32\\drivers\\disk\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DispBrokerDesktopSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DisplayEnhancementService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DmEnrollmentSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dmvsc" = "System32\\drivers\\dmvsc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dmwappushservice" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Dnscache" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DoSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dot3svc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DPS" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNoNetwork.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\drmkaud" = "System32\\drivers\\drmkaud\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DsmSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DsSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DusmSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DXGKrnl" = "System32\\drivers\\dxgkrnl\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\e2fexpress" = "System32\\DriverStore\\FileRepository\\e2f68\.inf_amd64_.*\\e2f68\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Eaphost" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EasyAntiCheat" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\EasyAntiCheat\\EasyAntiCheat\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EasyAntiCheat_EOS" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\EasyAntiCheat_EOS\\EasyAntiCheat_EOS\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ebdrv" = "System32\\drivers\\evbda\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\edgeupdate" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate\.exe`" /svc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\edgeupdatem" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate\.exe`" /medsvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EFS" = "[A-Za-z]{1}:\\Windows\\System32\\lsass\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EhStorClass" = "System32\\drivers\\EhStorClass\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EhStorTcgDrv" = "System32\\drivers\\EhStorTcgDrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\embeddedmode" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EntAppSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k appmodel.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ErrDev" = "System32\\drivers\\errdev\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EventLog" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EventSystem" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Fax" = "[A-Za-z]{1}:\\Windows\\system32\\fxssvc\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\fdc" = "System32\\drivers\\fdc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\fdPHost" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FDResPub" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\fhsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FileCrypt" = "system32\\drivers\\filecrypt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FileInfo" = "System32\\drivers\\fileinfo\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FileSyncHelper" = "`"[A-Za-z]{1}:\\Program Files\\Microsoft OneDrive\\.*\\FileSyncHelper\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Filetrace" = "system32\\drivers\\filetrace\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\flpydisk" = "System32\\drivers\\flpydisk\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FltMgr" = "system32\\drivers\\fltmgr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FontCache" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FontCache3.0.0.0" = "[A-Za-z]{1}:\\Windows\\Microsoft\.Net\\Framework64\\v3\.0\\WPF\\PresentationFontCache\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FrameServer" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k Camera"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FsDepends" = "System32\\drivers\\FsDepends\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\fvevol" = "System32\\DRIVERS\\fvevol\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FvSvc" = "`"[A-Za-z]{1}:\\Program Files\\NVIDIA Corporation\\FrameViewSDK\\nvfvsdksvc_x64\.exe`" -service"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\GameSDK Service" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\ASUS\\GameSDK Service\\GameSDK\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\gencounter" = "System32\\drivers\\vmgencounter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\genericusbfn" = "System32\\(DriverStore\\FileRepository\\genericusbfn\.inf_amd64_.*|drivers)\\genericusbfn\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\GoogleChromeElevationService" = "`"[A-Za-z]{1}:\\Program Files\\Google\\Chrome\\Application\\.*\\elevation_service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\googledrivefs31092" = "system32\\DRIVERS\\googledrivefs31092\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\GPIOClx0101" = "System32\\Drivers\\msgpioclx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\gpsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\GpuEnergyDrv" = "System32\\drivers\\gpuenergydrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\GraphicsPerfSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k GraphicsPerfSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\gupdate" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Google\\Update\\GoogleUpdate\.exe`" /svc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\gupdatem" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Google\\Update\\GoogleUpdate\.exe`" /medsvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hcmon" = "system32\\DRIVERS\\hcmon\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HdAudAddService" = "System32\\drivers\\HdAudio\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HDAudBus" = "System32\\drivers\\HDAudBus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HidBatt" = "System32\\drivers\\HidBatt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HidBth" = "System32\\drivers\\hidbth\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hidi2c" = "System32\\drivers\\hidi2c\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hidinterrupt" = "System32\\drivers\\hidinterrupt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HidIr" = "System32\\drivers\\hidir\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hidserv" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hidspi" = "System32\\drivers\\hidspi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HidUsb" = "System32\\drivers\\hidusb\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hns" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k NetSvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hnswfpdriver" = "System32\\drivers\\hnswfpdriver\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HpSAMD" = "System32\\drivers\\HpSAMD\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HTTP" = "system32\\drivers\\HTTP\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hvcrash" = "System32\\drivers\\hvcrash\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HvHost" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hvservice" = "system32\\drivers\\hvservice\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hvsocketcontrol" = "system32\\drivers\\hvsocketcontrol\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HwNClx0101" = "System32\\Drivers\\mshwnclx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hwpolicy" = "System32\\drivers\\hwpolicy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hyperkbd" = "System32\\drivers\\hyperkbd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HyperVideo" = "System32\\drivers\\HyperVideo\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\i8042prt" = "System32\\drivers\\i8042prt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iagpio" = "System32\\drivers\\iagpio\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iai2c" = "System32\\drivers\\iai2c\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_GPIO2" = "System32\\drivers\\iaLPSS2i_GPIO2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_GPIO2_BXT_P" = "System32\\drivers\\iaLPSS2i_GPIO2_BXT_P\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_GPIO2_CNL" = "System32\\drivers\\iaLPSS2i_GPIO2_CNL\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_GPIO2_GLK" = "System32\\drivers\\iaLPSS2i_GPIO2_GLK\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_I2C" = "System32\\drivers\\iaLPSS2i_I2C\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_I2C_BXT_P" = "System32\\drivers\\iaLPSS2i_I2C_BXT_P\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_I2C_CNL" = "System32\\drivers\\iaLPSS2i_I2C_CNL\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSS2i_I2C_GLK" = "System32\\drivers\\iaLPSS2i_I2C_GLK\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSSi_GPIO" = "System32\\drivers\\iaLPSSi_GPIO\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaLPSSi_I2C" = "System32\\drivers\\iaLPSSi_I2C\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaStorAVC" = "System32\\drivers\\iaStorAVC\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iaStorV" = "System32\\drivers\\iaStorV\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ibbus" = "System32\\drivers\\ibbus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ibtusb" = "System32\\DriverStore\\FileRepository\\ibtusb\.inf_amd64_.*\\ibtusb\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\icssvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iCUEDevicePluginHost" = "`"[A-Za-z]{1}:\\Program Files\\Corsair\\CORSAIR iCUE 4 Software\\iCUEDevicePluginHost\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IKEEXT" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IndirectKmd" = "System32\\drivers\\IndirectKmd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\InstallService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\intelide" = "System32\\drivers\\intelide\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\intelpep" = "System32\\drivers\\intelpep\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\intelpmax" = "System32\\drivers\\intelpmax\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\intelppm" = "System32\\drivers\\intelppm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iorate" = "system32\\drivers\\iorate\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IpFilterDriver" = "system32\\DRIVERS\\ipfltdrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iphlpsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetSvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IPMIDRV" = "System32\\drivers\\IPMIDrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IPNAT" = "System32\\drivers\\ipnat\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IPT" = "System32\\drivers\\ipt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IpxlatCfgSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\isapnp" = "System32\\drivers\\isapnp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iScsiPrt" = "System32\\drivers\\msiscsi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ItSas35i" = "System32\\drivers\\ItSas35i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\JetBrainsEtwHost.16" = "`"[A-Za-z]{1}:\\Program Files\\JetBrains\\ETW Host\\16\\JetBrains\.Etw\.Collector\.Host\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\jhi_service" = "[A-Za-z]{1}:\\Windows\\System32\\DriverStore\\FileRepository\\dal\.inf_amd64_.*\\jhi_service\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\kbdclass" = "System32\\drivers\\kbdclass\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\kbdhid" = "System32\\drivers\\kbdhid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\kbldfltr" = "system32\\drivers\\kbldfltr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\kdnic" = "System32\\drivers\\kdnic\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\KeyIso" = "[A-Za-z]{1}:\\Windows\\system32\\lsass\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\KSecDD" = "System32\\Drivers\\ksecdd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\KSecPkg" = "System32\\Drivers\\ksecpkg\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ksthunk" = "system32\\drivers\\ksthunk\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\KtmRm" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\l2bridge" = "System32\\drivers\\l2bridge\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LanmanServer" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LanmanWorkstation" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lfsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LGHUBUpdaterService" = "`"[A-Za-z]{1}:\\Program Files\\LGHUB\\lghub_updater\.exe`" --run-as-service"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LicenseManager" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LightingService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\LightingService\\LightingService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lltdio" = "system32\\drivers\\lltdio\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lltdsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lmhosts" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\logi_generic_hid_filter" = "system32\\drivers\\logi_generic_hid_filter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\logi_joy_bus_enum" = "system32\\drivers\\logi_joy_bus_enum\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\logi_joy_hid_filter" = "system32\\drivers\\logi_joy_hid_filter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\logi_joy_hid_lo" = "system32\\drivers\\logi_joy_hid_lo\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\logi_joy_vir_hid" = "system32\\drivers\\logi_joy_vir_hid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\logi_joy_xlcore" = "system32\\drivers\\logi_joy_xlcore\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LSI_SAS" = "System32\\drivers\\lsi_sas\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LSI_SAS2i" = "System32\\drivers\\lsi_sas2i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LSI_SAS3i" = "System32\\drivers\\lsi_sas3i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LSI_SSS" = "System32\\drivers\\lsi_sss\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LSM" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\luafv" = "system32\\drivers\\luafv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxpSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lxss" = "system32\\drivers\\lxss\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxssManager" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxssManagerUser" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LxssManagerUser.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxssManagerUser_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LxssManagerUser.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MapsBroker" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mausbhost" = "System32\\drivers\\mausbhost\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mausbip" = "System32\\drivers\\mausbip\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MBAMChameleon" = "System32\\Drivers\\MbamChameleon\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MbamElam" = "system32\\DRIVERS\\MbamElam\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MBAMService" = "`"[A-Za-z]{1}:\\Program Files\\Malwarebytes\\Anti-Malware\\MBAMService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MBAMSwissArmy" = "System32\\Drivers\\mbamswissarmy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MbbCx" = "system32\\drivers\\MbbCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\McpManagementService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k McpManagementServiceGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\megasas" = "System32\\drivers\\megasas\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\megasas2i" = "System32\\drivers\\MegaSas2i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\megasas35i" = "System32\\drivers\\megasas35i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\megasr" = "System32\\drivers\\megasr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MEIx64" = "System32\\DriverStore\\FileRepository\\heci\.inf_amd64_.*\\x64\\TeeDriverW10x64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MessagingService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MessagingService_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MicrosoftEdgeElevationService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Microsoft\\Edge\\Application\\.*\\elevation_service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Microsoft_Bluetooth_AvrcpTransport" = "System32\\drivers\\Microsoft\.Bluetooth\.AvrcpTransport\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MixedRealityOpenXRSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mlx4_bus" = "System32\\drivers\\mlx4_bus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MMCSS" = "(system32\\drivers\\mmcss\.sys|[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs)"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Modem" = "system32\\drivers\\modem\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MongoDB" = "`"[A-Za-z]{1}:\\Program Files\\MongoDB\\Server\\.*\\bin\\mongod\.exe`" --config `"[A-Za-z]{1}:\\Program Files\\MongoDB\\Server\\6\.0\\bin\\mongod\.cfg`" --service"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\monitor" = "System32\\drivers\\monitor\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mouclass" = "System32\\drivers\\mouclass\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mouhid" = "System32\\drivers\\mouhid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mountmgr" = "System32\\drivers\\mountmgr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mpsdrv" = "System32\\drivers\\mpsdrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mpssvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MRxDAV" = "system32\\drivers\\mrxdav\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mrxsmb" = "system32\\DRIVERS\\mrxsmb\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mrxsmb20" = "system32\\DRIVERS\\mrxsmb20\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsBridge" = "System32\\drivers\\bridge\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSDTC" = "[A-Za-z]{1}:\\Windows\\System32\\msdtc\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\msgpiowin32" = "System32\\drivers\\msgpiowin32\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mshidkmdf" = "System32\\drivers\\mshidkmdf\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mshidumdf" = "System32\\drivers\\mshidumdf\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSIO" = "\\??\\[A-Za-z]{1}:\\Windows\\system32\\drivers\\MsIo64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\msisadrv" = "System32\\drivers\\msisadrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSiSCSI" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\msiserver" = "[A-Za-z]{1}:\\Windows\\system32\\msiexec\.exe /V"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsKeyboardFilter" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSKSSRV" = "System32\\drivers\\MSKSSRV\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsLldp" = "system32\\drivers\\mslldp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSPCLOCK" = "System32\\drivers\\MSPCLOCK\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSPQM" = "System32\\drivers\\MSPQM\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsQuic" = "system32\\drivers\\msquic\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsSecCore" = "system32\\drivers\\msseccore\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsSecFlt" = "system32\\drivers\\mssecflt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsSecWfp" = "system32\\drivers\\mssecwfp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mssmbios" = "System32\\drivers\\mssmbios\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSTEE" = "System32\\drivers\\MSTEE\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MTConfig" = "System32\\drivers\\MTConfig\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Mup" = "System32\\Drivers\\mup\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mvumis" = "System32\\drivers\\mvumis\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NativeWifiP" = "system32\\DRIVERS\\nwifi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NaturalAuthentication" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NcaSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetSvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NcbService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NcdAutoSetup" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNoNetwork.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ndfltr" = "System32\\drivers\\ndfltr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NDIS" = "system32\\drivers\\ndis\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NdisCap" = "System32\\drivers\\ndiscap\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NdisImPlatform" = "System32\\drivers\\NdisImPlatform\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NdisTapi" = "System32\\DRIVERS\\ndistapi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Ndisuio" = "system32\\drivers\\ndisuio\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NdisVirtualBus" = "System32\\drivers\\NdisVirtualBus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NdisWan" = "System32\\drivers\\ndiswan\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ndiswanlegacy" = "System32\\DRIVERS\\ndiswan\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NDKPing" = "system32\\drivers\\NDKPing\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ndproxy" = "System32\\DRIVERS\\NDProxy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Ndu" = "system32\\drivers\\Ndu\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NetAdapterCx" = "system32\\drivers\\NetAdapterCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NetBIOS" = "system32\\drivers\\netbios\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NetBT" = "System32\\DRIVERS\\netbt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Netlogon" = "[A-Za-z]{1}:\\Windows\\system32\\lsass\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Netman" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\netprofm" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NetSetupSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NetTcpPortSharing" = "[A-Za-z]{1}:\\Windows\\Microsoft\.NET\\Framework64\\v.*\\SMSvcHost\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\netvsc" = "System32\\drivers\\netvsc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Netwtw10" = "System32\\drivers\\Netwtw10\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Netwtw12" = "System32\\drivers\\Netwtw12\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NgcCtnrSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NgcSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NlaSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\npcap" = "system32\\DRIVERS\\npcap\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\npsvctrig" = "System32\\drivers\\npsvctrig\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nsi" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nsiproxy" = "system32\\drivers\\nsiproxy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvagent" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k NetSvcs"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NvContainerLocalSystem" = "`"[A-Za-z]{1}:\\Program Files\\NVIDIA Corporation\\NvContainer\\nvcontainer\.exe`" -s NvContainerLocalSystem -f `"[A-Za-z]{1}:\\ProgramData\\NVIDIA\\NvContainerLocalSystem\.log`" -l 3 -d `"[A-Za-z]{1}:\\Program Files\\NVIDIA Corporation\\NvContainer\\plugins\\LocalSystem`" -r.* 30000 -st `"[A-Za-z]{1}:\\Program"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvdimm" = "System32\\drivers\\nvdimm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NVDisplay.ContainerLocalSystem" = "[A-Za-z]{1}:\\Windows\\System32\\DriverStore\\FileRepository\\nv_dispi\.inf_amd64_.*\\Display\.NvContainer\\NVDisplay\.Container\.exe -s NVDisplay\.ContainerLocalSystem -f [A-Za-z]{1}:\\ProgramData\\NVIDIA\\NVDisplay\.ContainerLocalSystem\.log -l 3 -d [A-Za-z]{1}:\\Windows\\System32\\Dr"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NVHDA" = "system32\\drivers\\nvhda64v\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvlddmkm" = "System32\\DriverStore\\FileRepository\\nv_dispi\.inf_amd64_.*\\nvlddmkm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NvModuleTracker" = "System32\\DriverStore\\FileRepository\\nvmoduletracker\.inf_amd64_.*\\NvModuleTracker\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvraid" = "System32\\drivers\\nvraid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvstor" = "System32\\drivers\\nvstor\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvvad_WaveExtensible" = "system32\\drivers\\nvvad64v\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvvhci" = "System32\\drivers\\nvvhci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\OneDrive Updater Service" = "`"[A-Za-z]{1}:\\Program Files\\Microsoft OneDrive\\.*\\OneDriveUpdaterService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\OneSyncSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\OneSyncSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\p2pimsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServicePeerNet"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\p2psvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServicePeerNet"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\P9Rdr" = "System32\\drivers\\p9rdr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Parport" = "System32\\drivers\\parport\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\partmgr" = "System32\\drivers\\partmgr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\passthruparser" = "system32\\drivers\\passthruparser\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PcaSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pci" = "System32\\drivers\\pci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pciide" = "System32\\drivers\\pciide\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pcmcia" = "System32\\drivers\\pcmcia\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pcw" = "System32\\drivers\\pcw\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pdc" = "system32\\drivers\\pdc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PEAUTH" = "system32\\drivers\\peauth\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PeerDistSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k PeerDist"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\perceptionsimulation" = "[A-Za-z]{1}:\\Windows\\system32\\PerceptionSimulation\\PerceptionSimulationService\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\percsas2i" = "System32\\drivers\\percsas2i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\percsas3i" = "System32\\drivers\\percsas3i\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PerfHost" = "[A-Za-z]{1}:\\Windows\\SysWow64\\perfhost\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pgbouncer" = "[A-Za-z]{1}:\\Program Files \(x86\)\\PgBouncer\\bin\\pgbouncer\.exe --service `"[A-Za-z]{1}:\\Program Files \(x86\)\\PgBouncer\\share\\pgbouncer\.ini`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PhoneSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PimIndexMaintenanceSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PimIndexMaintenanceSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PktMon" = "system32\\drivers\\PktMon\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pla" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNoNetwork.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Player Location Check" = "[A-Za-z]{1}:\\Program Files \(x86\)\\GeoComply\\//PlayerLocationCheck///Application/service\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PlugPlay" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pmem" = "System32\\drivers\\pmem\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PNPMEM" = "System32\\drivers\\pnpmem\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PNRPAutoReg" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServicePeerNet"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PNRPsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServicePeerNet"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PolicyAgent" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k NetworkServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\portcfg" = "System32\\drivers\\portcfg\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\postgresql-x64-14" = "`"[A-Za-z]{1}:\\Program Files\\PostgreSQL\\14\\bin\\pg_ctl\.exe`" runservice -N `"postgresql-x64-14`" -D `"[A-Za-z]{1}:\\Program Files\\PostgreSQL\\14\\data`" -w"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Power" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PptpMiniport" = "System32\\drivers\\raspptp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrintNotify" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k print"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrintWorkflowUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k PrintWorkflow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrintWorkflowUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k PrintWorkflow"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrivateInternetAccessService" = "`"[A-Za-z]{1}:\\Program Files\\Private Internet Access\\pia-service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrivateInternetAccessWireguard" = "`"[A-Za-z]{1}:\\Program Files\\Private Internet Access\\pia-wgservice\.exe`" `"[A-Za-z]{1}:\\Program Files\\Private Internet Access\\data\\wgpia0\.conf`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Processor" = "System32\\drivers\\processr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ProfSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Psched" = "System32\\drivers\\pacer\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PushToInstall" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pvhdparser" = "system32\\drivers\\pvhdparser\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\QWAVE" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\QWAVEdrv" = "system32\\drivers\\qwavedrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RabbitMQ" = "`"[A-Za-z]{1}:\\Program Files\\erl-24\.0\\erts-12\.0\\bin\\erlsrv\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Ramdisk" = "system32\\DRIVERS\\ramdisk\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasAcd" = "System32\\DRIVERS\\rasacd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasAgileVpn" = "System32\\drivers\\AgileVpn\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasAuto" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Rasl2tp" = "System32\\drivers\\rasl2tp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasMan" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasPppoe" = "System32\\DRIVERS\\raspppoe\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasSstp" = "System32\\drivers\\rassstp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\rdbss" = "system32\\DRIVERS\\rdbss\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\rdpbus" = "System32\\drivers\\rdpbus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RDPDR" = "System32\\drivers\\rdpdr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RdpVideoMiniport" = "System32\\drivers\\rdpvideominiport\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\rdyboost" = "System32\\drivers\\rdyboost\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RemoteAccess" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RemoteRegistry" = "([A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k localService.*|[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k regsvc)"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RetailDemo" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k rdxgroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RFCOMM" = "System32\\drivers\\rfcomm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\rhproxy" = "System32\\drivers\\rhproxy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RmSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Rockstar Service" = "`"[A-Za-z]{1}:\\Program Files\\Rockstar Games\\Launcher\\RockstarService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ROG Live Service" = "`"[A-Za-z]{1}:\\Program Files\\ASUS\\ROG Live Service\\ROGLiveService\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RpcEptMapper" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k RPCSS.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RpcLocator" = "[A-Za-z]{1}:\\Windows\\system32\\locator\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RpcSs" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k rpcss.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\rspndr" = "system32\\drivers\\rspndr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\s3cap" = "System32\\drivers\\vms3cap\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SamSs" = "[A-Za-z]{1}:\\Windows\\system32\\lsass\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\sbp2port" = "System32\\drivers\\sbp2port\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SCardSvr" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceAndNoImpersonation"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ScDeviceEnum" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\scfilter" = "System32\\DRIVERS\\scfilter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Schedule" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\scmbus" = "System32\\drivers\\scmbus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SCPolicySvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\sdbus" = "System32\\drivers\\sdbus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SDFRd" = "System32\\drivers\\SDFRd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SDRSVC" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k SDRSVC"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\sdstor" = "System32\\drivers\\sdstor\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\seclogon" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SecurityHealthService" = "[A-Za-z]{1}:\\Windows\\system32\\SecurityHealthService\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SEMgrSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SENS" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Sense" = "`"[A-Za-z]{1}:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SensorDataService" = "[A-Za-z]{1}:\\Windows\\System32\\SensorDataService\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SensorService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SensrSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SerCx" = "system32\\drivers\\SerCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SerCx2" = "system32\\drivers\\SerCx2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Serenum" = "System32\\drivers\\serenum\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Serial" = "System32\\drivers\\serial\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\sermouse" = "System32\\drivers\\sermouse\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SessionEnv" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\sfloppy" = "System32\\drivers\\sfloppy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SgrmAgent" = "system32\\drivers\\SgrmAgent\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SgrmBroker" = "[A-Za-z]{1}:\\Windows\\system32\\SgrmBroker\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SharedAccess" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SharedRealitySvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ShellHWDetection" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\shpamsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SiSRaid2" = "System32\\drivers\\SiSRaid2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SiSRaid4" = "System32\\drivers\\sisraid4\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SmartSAMD" = "System32\\drivers\\SmartSAMD\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\smbdirect" = "System32\\DRIVERS\\smbdirect\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\smphost" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k smphost"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SmsRouter" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SNMPTRAP" = "[A-Za-z]{1}:\\Windows\\System32\\snmptrap\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\spaceparser" = "system32\\drivers\\spaceparser\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\spaceport" = "System32\\drivers\\spaceport\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SpatialGraphFilter" = "System32\\drivers\\SpatialGraphFilter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SpbCx" = "system32\\drivers\\SpbCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\spectrum" = "[A-Za-z]{1}:\\Windows\\system32\\spectrum\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Spooler" = "[A-Za-z]{1}:\\Windows\\System32\\spoolsv\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\sppsvc" = "[A-Za-z]{1}:\\Windows\\system32\\sppsvc\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\srv2" = "System32\\DRIVERS\\srv2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\srvnet" = "System32\\DRIVERS\\srvnet\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SSDPSRV" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ssh-agent" = "[A-Za-z]{1}:\\Windows\\System32\\OpenSSH\\ssh-agent\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SstpSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\StateRepository" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k appmodel.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Steam Client Service" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Common Files\\Steam\\steamservice\.exe`" /RunAsService"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\stexstor" = "System32\\drivers\\stexstor\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\stisvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k imgsvc"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\storahci" = "System32\\drivers\\storahci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\storflt" = "System32\\drivers\\vmstorfl\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\stornvme" = "System32\\drivers\\stornvme\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\storqosflt" = "system32\\drivers\\storqosflt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\StorSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\storufs" = "System32\\drivers\\storufs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\storvsc" = "System32\\drivers\\storvsc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\storvsp" = "System32\\drivers\\storvsp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\svsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\swenum" = "System32\\(DriverStore\\FileRepository\\swenum\.inf_amd64_.*|drivers)\\swenum\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\swprv" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k swprv"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Synth3dVsc" = "System32\\drivers\\Synth3dVsc\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SysMain" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SystemEventsBroker" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k DcomLaunch.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TabletInputService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tap-pia-0901" = "System32\\drivers\\tap-pia-.*\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TapiSrv" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Tcpip" = "System32\\drivers\\tcpip\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Tcpip6" = "System32\\drivers\\tcpip\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tcpipreg" = "System32\\drivers\\tcpipreg\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tdx" = "system32\\DRIVERS\\tdx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TeamViewer" = "`"[A-Za-z]{1}:\\Program Files\\TeamViewer\\TeamViewer_Service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Telemetry" = "System32\\drivers\\IntelTA\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\terminpt" = "System32\\drivers\\terminpt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TermService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Test Service" = "[A-Za-z]{1}:\\Program Files\\A Subfolder\\B Subfolder\\C Subfolder\\SomeExecutable\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Themes" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TieringEngineService" = "[A-Za-z]{1}:\\Windows\\system32\\TieringEngineService\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TimeBrokerSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TokenBroker" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TPM" = "System32\\drivers\\tpm\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TrkWks" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TroubleshootingSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TrustedInstaller" = "[A-Za-z]{1}:\\Windows\\servicing\\TrustedInstaller\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TsUsbFlt" = "system32\\drivers\\tsusbflt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TsUsbGD" = "System32\\drivers\\TsUsbGD\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tsusbhub" = "System32\\drivers\\tsusbhub\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tunnel" = "System32\\drivers\\tunnel\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tzautoupdate" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UASPStor" = "System32\\drivers\\uaspstor\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UcmCx0101" = "System32\\Drivers\\UcmCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UcmTcpciCx0101" = "System32\\Drivers\\UcmTcpciCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UcmUcsiAcpiClient" = "System32\\drivers\\UcmUcsiAcpiClient\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UcmUcsiCx0101" = "System32\\Drivers\\UcmUcsiCx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Ucx01000" = "system32\\drivers\\ucx01000\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UdeCx" = "system32\\drivers\\udecx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\udfs" = "system32\\DRIVERS\\udfs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UdkUserSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UdkSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UdkUserSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UdkSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UEFI" = "System32\\(DriverStore\\FileRepository\\uefi\.inf_amd64_.*|drivers)\\UEFI\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UevAgentDriver" = "system32\\drivers\\UevAgentDriver\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UevAgentService" = "[A-Za-z]{1}:\\Windows\\system32\\AgentService\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Ufx01000" = "system32\\drivers\\ufx01000\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UfxChipidea" = "System32\\(DriverStore\\FileRepository\\ufxchipidea\.inf_amd64_.*|drivers)\\UfxChipidea\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ufxsynopsys" = "System32\\drivers\\ufxsynopsys\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\uhssvc" = "`"[A-Za-z]{1}:\\Program Files\\Microsoft Update Health Tools\\uhssvc\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\umbus" = "System32\\(DriverStore\\FileRepository\\umbus\.inf_amd64_.*|drivers)\\umbus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UmPass" = "System32\\drivers\\umpass\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UmRdpService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UnistoreSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UnistoreSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\upnphost" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UrsChipidea" = "System32\\(DriverStore\\FileRepository\\urschipidea\.inf_amd64_.*|drivers)\\urschipidea\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UrsCx01000" = "system32\\drivers\\urscx01000\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UrsSynopsys" = "System32\\(DriverStore\\FileRepository\\urssynopsys\.inf_amd64_.*|drivers)\\urssynopsys\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbaudio" = "system32\\drivers\\usbaudio\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbaudio2" = "System32\\drivers\\usbaudio2\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbccgp" = "System32\\drivers\\usbccgp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbcir" = "System32\\drivers\\usbcir\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbehci" = "System32\\drivers\\usbehci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbhub" = "System32\\drivers\\usbhub\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\USBHUB3" = "System32\\drivers\\UsbHub3\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbohci" = "System32\\drivers\\usbohci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbprint" = "System32\\drivers\\usbprint\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbrndis6" = "System32\\drivers\\usb80236\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbser" = "System32\\drivers\\usbser\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\USBSTOR" = "System32\\drivers\\USBSTOR\.SYS"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbuhci" = "System32\\drivers\\usbuhci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\usbvideo" = "System32\\Drivers\\usbvideo\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\USBXHCI" = "System32\\drivers\\USBXHCI\.SYS"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UserDataSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UserDataSvc_1af30d" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UserManager" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UsoSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VacSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VaultSvc" = "[A-Za-z]{1}:\\Windows\\system32\\lsass\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VBoxNetAdp" = "system32\\DRIVERS\\VBoxNetAdp6\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VBoxNetLwf" = "system32\\DRIVERS\\VBoxNetLwf\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VBoxSDS" = "`"[A-Za-z]{1}:\\Program Files\\Oracle\\VirtualBox\\VBoxSDS\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VBoxSup" = "system32\\DRIVERS\\VBoxSup\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VBoxUSBMon" = "system32\\DRIVERS\\VBoxUSBMon\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vdrvroot" = "System32\\drivers\\vdrvroot\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vds" = "[A-Za-z]{1}:\\Windows\\System32\\vds\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VerifierExt" = "System32\\drivers\\VerifierExt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VfpExt" = "system32\\drivers\\vfpext\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vhdmp" = "System32\\drivers\\vhdmp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vhdparser" = "system32\\drivers\\vhdparser\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vhf" = "System32\\drivers\\vhf\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Vid" = "System32\\drivers\\Vid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VirtualRender" = "System32\\(DriverStore\\FileRepository\\vrd\.inf_amd64_.*|drivers)\\vrd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMAuthdService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\VMware\\VMware Workstation\\vmware-authd\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmbus" = "System32\\drivers\\vmbus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMBusHID" = "System32\\drivers\\VMBusHID\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmbusr" = "System32\\drivers\\vmbusr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmci" = "System32\\drivers\\vmci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmcompute" = "[A-Za-z]{1}:\\Windows\\system32\\vmcompute\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmgid" = "System32\\drivers\\vmgid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicguestinterface" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicheartbeat" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k ICService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmickvpexchange" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicrdv" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k ICService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicshutdown" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmictimesync" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicvmsession" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicvss" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMnetAdapter" = "system32\\DRIVERS\\vmnetadapter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMnetBridge" = "system32\\DRIVERS\\vmnetbridge\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMnetDHCP" = "[A-Za-z]{1}:\\Windows\\SysWOW64\\vmnetdhcp\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMnetuserif" = "system32\\DRIVERS\\vmnetuserif\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmsmp" = "System32\\drivers\\vmswitch\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMSNPXY" = "system32\\drivers\\VmsProxyHNic\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMSNPXYMP" = "System32\\drivers\\VmsProxyHNic\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMSP" = "System32\\drivers\\vmswitch\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VmsProxy" = "system32\\drivers\\VmsProxy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMSVSF" = "System32\\drivers\\vmswitch\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMSVSP" = "System32\\drivers\\vmswitch\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmusb" = "System32\\drivers\\vmusb\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMUSBArbService" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Common Files\\VMware\\USB\\vmware-usbarbitrator64\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VMware NAT Service" = "[A-Za-z]{1}:\\Windows\\SysWOW64\\vmnat\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmx86" = "system32\\DRIVERS\\vmx86\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VOICEMOD_Driver" = "system32\\drivers\\mvvad\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\volmgr" = "System32\\drivers\\volmgr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\volmgrx" = "System32\\drivers\\volmgrx\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\volsnap" = "System32\\drivers\\volsnap\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\volume" = "System32\\drivers\\volume\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vpci" = "System32\\drivers\\vpci\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vpcivsp" = "System32\\drivers\\vpcivsp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vsmraid" = "System32\\drivers\\vsmraid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vsock" = "system32\\DRIVERS\\vsock\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VSS" = "[A-Za-z]{1}:\\Windows\\system32\\vssvc\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VSStandardCollectorService150" = "`"[A-Za-z]{1}:\\Program Files \(x86\)\\Microsoft Visual Studio\\Shared\\Common\\DiagnosticsHub\.Collection\.Service\\StandardCollector\.Service\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vstor2-mntapi20-shared" = "SysWOW64\\drivers\\vstor2-x64\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VSTXRAID" = "System32\\drivers\\vstxraid\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vwifibus" = "System32\\drivers\\vwifibus\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vwififlt" = "System32\\drivers\\vwififlt\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vwifimp" = "System32\\drivers\\vwifimp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\W32Time" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WaaSMedicSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k wusvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WacomPen" = "System32\\drivers\\wacompen\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WalletService" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k appmodel.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wanarp" = "System32\\DRIVERS\\wanarp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wanarpv6" = "System32\\DRIVERS\\wanarp\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WarpJITSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wbengine" = "`"[A-Za-z]{1}:\\Windows\\system32\\wbengine\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WbioSrvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k WbioSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wcifs" = "system32\\drivers\\wcifs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Wcmsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wcncsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceAndNoImpersonation.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wcnfs" = "system32\\drivers\\wcnfs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdBoot" = "system32\\drivers\\wd\\WdBoot\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Wdf01000" = "system32\\drivers\\Wdf01000\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdFilter" = "system32\\drivers\\wd\\WdFilter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdiServiceHost" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdiSystemHost" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wdiwifi" = "system32\\DRIVERS\\wdiwifi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdmCompanionFilter" = "system32\\drivers\\WdmCompanionFilter\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdNisDrv" = "system32\\drivers\\wd\\WdNisDrv\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdNisSvc" = "`"[A-Za-z]{1}:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\NisSrv\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WebClient" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Wecsvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WEPHOSTSVC" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k WepHostSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wercplsupport" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WerSvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k WerSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WFDSConMgrSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WFPLWFS" = "System32\\drivers\\wfplwfs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WiaRpc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WIMMount" = "system32\\drivers\\wimmount\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinDefend" = "(`"[A-Za-z]{1}:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\.*\\MsMpEng\.exe`"|[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k secsvcs)"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WindowsTrustedRT" = "system32\\drivers\\WindowsTrustedRT\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WindowsTrustedRTProxy" = "System32\\drivers\\WindowsTrustedRTProxy\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinHttpAutoProxySvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinMad" = "System32\\drivers\\winmad\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Winmgmt" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinNat" = "system32\\drivers\\winnat\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinRM" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k NetworkService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WINUSB" = "System32\\drivers\\WinUSB\.SYS"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinVerbs" = "System32\\drivers\\winverbs\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wisvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WlanSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wlidsvc" = "([A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*|`"[A-Za-z]{1}:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WLIDSVC\.EXE`")"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wlpasvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WManSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WmiAcpi" = "System32\\drivers\\wmiacpi\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wmiApSrv" = "[A-Za-z]{1}:\\Windows\\system32\\wbem\\WmiApSrv\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WMIRegistrationService" = "[A-Za-z]{1}:\\Windows\\System32\\DriverStore\\FileRepository\\mewmiprov\.inf_amd64_cad1db73e8c782a6\\WMIRegistrationService\.exe"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WMPNetworkSvc" = "`"[A-Za-z]{1}:\\Program Files\\Windows Media Player\\wmpnetwk\.exe`""
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\workfolderssvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalService.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpcMonSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalService"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WPDBusEnum" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k LocalSystemNetworkRestricted"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpdUpFltr" = "System32\\drivers\\WpdUpFltr\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpnService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpnUserService" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k UnistackSvcGroup"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ws2ifsl" = "system32\\drivers\\ws2ifsl\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wscsvc" = "[A-Za-z]{1}:\\Windows\\System32\\svchost\.exe -k LocalServiceNetworkRestricted.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WSearch" = "[A-Za-z]{1}:\\Windows\\system32\\SearchIndexer\.exe /Embedding"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wuauserv" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WudfPf" = "system32\\drivers\\WudfPf\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WUDFRd" = "System32\\drivers\\WUDFRd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WUDFWpdFs" = "system32\\DRIVERS\\WUDFRd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WUDFWpdMtp" = "system32\\DRIVERS\\WUDFRd\.sys"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WwanSvc" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XblAuthManager" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XblGameSave" = "[A-Za-z]{1}:\\Windows\\system32\\svchost\.exe -k netsvcs.*"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\xboxgip" = "System32\\drivers\\xboxgip\.sys"
    }

    $service_dll_lookup = @{
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AarSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\AarSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AJRouter\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\AJRouter\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppIDSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\appidsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Appinfo\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\appinfo\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppMgmt\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\appmgmts\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppReadiness\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\AppReadiness\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AppXSvc\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\appxdeploymentserver\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AssignedAccessManagerSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\assignedaccessmanagersvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AudioEndpointBuilder\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\(AudioEndpointBuilder|Audiosrv)\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Audiosrv\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\Audiosrv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\autotimesvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\autotimesvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\AxInstSV\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\AxInstSV\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BcastDVRUserService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\BcastDVRUserService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BDESVC\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\bdesvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BFE\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\bfe\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BITS\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\qmgr\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BluetoothUserService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\Microsoft\.Bluetooth\.UserService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BrokerInfrastructure\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\(psmsrv|bisrv)\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BTAGService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\BTAGService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\BthAvctpSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\BthAvctpSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\bthserv\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\bthserv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\camsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\CapabilityAccessManager\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CaptureService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\CaptureService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cbdhsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\cbdhsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CDPSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\CDPSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CDPUserSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\CDPUserSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CertPropSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\certprop\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ClipSVC\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ClipSVC\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\cloudidsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\cloudidsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ConsentUxUserSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ConsentUxClient\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CoreMessagingRegistrar\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\coremessaging\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CryptSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\cryptsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\CscService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\cscsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DcomLaunch\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\rpcss\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dcsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\dcsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\defragsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\defragsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceAssociationBrokerSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\deviceaccess\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceAssociationService\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\das\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DeviceInstall\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\umpnpmgr\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevicePickerUserSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\Windows\.Devices\.Picker\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevicesFlowUserSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\DevicesFlowBroker\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DevQueryBroker\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\DevQueryBroker\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Dhcp\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\dhcpcore\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\diagsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\DiagSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DiagTrack\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\diagtrack\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DialogBlockingService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\DialogBlockingService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DispBrokerDesktopSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\DispBroker\.Desktop\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DisplayEnhancementService\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\Microsoft\.Graphics\.Display\.DisplayEnhancementService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DmEnrollmentSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\Windows\.Internal\.Management\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dmwappushservice\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\dmwappushsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Dnscache\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\dnsrslvr\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\dot3svc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\dot3svc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DPS\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\dps\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DsmSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\DeviceSetupManager\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DsSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\DsSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DusmSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\dusmsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Eaphost\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\eapsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EFS\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\efssvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\embeddedmode\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\embeddedmodesvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EntAppSvc\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\EnterpriseAppMgmtSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EventLog\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wevtsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\EventSystem\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\es\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\fdPHost\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\fdPHost\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FDResPub\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\fdrespub\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\fhsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\fhsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FontCache\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\FntCache\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\FrameServer\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\FrameServer\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\gpsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\gpsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\GraphicsPerfSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\GraphicsPerfSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hidserv\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\hidserv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\hns\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\HostNetSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HomeGroupListener\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\ListSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HomeGroupProvider\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\provsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\HvHost\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\hvhostsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\icssvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\tetheringservice\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IKEEXT\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ikeext\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\InstallService\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\InstallService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\iphlpsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\iphlpsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\IpxlatCfgSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\IpxlatCfg\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\KeyIso\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\keyiso\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\KtmRm\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\msdtckrm\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LanmanServer\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\srvsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LanmanWorkstation\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wkssvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lfsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\lfsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LicenseManager\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\LicenseManagerSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lltdsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\lltdsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\lmhosts\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\lmhsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LSM\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\lsm\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxpSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\LanguageOverlayServer\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxssManager\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\lxss\\LxssManager\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\LxssManagerUser\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\lxss\\wslclient\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MapsBroker\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\moshost\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\McpManagementService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\McpManagementService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MessagingService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\MessagingService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MixedRealityOpenXRSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\MixedRealityRuntime\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\mpssvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\mpssvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MSiSCSI\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\iscsiexe\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\MsKeyboardFilter\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\KeyboardFilterSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NaturalAuthentication\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\NaturalAuth\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NcaSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ncasvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NcbService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ncbservice\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NcdAutoSetup\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\NcdAutoSetup\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Netlogon\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\netlogon\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Netman\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\netman\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\netprofm\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\(netprofmsvc|netprofm)\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NetSetupSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\NetSetupSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NgcCtnrSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\NgcCtnrSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NgcSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\ngcsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\NlaSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\nlasvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nsi\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\nsisvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\nvagent\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\NvAgent\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\OneSyncSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\APHostService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\p2pimsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\pnrpsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\p2psvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\p2psvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PcaSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\pcasvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PeerDistSvc\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\peerdistsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PhoneSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\PhoneService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PimIndexMaintenanceSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\PimIndexMaintenance\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\pla\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\pla\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PlugPlay\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\umpnpmgr\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PNRPAutoReg\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\pnrpauto\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PNRPsvc\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\pnrpsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PolicyAgent\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ipsecsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Power\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\umpo\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrintNotify\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\spool\\drivers\\x64\\3\\PrintConfig\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PrintWorkflowUserSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\PrintWorkflowService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ProfSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\profsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\PushToInstall\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\PushToInstall\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\QWAVE\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\qwave\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasAuto\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\rasauto\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RasMan\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\rasmans\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RemoteAccess\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\mprdim\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RemoteRegistry\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\regsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RetailDemo\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\RDXService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RmSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\RMapi\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RpcEptMapper\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\RpcEpMap\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\RpcSs\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\rpcss\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SCardSvr\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\SCardSvr\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ScDeviceEnum\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ScDeviceEnum\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Schedule\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\schedsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SCPolicySvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\certprop\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SDRSVC\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\SDRSVC\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\seclogon\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\seclogon\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SEMgrSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\SEMgrSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SENS\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\sens\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SensorService\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\SensorService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SensrSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\sensrsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SessionEnv\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\sessenv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SharedAccess\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ipnathlp\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SharedRealitySvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\SharedRealitySvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\ShellHWDetection\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\shsvcs\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\shpamsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\Windows\.SharedPC\.AccountManager\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\smphost\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\smphost\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SmsRouter\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\SmsRouterSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SSDPSRV\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\ssdpsrv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SstpSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\sstpsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\StateRepository\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\windows\.staterepository\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\stisvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wiaservc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\StorSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\storsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\svsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\svsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\swprv\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\swprv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SysMain\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\sysmain\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\SystemEventsBroker\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\SystemEventsBrokerServer\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TabletInputService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\TabSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TapiSrv\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\tapisrv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TermService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\termsrv\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Themes\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\themeservice\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TimeBrokerSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\TimeBrokerServer\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TokenBroker\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\TokenBroker\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TrkWks\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\trkwks\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\TroubleshootingSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\MitigationClient\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\tzautoupdate\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\tzautoupdate\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UdkUserSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\windowsudk\.shellcommon\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UmRdpService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\umrdp\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UnistoreSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\unistore\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\upnphost\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\upnphost\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UserDataSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\userdataservice\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UserManager\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\usermgr\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\UsoSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\(usosvc|usocore)\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VacSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\vac\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\VaultSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\vaultsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicguestinterface\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicheartbeat\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmickvpexchange\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicrdv\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvcext\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicshutdown\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmictimesync\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicvmsession\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\vmicvss\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\icsvcext\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\W32Time\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\w32time\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WaaSMedicSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\WaaSMedicSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WalletService\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\WalletService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WarpJITSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\Windows\.WARP\.JITService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WbioSrvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wbiosrvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Wcmsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wcmsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wcncsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wcncsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdiServiceHost\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wdi\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WdiSystemHost\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wdi\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WebClient\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\webclnt\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Wecsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wecsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WEPHOSTSVC\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wephostsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wercplsupport\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wercplsupport\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WerSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\WerSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WFDSConMgrSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wfdsconmgrsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WiaRpc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wiarpc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinHttpAutoProxySvc\Parameters" = "([A-Za-z]{1}:\\Windows\\system32\\)?winhttp\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\Winmgmt\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wbem\\WMIsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WinRM\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\WsmSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wisvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\flightsettings\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WlanSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wlansvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wlidsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wlidsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wlpasvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\lpasvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WManSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\Windows\.Management\.Service\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\workfolderssvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\workfolderssvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpcMonSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\WpcDesktopMonSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WPDBusEnum\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wpdbusenum\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpnService\parameters" = "[A-Za-z]{1}:\\Windows\\system32\\WpnService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WpnUserService\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\WpnUserService\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wscsvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wscsvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\wuauserv\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\wuaueng\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\WwanSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\wwansvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XblAuthManager\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\XblAuthManager\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XblGameSave\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\XblGameSave\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XboxGipSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\System32\\XboxGipSvc\.dll"
        "$regtarget_hklm`SYSTEM\$currentcontrolset\Services\XboxNetApiSvc\Parameters" = "[A-Za-z]{1}:\\Windows\\system32\\XboxNetApiSvc\.dll"
    }

    $path = "{0}SYSTEM\$currentcontrolset\Services" -f $regtarget_hklm
    if (Test-Path -Path "Registry::$path") {
        $services = Get-ChildItem -Path "Registry::$path" -ErrorAction SilentlyContinue | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($service in $services) {
            $service_path = "Registry::"+$service.Name
            $service_children_keys = Get-ChildItem -Path "$service_path" -ErrorAction SilentlyContinue | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $service_data = Get-ItemProperty -Path $service_path -ErrorAction SilentlyContinue | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $service_data.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'ImagePath'){
                    if ($image_path_lookup.ContainsKey($service.Name)){
                        if ($_.Value -notmatch $image_path_lookup[$service.Name]){
                                $detection = [PSCustomObject]@{
                                    Name = 'Possible Service Hijack - Unexpected ImagePath Location'
                                    Risk = 'Medium'
                                    Source = 'Services'
                                    Technique = "T1543.003: Create or Modify System Process: Windows Service"
                                    Meta = [PSCustomObject]@{
                                        Location = $path
                                        EntryName = $service.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $image_path_lookup[$service.Name]
                                    }
                                }
                                Write-Detection $detection
                        }
                    } elseif (1 -eq 1){
                    }
                }
            }
            foreach ($child_key in $service_children_keys) {
                #Write-Host $child_key.Name
                $child_path = "Registry::"+$child_key.Name
                $data = Get-ItemProperty -Path $child_path -ErrorAction SilentlyContinue | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                $data.PSObject.Properties | ForEach-Object {
                    if ($_.Name -eq "ServiceDll"){
                        if ($service_dll_lookup.ContainsKey($child_key.Name)){
                            if ($_.Value -notmatch $service_dll_lookup[$child_key.Name]){
                                $detection = [PSCustomObject]@{
                                    Name = 'Possible Service Hijack - Unexpected ServiceDll Location'
                                    Risk = 'Medium'
                                    Source = 'Services'
                                    Technique = "T1543.003: Create or Modify System Process: Windows Service"
                                    Meta = [PSCustomObject]@{
                                        Location = $path
                                        EntryName = $child_key.Name
                                        EntryValue = $_.Value
                                        ExpectedValue = $service_dll_lookup[$child_key.Name]
                                    }
                                }
                                Write-Detection $detection
                            }
                        }
                    }
                }
            }
         }
    }

}

function Check-Debugger-Hijacks {
    Write-Message "Checking Debuggers"
    # Support Drive Retargeting
    # TODO - Rearrange this code to use an array of paths and key names
    # allowtable_debuggers
    # Debugger Hijacks

    # AeDebug 32
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Debugger' -and $_.Value -ne "`"$env:homedrive\Windows\system32\vsjitdebugger.exe`" -p %ld -e %ld -j 0x%p" -and $pass -eq $false){
                $detection = [PSCustomObject]@{
                    Name = 'Potential AeDebug Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebugProtected"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'ProtectedDebugger' -and $_.Value -ne "`"$env:homedrive\Windows\system32\vsjitdebugger.exe`" -p %ld -e %ld -j 0x%p" -and $pass -eq $false){
                $detection = [PSCustomObject]@{
                    Name = 'Potential AeDebug Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }

    # AeDebug 64
    $path = "$regtarget_hklm`SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AeDebug"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Debugger' -and $_.Value -ne "`"$env:homedrive\Windows\system32\vsjitdebugger.exe`" -p %ld -e %ld -j 0x%p"){
                $detection = [PSCustomObject]@{
                    Name = 'Potential AeDebug Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    $path = "$regtarget_hklm`SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AeDebugProtected"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'ProtectedDebugger' -and $_.Value -ne "`"$env:homedrive\Windows\system32\vsjitdebugger.exe`" -p %ld -e %ld -j 0x%p"){
                $detection = [PSCustomObject]@{
                    Name = 'Potential AeDebug Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }

    # .NET 32
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\.NETFramework"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'DbgManagedDebugger' -and $_.Value -ne "`"$env:homedrive\Windows\system32\vsjitdebugger.exe`" PID %d APPDOM %d EXTEXT `"%s`" EVTHDL %d"){
                $detection = [PSCustomObject]@{
                    Name = 'Potential .NET Debugger Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    # .NET 64
    $path = "$regtarget_hklm`SOFTWARE\Wow6432Node\Microsoft\.NETFramework"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'DbgManagedDebugger' -and $_.Value -ne "`"$env:homedrive\Windows\system32\vsjitdebugger.exe`" PID %d APPDOM %d EXTEXT `"%s`" EVTHDL %d"){
                $detection = [PSCustomObject]@{
                    Name = 'Potential .NET Debugger Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    # Microsoft Script Debugger
    $path = "$regtarget_hklm`SOFTWARE\Classes\CLSID\{834128A2-51F4-11D0-8F20-00805F2CD064}\LocalServer32"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq '@' -and ($_.Value -ne "`"$env:homedrive\Program Files(x86)\Microsoft Script Debugger\msscrdbg.exe`"" -or $_.Value -ne "`"$env:homedrive\Program Files\Microsoft Script Debugger\msscrdbg.exe`"")){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Microsoft Script Debugger Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    $basepath = "HKEY_CLASSES_ROOT\CLSID\{834128A2-51F4-11D0-8F20-00805F2CD064}\LocalServer32"
    foreach ($p in $regtarget_hkcu_class_list) {
        $path = $basepath.Replace("HKEY_CLASSES_ROOT", $p)
        if (Test-Path -Path "Registry::$path") {
            $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $item.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq '@' -and ($_.Value -ne "`"$env_assumedhomedrive\Program Files(x86)\Microsoft Script Debugger\msscrdbg.exe`"" -or $_.Value -ne "`"$env_assumedhomedrive\Program Files\Microsoft Script Debugger\msscrdbg.exe`"")){
                    $detection = [PSCustomObject]@{
                        Name = 'Potential Microsoft Script Debugger Hijacking'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
    # Process Debugger
    $path = "$regtarget_hklm`SOFTWARE\Classes\CLSID\{78A51822-51F4-11D0-8F20-00805F2CD064}\InprocServer32"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if (($_.Name -in '(default)' -and $_.Value -ne "$env_assumedhomedrive\Program Files\Common Files\Microsoft Shared\VS7Debug\pdm.dll") -or ($_.Name -eq '@' -and $_.Value -ne "`"$env_assumedhomedrive\WINDOWS\system32\pdm.dll`"")){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Process Debugger Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    # WER Debuggers
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\Windows\Windows Error Reporting\Hangs"
    if (Test-Path -Path "Registry::$path") {
        $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $item.PSObject.Properties | ForEach-Object {
            if ($_.Name -in 'Debugger','ReflectDebugger'){
                $detection = [PSCustomObject]@{
                    Name = 'Potential WER Debugger Hijacking'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-LNK {
    # Supports Drive Retargeting
    Write-Message "Checking LNK Targets"
    $current_date = Get-Date
    $WScript = New-Object -ComObject WScript.Shell
    $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object *
    foreach ($user in $profile_names){
        $path = "$env_homedrive\Users\"+$user.Name+"\AppData\Roaming\Microsoft\Windows\Recent"
        $items = Get-ChildItem -Path $path -File -ErrorAction SilentlyContinue | Where-Object {$_.extension -in ".lnk"} | Select-Object *
        foreach ($item in $items){
            #Write-Host $item.FullName, $item.LastWriteTime
            $lnk_target = $WScript.CreateShortcut($item.FullName).TargetPath
            $date_diff = $current_date - $item.LastWriteTime
            $comparison_timespan = New-TimeSpan -Days 90
            #Write-Host $date_diff.ToString("dd' days 'hh' hours 'mm' minutes 'ss' seconds'")
            $date_diff_temp = $comparison_timespan - $date_diff
            if ($date_diff_temp -ge 0){
                # If the LNK was modified within the last 90 days
                if ($lnk_target -match ".*\.exe.*\.exe.*"){
                    $detection = [PSCustomObject]@{
                        Name = 'LNK Target contains multiple executables'
                        Risk = 'High'
                        Source = 'LNK'
                        Technique = "T1547.009: Boot or Logon Autostart Execution: Shortcut Modification"
                        Meta = [PSCustomObject]@{
                            Location = $item.FullName
                            Created = $item.CreationTime
                            Modified = $item.LastWriteTime
                            LNKTarget = $lnk_target
                        }
                    }
                    Write-Detection $detection
                }
                if ($lnk_target -match $suspicious_terms){
                    $detection = [PSCustomObject]@{
                        Name = 'LNK Target contains suspicious key-term'
                        Risk = 'High'
                        Source = 'LNK'
                        Technique = "T1547.009: Boot or Logon Autostart Execution: Shortcut Modification"
                        Meta = [PSCustomObject]@{
                            Location = $item.FullName
                            Created = $item.CreationTime
                            Modified = $item.LastWriteTime
                            LNKTarget = $lnk_target
                        }
                    }
                    Write-Detection $detection
                }
                if ($lnk_target -match ".*\.(csv|pdf|xlsx|doc|ppt|txt|jpeg|png|gif|exe|dll|ps1|webp|svg|zip|xls).*\.(csv|pdf|xlsx|doc|ppt|txt|jpeg|png|gif|exe|dll|ps1|webp|svg|zip|xls).*"){
                    $detection = [PSCustomObject]@{
                        Name = 'LNK Target contains multiple file extensions'
                        Risk = 'Medium'
                        Source = 'LNK'
                        Technique = "T1547.009: Boot or Logon Autostart Execution: Shortcut Modification"
                        Meta = [PSCustomObject]@{
                            Location = $item.FullName
                            Created = $item.CreationTime
                            Modified = $item.LastWriteTime
                            LNKTarget = $lnk_target
                        }
                    }
                    Write-Detection $detection
                }

            }
        }
    }
}

function Check-Process-Modules {
    # Does not support Drive Retargeting
    if ($drivechange){
        Write-Message "Skipping Phantom DLLs - No Drive Retargeting"
        return
    }
    Write-Message "Checking 'Phantom' DLLs"
    $processes = Get-CimInstance -ClassName Win32_Process | Select-Object ProcessName,CreationDate,CommandLine,ExecutablePath,ParentProcessId,ProcessId
    $suspicious_unsigned_dll_names = @(
        "cdpsgshims.dll",
        "diagtrack_win.dll",
        "EdgeGdi.dll",
        "Msfte.dll",
        "phoneinfo.dll",
        "rpcss.dll",
        "sapi_onecore.dll",
        "spreview.exewdscore.dll",
        "Tsmsisrv.dll",
        "TSVIPSrv.dll",
        "Ualapi.dll",
        "UsoSelfhost.dll",
        "wbemcomn.dll",
        "WindowsCoreDeviceInfo.dll",
        "windowsperformancerecordercontrol.dll",
        "wlanhlp.dll",
        "wlbsctrl.dll",
        "wow64log.dll",
        "WptsExtensions.dll",
        "oci.dll",
        "TPPCOIPW32.dll",
        "tpgenlic.dll",
        "thinmon.dll",
        "fxsst.dll",
        "msTracer.dll",
        "fveapi.dll"
    )
    $allowlist = @(
        ".*\\Windows\\(SYSTEM32|SysWOW64)\\(wbemcomn|rpcss|FVEAPI|wlanhlp|windowsperformancerecordercontrol)\.dll",
        ".*\\Windows\\System32\\Speech_OneCore\\Common\\sapi_onecore\.dll"
    )
    foreach ($process in $processes){
        $modules = Get-Process -id $process.ProcessId -ErrorAction SilentlyContinue  | Select-Object -ExpandProperty modules -ErrorAction SilentlyContinue | Select-Object Company,FileName,ModuleName
        if ($modules -ne $null){
            foreach ($module in $modules){
                if ($module.ModuleName -in $suspicious_unsigned_dll_names) {
                    $signature = Get-AuthenticodeSignature $module.FileName
                    $item = Get-ChildItem -Path $module.FileName -File -ErrorAction SilentlyContinue | Select-Object *
                    $match = $false
                    foreach ($alloweditem in $allowlist){
                        if ($module.FileName -match $alloweditem){
                            $match = $true
                        }
                    }
                    if ($match){
                        continue
                    }

                    if ($signature.Status -ne 'Valid'){
                        $detection = [PSCustomObject]@{
                            Name = 'Suspicious Unsigned DLL with commonly-masqueraded name loaded into running process.'
                            Risk = 'Very High'
                            Source = 'Processes'
                            Technique = "T1574: Hijack Execution Flow"
                            Meta = [PSCustomObject]@{
                                Location = $module.FileName
                                Created = $item.CreationTime
                                Modified = $item.LastWriteTime
                                ProcessName = $process.ProcessName
                                PID = $process.ProcessId
                                Executable = $process.ExecutablePath
                                Hash = Get-File-Hash $module.FileName
                            }
                        }
                        Write-Detection $detection
                    } else {
                        if ($signature.SignerCertificate.SubjectName.Name -match "(.*Microsoft Windows.*|.*Microsoft Corporation.*|.*Microsoft Windows Publisher.*)"){
                            continue
                        }
                        $detection = [PSCustomObject]@{
                            Name = 'Suspicious DLL with commonly-masqueraded name loaded into running process.'
                            Risk = 'High'
                            Source = 'Processes'
                            Technique = "T1574: Hijack Execution Flow"
                            Meta = [PSCustomObject]@{
                                Location = $module.FileName
                                Created = $item.CreationTime
                                Modified = $item.LastWriteTime
                                ProcessName = $process.ProcessName
                                PID = $process.ProcessId
                                Executable = $process.ExecutablePath
                                Hash = Get-File-Hash $module.FileName
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
}

function Check-Windows-Unsigned-Files {
    # Supports Drive Retargeting - Not actually sure if this will work though
    Write-Message "Checking Unsigned Files"
    $scan_paths = @(
    "$env_homedrive\Windows",
    "$env_homedrive\Windows\System32",
    "$env_homedrive\Windows\System"
    "$env_homedrive\Windows\temp"
    )
    #allowlist_unsignedfiles
    foreach ($path in $scan_paths)
    {
        $files = Get-ChildItem -Path $path -File -ErrorAction SilentlyContinue | Where-Object { $_.extension -in ".dll", ".exe" } | Select-Object *
        foreach ($file in $files)
        {
            $sig = Get-AuthenticodeSignature $file.FullName
            if ($sig.Status -ne 'Valid')
            {
                $item = Get-ChildItem -Path $file.FullName -File -ErrorAction SilentlyContinue | Select-Object *
                $detection = [PSCustomObject]@{
                    Name = 'Unsigned DLL/EXE present in critical OS directory'
                    Risk = 'Very High'
                    Source = 'Windows'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $file.FullName
                        Created = $file.CreationTime
                        Modified = $file.LastWriteTime
                        Hash = Get-File-Hash $file.FullName
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-Service-Hijacks {
    Write-Message "Checking Un-Quoted Services"
    # Supports Drive Retargeting, assumes homedrive is C:
    #$services = Get-CimInstance -ClassName Win32_Service  | Select-Object Name, PathName, StartMode, Caption, DisplayName, InstallDate, ProcessId, State
    $service_path = "$regtarget_hklm`SYSTEM\$currentcontrolset\Services"
    $service_list = New-Object -TypeName "System.Collections.ArrayList"
    if (Test-Path -Path "Registry::$service_path") {
        $items = Get-ChildItem -Path "Registry::$service_path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSProvider
            if ($data.ImagePath -ne $null){
                $service = [PSCustomObject]@{
                    Name = $data.PSChildName
                    PathName = $data.ImagePath
                }
                $service.PathName = $service.PathName.Replace("\SystemRoot", "$env_assumedhomedrive\Windows")
                $service_list.Add($service) | Out-Null
            }
        }
    }
    foreach ($service in $service_list){
        $service.PathName = ($service.PathName).Replace("C:", $env_homedrive)
        if ($service.PathName -match '".*"[\s]?.*') {
            # Skip Paths where the executable is contained in quotes
            continue
        }
        # Is there a space in the service path?
        if ($service.PathName.Contains(" ")) {
            $original_service_path = $service.PathName
            # Does the path contain a space before the exe?
            if ($original_service_path -match '.*\s.*\.exe.*'){
                $tmp_path = $original_service_path.Split(" ")
                $base_path = ""
                foreach ($path in $tmp_path){
                    $base_path += $path
                    $test_path = $base_path + ".exe"
                    if (Test-Path $test_path) {
                        $detection = [PSCustomObject]@{
                            Name = 'Possible Service Path Hijack via Unquoted Path'
                            Risk = 'High'
                            Source = 'Services'
                            Technique = "T1574.009: Create or Modify System Process: Windows Service"
                            Meta = [PSCustomObject]@{
                                Location = $test_path
                                ServiceName = $service.Name
                                ServicePath = $service.PathName
                                Hash = Get-File-Hash $test_path
                            }
                        }
                        Write-Detection $detection
                    }
                    $base_path += " "
                }
            }
        }
    }
}

function Check-PATH-Hijacks {
    # Mostly supports drive retargeting - assumed PATH is prefixed with C:
    # Data Stored at HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment
    # Can just collect from this key instead of actual PATH var
    Write-Message "Checking PATH Hijacks"
    $system32_path = "$env_homedrive\windows\system32"
    $system32_bins = Get-ChildItem -File -Path $system32_path  -ErrorAction SilentlyContinue | Where-Object { $_.extension -in ".exe" } | Select-Object Name
    $sys32_bins = New-Object -TypeName "System.Collections.ArrayList"

    foreach ($bin in $system32_bins){
        $sys32_bins.Add($bin.Name) | Out-Null
    }
    $path_reg = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Session Manager\Environment"
    if (Test-Path -Path $path_reg) {
        $items = Get-ItemProperty -Path $path_reg | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq "Path") {
                $path_entries = $_.Value
            }
        }
    }
    $path_entries = $path_entries.Split(";")
    $paths_before_sys32 = New-Object -TypeName "System.Collections.ArrayList"
    foreach ($path in $path_entries){
        $path = $path.Replace("C:", $env_homedrive)
        if ($path -ne $system32_path){
            $paths_before_sys32.Add($path) | Out-Null
        } else {
            break
        }
    }

    foreach ($path in $paths_before_sys32){
        $path_bins = Get-ChildItem -File -Path $path  -ErrorAction SilentlyContinue | Where-Object { $_.extension -in ".exe" } | Select-Object *
        foreach ($bin in $path_bins){
            if ($bin.Name -in $sys32_bins){
                $detection = [PSCustomObject]@{
                    Name = 'Possible PATH Binary Hijack - same name as SYS32 binary in earlier PATH entry'
                    Risk = 'Very High'
                    Source = 'PATH'
                    Technique = "T1574.007: Hijack Execution Flow: Path Interception by PATH Environment Variable"
                    Meta = [PSCustomObject]@{
                        Location = $bin.FullName
                        Created = $bin.CreationTime
                        Modified = $bin.LastWriteTime
                        Hash = Get-File-Hash $bin.FullName
                    }
                }
                Write-Detection $detection
            }
        }

    }
}

function Check-Association-Hijack {
    # Supports Drive Retargeting
    Write-Message "Checking File Associations"
    $homedrive = $env_assumedhomedrive
    $value_regex_lookup = @{
        accesshtmlfile = "`"$homedrive\\Program Files\\Microsoft Office\\Root\\Office.*\\MSACCESS.EXE`"";
        batfile = '"%1" %';
        certificate_wab_auto_file = "`"$homedrive\\Program Files\\Windows Mail\\wab.exe`" /certificate `"%1`"";
        "chm.file" = "`"$homedrive\\Windows\\hh.exe`" %1"
        cmdfile = '"%1" %';
        comfile = '"%1" %';
        desktopthemepackfile = "$homedrive\\Windows\\system32\\rundll32.exe $homedrive\\Windows\\system32\\themecpl.dll,OpenThemeAction %1";
        evtfile = "$homedrive\\Windows\\system32\\eventvwr.exe /l:`"%1`"";
        evtxfile = "$homedrive\\Windows\\system32\\eventvwr.exe /l:`"%1`"";
        exefile = '"%1" %\*';
        hlpfile = "$homedrive\\Windows\\winhlp32.exe %1";
        mscfile = "$homedrive\\Windows\\system32\\mmc.exe `"%1`" %\*";
        powerpointhtmlfile = "`"$homedrive\\Program Files\\Microsoft Office\\Root\\Office16\\POWERPNT.EXE`"";
        powerpointxmlfile = "`"$homedrive\\Program Files\\Microsoft Office\\Root\\Office16\\POWERPNT.EXE`"";
        prffile = "`"$homedrive\\Windows\\System32\\rundll32.exe`" `"$homedrive\\Windows\\System32\\msrating.dll`",ClickedOnPRF %1";
        ratfile = "`"$homedrive\\Windows\\System32\\rundll32.exe`" `"$homedrive\\Windows\\System32\\msrating.dll`",ClickedOnRAT %1";
        regfile = "regedit.exe `"%1`""
        scrfile = "`"%1`" /S"
        themefile = "$homedrive\\Windows\\system32\\rundll32.exe $homedrive\\Windows\\system32\\themecpl.dll,OpenThemeAction %1"
        themepackfile = "$homedrive\\Windows\\system32\\rundll32.exe $homedrive\\Windows\\system32\\themecpl.dll,OpenThemeAction %1"
        wbcatfile = "$homedrive\\Windows\\system32\\sdclt.exe /restorepage"
        wcxfile = "`"$homedrive\\Windows\\System32\\xwizard.exe`" RunWizard /u {.*} /z%1"
        "wireshark-capture-file" = "`"$homedrive\\.*\\Wireshark.exe`" `"%1`""
        wordhtmlfile = "`"$homedrive\\Program Files\\Microsoft Office\\Root\\Office.*\\WINWORD.EXE`""

    }
    # This specifically uses the list of CLASSES associated with each user, rather than the user hives directly
    $basepath = "Registry::HKEY_CURRENT_USER"
    foreach ($p in $regtarget_hkcu_class_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path) {
            $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($item in $items) {
                $path = $item.Name
                if ($path.EndsWith('file')){
                    $basefile = $path.Split("\")[-1]
                    $open_path = $path+"\shell\open\command"
                    if (Test-Path -Path "Registry::$open_path"){
                        $key = Get-ItemProperty -Path "Registry::$open_path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                        $key.PSObject.Properties | ForEach-Object {
                            if ($_.Name -eq '(default)'){
                                #Write-Host $open_path $_.Value
                                $exe = $_.Value
                                $detection_triggered = $false
                                if ($value_regex_lookup.ContainsKey($basefile)){
                                    if ($exe -notmatch $value_regex_lookup[$basefile]){
                                        $detection = [PSCustomObject]@{
                                            Name = 'Possible File Association Hijack - Mismatch on Expected Value'
                                            Risk = 'High'
                                            Source = 'Registry'
                                            Technique = "T1546.001: Event Triggered Execution: Change Default File Association"
                                            Meta = [PSCustomObject]@{
                                                Location = $open_path
                                                ExpectedValue = $value_regex_lookup[$basefile]
                                                EntryValue = $exe
                                            }
                                        }
                                        Write-Detection $detection
                                        return
                                    } else {
                                        return
                                    }
                                }
                                if ($exe -match ".*\.exe.*\.exe"){
                                    $detection = [PSCustomObject]@{
                                        Name = 'Possible File Association Hijack - Multiple EXEs'
                                        Risk = 'High'
                                        Source = 'Registry'
                                        Technique = "T1546.001: Event Triggered Execution: Change Default File Association"
                                        Meta = [PSCustomObject]@{
                                            Location = $open_path
                                            EntryValue = $exe
                                        }
                                    }
                                    Write-Detection $detection
                                    return
                                }
                                if ($exe -match $suspicious_terms){
                                    $detection = [PSCustomObject]@{
                                        Name = 'Possible File Association Hijack - Suspicious Keywords'
                                        Risk = 'High'
                                        Source = 'Registry'
                                        Technique = "T1546.001: Event Triggered Execution: Change Default File Association"
                                        Meta = [PSCustomObject]@{
                                            Location = $open_path
                                            EntryValue = $exe
                                        }
                                    }
                                    Write-Detection $detection
                                }
                            }
                        }
                    }
                }
            }
        }
    }
    $basepath = "Registry::$regtarget_hklm`SOFTWARE\Classes"
    if (Test-Path -Path $basepath) {
        $items = Get-ChildItem -Path $basepath | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = $item.Name
            if ($path.EndsWith('file')){
                $basefile = $path.Split("\")[-1]
                $open_path = $path+"\shell\open\command"
                if (Test-Path -Path "Registry::$open_path"){
                    $key = Get-ItemProperty -Path "Registry::$open_path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                    $key.PSObject.Properties | ForEach-Object {
                        if ($_.Name -eq '(default)'){
                            $exe = $_.Value
                            $detection_triggered = $false
                            if ($value_regex_lookup.ContainsKey($basefile)){
                                if ($exe -notmatch $value_regex_lookup[$basefile]){
                                    $detection = [PSCustomObject]@{
                                        Name = 'Possible File Association Hijack - Mismatch on Expected Value'
                                        Risk = 'High'
                                        Source = 'Registry'
                                        Technique = "T1546.001: Event Triggered Execution: Change Default File Association"
                                        Meta = [PSCustomObject]@{
                                            Location = $open_path
                                            ExpectedValue = $value_regex_lookup[$basefile]
                                            EntryValue = $exe
                                        }
                                    }
                                    Write-Detection $detection
                                    return
                                } else {
                                    return
                                }
                            }
                            if ($exe -match ".*\.exe.*\.exe"){
                                $detection = [PSCustomObject]@{
                                    Name = 'Possible File Association Hijack - Multiple EXEs'
                                    Risk = 'High'
                                    Source = 'Registry'
                                    Technique = "T1546.001: Event Triggered Execution: Change Default File Association"
                                    Meta = [PSCustomObject]@{
                                        Location = $open_path
                                        EntryValue = $exe
                                    }
                                }
                                Write-Detection $detection
                                return
                            }
                            if ($exe -match $suspicious_terms){
                                $detection = [PSCustomObject]@{
                                    Name = 'Possible File Association Hijack - Suspicious Keywords'
                                    Risk = 'High'
                                    Source = 'Registry'
                                    Technique = "T1546.001: Event Triggered Execution: Change Default File Association"
                                    Meta = [PSCustomObject]@{
                                        Location = $open_path
                                        EntryValue = $exe
                                    }
                                }
                                Write-Detection $detection
                            }
                        }
                    }
                }
            }
        }
    }
}

function Check-Suspicious-Certificates {
    # Can maybe support drive retargeting
    if ($drivechange){
        Write-Message "Skipping Certificate Analysis - No Drive Retargeting [yet]"
        return
    }
    # https://www.michev.info/blog/post/1435/windows-certificate-stores#:~:text=Under%20file%3A%5C%25APPDATA%25%5C,find%20all%20your%20personal%20certificates.
    Write-Message "Checking Certificates"
    $certs = Get-ChildItem -path cert:\ -Recurse | Select-Object *
    # PSPath,DnsNameList,SendAsTrustedIssuer,PolicyId,Archived,FriendlyName,IssuerName,NotAfter,NotBefore,HasPrivateKey,SerialNumber,SubjectName,Version,Issuer,Subject
    $wellknown_ca = @(
        "DigiCert.*",
        "GlobalSign.*",
        "Comodo.*",
        "VeriSign.*",
        "Microsoft Corporation.*",
        "Go Daddy.*"
        "SecureTrust.*"
        "Entrust.*"
        "Microsoft.*"
        "USERTrust RSA Certification Authority"
        "Blizzard.*"
        "Hellenic Academic and Research Institutions.*"
        "Starfield.*"
        "T-TeleSec GlobalRoot.*"
        "QuoVadis.*"
        "ISRG Root.*"
        "Baltimore CyberTrust.*"
        "Security Communication Root.*"
        "AAA Certificate Services.*"
        "thawte Primary Root.*"
        "SECOM Trust.*"
        "Certum Trusted Network.*"
        "SSL\.com Root Certification.*"
        "Amazon Root.*"
        '"VeriSign.*'
        "VeriSign Trust Network.*"
        "Microsoft Trust Network"
        "Thawte Timestamping CA"
        "GeoTrust Primary Certification Authority.*"
        "Certum CA"
        "XBL Client IPsec Issuing CA"
        "Network Solutions Certificate Authority"
        "D-TRUST Root Class 3 CA.*"
        "Hotspot 2.0 Trust Root CA.*"
    )
    $date = Get-Date
    foreach ($cert in $certs){
        # Skip current object if it is a container of a cert rather than a certificate directly
        if ($cert.PSIsContainer){
            continue
        }
        if ($cert.PSPath.Contains("\Root\") -or $cert.PSPath.Contains("\AuthRoot\") -or $cert.PSPath.Contains("\CertificateAuthority\")){
            $trusted_cert = $true
        } else {
            continue
        }

        $cn_pattern = ".*CN=(.*?),.*"
        $cn_pattern_2 = "CN=(.*)"
        $ou_pattern = ".*O=(.*?),.*"
        $ou_pattern_2 = ".*O=(.*?)"

        $cn_match = [regex]::Matches($cert.Issuer, $cn_pattern).Groups.Captures.Value
        #Write-Host $cert.Issuer
        if ($cn_match -ne $null){
            #Write-Host $cn_match[1]
        } else {
            $cn_match = [regex]::Matches($cert.Issuer, $cn_pattern_2).Groups.Captures.Value
            if ($cn_match -ne $null){
                #Write-Host $cn_match[1]
            } else {
                $cn_match = [regex]::Matches($cert.Issuer, $ou_pattern).Groups.Captures.Value
                #Write-Host $cn_match[1]
                if ($cn_match -eq $null){
                $cn_match = [regex]::Matches($cert.Issuer, $ou_pattern_2).Groups.Captures.Value
                }
            }
        }

        $signer = $cn_match[1]
        $diff = New-TimeSpan -Start $date -End $cert.NotAfter
        $cert_verification_status = Test-Certificate -Cert $cert.PSPath -ErrorAction SilentlyContinue -WarningAction SilentlyContinue

        foreach ($ca in $wellknown_ca){
            if ($signer -match $ca){
                #Write-Host "Comparing:"+$signer+" to"+$ca
                $valid_signer = $true
                break
            } else {
                $valid_signer = $false
            }
        }

        # Valid Cert, Unknown Signer, Valid in Date, Contains Root/AuthRoot/CertificateAuthority
        if ($cert_verification_status -eq $true -and $valid_signer -eq $false -and $diff.Hours -ge 0) {
            $detection = [PSCustomObject]@{
                Name = 'Valid Root or CA Certificate Issued by Non-Standard Authority'
                Risk = 'Low'
                Source = 'Certificates'
                Technique = "T1553: Subvert Trust Controls: Install Root Certificate"
                Meta = [PSCustomObject]@{
                    Location = $cert.PSPath
                    SubjectName = $cert.SubjectName.Name
                    FriendlyName = $cert.FriendlyName
                    Issuer = $cert.Issuer
                    Subject = $cert.Subject
                    NotValidAfter = $cert.NotAfter
                    NotValidBefore = $cert.NotBefore
                }
            }
            Write-Detection $detection
            #Write-Host $detection.Meta
        }
        if ($cert_verification_status -ne $true -and $valid_signer -eq $false -and $diff.Hours -ge 0) {
            $detection = [PSCustomObject]@{
                Name = 'Invalid Root or CA Certificate Issued by Non-Standard Authority'
                Risk = 'Low'
                Source = 'Certificates'
                Technique = "T1553: Subvert Trust Controls: Install Root Certificate"
                Meta = [PSCustomObject]@{
                    Location = $cert.PSPath
                    SubjectName = $cert.SubjectName.Name
                    FriendlyName = $cert.FriendlyName
                    Issuer = $cert.Issuer
                    Subject = $cert.Subject
                    NotValidAfter = $cert.NotAfter
                    NotValidBefore = $cert.NotBefore
                }
            }
            Write-Detection $detection
            #Write-Host $detection.Meta
        }

        #$cert.SubjectName.Name
        # TODO - Maybe remove valid_signer from this later on if we care that much about 'valid' signer certs which failed validation
        if ($cert_verification_status -ne $true -and $valid_signer -eq $false -and $diff.Hours -ge 0){
            # Invalid Certs that are still within valid range
            if ($cert.PSPath.Contains("\Root\")){
                $detection = [PSCustomObject]@{
                    Name = 'Installed Trusted Root Certificate Failed Validation'
                    Risk = 'Medium'
                    Source = 'Certificates'
                    Technique = "T1553.004: Subvert Trust Controls: Install Root Certificate"
                    Meta = [PSCustomObject]@{
                        Location = $cert.PSPath
                        SubjectName = $cert.SubjectName.Name
                        FriendlyName = $cert.FriendlyName
                        Issuer = $cert.Issuer
                        Subject = $cert.Subject
                        NotValidAfter = $cert.NotAfter
                        NotValidBefore = $cert.NotBefore
                    }
                }
                Write-Detection $detection
                #Write-Host $detection.Meta
            } elseif ($cert.PSPath.Contains("\AuthRoot\")){
                $detection = [PSCustomObject]@{
                    Name = 'Installed Third-Party Root Certificate Failed Validation'
                    Risk = 'Low'
                    Source = 'Certificates'
                    Technique = "T1553.004: Subvert Trust Controls: Install Root Certificate"
                    Meta = [PSCustomObject]@{
                        Location = $cert.PSPath
                        SubjectName = $cert.SubjectName.Name
                        FriendlyName = $cert.FriendlyName
                        Issuer = $cert.Issuer
                        Subject = $cert.Subject
                        NotValidAfter = $cert.NotAfter
                        NotValidBefore = $cert.NotBefore
                    }
                }
                Write-Detection $detection
                #Write-Host $detection.Meta
            } elseif ($cert.PSPath.Contains("\CertificateAuthority\")){
                $detection = [PSCustomObject]@{
                    Name = 'Installed Intermediary Certificate Failed Validation'
                    Risk = 'Low'
                    Source = 'Certificates'
                    Technique = "T1553.004: Subvert Trust Controls: Install Root Certificate"
                    Meta = [PSCustomObject]@{
                        Location = $cert.PSPath
                        SubjectName = $cert.SubjectName.Name
                        FriendlyName = $cert.FriendlyName
                        Issuer = $cert.Issuer
                        Subject = $cert.Subject
                        NotValidAfter = $cert.NotAfter
                        NotValidBefore = $cert.NotBefore
                    }
                }
                Write-Detection $detection
                #Write-Host $detection.Meta
            } else {
                $detection = [PSCustomObject]@{
                    Name = 'Installed Certificate Failed Validation'
                    Risk = 'Very Low'
                    Source = 'Certificates'
                    Technique = "T1553: Subvert Trust Controls"
                    Meta = [PSCustomObject]@{
                        Location = $cert.PSPath
                        SubjectName = $cert.SubjectName.Name
                        FriendlyName = $cert.FriendlyName
                        Issuer = $cert.Issuer
                        Subject = $cert.Subject
                        NotValidAfter = $cert.NotAfter
                        NotValidBefore = $cert.NotBefore
                    }
                }
                Write-Detection $detection
                #Write-Host $detection.Meta
            }
        } elseif ($cert_verification_status -and $diff.Hours -ge 0){
            # Validated Certs that are still valid
        }
    }
}

function Check-OfficeTrustedDocuments {
    <#
    .SYNOPSIS
        Attempt to detect potentially-suspicious documents interacted with by the user.
    #>
    # When a user enables macros or creates a macro-enabled document, a reference to the document is stored at HKEY_CURRENT_USER\Software\Microsoft\Office\[office_version]\(Word|Excel|PowerPoint)\Security\Trusted Documents\TrustRecords
    $basepath = "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\*\*\Security\Trusted Documents\TrustRecords"
    $paths = Get-Item $basepath
    $reference = "https://www.bleepingcomputer.com/news/security/windows-registry-helps-find-malicious-docs-behind-infections/"
    foreach ($path in $paths){
        $path = "Registry::$path"
        $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($prop in $data.psobject.Properties){
            [byte[]]$val = $prop.Value
            $hexbin = [System.Runtime.Remoting.Metadata.W3cXsd2001.SoapHexBinary]::new()
            $hexbin.Value = $val
            $hexString = $hexbin.ToString()
            $macroEnabled = $false
            # Last 4 bytes of "Data" will be 01 00 00 00 if we 'Enable Editing' (any record in here by default usually) or FF FF FF 7F if we 'Enable Content' - usually seen when downloading untrusted documents and explicitly clicking "Enable Content"
            if ($hexString.EndsWith("FFFFFF7F")){
                $macroEnabled = $true
            }
            $Int64Value = [System.BitConverter]::ToInt64($prop.Value, 0)
            $date = [DateTime]::FromFileTime($Int64Value)
            if ($date.Year -eq 1600){
                $date = "Unknown"
            }
            $detection = [PSCustomObject]@{
                Name = 'Enable Content clicked on Office Document'
                Risk = 'Medium'
                Source = 'Office'
                Technique = "T1137.006: Office Application Startup: Add-ins"
                Meta = [PSCustomObject]@{
                    Location = $path
                    EntryName = $prop.Name
                    Created = $date
                }
            }
            if (-not $macroEnabled){
                $detection.Name = "Enable Editing clicked on Office Document"
                $detection.Risk = "Very Low"
            }
            Write-Detection $detection

        }
    }

}

function Check-Office-Trusted-Locations {
    # Mostly supports drive retargeting
    # https://github.com/PowerShell/PowerShell/issues/16812
    Write-Message "Checking Office Trusted Locations"
    #TODO - Add 'abnormal trusted location' detection
    # TODO - Redo this to consider all Office versions as well as Word, Excel and PowerPoint - need to abstract the logic better
    $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object *
    $actual_current_user = $env:USERNAME
    $user_pattern = "$env_assumedhomedrive\\Users\\(.*?)\\.*"
    $basepath = "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Word\Security\Trusted Locations"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path) {
            $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $possible_paths = New-Object -TypeName "System.Collections.ArrayList"
            foreach ($item in $items) {
                $path = "Registry::"+$item.Name
                $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                if ($data.Path -ne $null){
                    $possible_paths.Add($data.Path) | Out-Null
                    $currentcaptureduser = [regex]::Matches($data.Path, $user_pattern).Groups.Captures.Value
                    if ($currentcaptureduser -ne $null){
                        $current_user = $currentcaptureduser[1]
                    } else {
                        $current_user = 'NO_USER_FOUND_IN_PATH'
                    }
                    if ($data.Path.Contains($current_user)){
                        foreach ($user in $profile_names){
                            $new_path = $data.Path.replace($current_user, $user.Name)
                            #Write-Host $new_path
                            if ($possible_paths -notcontains $new_path) {
                                $possible_paths.Add($new_path) | Out-Null
                            }
                        }
                    }

                    $default_trusted_locations = @(
                        ".*\\Users\\.*\\AppData\\Roaming\\Microsoft\\Templates"
                        ".*\\Program Files\\Microsoft Office\\root\\Templates\\"
                        ".*\\Program Files \(x86\)\\Microsoft Office\\root\\Templates\\"
                        ".*\\Users\\.*\\AppData\\Roaming\\Microsoft\\Word\\Startup"
                    )

                    $match = $false
                    foreach ($allowedpath in $default_trusted_locations){
                        if ($data.Path -match $allowedpath){
                            $match = $true
                        }
                    }

                    if (-not $match){
                        $p = $data.Path
                        $detection = [PSCustomObject]@{
                            Name = 'Non-Standard Office Trusted Location'
                            Risk = 'Medium'
                            Source = 'Office'
                            Technique = "T1137.006: Office Application Startup: Add-ins"
                            Meta = [PSCustomObject]@{
                                Location = $p
                            }
                        }
                        Write-Detection $detection
                        # TODO - Still working on this - can't read registry without expanding the variables right now
                        # https://github.com/PowerShell/PowerShell/issues/16812
                        #
                    }
                }
            }
        }
    }

    foreach ($p in $possible_paths){
        if (Test-Path $p){
            $items = Get-ChildItem -Path $p -File -ErrorAction SilentlyContinue | Select-Object * | Where-Object {$_.extension -in $office_addin_extensions}
            foreach ($item in $items){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Persistence via Office Startup Addin'
                    Risk = 'Medium'
                    Source = 'Office'
                    Technique = "T1137.006: Office Application Startup: Add-ins"
                    Meta = [PSCustomObject]@{
                        Location = $item.FullName
                        Created =  $item.CreationTime
                        Modified = $item.LastWriteTime
                        Hash = Get-File-Hash $item.FullName
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-GPO-Scripts {
    # Supports Drive Retargeting
    Write-Message "Checking GPO Scripts"
    $base_key = "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Scripts"
    $script_paths = New-Object -TypeName "System.Collections.ArrayList"
    $homedrive = $env_homedrive
    $paths = @(
        "$homedrive\Windows\System32\GroupPolicy\Machine\Scripts\psscripts.ini",
        "$homedrive\Windows\System32\GroupPolicy\Machine\Scripts\scripts.ini",
        "$homedrive\Windows\System32\GroupPolicy\User\Scripts\psscripts.ini",
        "$homedrive\Windows\System32\GroupPolicy\User\Scripts\scripts.ini"
    )
    $path_lookup = @{
        Startup = "$homedrive\Windows\System32\GroupPolicy\Machine\Scripts\Startup\"
        Shutdown = "$homedrive\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\"
        Logoff = "$homedrive\Windows\System32\GroupPolicy\User\Scripts\Logoff\"
        Logon = "$homedrive\Windows\System32\GroupPolicy\User\Scripts\Logon\"
    }

    foreach ($path in $paths){
        # Skip non-existent files
        if((Test-Path $path) -eq $false){
            return
        }
        $content = Get-Content $path
        $script_type = ""
        foreach ($line in $content){
            if ($line.Trim() -eq ""){
                continue
            }
            if ($line -eq "[Shutdown]"){
                $script_type = "Shutdown"
            } elseif ($line -eq "[Startup]"){
                $script_type = "Startup"
            } elseif ($line -eq "[Logon]"){
                $script_type = "Logon"
            } elseif ($line -eq "[Logoff]"){
                $script_type = "Logoff"
            } elseif ($line -match "\d{1,9}CmdLine="){
                $cmdline = $line.Split("=", 2)[1]
            } elseif ($line -match "\d{1,9}Parameters="){
                $params = $line.Split("=", 2)[1]
            }
            if ($params -ne $null){
                # Last line in each script descriptor is the Parameters
                if ($script_type -eq "Shutdown" -or $script_type -eq "Startup"){
                    $desc = "Machine $script_type Script"
                } elseif ($script_type -eq "Logon" -or $script_paths -eq "Logoff"){
                    $desc = "User $script_type Script"
                }

                $script_location = $cmdline
                if ($cmdline -notmatch "[A-Za-z]{1}:\\.*"){
                    $script_location = $path_lookup[$script_type]+$cmdline
                }
                # TODO - Figure out ERROR
                $script_content_detection = $false
                try {
                    $script_content = Get-Content $script_location
                    foreach ($line_ in $script_content){
                        if ($line_ -match $suspicious_terms -and $script_content_detection -eq $false){
                            $detection = [PSCustomObject]@{
                                Name = 'Suspicious Content in '+$desc
                                Risk = 'High'
                                Source = 'Windows GPO Scripts'
                                Technique = "T1037: Boot or Logon Initialization Scripts"
                                Meta = [PSCustomObject]@{
                                    Location = $script_location
                                    EntryValue = $params
                                    SuspiciousEntry = $line_
                                }
                            }
                            Write-Detection $detection
                            $script_content_detection = $true
                        }
                    }
                } catch {
                }
                if ($script_content_detection -eq $false){
                    $detection = [PSCustomObject]@{
                        Name = 'Review: '+$desc
                        Risk = 'Medium'
                        Source = 'Windows GPO Scripts'
                        Technique = "T1037: Boot or Logon Initialization Scripts"
                        Meta = [PSCustomObject]@{
                            Location = $script_location
                            EntryValue = $params
                        }
                    }
                    Write-Detection $detection
                }
                $cmdline = $null
                $params = $null
            }

        }
    }

}

function Check-TerminalProfiles {
    # Supports Drive Retargeting
    Write-Message "Checking Terminal Profiles"
    $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object *
    $base_path = "$env_homedrive\Users\_USER_\AppData\Local\Packages\"
    foreach ($user in $profile_names){
        $new_path = $base_path.replace("_USER_", $user.Name)
        $new_path += "Microsoft.WindowsTerminal*"
        $terminalDirs = Get-ChildItem $new_path -ErrorAction SilentlyContinue
        foreach ($dir in $terminalDirs){
            if (Test-Path "$dir\LocalState\settings.json"){
                $settings_data = Get-Content -Raw "$dir\LocalState\settings.json" | ConvertFrom-Json
                if ($settings_data.startOnUserLogin -eq $null -or $settings_data.startOnUserLogin -ne $true){
                    continue
                }
                $defaultGUID = $settings_data.defaultProfile
                foreach ($profile_list in $settings_data.profiles){
                    foreach ($profile in $profile_list.List){
                        if ($profile.guid -eq $defaultGUID){
                            if($profile.commandline){
                                $exe = $profile.commandline
                            } else {
                                $exe = $profile.name
                            }
                            $detection = [PSCustomObject]@{
                                Name = 'Windows Terminal launching command on login'
                                Risk = 'Medium'
                                Source = 'Terminal'
                                Technique = "T1037: Boot or Logon Initialization Scripts"
                                Meta = [PSCustomObject]@{
                                    Location = "$dir\LocalState\settings.json"
                                    EntryValue = $exe
                                }
                            }
                            Write-Detection $detection
                        }
                    }
                }
            }
        }
    }
}

function Check-PeerDistExtensionDll {
    # Supports Drive Targeting
    Write-Message "Checking PeerDistExtension DLL"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\PeerDist\Extension"
    $expected_value = "peerdist.dll"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq "PeerdistDllName" -and $_.Value -ne $expected_value) {
                $detection = [PSCustomObject]@{
                    Name = 'PeerDist DLL does not match expected value'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        ExpectedValue = $expected_value
                        Hash = Get-File-Hash $_.Value
                    }
                    Reference = "https://www.hexacorn.com/blog/2022/01/23/beyond-good-ol-run-key-part-138/"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-InternetSettingsLUIDll {
    # Supports Drive Retargeting
    Write-Message "Checking InternetSettings DLL"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\LUI"
    $expected_value = "$env_assumedhomedrive\Windows\system32\wininetlui.dll!InternetErrorDlgEx"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq "0" -and $_.Value -ne $expected_value) {
                $detection = [PSCustomObject]@{
                    Name = 'InternetSettings LUI Error DLL does not match expected value'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        ExpectedValue = $expected_value
                        Hash = Get-File-Hash $_.Value
                    }
                    Reference = "https://www.hexacorn.com/blog/2022/01/22/beyond-good-ol-run-key-part-137/"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-ErrorHandlerCMD {
    # Support Drive Retargeting
    Write-Message "Checking ErrorHandler.cmd"
    $path = "$env_homedrive\windows\Setup\Scripts\ErrorHandler.cmd"
    if (Test-Path $path){

        $script_content_detection = $false
        try {
            $script_content = Get-Content $path
            foreach ($line_ in $script_content){
                if ($line_ -match $suspicious_terms -and $script_content_detection -eq $false){
                    $detection = [PSCustomObject]@{
                        Name = 'Suspicious Content in ErrorHandler.cmd'
                        Risk = 'High'
                        Source = 'Windows'
                        Technique = "T1574: Hijack Execution Flow"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryValue = $line_
                        }
                    }
                    Write-Detection $detection
                    $script_content_detection = $true
                }
            }
        } catch {
        }
        if ($script_content_detection -eq $false){
            $detection = [PSCustomObject]@{
                Name = 'Review: ErrorHandler.cmd Existence'
                Risk = 'High'
                Source = 'Windows'
                Technique = "T1574: Hijack Execution Flow"
                Meta = [PSCustomObject]@{
                    Location = $path
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-BIDDll {
    # Can support drive retargeting
    Write-Message "Checking BID DLL"
    $paths = @(
        "Registry::$regtarget_hklm`Software\Microsoft\BidInterface\Loader"
        "Registry::$regtarget_hklm`software\Wow6432Node\Microsoft\BidInterface\Loader"

    )
    $expected_values = @(
        "$env:homedrive\\Windows\\Microsoft\.NET\\Framework\\.*\\ADONETDiag\.dll"
        "$env:homedrive\\Windows\\SYSTEM32\\msdaDiag\.dll"

    )
    foreach ($path in $paths){
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq ":Path") {
                    $match = $false
                    foreach ($val in $expected_values){
                        if ($_.Value -match $val){
                            $match = $true
                            break
                        }
                    }
                    if ($match -eq $false){
                        $detection = [PSCustomObject]@{
                            Name = 'Non-Standard Built-In Diagnostics (BID) DLL'
                            Risk = 'High'
                            Source = 'Registry'
                            Technique = "T1574: Hijack Execution Flow"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                Hash = Get-File-Hash $_.Value
                            }
                            Reference = "https://www.hexacorn.com/blog/2019/07/13/beyond-good-ol-run-key-part-111/"
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
}

function Check-WindowsUpdateTestDlls {
    # Can support drive retargeting
    Write-Message "Checking Windows Update Test"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Test"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -in "EventerHookDll","AllowTestEngine","AlternateServiceStackDLLPath") {
                $detection = [PSCustomObject]@{
                    Name = 'Windows Update Test DLL Exists'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-KnownManagedDebuggers {
    # Can support drive retargeting
    Write-Message "Checking Known Managed Debuggers"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls"
    $allow_list = @(
        "$env:homedrive\\Program Files\\dotnet\\shared\\Microsoft\.NETCore\.App\\.*\\mscordaccore\.dll"
        "$env:homedrive\\Windows\\Microsoft\.NET\\Framework64\\.*\\mscordacwks\.dll"
        "$env:homedrive\\Windows\\System32\\mrt_map\.dll"
    )
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            $matches_good = $false
            foreach ($allowed_item in $allow_list){
                if ($_.Name -match $allowed_item){
                    $matches_good = $true
                    break
                }
            }
            if ($matches_good -eq $false){
                $detection = [PSCustomObject]@{
                    Name = 'Non-Standard KnownManagedDebugging DLL'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        Hash = Get-File-Hash $_.Name
                    }
                    Reference = "https://www.hexacorn.com/blog/2019/08/26/beyond-good-ol-run-key-part-113/"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-MiniDumpAuxiliaryDLLs {
    # Can support drive retargeting
    Write-Message "Checking MiniDumpAuxiliary DLLs"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls"
    $allow_list = @(
        "$env:homedrive\\Program Files\\dotnet\\shared\\Microsoft\.NETCore\.App\\.*\\coreclr\.dll"
        "$env:homedrive\\Windows\\Microsoft\.NET\\Framework64\\.*\\(mscorwks|clr)\.dll"
        "$env:homedrive\\Windows\\System32\\(chakra|jscript.*|mrt.*)\.dll"

    )
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            $matches_good = $false
            foreach ($allowed_item in $allow_list){
                if ($_.Name -match $allowed_item){
                    $matches_good = $true
                    break
                }
            }
            if ($matches_good -eq $false){
                $detection = [PSCustomObject]@{
                    Name = 'Non-Standard MiniDumpAuxiliary DLL'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        Hash = Get-File-Hash $_.Name
                    }
                    Reference = "https://www.hexacorn.com/blog/2019/08/26/beyond-good-ol-run-key-part-113/"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-Wow64LayerAbuse {
    # Supports Drive Retargeting
    Write-Message "Checking WOW64 Compatibility DLLs"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Wow64\x86"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -ne "(Default)"){
                $detection = [PSCustomObject]@{
                    Name = 'Non-Standard Wow64\x86 DLL loaded into x86 process'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-EventViewerMSC {
    # Supports Drive Retargeting
    Write-Message "Checking Event Viewer MSC"
    $paths = @(
        "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\Event Viewer"
        "Registry::$regtarget_hklm`SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Event Viewer"
    )
    foreach ($path in $paths){
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -in "MicrosoftRedirectionProgram","MicrosoftRedirectionProgramCommandLineParameters","MicrosoftRedirectionURL" -and $_.Value -notin "","http://go.microsoft.com/fwlink/events.asp"){
                    $detection = [PSCustomObject]@{
                        Name = 'Event Viewer MSC Hijack'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1574: Hijack Execution Flow"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-MicrosoftTelemetryCommands {
    # Supports Drive Retargeting
    Write-Message "Checking Microsoft TelemetryController"
    # Microsoft Telemetry Commands
    $allowed_telemetry_commands = @(
        "$env:systemroot\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun"
        "$env:systemroot\system32\CompatTelRunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun"
        "$env:systemroot\system32\CompatTelRunner.exe -m:appraiser.dll -f:UpdateAvStatus"
        "$env:systemroot\system32\CompatTelRunner.exe -m:devinv.dll -f:CreateDeviceInventory"
        "$env:systemroot\system32\CompatTelRunner.exe -m:pcasvc.dll -f:QueryEncapsulationSettings"
        "$env:systemroot\system32\CompatTelRunner.exe -m:invagent.dll -f:RunUpdate"
        "$env:systemroot\Windows\system32\CompatTelRunner.exe -m:generaltel.dll -f:DoCensusRun"

    )
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TelemetryController"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.Command -ne $null){
                if ($data.Command -notin $allowed_telemetry_commands){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Standard Microsoft Telemetry Command'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1112: Modify Registry"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryName = "Command"
                            EntryValue = $data.Command
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-ActiveSetup {
    # Supports Drive Retargeting
    Write-Message "Checking Active Setup Stubs"
    # T1547.014 - Boot or Logon Autostart Execution: Active Setup
    $standard_stubpaths = @(
		"/UserInstall",
		'"C:\Program Files\Windows Mail\WinMail.exe" OCInstallUserConfigOE', # Server 2016
		"$env_assumedhomedrive\Windows\System32\ie4uinit.exe -UserConfig", # 10
		"$env_assumedhomedrive\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install", # 10
		'"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenAdmin', # Server 2019
		'"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iesetup.dll",IEHardenUser', # Server 2019
		"$env_assumedhomedrive\Windows\System32\unregmp2.exe /FirstLogon", # 10
		"$env_assumedhomedrive\Windows\System32\unregmp2.exe /ShowWMP", # 10
        "$env_assumedhomedrive\Windows\System32\ie4uinit.exe -EnableTLS",
        "$env_assumedhomedrive\Windows\System32\ie4uinit.exe -DisableSSL3"
		"U"
        "regsvr32.exe /s /n /i:U shell32.dll"
        "$env_assumedhomedrive\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll"
        "$env_assumedhomedrive\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI"
    )
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Active Setup\Installed Components"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.StubPath -ne $null){
                if ($standard_stubpaths -notcontains $data.StubPath -and $data.StubPath -notmatch ".*(\\Program Files\\Google\\Chrome\\Application\\.*chrmstp.exe|Microsoft\\Edge\\Application\\.*\\Installer\\setup.exe).*"){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Standard StubPath Executed on User Logon'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1547.014: Boot or Logon Autostart Execution: Active Setup"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryName = "StubPath"
                            EntryValue = $data.StubPath
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-UninstallStrings {
    # Supports Drive Retargeting
    Write-Message "Checking Uninstall Strings"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            #allowtable_uninstallstrings
            if ($data.UninstallString -ne $null){
                if ($data.UninstallString -match $suspicious_terms){
                    $detection = [PSCustomObject]@{
                        Name = 'Uninstall String with Suspicious Keywords'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $item.Name
                            EntryValue = $data.UninstallString
                        }
                    }
                    Write-Detection $detection
                }
            }
            if ($data.QuietUninstallString -ne $null){
                if ($data.QuietUninstallString -match $suspicious_terms){
                    $detection = [PSCustomObject]@{
                        Name = 'Uninstall String with Suspicious Keywords'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $item.Name
                            EntryValue = $data.QuietUninstallString
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-PolicyManager {
    # Supports Drive Retargeting
    Write-Message "Checking PolicyManager DLLs"
    $allow_listed_values = @(
        "%SYSTEMROOT%\system32\PolicyManagerPrecheck.dll"
        "%SYSTEMROOT%\system32\hascsp.dll"
    )
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\PolicyManager\default"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $items_ = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($subkey in $items_){
                $subpath = "Registry::"+$subkey.Name
                $data = Get-ItemProperty -Path $subpath | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                if ($data.PreCheckDLLPath -ne $null){
                    if ($data.PreCheckDLLPath -notin $allow_listed_values){
                        $detection = [PSCustomObject]@{
                            Name = 'Non-Standard Policy Manager DLL'
                            Risk = 'High'
                            Source = 'Registry'
                            Technique = "T1546: Event Triggered Execution"
                            Meta = [PSCustomObject]@{
                                Location = $subkey.Name
                                EntryName = "PreCheckDLLPath"
                                EntryValue = $data.PreCheckDLLPath
                                Hash = Get-File-Hash $data.PreCheckDLLPath
                            }
                        }
                        Write-Detection $detection
                    }
                }
                if ($data.transportDllPath -ne $null){
                    if ($data.transportDllPath -notin $allow_listed_values){
                        $detection = [PSCustomObject]@{
                            Name = 'Non-Standard Policy Manager DLL'
                            Risk = 'High'
                            Source = 'Registry'
                            Technique = "T1546: Event Triggered Execution"
                            Meta = [PSCustomObject]@{
                                Location = $subkey.Name
                                EntryName = "transportDllPath"
                                EntryValue = $data.transportDllPath
                                Hash = Get-File-Hash $data.transportDllPath
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }

        }
    }
}

function Check-SEMgrWallet {
    # Supports Drive Retargeting
    Write-Message "Checking SEMgr Wallet DLLs"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\SEMgr\Wallet"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq "DllName" -and $_.Value -notin "","SEMgrSvc.dll"){
				Write-SnapshotMessage -Key $path -Value $_.Value -Source 'SEMgr'

                $detection = [PSCustomObject]@{
                    Name = 'Potential SEMgr Wallet DLL Hijack'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-WERRuntimeExceptionHandlers {
    # Supports Drive Retargeting
    Write-Message "Checking Error Reporting Handler DLLs"
    $allowed_entries = @(
        "$env_assumedhomedrive\\Program Files( \(x86\))?\\Microsoft\\Edge\\Application\\.*\\msedge_wer\.dll"
        "$env_assumedhomedrive\\Program Files( \(x86\))?\\Common Files\\Microsoft Shared\\ClickToRun\\c2r64werhandler\.dll"
        "$env_assumedhomedrive\\Program Files( \(x86\))?\\dotnet\\shared\\Microsoft\.NETCore\.App\\.*\\mscordaccore\.dll"
        "$env_assumedhomedrive\\Program Files( \(x86\))?\\Google\\Chrome\\Application\\.*\\chrome_wer\.dll"
        "$env_assumedhomedrive\\Program Files( \(x86\))?\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE.*\\msowercrash\.dll"
        "$env_assumedhomedrive\\Program Files( \(x86\))?\\Microsoft Visual Studio\\.*\\Community\\common7\\ide\\VsWerHandler\.dll"
        "$env_assumedhomedrive\\Windows\\Microsoft\.NET\\Framework64\\.*\\mscordacwks\.dll"
        "$env_assumedhomedrive\\Windows\\System32\\iertutil.dll"
        "$env_assumedhomedrive\\Windows\\System32\\msiwer.dll"
        "$env_assumedhomedrive\\Windows\\System32\\wbiosrvc.dll"
        "$env_assumedhomedrive\\(Program Files|Program Files\(x86\))\\Mozilla Firefox\\mozwer.dll"
    )
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {

            $verified_match = $false
            foreach ($entry in $allowed_entries){
                #Write-Host $entry
                if ($_.Name -match $entry -and $verified_match -eq $false){
                    $verified_match = $true
                } else {
                }
            }

            if ($_.Name -ne "(Default)" -and $verified_match -eq $false){
                $detection = [PSCustomObject]@{
                    Name = 'Potential WER Helper Hijack'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1574: Hijack Execution Flow"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-SilentProcessExitMonitoring {
    # Supports Drive Retargeting
    Write-Message "Checking SilentProcessExit Monitoring"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.MonitorProcess -ne $null){
                if ($data.ReportingMode -eq $null){
                    $data.ReportingMode = 'NA'
                }
                $detection = [PSCustomObject]@{
                    Name = 'Process Launched on SilentProcessExit'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546.012: Event Triggered Execution: Image File Execution Options Injection"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        MonitoredProcess = $item.Name
                        LaunchedProcess = $data.MonitorProcess
                        ReportingMode = $data.ReportingMode
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-WinlogonHelperDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking Winlogon Helper DLLs"
    $standard_winlogon_helper_dlls = @(
        "C:\Windows\System32\userinit.exe,"
        "explorer.exe"
        "sihost.exe"
        "ShellAppRuntime.exe"
        "mpnotify.exe"
    )
    $path = "Registry::$regtarget_hklm`Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -in 'Userinit','Shell','ShellInfrastructure','ShellAppRuntime','MPNotify' -and $_.Value -notin $standard_winlogon_helper_dlls) {
                $detection = [PSCustomObject]@{
                    Name = 'Potential WinLogon Helper Persistence'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1547.004: Boot or Logon Autostart Execution: Winlogon Helper DLL"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-UtilmanHijack {
    # TODO - Add Better Details
    # Supports Drive Retargeting
    Write-Message "Checking utilman.exe"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utilman.exe"
    if (Test-Path -Path $path) {
            $detection = [PSCustomObject]@{
                Name = 'Potential utilman.exe Registry Persistence'
                Risk = 'High'
                Source = 'Registry'
                Technique = "T1546.008: Event Triggered Execution: Accessibility Features"
                Meta = [PSCustomObject]@{
                    Location = $path
                }
            }
            Write-Detection $detection
    }
}

function Check-SethcHijack {
    # TODO - Add Better Details
    # Supports Drive Retargeting
    Write-Message "Checking sethc.exe"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe"
    if (Test-Path -Path $path) {
            $detection = [PSCustomObject]@{
                Name = 'Potential sethc.exe Registry Persistence'
                Risk = 'High'
                Source = 'Registry'
                Technique = "T1546.008: Event Triggered Execution: Accessibility Features"
                Meta = [PSCustomObject]@{
                    Location = $path
                }
            }
            Write-Detection $detection
    }
}

function Check-RDPShadowConsent {
    # Supports Drive Retargeting
    Write-Message "Checking RDP Shadow Consent"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Shadow' -and ($_.Value -eq 4 -or $_.Value -eq 2)) {
                $detection = [PSCustomObject]@{
                    Name = 'RDP Shadowing without Consent is Enabled'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1098: Account Manipulation"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                    Reference = "https://blog.bitsadmin.com/spying-on-users-using-rdp-shadowing"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-RemoteUACSetting {
    # Supports Drive Retargeting
    Write-Message "Checking RemoteUAC Setting"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'LocalAccountTokenFilterPolicy' -and $_.Value -eq 1) {
                $detection = [PSCustomObject]@{
                    Name = 'UAC Disabled for Remote Sessions'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1112: Modify Registry"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                    Reference = "https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/user-account-control-and-remote-restriction"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-PrintMonitorDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking PrintMonitor DLLs"
    $standard_print_monitors = @(
		"APMon.dll",
		"AppMon.dll",
		"FXSMON.dll",
		"localspl.dll",
		"tcpmon.dll",
		"usbmon.dll",
		"WSDMon.dll" # Server 2016
    )
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Print\Monitors"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.Driver -ne $null){
                if ($data.Driver -notin $standard_print_monitors){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Standard Print Monitor DLL'
                        Risk = 'Medium'
                        Source = 'Registry'
                        Technique = "T1112: Modify Registry"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryValue = $data.Driver
                            Hash = Get-File-Hash $data.Driver
                        }
                        Reference = "https://pentestlab.blog/2019/10/28/persistence-port-monitors/"
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-LSA {
    # Supports Drive Retargeting
    Write-Message "Checking LSA DLLs"
    # LSA Security Package Review
    # TODO - Check DLL Modification/Creation times
    $common_ssp_dlls = @(
		"cloudAP", # Server 2016
		"ctxauth", #citrix
        "efslsaext.dll"
		"kerberos",
        "livessp",
        "lsasrv.dll"
		"msoidssp",
		"msv1_0",
		"negoexts",
		"pku2u",
		"schannel",
		"tspkg", # Server 2016
		"wdigest" # Server 2016
		"wsauth",
		"wsauth" #vmware
    )
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Lsa"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Security Packages' -and $_.Value -ne '""') {
                $packages = $_.Value.Split([System.Environment]::NewLine)
                foreach ($package in $packages){
                    if ($package -notin $common_ssp_dlls){
                        $detection = [PSCustomObject]@{
                            Name = 'LSA Security Package Review'
                            Risk = 'Medium'
                            Source = 'Registry'
                            Technique = "T1547.005: Boot or Logon Autostart Execution: Security Support Provider"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                AbnormalPackage = $package
                                Hash = Get-File-Hash $package
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
            if ($_.Name -eq 'Authentication Packages' -and $_.Value -ne '""') {
                $packages = $_.Value.Split([System.Environment]::NewLine)
                foreach ($package in $packages){
                    if ($package -notin $common_ssp_dlls){
                        $detection = [PSCustomObject]@{
                            Name = 'LSA Authentication Package Review'
                            Risk = 'Medium'
                            Source = 'Registry'
                            Technique = "T1547.002: Boot or Logon Autostart Execution: Authentication Packages"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                AbnormalPackage = $package
                                Hash = Get-File-Hash $package
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Lsa\OSConfig"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Security Packages' -and $_.Value -ne '""') {
                $packages = $_.Value.Split([System.Environment]::NewLine)
                foreach ($package in $packages){
                    if ($package -notin $common_ssp_dlls){
                        $detection = [PSCustomObject]@{
                            Name = 'LSA Security Package Review'
                            Risk = 'Medium'
                            Source = 'Registry'
                            Technique = "T1547.005: Boot or Logon Autostart Execution: Security Support Provider"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                AbnormalPackage = $package
                                Hash = Get-File-Hash $package
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\LsaExtensionConfig\LsaSrv"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Extensions' -and $_.Value -ne '""') {
                $packages = $_.Value.Split([System.Environment]::NewLine)
                foreach ($package in $packages){
                    if ($package -notin $common_ssp_dlls){
                        $detection = [PSCustomObject]@{
                            Name = 'LSA Extensions Review'
                            Risk = 'Medium'
                            Source = 'Registry'
                            Technique = "T1547.005: Boot or Logon Autostart Execution: Security Support Provider"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                AbnormalPackage = $package
                                Hash = Get-File-Hash $package
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }

    # T1556.002: Modify Authentication Process: Password Filter DLL
    # TODO - Check DLL Modification/Creation times
    $standard_lsa_notification_packages = @(
		"rassfm", # Windows Server 2019 AWS Lightsail
		"scecli" # Windows 10/Server
    )
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Lsa"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq "Notification Packages") {
                $packages = $_.Value.Split([System.Environment]::NewLine)
                foreach ($package in $packages){
                    if ($package -notin $standard_lsa_notification_packages){
                        $detection = [PSCustomObject]@{
                            Name = 'Potential Exploitation via Password Filter DLL'
                            Risk = 'High'
                            Source = 'Registry'
                            Technique = "T1556.002: Modify Authentication Process: Password Filter DLL"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                AbnormalPackage = $package
                                Hash = Get-File-Hash $package
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
}

function Check-DNSServerLevelPluginDLL {
    # Supports Drive Retargeting
    Write-Message "Checking DNSServerLevelPlugin DLL"
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Services\DNS\Parameters"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'ServerLevelPluginDll' -and $_.Value -ne '""') {
                $detection = [PSCustomObject]@{
                    Name = 'DNS ServerLevelPluginDLL is active'
                    Risk = 'Medium'
                    Source = 'Registry'
                    Technique = "T1055.001: Process Injection: Dynamic-link Library Injection"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-ExplorerHelperUtilities {
    # Supports Drive Retargeting
    Write-Message "Checking Explorer Helper exes"
    $paths = @(
        "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\BackupPath"
        "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\cleanuppath"
        "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\DefragPath"
    )
    $allowlisted_explorer_util_paths = @(
        "$env:SYSTEMROOT\system32\sdclt.exe"
        "$env:SYSTEMROOT\system32\cleanmgr.exe /D %c"
        "$env:SYSTEMROOT\system32\dfrgui.exe"
        "$env:SYSTEMROOT\system32\wbadmin.msc"
    )
    foreach ($path in $paths){
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq '(Default)' -and $_.Value -ne '""' -and $_.Value -notin $allowlisted_explorer_util_paths) {
                    $detection = [PSCustomObject]@{
                        Name = 'Explorer\MyComputer Utility Hijack'
                        Risk = 'Medium'
                        Source = 'Registry'
                        Technique = "T1574: Hijack Execution Flow"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                            Hash = Get-File-Hash $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-TerminalServicesInitialProgram {
    # Supports Drive Retargeting
    Write-Message "Checking Terminal Services Initial Programs"
    $paths = @(
        "Registry::$regtarget_hklm`SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services"
        "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Terminal Server\WinStations\RDP-Tcp"
    )
    $basepath = "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services"
    foreach ($p in $regtarget_hkcu_list) {
        $paths += $basepath.Replace("HKEY_CURRENT_USER", $p)
    }

    foreach ($path in $paths){
        if (Test-Path -Path $path) {
            $finherit = $false
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'fInheritInitialProgram' -and $_.Value -eq "1"){
                    $finherit = $true
                }
            }
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'InitialProgram' -and $_.Value -ne "" -and $finherit -eq $true){
                    $detection = [PSCustomObject]@{
                        Name = 'TerminalServices InitialProgram Active'
                        Risk = 'Medium'
                        Source = 'Registry'
                        Technique = "T1574: Hijack Execution Flow"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-RDPStartupPrograms {
    # Supports Drive Retargeting
    Write-Message "Checking RDP Startup Programs"
    $allowed_rdp_startups = @(
        "rdpclip"
    )
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Terminal Server\Wds\rdpwd"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'StartupPrograms' -and $_.Value -ne ""){
                $packages = $_.Value.Split(",")
                foreach ($package in $packages){
                    if ($package -notin $allowed_rdp_startups){
                        $detection = [PSCustomObject]@{
                            Name = 'Non-Standard RDP Startup Program'
                            Risk = 'Medium'
                            Source = 'Registry'
                            Technique = "T1574: Hijack Execution Flow"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                                AbnormalPackage = $package
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
}

function Check-TimeProviderDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking Time Provider DLLs"
    $standard_timeprovider_dll = @(
        "$env:homedrive\Windows\System32\w32time.dll",
        "$env:homedrive\Windows\System32\vmictimeprovider.dll"
    )
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Services\W32Time\TimeProviders"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.DllName -ne $null){
                if ($standard_timeprovider_dll -notcontains $data.DllName){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Standard Time Providers DLL'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1547.003: Boot or Logon Autostart Execution: Time Providers"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryValue = $data.DllName
                            Hash = Get-File-Hash $data.DllName
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-PrintProcessorDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking PrintProcessor DLLs"
    $standard_print_processors = @(
        "winprint.dll"
    )
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Print\Environments\Windows x64\Print Processors"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.Driver -ne $null){
                if ($standard_print_processors -notcontains $data.Driver){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Standard Print Processor DLL'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1547.012: Boot or Logon Autostart Execution: Print Processors"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryValue = $data.Driver
                            Hash = Get-File-Hash $data.Driver
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Print\Environments\Windows x64\Print Processors"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.Driver -ne $null){
                if ($standard_print_processors -notcontains $data.Driver){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Standard Print Processor DLL'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1547.012: Boot or Logon Autostart Execution: Print Processors"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryName = $data.Driver
                            Hash = Get-File-Hash $data.Driver
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-UserInitMPRScripts {
    # Supports Drive Retargeting
    Write-Message "Checking UserInitMPRLogonScript"
    $basepath = "Registry::HKEY_CURRENT_USER\Environment"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'UserInitMprLogonScript'){
                    $detection = [PSCustomObject]@{
                        Name = 'Potential Persistence via Logon Initialization Script'
                        Risk = 'Medium'
                        Source = 'Registry'
                        Technique = "T1037.001: Boot or Logon Initialization Scripts: Logon Script (Windows)"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-ScreenSaverEXE {
    # Supports Drive Retargeting
    Write-Message "Checking ScreenSaver exe"
    $basepath = "Registry::HKEY_CURRENT_USER\Control Panel\Desktop"
    foreach ($p in $regtarget_hkcu_list) {
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path)
        {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath, PSParentPath, PSChildName, PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq "SCRNSAVE.exe")
                {
                    $detection = [PSCustomObject]@{
                        Name = 'Potential Persistence via ScreenSaver Executable Hijack'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546.002: Event Triggered Execution: Screensaver"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                            Hash = Get-File-Hash $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-NetSHDLLs {
    # Supports Dynamic Snapshotting
    # Supports Drive Retargeting
    Write-Message "Checking NetSH DLLs"
    $standard_netsh_dlls = @(
		"authfwcfg.dll",
		"dhcpcmonitor.dll",
		"dot3cfg.dll",
		"fwcfg.dll",
		"hnetmon.dll",
		"ifmon.dll",
        "napmontr.dll",
		"netiohlp.dll",
		"netprofm.dll",
		"nettrace.dll",
		"nshhttp.dll",
		"nshipsec.dll",
		"nshwfp.dll",
		"p2pnetsh.dll",
		"peerdistsh.dll",
		"rasmontr.dll",
		"rpcnsh.dll",
		"WcnNetsh.dll",
		"whhelper.dll",
		"wlancfg.dll",
		"wshelper.dll",
		"wwancfg.dll"
    )
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Netsh"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Value -notin $standard_netsh_dlls) {
                $detection = [PSCustomObject]@{
                    Name = 'Potential Persistence via Netsh Helper DLL Hijack'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546.007: Event Triggered Execution: Netsh Helper DLL"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-AppCertDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking AppCert DLLs"
    $standard_appcert_dlls = @()
    $path = "Registry::$regtarget_hklm`SYSTEM\$currentcontrolset\Control\Session Manager\AppCertDlls"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Value -notin $standard_appcert_dlls) {
                $detection = [PSCustomObject]@{
                    Name = 'Potential Persistence via AppCertDLL Hijack'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546.009: Event Triggered Execution: AppCert DLLs"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-AppInitDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking AppInit DLLs"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'AppInit_DLLs' -and $_.Value -ne '') {
                $detection = [PSCustomObject]@{
                    Name = 'Potential AppInit DLL Persistence'
                    Risk = 'Medium'
                    Source = 'Registry'
                    Technique = "T1546.010: Event Triggered Execution: AppInit DLLs"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                    Reference = "https://attack.mitre.org/techniques/T1546/010/"
                }
                Write-Detection $detection
            }
        }
    }
    $path = "Registry::$regtarget_hklm`Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'AppInit_DLLs' -and $_.Value -ne '') {
                $detection = [PSCustomObject]@{
                    Name = 'Potential AppInit DLL Persistence'
                    Risk = 'Medium'
                    Source = 'Registry'
                    Technique = "T1546.010: Event Triggered Execution: AppInit DLLs"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                    Reference = "https://attack.mitre.org/techniques/T1546/010/"
                }
                Write-Detection $detection
            }
        }
    }

}

function Check-ApplicationShims {
    # Supports Drive Retargeting
    Write-Message "Checking Application Shims"
    # TODO - Also check HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\InstalledSDB"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            $detection = [PSCustomObject]@{
                Name = 'Potential Application Shimming Persistence'
                Risk = 'High'
                Source = 'Registry'
                Technique = "T1546.011: Event Triggered Execution: Application Shimming"
                Meta = [PSCustomObject]@{
                    Location = $path
                    EntryName = $_.Name
                    EntryValue = $_.Value
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-IFEO {
    # Supports Drive Retargeting
    Write-Message "Checking Image File Execution Options"
    $path = "Registry::$regtarget_hklm`SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.Debugger -ne $null){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Image File Execution Option Debugger Injection'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546.012: Event Triggered Execution: Image File Execution Options Injection"
                    Meta = [PSCustomObject]@{
                        Location = $item.Name
                        EntryValue = $data.Debugger
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-FolderOpen {
    # Supports Drive Retargeting
    Write-Message "Checking FolderOpen Command"
    $basepath = "Registry::HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\command"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'DelegateExecute') {
                    $detection = [PSCustomObject]@{
                        Name = 'Potential Folder Open Hijack for Persistence'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-WellKnownCOM {
    # Supports Drive Retargeting
    # TODO - Add the same HKLM Check
    Write-Message "Checking well-known COM hijacks"

    # shell32.dll Hijack
    $basepath = "Registry::HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32"
    foreach ($p in $regtarget_hkcu_list) {
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path)
        {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath, PSParentPath, PSChildName, PSProvider
            $items.PSObject.Properties | ForEach-Object {
                $detection = [PSCustomObject]@{
                    Name = 'Potential shell32.dll Hijack for Persistence'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    # WBEM Subsystem
    $basepath = "Registry::HKEY_CURRENT_USER\Software\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32"
    foreach ($p in $regtarget_hkcu_list) {
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                $detection = [PSCustomObject]@{
                    Name = 'Potential WBEM Subsystem Hijack for Persistence'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1546.015: Event Triggered Execution: Component Object Model Hijacking"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }

}

function Check-Officetest {
    # Supports Drive Retargeting
    Write-Message "Checking Office test usage"
    $basepath = "Registry::HKEY_CURRENT_USER\Software\Microsoft\Office test\Special\Perf"
    foreach ($p in $regtarget_hkcu_list)
    {
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path)
        {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath, PSParentPath, PSChildName, PSProvider
            $items.PSObject.Properties | ForEach-Object {
                $detection = [PSCustomObject]@{
                    Name = 'Persistence via Office test\Special\Perf Key'
                    Risk = 'Very High'
                    Source = 'Office'
                    Technique = "T1137.002: Office Application Startup: Office Test"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    $path = "Registry::$regtarget_hklm`Software\Microsoft\Office test\Special\Perf"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            $detection = [PSCustomObject]@{
                Name = 'Persistence via Office test\Special\Perf Key'
                Risk = 'Very High'
                Source = 'Office'
                Technique = "T1137.002: Office Application Startup: Office Test"
                Meta = [PSCustomObject]@{
                    Location = $path
                    EntryName = $_.Name
                    EntryValue = $_.Value
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-OfficeGlobalDotName {
    # Supports Drive Retargeting
    Write-Message "Checking Office GlobalDotName usage"
    # TODO - Cleanup Path Referencing, Add more versions?
    $office_versions = @(14,15,16)
    foreach ($version in $office_versions){
        $basepath = "Registry::HKEY_CURRENT_USER\software\microsoft\office\$version.0\word\options"
        foreach ($p in $regtarget_hkcu_list){
            $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
            if (Test-Path -Path $path) {
                $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                $items.PSObject.Properties | ForEach-Object {
                    if ($_.Name -eq "GlobalDotName"){
                        $detection = [PSCustomObject]@{
                            Name = 'Persistence via Office GlobalDotName'
                            Risk = 'Very High'
                            Source = 'Office'
                            Technique = "T1137.001: Office Application Office Template Macros"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
}

function Check-TerminalServicesDLL {
    # Supports Drive Retargeting
    Write-Message "Checking TerminalServices DLL"
    $path = "Registry::$regtarget_hklm`SYSTEM\CurrentControlSet\Services\TermService\Parameters"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'ServiceDll' -and $_.Value -ne 'C:\Windows\System32\termsrv.dll'){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Hijacking of Terminal Services DLL'
                    Risk = 'Very High'
                    Source = 'Registry'
                    Technique = "T1505.005: Server Software Component: Terminal Services DLL"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-AutoDialDLL {
    # Supports Drive Retargeting
    Write-Message "Checking Autodial DLL"
    $path = "Registry::$regtarget_hklm`SYSTEM\CurrentControlSet\Services\WinSock2\Parameters"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'AutodialDLL' -and $_.Value -ne 'C:\Windows\System32\rasadhlp.dll'){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Hijacking of Autodial DLL'
                    Risk = 'Very High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-CommandAutoRunProcessors {
    # Supports Drive Retargeting
    Write-Message "Checking Command AutoRun Processors"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Command Processor"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'AutoRun'){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Hijacking of Command AutoRun Processor'
                    Risk = 'Very High'
                    Source = 'Registry'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
    $basepath = "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Command Processor"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path $path) {
            $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $items.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'AutoRun') {
                    $detection = [PSCustomObject]@{
                        Name = 'Potential Hijacking of Command AutoRun Processor'
                        Risk = 'Very High'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-TrustProviderDLL {
    # Supports Drive Retargeting
    Write-Message "Checking Trust Provider"
    $path = "Registry::$regtarget_hklm`SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{603BCC1F-4B59-4E08-B724-D2C6297EF351}"
    if (Test-Path -Path $path) {
        $items = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $items.PSObject.Properties | ForEach-Object {
            if ($_.Name -eq 'Dll' -and $_.Value -notin @("C:\Windows\System32\pwrship.dll", "C:\Windows\System32\WindowsPowerShell\v1.0\pwrshsip.dll")){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Hijacking of Trust Provider'
                    Risk = 'Very High'
                    Source = 'Registry'
                    Technique = "T1553: Subvert Trust Controls"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
            if ($_.Name -eq 'FuncName' -and $_.Value -ne 'PsVerifyHash'){
                $detection = [PSCustomObject]@{
                    Name = 'Potential Hijacking of Trust Provider'
                    Risk = 'Very High'
                    Source = 'Registry'
                    Technique = "T1553: Subvert Trust Controls"
                    Meta = [PSCustomObject]@{
                        Location = $path
                        EntryName = $_.Name
                        EntryValue = $_.Value
                        Hash = Get-File-Hash $_.Value
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-NaturalLanguageDevelopmentDLLs {
    # Supports Drive Retargeting
    Write-Message "Checking NaturalLanguageDevelopment DLLs"
    $path = "Registry::$regtarget_hklm`SYSTEM\CurrentControlSet\Control\ContentIndex\Language"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            if ($data.StemmerDLLPathOverride -ne $null -or $data.WBDLLPathOverride -ne $null){
                if ($data.StemmerDLLPathOverride -ne $null){
                    $dll = $data.StemmerDLLPathOverride
                } elseif ($data.WBDLLPathOverride -ne $null){
                    $dll = $data.WBDLLPathOverride
                }
                $detection = [PSCustomObject]@{
                    Name = 'DLL Override on Natural Language Development Platform'
                    Risk = 'High'
                    Source = 'Registry'
                    Technique = "T1112: Modify Registry"
                    Meta = [PSCustomObject]@{
                        Location = $item.Name
                        EntryValue = $dll
                        Hash = Get-File-Hash $dll
                    }
                    Reference = "https://persistence-info.github.io/Data/naturallanguage6.html"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-WindowsLoadKey {
    # Supports Drive Retargeting
    Write-Message "Checking Windows Load"
    $basepath = "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path "Registry::$path") {
            $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $item.PSObject.Properties | ForEach-Object {
                if ($_.Name -in 'Load'){
                    $detection = [PSCustomObject]@{
                        Name = 'Potential Windows Load Hijacking'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                            Reference = "https://dmcxblue.gitbook.io/red-team-notes-2-0/red-team-techniques/privilege-escalation/untitled/registry-run-keys-startup-folder"
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-AMSIProviders {
    # Supports Drive Retargeting
    Write-Message "Checking AMSI Providers"
    $allowed_amsi_providers = @(
        "{2781761E-28E0-4109-99FE-B9D127C57AFE}"
    )

    $path = "Registry::$regtarget_hklm`\SOFTWARE\Microsoft\AMSI\Providers"
    if (Test-Path -Path $path) {
        $items = Get-ChildItem -Path $path | Select-Object *
        foreach ($item in $items) {
            if ($item.PSChildName -in $allowed_amsi_providers){
                continue
            }
            $new_path = "Registry::HKLM\SOFTWARE\Classes\CLSID\"+$item.PSChildName+"\InprocServer32"
            Write-Host $new_path
            if (Test-Path $new_path){
                $dll_data = Get-ItemProperty -Path $new_path
                $dll_data.PSObject.Properties | ForEach-Object {
                    if ($_.Name -in '(Default)'){
						Write-SnapshotMessage -Key $_.Name -Value $_.Value -Source 'AMSI'

                        $detection = [PSCustomObject]@{
                            Name = 'Non-Standard AMSI Provider DLL'
                            Risk = 'High'
                            Source = 'Registry'
                            Technique = "T1112: Modify Registry"
                            Meta = [PSCustomObject]@{
                                Location = $path
                                EntryName = $_.Name
                                EntryValue = $_.Value
                            }
                        }
                        Write-Detection $detection
                    }
                }
            }

        }
    }
}

function Check-AppPaths {
    # Supports Drive Retargeting
    Write-Message "Checking AppPaths"
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths"
    if (Test-Path -Path "Registry::$path") {
        $items = Get-ChildItem -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $data.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq '(default)') {
                    $key_basename = [regex]::Matches($item.Name, ".*\\(?<name>[^\\].*)").Groups.Captures.Value[1]
                    $value_basename = [regex]::Matches($_.Value, ".*\\(?<name>[^\\].*)").Groups.Captures.Value[1]
                    if ($key_basename -ne $null -and $value_basename -ne $null){
                        $value_basename = $value_basename.Replace('"', "")
                        if ($key_basename -ne $value_basename){
                            $detection = [PSCustomObject]@{
                                Name = 'Potential App Path Hijacking - Executable Name does not match Registry Key'
                                Risk = 'Medium'
                                Source = 'Registry'
                                Technique = "T1546: Event Triggered Execution"
                                Meta = [PSCustomObject]@{
                                    Location = $item.Name
                                    EntryName = $_.Name
                                    EntryValue = $_.Value
                                    Hash = Get-File-Hash $_.Value
                                }
                            }
                            Write-Detection $detection
                        }
                    }
                }
            }
        }
    }
}

function Check-GPOExtensions {
    # Supports Drive Retargeting
    Write-Message "Checking GPO Extension DLLs"
    $homedrive = $env:HOMEDRIVE
    $gpo_dll_allowlist = @(
        "$homedrive\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll"
        "$homedrive\Windows\System32\cscobj.dll"
        "$homedrive\Windows\System32\dskquota.dll"
        "$homedrive\Windows\System32\gpprefcl.dll"
        "$homedrive\Windows\System32\gpscript.dll"
        "$homedrive\Windows\System32\iedkcs32.dll"
        "$homedrive\Windows\System32\polstore.dll"
        "$homedrive\Windows\System32\srchadmin.dll"
        "$homedrive\Windows\System32\tsworkspace.dll"
        "$homedrive\Windows\system32\domgmt.dll"
        "$homedrive\Windows\system32\gpprnext.dll"
        "AppManagementConfiguration.dll"
        "WorkFoldersGPExt.dll"
        "appmgmts.dll"
        "auditcse.dll"
        "dggpext.dll"
        "domgmt.dll"
        "dmenrollengine.dll"
        "dot3gpclnt.dll"
        "fdeploy.dll"
        "gptext.dll"
        "gpprefcl.dll"
        "gpscript.dll"
        "hvsigpext.dll"
        "pwlauncher.dll"
        "scecli.dll"
        "wlgpclnt.dll"
    )

    $path = "$regtarget_hklm`SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions"
    if (Test-Path -Path "Registry::$path") {
        $items = Get-ChildItem -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $data.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'DllName' -and $_.Value -notin $gpo_dll_allowlist) {
                    $detection = [PSCustomObject]@{
                        Name = 'Review: Non-Standard GPO Extension DLL'
                        Risk = 'Medium'
                        Source = 'Windows GPO Extensions'
                        Technique = "T1484.001: Domain Policy Modification: Group Policy Modification"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryValue = $_.Value
                            Hash = Get-File-Hash $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-HTMLHelpDLL {
    # Supports Drive Retargeting
    # TODO - Hash - need to double check format of file path in registry
    Write-Message "Checking HTML Help (.chm) DLL"
    $basepath = "HKEY_CURRENT_USER\Software\Microsoft\HtmlHelp Author"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -Path "Registry::$path") {
            $item = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $item.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'location'){
                    $detection = [PSCustomObject]@{
                        Name = 'Potential CHM DLL Hijack'
                        Risk = 'High'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                            Hash = Get-File-Hash $_.Value
                        }
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-RATS {
    # Supports Drive Retargeting

    # https://www.synacktiv.com/en/publications/legitimate-rats-a-comprehensive-forensic-analysis-of-the-usual-suspects.html
    # https://vikas-singh.notion.site/vikas-singh/Remote-Access-Software-Forensics-3e38d9a66ca0414ca9c882ad67f4f71b#183d1e94c9584aadbb13779bbe77f68e
    # https://support.solarwinds.com/SuccessCenter/s/article/Log-File-Locations-Adjustments-and-Diagnostics-for-DameWare?language=en_US
    # https://digitalforensicsdotblog.wordpress.com/tag/screenconnect/
    # https://docs.getscreen.me/faq/agent/
    # https://helpdesk.kaseya.com/hc/en-gb/articles/229009708-Live-Connect-Log-File-Locations
    # https://support.goto.com/resolve/help/where-do-i-find-goto-resolve-application-logs
    # https://support.radmin.com/index.php/Knowledgebase/Article/View/124/9/Radmin-Installation-Guide

    ##### TightVNC
    # -Log Files
    ##### UltraVNC
    # -Log Files
    ##### RealVNC
    # -Debug Logs - %ProgramData%\RealVBC-Service\vncserver.log
    ##### AmmyAdmin
    # -LogFiles
    ##### Remote
    ##### AnyDesk
    # -Log Files
    ##### TeamViewer
    # -Log Files
    # HKLM\SYSTEM\CurrentControlSet\Services\TeamViewer
    ##### NinjaOne
    ##### Zoho GoTo Assist/GoTo Resolve
    ##### Atera
    # https://support.atera.com/hc/en-us/articles/215955967-Troubleshoot-the-Atera-Agent-Windows-
    # HKEY_LOCAL_MACHINE\SOFTWARE\ATERA Networks\AlphaAgent
    # If Reg key exists, Agent was installed at one point
    # Also installs a service named 'AlteraAgent'
    ##### ConnectWise/ScreenConnect
    # https://blog.morphisec.com/connectwise-control-abused-again-to-deliver-zeppelin-ransomware
    # Installs service called "ScreenConnect Client"
    # C:\ProgramData\ScreenConnect Client (<string ID>)\user.config
    # C:\Windows\Temp\ScreenConnect\.*\
    ##### AnyScreen
    ##### RemotePC
    ##### BeyondTrust
    ##### Remote Desktop Manager
    ##### Getscreen
    ##### Action1
    ##### Webex
    ##### Atlassian
    ##### Surfly
    ##### Electric
    ##### Pulseway
    ##### Kaseya VSA
    ##### XMReality
    ##### SightCall
    ##### DameWare
    ##### ScreenMeet
    ##### Viewabo
    ##### ShowMyPC
    ##### Iperius
    ##### Radmin
    ##### Remote Utilities
    ##### RemoteToPC
    ##### LogMeIn
    Write-Message "Checking Common RAT Artifacts"

    $application_logpaths = @{
        "Action1 (Dir 1)" = "$env_homedrive\Windows\Action1"
        "Action1 (Log 1)" = "$env_homedrive\Windows\Action1\Action1_log_*.log"
        "AmmyAdmin (Log 1)" = "$env_programdata\AMMYY\access.log"
        "AmmyAdmin (Dir 1)" = "$env_programdata\AMMYY"
        "AnyDesk (Dir 1)" = "$env_programdata\AnyDesk"
        "AnyDesk (Dir 2)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\AnyDesk"
        "AnyDesk (Log 1)" = "$env_programdata\AnyDesk\ad.trace"
        "AnyDesk (Log 2)" = "$env_programdata\AnyDesk\connection_trace.txt"
        "AnyDesk (Log 3)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\AnyDesk\ad.trace"
        "AnyDesk (Log 4)" = "$env_programdata\AnyDesk\ad_svc.trace"
        "AnyDesk (Log 5)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\AnyDesk\*.conf"
        "AnyDesk (Reg 1)" = "Registry::{0}SYSTEM\*\Services\AnyDesk" -f $regtarget_hklm
        "AnyDesk (Reg 2)" = "Registry::{0}SOFTWARE\Clients\Media\AnyDesk" -f $regtarget_hklm
        "AnyScreen" = ""
        "Bomgar\BeyondTrust (Dir 1)" = "$env_homedrive\Program Files\Bomgar"
        "Bomgar\BeyondTrust (Dir 2)" = "$env_homedrive\Program Files (x86)\Bomgar"
        "Bomgar\BeyondTrust (Dir 3)" = "$env_programdata\BeyondTrust"
        "Atera\SplashTop (Log 1)" = "$env_homedrive\Program Files\ATERA Networks\AteraAgent\Packages\AgentPackageRunCommandInteractive\log.txt"
        "Atera\SplashTop (Log 2)" = "$env_homedrive\Program Files (x86)\Splashtop\Splashtop Remote\Server\log\*.txt"
        "Atera\SplashTop (Dir 1)" = "$env_homedrive\Program Files\ATERA Networks\AteraAgent"
        "Atera\SplashTop (Dir 2)" = "$env_homedrive\Program Files\ATERA Networks"
        "Atera\SplashTop (Dir 3)" = "$env_homedrive\Program Files (x86)\ATERA Networks"
        "Atera\SplashTop (Reg 1)" = "Registry::{0}SOFTWARE\Microsoft\Tracing\AteraAgent_RASAPI32" -f $regtarget_hklm
        "Atera\SplashTop (Reg 2)" = "Registry::{0}SOFTWARE\Microsoft\Tracing\AteraAgent_RASMANCS" -f $regtarget_hklm
        "Atera\SplashTop (Reg 3)" = "Registry::{0}SYSTEM\*\Services\EventLog\Application\AlphaAgent" -f $regtarget_hklm
        "Atera\SplashTop (Reg 4)" = "Registry::{0}SYSTEM\*\Services\EventLog\Application\AteraAgent" -f $regtarget_hklm
        "Atera\SplashTop (Reg 5)" = "Registry::{0}SYSTEM\*\Services\AteraAgent" -f $regtarget_hklm
        "Atera\SplashTop (Reg 6)" = "Registry::{0}SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Splashtop-Splashtop Streamer-Remote Session/Operational" -f $regtarget_hklm
        "Atera\SplashTop (Reg 7)" = "Registry::{0}SYSTEM\*\Services\SplashtopRemoteService" -f $regtarget_hklm
        "Atera\SplashTop (Reg 8)" = "Registry::{0}SYSTEM\*\Control\SafeBoot\Network\SplashtopRemoteService" -f $regtarget_hklm
        "Atera\SplashTop (Reg 9)" = "Registry::{0}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\Splashtop PDF Remote Printer" -f $regtarget_hklm
        "Atera\SplashTop (Reg 10)" = "Registry::{0}SOFTWARE\WOW6432Node\Splashtop Inc.\Splashtop Remote Server\ClientInfo" -f $regtarget_hklm
        "Citrix\GoToMyPC (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\GoTo"
        "Citrix\GoToMyPC (Log 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\GoTo\Logs\goto.log"
        "Citrix\GoToMyPC (Reg 1)" = "Registry::{0}SOFTWARE\WOW6432Node\Citrix\GoToMyPc" -f $regtarget_hklm
        "Citrix\GoToMyPC (Reg 2)" = "Registry::{0}SOFTWARE\Citrix\GoToMyPc\FileTransfer" -f $regtarget_hkcu
        "ConnectWise\ScreenConnect (Dir 1)" = "$env_programdata\ScreenConnect*"
        "ConnectWise\ScreenConnect (Dir 2)" = "$env_homedrive\Program Files (x86)\ScreenConnect*"
        "ConnectWise\ScreenConnect (Dir 3)" = "$env_homedrive\Program Files\ScreenConnect*"
        "ConnectWise\ScreenConnect (Dir 4)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\Temp\ScreenConnect*"
        "ConnectWise\ScreenConnect (Dir 5)" = "$env_homedrive\Windows\temp\ScreenConnect*"
        "ConnectWise\ScreenConnect (Dir 6)" = "$env_homedrive\Users\USER_REPLACE\Documents\ConnectWiseControl"
        "DameWare (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\temp\dwrrcc downloads"
        "DameWare (Dir 2)" = "$env_homedrive\Windows\dwrcs"
        "Dameware (Dir 3)" = "$env_programdata\DameWare"
        "DameWare (Dir 4)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\DameWare Development"
        "Dameware (Dir 5)" = "$env_programdata\DameWare Development"
        "GetScreen (Dir 1)" = "$env_homedrive\Program Files\Getscreen.me"
        "GetScreen (Dir 2)" = "$env_programdata\Getscreen.me"
        "Iperius (Dir 1)" = "$env_programdata\iperius*"
        "Iperius (Dir 2)" = "$env_homedrive\Program Files\iperius*"
        "Kaseya VSA (Dir 1)" = "$env_programdata\Kaseya*"
        "Kaseya VSA (Dir 2)" = "$env_homedrive\Program Files (x86)\Kaseya*"
        "Kaseya VSA (Dir 3)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\Kaseya*"
        "Level (Dir 1)" = "$env_homedrive\Program Files (x86)\Level"
        "Level (Dir 2)" = "$env_homedrive\Program Files\Level"
        "Level (Log 1)" = "$env_homedrive\Windows\Temp\level-windows-*"
        "LogMeIn (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\LogMeInIgnition*"
        "LogMeIn (Dir 2)" = "$env_homedrive\ProgramData\LogMeIn"
        "NinjaOne" = ""
        "Pulseway (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\Pulseway Remote Control"
        "Pulseway (Reg 1)" = "Registry::HKCU\Software\MMSOFT Design\Pulseway\Remote Desktop"
        "Pulseway (Reg 2)" = "Registry::{0}Software\MMSOFT Design\Pulseway\Remote Desktop" -f $regtarget_hklm
        "Radmin (Dir 1)" = "$env_homedrive\Program Files\Radmin*"
        "Radmin (Dir 2)" = "$env_homedrive\Program Files (x86)\Radmin*"
        "RealVNC (Dir 1)" = "$env_programdata\RealVBC-Service"
        "RealVNC (Log 1)" = "$env_programdata\RealVBC-Service\vncserver.log"
        "RealVNC (Log 2)" = "$env_programdata\RealVBC-Service\vncserver.log.bak"
        "Remote Desktop Manager (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\Devolutions\RemoteDesktopManager"
        "Remote Desktop Manager (Dir 2)" = "$env_homedrive\Program Files (x86)\Devolutions\Remote Desktop Manager"
        "Remote Desktop Manager (Dir 3)" = "$env_homedrive\Program Files\Devolutions\Remote Desktop Manager"
        "RemotePC (Dir 1)" = "$env_programdata\RemotePC*"
        "RemotePC (Dir 2)" = "$env_homedrive\Program Files (x86)\RemotePC*"
        "RemotePC (Dir 3)" = "$env_homedrive\Program Files\RemotePC*"
        "RemotePC (Dir 4)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\RemotePC*"
        "RemoteToPC (Dir 1)" = "$env_programdata\RemoteToPC*"
        "RemoteToPC (Dir 2)" = "$env_homedrive\Program Files (x86)\RemoteToPC*"
        "RemoteToPC (Dir 3)" = "$env_homedrive\Program Files\RemoteToPC*"
        "RemoteToPC (Dir 4)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\RemoteToPC*"
        "Remote Utilities (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\Remote Utilities Agent"
        "Remote Utilities (Dir 2)" = "$env_homedrive\Program Files (x86)\Remote Utilities*"
        "Remote Utilities (Dir 3)" = "$env_homedrive\Program Files\Remote Utilities*"
        "Remote Utilities (Dir 4)" = "$env_programdata\Remote Utilities*"
        "Remote Utilities (Dir 5)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\Remote Utilities Agent"
        "ScreenMeet (Dir 1)" = "$env_programdata\Projector Inc\ScreenMeet*"
        "ShowMyPC (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\Temp\ShowMyPC"
        "ShowMyPC (Dir 2)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\ShowMyPC"
        "SightCall" = ""
        "Surfly" = ""
        "Supremo (Dir 1)" = "$env_programdata\SupremoRemoteDesktop"
        "Syncro (Dir 1)" = "$env_programdata\Syncro"
        "Syncro (Dir 2)" = "$env_homedrive\Program Files\RepairTech\Syncro"
        "TightVNC (Log 1)" = "$env_homedrive\Windows\System32\config\systemprofile\AppData\Roaming\TightVNC\tvnserver.log"
        "TightVNC (Log 2)" = "$env_programdata\TightVNC\tvnserver.log"
        "TightVNC (Dir 1)" = "$env_programdata\TightVNC"
        "TeamViewer (Log 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\TeamViewer\Connections.txt"
        "TeamViewer (Log 2)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\Temp\TeamViewer\Connections_incoming.txt"
        "TeamViewer (Log 3)" = "$env_homedrive\Program Files\TeamViewer\Connections_incoming.txt"
        "TeamViewer (Log 4)" = "$env_homedrive\Program Files\TeamViewer\TeamViewer*_Logfile.log"
        "TeamViewer (Log 5)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\TeamViewer\Logs\TeamViewer*_Logfile.log"
        "TeamViewer (Log 6)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\TeamViewer\TeamViewer*_Logfile.log"
        "TeamViewer (Reg 1)" = "Registry::{0}SOFTWARE\TeamViewer" -f $regtarget_hklm
        "TeamViewer (Reg 2)" = "Registry::{0}SYSTEM\*\Services\TeamViewer" -f $regtarget_hklm
        #"TeamViewer (Reg 3)" = "Registry::{0}SYSTEM\ControlSet001\Services\TeamViewer" -f $regtarget_hklm
        "UltraVNC (Log 1)" = "$env_programdata\uvnc bvba\WinVNC.log"
        "UltraVNC (Log 2)" = "$env_programdata\uvnc bvba\mslogon.log"
        "UltraVNC (Dir 1)" = "$env_programdata\uvnc bvba"
        "UltraViewer (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Roaming\UltraViewer"
        "UltraViewer (Dir 2)" = "$env_homedrive\Program Files (x86)\Ultraviewer"
        "XMReality" = ""
        "Viewabo" = ""
        "XEOX (Dir 1)" = "$env_homedrive\Program Files\XEOX"
        "ZoHo Assist (Dir 1)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\ZohoMeeting"
        "ZoHo Assist (Dir 2)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\GoTo Resolve Applet"
        "ZoHo Assist (Dir 3)" = "$env_homedrive\Program Files (x86)\GoTo Resolve*"
        "ZoHo Assist (Dir 4)" = "$env_homedrive\Users\USER_REPLACE\AppData\Local\GoTo"
        "ZoHo Assist (Dir 5)" = "$env_programdata\ZohoMeeting"
    }
    if (Test-Path "$env_homedrive\Users")
    {
        $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object *
    } else {
        $profile_names = @()
        Write-Warning "[!] Could not find '$env_homedrive\Users'!"
    }


    foreach ($item in $application_logpaths.GetEnumerator()){
        $paths = @()
        $checked_path = $item.Value
        $rat_name = $item.Name
        if ($checked_path -eq ""){
            continue
        }
        if ($profile_names.Count -ne 0){
            foreach ($user in $profile_names){
                if ($checked_path -match ".*USER_REPLACE.*"){
                    $tmp = $checked_path.Replace("USER_REPLACE", $user.Name)
                    $paths += $tmp
                } elseif ($checked_path -match ".*HKCU.*"){
                    foreach ($p in $regtarget_hkcu_list){
                        $paths += $checked_path.Replace("HKCU", $p)
                    }
                    break
                } else{
                    $paths += $checked_path
                    break
                }
            }
        } else {
            if ($checked_path -match ".*HKCU.*")
            {
                foreach ($p in $regtarget_hkcu_list)
                {
                    $paths += $checked_path.Replace("HKCU", $p)
                }
            } else {
                $paths += $checked_path
            }
        }
        foreach ($tmppath in $paths){
            if(Test-Path $tmppath){
                $detection = [PSCustomObject]@{
                    Name = 'Remote Access Tool Artifact'
                    Risk = 'Medium'
                    Source = 'Software'
                    Technique = "T1219: Remote Access Software"
                    Meta = [PSCustomObject]@{
                        RemoteAccessTool = $rat_name
                        Location = $tmppath
                    }
                }
                Write-Detection $detection
                #Write-Host "Found RAT Artifact: $rat_name, Location: $checked_path"
            }
        }
    }
}

function Check-ContextMenu {
    # HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\{B7CDF620-DB73-44C0-8611-832B261A0107}
    # HKEY_USERS\S-1-5-21-63485881-451500365-4075260605-1001\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\{B7CDF620-DB73-44C0-8611-832B261A0107}
    # The general idea is that {B7CDF620-DB73-44C0-8611-832B261A0107} represents the Explorer context menu - we are scanning ALL ContextMenuHandlers for DLLs present in the (Default) property as opposed to a CLSID
    # https://ristbs.github.io/2023/02/15/hijack-explorer-context-menu-for-persistence-and-fun.html
    # Supports Drive Retargeting
    # TODO - Check ColumnHandlers, CopyHookHandlers, DragDropHandlers and PropertySheetHandlers in same key, HKLM\Software\Classes\*\shellex
    # TODO - Add Creation/Modified
    Write-Message "Checking Context Menu Handlers"

    $path = "$regtarget_hklm`SOFTWARE\Classes\*\shellex\ContextMenuHandlers"
    if (Test-Path -LiteralPath "Registry::$path") {
        $items = Get-ChildItem -LiteralPath "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -LiteralPath $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $data.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq '(Default)' -and $_.Value -match ".*\.dll.*") {
                    $detection = [PSCustomObject]@{
                        Name = 'DLL loaded in ContextMenuHandler'
                        Risk = 'Medium'
                        Source = 'Windows Context Menu'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryValue = $_.Value
                            Hash = Get-File-Hash $_.Value
                        }
                        Reference = "https://github.com/beahunt3r/Windows-Hunting/blob/master/Persistence/Registry%20Autoruns/Explorer"
                    }
                    Write-Detection $detection
                }
            }
        }
    }

    $basepath = "HKEY_CURRENT_USER\SOFTWARE\Classes\*\shellex\ContextMenuHandlers"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        if (Test-Path -LiteralPath "Registry::$path") {
            $items = Get-ChildItem -LiteralPath "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            foreach ($item in $items) {
                $path = "Registry::"+$item.Name
                $data = Get-ItemProperty -LiteralPath $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                $data.PSObject.Properties | ForEach-Object {
                    if ($_.Name -eq '(Default)' -and $_.Value -match ".*\.dll.*") {
                        $detection = [PSCustomObject]@{
                            Name = 'DLL loaded in ContextMenuHandler'
                            Risk = 'Medium'
                            Source = 'Windows Context Menu'
                            Technique = "T1546: Event Triggered Execution"
                            Meta = [PSCustomObject]@{
                                Location = $item.Name
                                EntryValue = $_.Value
                                Hash = Get-File-Hash $_.Value
                            }
                            Reference = "https://github.com/beahunt3r/Windows-Hunting/blob/master/Persistence/Registry%20Autoruns/Explorer"
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }

}

function Check-OfficeAI {
    # Supports Drive Retargeting
    # https://twitter.com/Laughing_Mantis/status/1645268114966470662
    Write-Message "Checking Office AI.exe Presence"
    $basepath = "$env_homedrive\Program Files\Microsoft Office\root\Office*"
    if (Test-Path $basepath){
        $path = "$env_homedrive\Program Files\Microsoft Office\root"
        $dirs = Get-ChildItem -Path $path -Directory -Filter "Office*" -ErrorAction SilentlyContinue
        foreach ($dir in $dirs){
            $ai = $dir.FullName+"\ai.exe"
            if (Test-Path $ai){
                $item = Get-Item -Path $ai -ErrorAction SilentlyContinue | Select-Object *
                $detection = [PSCustomObject]@{
                    Name = 'AI.exe in Office Directory'
                    Risk = 'Medium'
                    Source = 'Windows Context Menu'
                    Technique = "T1546: Event Triggered Execution"
                    Meta = [PSCustomObject]@{
                        Location = $item.FullName
                        Created = $item.CreationTime
                        Modified = $item.LastWriteTime
                        Hash = Get-File-Hash $item.FullName
                    }
                    Reference = "https://twitter.com/Laughing_Mantis/status/1645268114966470662"
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-Notepad++-Plugins {
    # https://pentestlab.blog/2022/02/14/persistence-notepad-plugins/
    # Supports Drive Retargeting
    Write-Message "Checking Notepad++ Plugins"
    $basepaths = @(
        "$env_homedrive\Program Files\Notepad++\plugins"
        "$env_homedrive\Program Files (x86)\Notepad++\plugins"
    )
    $allowlisted = @(
        ".*\\Config\\nppPluginList\.dll"
        ".*\\mimeTools\\mimeTools\.dll"
        ".*\\NppConverter\\NppConverter\.dll"
        ".*\\NppExport\\NppExport\.dll"
    )
    foreach ($basepath in $basepaths){
        if (Test-Path $basepath){
            $dlls = Get-ChildItem -Path $basepath -File -Filter "*.dll" -Recurse -ErrorAction SilentlyContinue
            foreach ($item in $dlls){
                $match = $false
                foreach ($allow_match in $allowlisted){
                    if ($item.FullName -match $allow_match){
                        $match = $true
                    }
                }
                if ($match -eq $false){
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Default Notepad++ Plugin DLL'
                        Risk = 'Medium'
                        Source = 'Notepad++'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $item.FullName
                            Created = $item.CreationTime
                            Modified = $item.LastWriteTime
                            Hash = Get-File-Hash $item.FullName
                        }
                        Reference = "https://pentestlab.blog/2022/02/14/persistence-notepad-plugins/"
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-MSDTCDll {
    # TODO - Hash file - slightly difficult since it's a combination of reg paths
    # https://pentestlab.blog/2020/03/04/persistence-dll-hijacking/
    Write-Message "Checking MSDTC DLL Hijack"
    $matches = @{
        "OracleOciLib" = "oci.dll"
        "OracleOciLibPath" = "$env_assumedhomedrive\Windows\system32"
        "OracleSqlLib" = "SQLLib80.dll"
        "OracleSqlLibPath" = "$env_assumedhomedrive\Windows\system32"
        "OracleXaLib" = "xa80.dll"
        "OracleXaLibPath" = "$env_assumedhomedrive\Windows\system32"
    }
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\MSDTC\MTxOCI"
    if (Test-Path -Path "Registry::$path") {
        $data = Get-ItemProperty -Path "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        $data.PSObject.Properties | ForEach-Object {
            if ($matches.ContainsKey($_.Name)){
                if ($_.Value -ne $matches[$_.Name]){
                    $detection = [PSCustomObject]@{
                        Name = 'MSDTC Key/Value Mismatch'
                        Risk = 'Medium'
                        Source = 'Windows MSDTC'
                        Technique = "T1574: Hijack Execution Flow"
                        Meta = [PSCustomObject]@{
                            Location = $path
                            EntryName = $_.Name
                            EntryValue = $_.Value
                            ExpectedValue = $matches[$_.Name]
                        }
                        Reference = "https://pentestlab.blog/2020/03/04/persistence-dll-hijacking/"
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-Narrator {
    # Supports Drive Retargeting
    # https://pentestlab.blog/2020/03/04/persistence-dll-hijacking/
    Write-Message "Checking Narrator MSTTSLocEnUS.dll Presence"
    $basepath = "$env_homedrive\Windows\System32\Speech\Engines\TTS\MSTTSLocEnUS.DLL"
    if (Test-Path $basepath){
        $item = Get-Item -Path $basepath -ErrorAction SilentlyContinue | Select-Object *
        $detection = [PSCustomObject]@{
            Name = 'Narrator Missing DLL is Present'
            Risk = 'Medium'
            Source = 'Windows Narrator'
            Technique = "T1546: Event Triggered Execution"
            Meta = [PSCustomObject]@{
                Location = $item.FullName
                Created = $item.CreationTime
                Modified = $item.LastWriteTime
                Hash = Get-File-Hash $item.FullName
            }
            Reference = "https://pentestlab.blog/2020/03/04/persistence-dll-hijacking/"
        }
        Write-Detection $detection
    }
}

function Check-Suspicious-File-Locations {
    Write-Message "Checking Suspicious File Locations"
    $recursive_paths_to_check = @(
        "$env_homedrive\Users\Public"
        "$env_homedrive\Users\Administrator"
        "$env_homedrive\Users\Guest"
        "$env_homedrive\Windows\temp"
    )
    foreach ($path in $recursive_paths_to_check){
        $items = Get-ChildItem -Path $path -Recurse -ErrorAction SilentlyContinue -Include $suspicious_extensions
        foreach ($item in $items){
            $detection = [PSCustomObject]@{
                Name = 'Anomalous File in Suspicious Location'
                Risk = 'High'
                Source = 'Windows'
                Technique = "N/A"
                Meta = [PSCustomObject]@{
                    Location = $item.FullName
                    Created = $item.CreationTime
                    Modified = $item.LastWriteTime
                    Hash = Get-File-Hash $item.FullName
                }
            }
            Write-Detection $detection
        }
    }
}

function Check-BootVerificationProgram {
    # Supports Drive Retargeting
    Write-Message "Checking BootVerificationProgram"
    $path = "Registry::$regtarget_hklm`SYSTEM\CurrentControlSet\Control\BootVerificationProgram"
    if (Test-Path -Path $path) {
        $data = Get-ItemProperty -Path $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        if ($data.ImagePath -ne $null){
            $detection = [PSCustomObject]@{
                Name = 'BootVerificationProgram will launch associated program as a service on startup.'
                Risk = 'High'
                Source = 'Registry'
                Technique = "T1112: Modify Registry"
                Meta = [PSCustomObject]@{
                    Location = $path
                    EntryName = $data.ImagePath
                    Hash = Get-File-Hash $data.ImagePath
                }
                Reference = "https://github.com/persistence-info/persistence-info.github.io/blob/main/Data/bootverificationprogram.md"
            }
            Write-Detection $detection
        }
    }
}

function Check-DiskCleanupHandlers {
    # Supports Drive Retargeting
    Write-Message "Checking DiskCleanupHandlers"
    $default_cleanup_handlers = @(
        "C:\Windows\System32\DATACLEN.DLL",
        "C:\Windows\System32\PeerDistCleaner.dll",
        "C:\Windows\System32\D3DSCache.dll",
        "C:\Windows\system32\domgmt.dll",
        "C:\Windows\System32\pnpclean.dll",
        "C:\Windows\System32\occache.dll",
        "C:\Windows\System32\ieframe.dll",
        "C:\Windows\System32\LanguagePackDiskCleanup.dll",
        "C:\Windows\system32\setupcln.dll",
        "C:\Windows\system32\shell32.dll",
        "C:\Windows\system32\wmp.dll",
        "C:\Windows\System32\thumbcache.dll",
        "C:\Windows\system32\scavengeui.dll",
        "C:\Windows\System32\fhcleanup.dll"
    )
    $path = "$regtarget_hklm`SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\"
    if (Test-Path -LiteralPath "Registry::$path") {
        $items = Get-ChildItem -LiteralPath "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -LiteralPath $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $data.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq '(Default)') {
                    $target_prog = ''
                    $tmp_path = "$regtarget_hkcr`CLSID\$($_.Value)\InProcServer32"
                    if (Test-Path -LiteralPath "Registry::$tmp_path"){
                        $data_tmp = Get-ItemProperty -LiteralPath "Registry::$tmp_path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
                        $data_tmp.PSObject.Properties | ForEach-Object {
                            if ($_.Name -eq '(Default)'){
                                $target_prog = $_.Value
                            }
                        }
                    }
                    if ($target_prog -in $default_cleanup_handlers){
                        continue
                    }
                    $detection = [PSCustomObject]@{
                        Name = 'Non-Default DiskCleanupHandler Program'
                        Risk = 'Low'
                        Source = 'Registry'
                        Technique = "T1546: Event Triggered Execution"
                        Meta = [PSCustomObject]@{
                            Location = $item.Name
                            EntryName = $target_prog
                            Hash = Get-File-Hash $target_prog
                        }
                        Reference = "https://github.com/persistence-info/persistence-info.github.io/blob/main/Data/diskcleanuphandler.md"
                    }
                    Write-Detection $detection
                }
            }
        }
    }
}

function Check-DirectoryServicesRestoreMode {
    # Supports Retargeting
    Write-Message "Checking DirectoryServicesRestoreMode"
    $path = "$regtarget_hklm`System\CurrentControlSet\Control\Lsa"
    $path = "Registry::"+$path
    $data = Get-ItemProperty -LiteralPath $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
    $data.PSObject.Properties | ForEach-Object {
        if ($_.Name -eq 'DsrmAdminLogonBehavior' -and $_.Value -eq 2) {
            $detection = [PSCustomObject]@{
                Name = 'DirectoryServicesRestoreMode LocalAdmin Backdoor Enabled'
                Risk = 'High'
                Source = 'Registry'
                Technique = "T1003.003: OS Credential Dumping"
                Meta = [PSCustomObject]@{
                    Location = $path
                    EntryName = $_.Name
                    EntryValue = $_.Value
                }
                Reference = "https://adsecurity.org/?p=1785"
            }
            Write-Detection $detection
        }
    }
}

function Check-DisableLowILProcessIsolation {
    # Supports Drive Retargeting
    Write-Message "Checking for COM Objects running without Low Integrity Isolation"
    $path = "$regtarget_hklm`Software\Classes\CLSID"
    $allowlist = @(
        "@C:\\Program Files\\Microsoft Office\\Root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Office16\\oregres\.dll.*"
        "@wmploc\.dll.*"
        "@C:\\Windows\\system32\\mssvp\.dll.*"
        "@C:\\Program Files\\Common Files\\System\\wab32res\.dll.*"
    )
    if (Test-Path -LiteralPath "Registry::$path") {
        $items = Get-ChildItem -LiteralPath "Registry::$path" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            $path = "Registry::"+$item.Name
            $data = Get-ItemProperty -LiteralPath $path | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
            $data.PSObject.Properties | ForEach-Object {
                if ($_.Name -eq 'DisableLowILProcessIsolation' -and $_.Value -eq 1) {
                    if ($data.DisplayName){
                        $displayname =  $data.DisplayName
                    } else {
                        $displayname = ""
                    }
                    $pass = $false
                    foreach ($allow in $allowlist){
                        if ($displayname -match $allow){
                            $pass = $true
                            break
                        }
                    }
                    if ($pass -eq $false){
                        $detection = [PSCustomObject]@{
                            Name = 'COM Object Registered with flag disabling low-integrity process isolation'
                            Risk = 'Medium'
                            Source = 'Registry'
                            Technique = "T1546: Event Triggered Execution"
                            Meta = [PSCustomObject]@{
                                Location = $item.Name
                                EntryName = $displayname
                            }
                            Reference = "https://medium.com/@matterpreter/life-is-pane-persistence-via-preview-handlers-3c0216c5ef9e-b73a9515c9a8"
                        }
                        Write-Detection $detection
                    }
                }
            }
        }
    }
}

function Check-ServiceControlManagerSD {
    Write-Message "Checking Security Descriptor for Service Control Manager"
    # https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
    $default = 'D:(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)(A;;CC;;;AC)(A;;CC;;;S-1-15-3-1024-528118966-3876874398-709513571-1907873084-3598227634-3698730060-278077788-3990600205)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)'
    $current = (sc.exe sdshow scmanager) -join ''

    if ($default -ne $current)
    {
        $detection = [PSCustomObject]@{
            Name = 'Service Control Manager has non-default Security Descriptor'
            Risk = 'High'
            Source = 'Windows'
            Technique = "T1098: Account Manipulation"
            Meta = [PSCustomObject]@{
                EntryValue = $current
                ExpectedValue = $default
            }
            Reference = "https://pentestlab.blog/2023/03/20/persistence-service-control-manager"
        }
        Write-Detection $detection
    }
}

function Check-InstalledSoftware {
    <#
    .SYNOPSIS
        Retrieves all installed software across HKLM/HKCU by checking Uninstall entries and compares to a list of 'known-suspicious' terms that represent many types of software such as RMM, File/Transfer, etc.
    #>
    Write-Message "Checking Installed Software"
    $installedApps = New-Object System.Collections.Generic.List[System.Object]
    Get-ChildItem "Registry::$regtarget_hklm`Software\Microsoft\Windows\CurrentVersion\Uninstall" | ForEach-Object {$installedApps.Add($_)}
    $basepath = "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall"
    foreach ($p in $regtarget_hkcu_list){
        $path = $basepath.Replace("HKEY_CURRENT_USER", $p)
        $items = Get-ChildItem $path
        foreach ($i in $items){
            $installedApps.Add($i) | Out-Null
        }
    }
    # Sometimes there are weird dates in here - for example, 20222019 - this does not match any 'standard' date formats since the month is indicated as '20'

    $softwareList = New-Object System.Collections.Generic.List[System.Object]
    [string[]] $formats = 'yyyyMMdd', 'yyyyMdd', 'yyyyMMd', 'yyyyMd'
    foreach ($app in $installedApps){
        $date = ""
        if ($app.GetValue('InstallDate') -ne $null){
            if ($app.GetValue('InstallDate').Trim() -ne "") {
                try {
                    $date = [datetime]::parseexact($app.GetValue('InstallDate'), $formats, [cultureinfo]::InvariantCulture, [System.Globalization.DateTimeStyles]::None)
                } catch {
                    $date = $app.GetValue('InstallDate').Trim()
                }
            }
        }

        $tmp = [PSCustomObject]@{
            DisplayName = $app.GetValue('DisplayName')
            InstallDate = $date
            InstallLocation = $app.GetValue('InstallLocation')
            Publisher = $app.GetValue('Publisher')
        }
        if (-not $softwareList.contains($tmp)) {
            $softwareList.Add($tmp) | Out-Null
        }
    }

    foreach ($app in $softwareList){
        foreach ($check in $suspicious_software){
            if (($app.DisplayName -imatch $check) -or ($app.Publisher -imatch $check)){
                $detection = [PSCustomObject]@{
                    Name = 'Suspicious Software Installed'
                    Risk = 'Medium'
                    Source = 'Registry'
                    Technique = "T1543: Create or Modify System Process"
                    Meta = [PSCustomObject]@{
                        Location = $app.InstallLocation
                        Created = $app.InstallDate
                        Publisher = $app.Publisher
                        EntryValue = $app.DisplayName
                        SuspiciousEntry = $check
                    }
                }
                Write-Detection $detection
            }
        }
    }
}

function Check-WSL {
    <#
    .SYNOPSIS
        Checks all installed WSL Virtual Machines and presents them for review, with an escalated risk if one is currently runnig
    #>
    Write-Message "Checking WSL"
    # This is some ugly code and I really do not like this implementation..but it works.
    # TODO - Check when wsl instance was created
    $output =  (wsl -l -v) -replace '\x00'
    if (-not ($output[0].Trim().StartsWith("NAME"))){
        Write-Host "WSL ERROR"
        return
    }
    foreach ($line in $output) {
        $line = $line.Trim()
        $line = $line.Trim("*")
        $line = $line.Trim()
        if ($line -eq "" -or $line.StartsWith("NAME")){
            continue
        }
        $data = $line.Split(" ")
        $components = @()
        foreach ($val in $data){
            $val = $val.Trim()
            if ($val -eq ""){
                continue
            }
            $components += $val

        }
        if ($components.Count -eq 3){
            $distro = $components[0]
            $status = $components[1]
            $version = $components[2]
            $detection = [PSCustomObject]@{
                Name = 'WSL Virtual Machine Exists'
                Risk = 'Low'
                Source = 'WSL'
                Technique = "T1564.006: Hide Artifacts: Run Virtual Instance"
                Meta = [PSCustomObject]@{
                    EntryName = $distro
                    Status = $status
                }
            }
            if ($status -eq "Running"){
                $detection.Name = "Running WSL Virtual Machine"
                $detection.Risk = "Medium"
                Write-Detection $detection
            } else {
                $detection.Name = "WSL Virtual Machine Existence"
                $detection.Risk = "Low"
                Write-Detection $detection
            }
        }

    }

}

function Check-ChromiumExtensions {
    <#
    .SYNOPSIS
        Attempts to check installed Chrome Extensions for suspicious keywords, high-risk permissions or permissions on specific high-risk domains
    #>

    # Reference: https://storage.googleapis.com/support-kms-prod/H67pelgBrKlKSgvA24ooNwVYYx6emmcuJ0LD
    # TODO - JavaScript content analysis
    # TODO - Hashing of extensions
    # TODO - Extension datetime created

    $critical_risk_hosts = @(
        "http://\*/\*"
        "https://\*/\*"
        "ftp://\*/\*"
        "sftp://\*/\*"
    )

    $dangerous_permission_website = @(
        "ally"
        "capitalone"
        "chase"
        "bankofamerica"
        "wellsfargo"
        "citibank"
        "pnc"
        "usbank"
        "bbva"
        "suntrust"
        "truist"
        "regions"
        "key"
        "hsbc"
        "santander"
        "firstrepublic"
        "chime"
        "simple"
        "aspiration"
        "n26"
        "varomoney"
        "revolut"
        "sofi"
        "paypal"
        "venmo"
        "zellepay"
        "square"
        "stripe"
        "cash"
        "apple"
        "google"
        "wise"
        "dwolla"
        "robinhood"
        "etrade"
        "fidelity"
        "schwab"
        "tdameritrade"
        "vanguard"
        "merrilledge"
        "webull"
        "acorns"
        "betterment"
        "stash"
        "motifinvesting"
        "etrade"
        "coinbase"
        "binance"
        "kraken"
        "gemini"
        "bitstamp"
        "bittrex"
        "huobi"
        "kucoin"
        "crypto"
        "experian"
        "equifax"
        "transunion"
        "creditkarma"
        "creditsesame"
        "toasttab"
        "klarna"
        "affirm"
        "plaid"
        "nerdwallet"
        "lendingclub"
        "prosper"
        "upgrade"
        "kabbage"
        "point"
        "statefram"
        "geico"
        "progressive"
        "allstate"
        "metlife"
        "mint"
        "ynab"
    )

    $high_risk_permissions = @{
        "app.window.fullscreen.overrideEsc" = "Can prevent escape button from exiting fullscreen"
        "browsingData" = "Clears browsing data which could result in a forensics/logging issues"
        "content_security_policy" = "Can manipulate default CSP"
        "contentSettings" = "Could allow plugins to run unsandboxed"
        "debugger" = "Provides high level super user access"
        "declarativeNetRequest" = "API is used to block or redirect network requests by specifying declarative rules"
        "declarativeWebRequest" = "API to intercept, block, or modify requests in-flight."
        "experimental" = "Access to any of the experimental APIs"
        "history" = "Full history (read, add, delete)"
        "nativeMessaging" = "Allows native (Win, Linux, Mac) programs that register with chrome to talk with extensions"
        "pageCapture" = "Gets MHTML (archived Web page) of any page"
        "privacy" = "Can turn off malware protections (e.g. chrome.privacy.services.safeBrowsingEnabled)"
        "proxy" = "Manage Chrome's proxy settings. Can be used to send user’s internet traffic"
        "tabCapture" = "Get picture/video of user’s current tab"
        "tabs" = "Can access current URLs and favicons"
        "videoCapture" = "Extension can use webcam, possibly screen contents depending on settings"
        "vpnProvider" = "Extension can create a VPN tunnel and send/receive packets through it, across sessions"
        "web_accessible_resources" = "This can be used to execute remote scripts."
        "webNavigation" = "Listen to the websites that a user visits"
    }

    $critical_risk_permissions = @{
        # TODO - Fix lookup bug on <all_urls>
        "<all_urls>" = "The extension wants to interact with the code running on pages which matches any URL that starts with a permitted scheme (http:, https:, file:, ftp:, or chrome-extension)."
        "audioCapture" = "Capture audio from attached mic or webcam. Could be used to listen in on user"
        "copresence" = "P2P communication"
        "downloads" = "Programmatically initiate, monitor, manipulate, and search for downloads. Can be used to download scripts."
        "downloads.open" = "Allows an extension to open a downloaded file; as above, can be used to run a downloaded script."
        "hid" = "Access USB devices (can act as driver)"
        "socket" = "Raw TCP/UDP connection, listen on a port, etc."
        "unsafe-eval" = "Can be used to fetch and execute remote script"
        "usb" = "Interact with any USB device (Raw Format)"
        "usbDevices" = "Used in conjunction with USB permission to specify the types of USB devices the extension wants access to"
        "*://*/*" = "Extension wants to interact with the code running on pages which matches any URL that uses the https: or http: scheme"
        "://*" = "Extension wants to interact with the code running on pages which matches any URL that uses the https: or http: scheme"
        "http://*/*" = "Extension wants to interact with the code running on pages which matches any URL that uses the https: or http: scheme"
        "https://*/*" = "Extension wants to interact with the code running on pages which matches any URL that uses the https: or http: scheme"
    }

    $basepath = "$env_assumedhome\Users\*\AppData\Local\*\*\User Data\Default\Extensions"
    #$basepath2 = "$env_assumedhome\Users\*\AppData\Local\Microsoft\Edge\User Data\Default\Extensions"
    $paths = Get-ChildItem -Path $basepath
    $extension_paths = New-Object System.Collections.ArrayList
    foreach ($path in $paths){
        $user = ""
        if ($path -match "Users\\(?<user>.*)\\AppData"){
            $user = $Matches.user
        }
        $extension_dirs = Get-ChildItem -Path $path -ErrorAction SilentlyContinue
        foreach ($extension_dir in $extension_dirs){
            $extension_paths.Add($extension_dir.FullName) | Out-Null
        }
    }

    foreach ($extension_path in $extension_paths){
        $manifest_file = Get-ChildItem -Path $extension_path -Filter "manifest.json" -Recurse -File
        if ($manifest_file.Count -eq 0){
            continue
        }
        $extension_string = Get-Content -Path $manifest_file[0].FullName -Raw |  ConvertFrom-Json
        $extension_data = Parse-ExtensionManifest $extension_string $manifest_file[0]
        $very_high_risk_found = $false
        $high_risk_found = $false
        $med_risk_found = $false
        #[regex]::Escape($k)
        $extension_risky_permissions = New-Object System.Collections.ArrayList
        foreach ($permission in $extension_data.permissions){
            foreach ($k in $high_risk_permissions.Keys){
                if ($permission -eq $k){
                    $tmp = [PSCustomObject]@{
                        "Permission" = $k
                        "Reason" = $high_risk_permissions[$k]
                        "Risk" = "High"
                    }
                    $extension_risky_permissions.Add($tmp) | Out-Null
                }
            }
            foreach ($k in $critical_risk_permissions.Keys){
                if ($permission -eq $k){
                    $tmp = [PSCustomObject]@{
                        "Permission" = $k
                        "Reason" = $high_risk_permissions[$k]
                        "Risk" = "Very High"
                    }
                    $extension_risky_permissions.Add($tmp) | Out-Null
                    $very_high_risk_found = $true
                }
            }
        }

        $extension_risky_hosts = New-Object System.Collections.ArrayList
        foreach ($term in $extension_data.host_permissions){
            foreach ($k in $dangerous_permission_website){
                if ($term -match $k){
                    $tmp = [PSCustomObject]@{
                        "Host" = $term
                        "Reason" = "Access to a high-risk domain"
                        "Risk" = "High"
                        "SuspiciousEntry" = $k
                    }
                    $extension_risky_hosts.Add($tmp) | Out-Null
                }
            }
            foreach ($k in $critical_risk_hosts){
                if ($term -match $k){
                    $tmp = [PSCustomObject]@{
                        "Host" = $term
                        "Reason" = "Access to a very high-risk domain"
                        "Risk" = "Very High"
                        "SuspiciousEntry" = $k
                    }
                    $very_high_risk_found = $true
                    $extension_risky_hosts.Add($tmp) | Out-Null
                }
            }
        }


        # TODO - Other Less-Risky Permissions

        $permission_detection = [PSCustomObject]@{
            Name = 'Potentially Suspicious Browser Extension'
            Risk = 'High'
            Source = 'Chrome'
            Technique = "T1176: Browser Extensions"
            Reference = "https://support.google.com/chrome/a/answer/9897812?hl=en"
            Meta = [PSCustomObject]@{
                Location = $manifest_file[0].FullName
                EntryName = $extension_data.name
                ExtensionMetadata = [PSCustomObject]@{
                    BackgroundScripts = $extension_data.background_scripts
                    ManifestVersion = $extension_data.manifest_version
                    Name = $extension_data.name
                    Description = $extension_data.description
                    OAuthAutoApprove = $extension_data.oauth_autoapprove
                    OAuthClientID = $extension_data.oauth_client_id
                    OAuthScopes = $extension_data.oauth_scopes
                    Permissions = $extension_data.permissions
                    HostPermissions = $extension_data.host_permissions
                    UpdateURL = $extension_data.update_url
                    Version = $extension_data.version
                }
                RiskyPermissions = $extension_risky_permissions
                RiskyHosts = $extension_risky_hosts
            }
        }

        if ($very_high_risk_found){
            $permission_detection.Risk = "Very High"
        }

        if (($extension_risky_permissions.Count -ne 0) -or ($extension_risky_hosts.Count -ne 0)){
            Write-Detection $permission_detection
        }
    }
}

function Parse-ExtensionManifest ($manifest_json, $extension_dir){
    <#
    .SYNOPSIS
        Receives a PowerShell object representing the JSON conversion of a Browser Extension Manifest file and attempts to return a more neatly formatted PowerShell object
    #>
    if ($manifest_json.app.background.scripts){
        $background_scripts = $manifest_json.app.background.scripts -Join ","
    } else {
        $background_scripts = ""
    }
    if ($manifest_json.background.service_worker){
        $service_worker = $manifest_json.background.service_worker
    } else {
        $service_worker = ""
    }
    if ($manifest_json.manifest_version){
        $manifest_version = $manifest_json.manifest_version
    } else {
        $manifest_version = ""
    }
    if ($manifest_json.name){
        $name = $manifest_json.name
    } else {
        $name = ""
    }
    if ($manifest_json.description){
        $description = $manifest_json.description
    } else {
        $description = ""
    }
    if ($manifest_json.oauth2.auto_approve){
        $oauth_autoapprove = $manifest_json.oauth2.auto_approve
    } else {
        $oauth_autoapprove = ""
    }
    if ($manifest_json.oauth2.client_id){
        $oauth_client_id = $manifest_json.oauth2.client_id
    } else {
        $oauth_client_id = ""
    }
    if ($manifest_json.oauth2.scopes){
        $oauth_scopes = $manifest_json.oauth2.scopes -Join ","
    } else {
        $oauth_scopes = ""
    }
    if ($manifest_json.permissions){
        $permissions = $manifest_json.permissions -Join ","
    } else {
        $permissions = ""
    }
    if ($manifest_json.host_permissions){
        $host_permissions = $manifest_json.host_permissions -Join ","
    } else {
        $host_permissions = ""
    }
    if ($manifest_json.update_url){
        $update_url = $manifest_json.update_url
    } else {
        $update_url = ""
    }
    if ($manifest_json.version){
        $version = $manifest_json.version
    } else {
        $version = ""
    }

    # For extensions with a specified locale, we must parse the locale folder to get at true data
    # "If an extension has a /_locales directory, the manifest must define "default_locale"."
    # So first we check if _locales exists

    $locales_dir = "$($extension_dir.DirectoryName)\_locales"
    $locales_exists = Test-Path $locales_dir
    if ($locales_exists){
        # If it exists, then check default_locale in the JSON
        if ($manifest_json.default_locale){
            Write-Host $manifest_json.default_locale
            # Then we check if the default locale actually is specified and use that to replace vars
            $default_locale_file = "$locales_dir\$($manifest_json.default_locale)\messages.json"
            if (Test-Path $default_locale_file){
                $locale_data = Get-Content -Path $default_locale_file -Raw |  ConvertFrom-Json
                if ($locale_data.extDesc.message){
                    $description = $locale_data.extDesc.message
                } elseif ($locale_data.extensionDescription.message){
                    $description = $locale_data.extensionDescription.message
                }
                if ($locale_data.extName.message){
                    $name = $locale_data.extName.message
                } elseif ($locale_data.extensionName.message){
                    $name = $locale_data.extensionName.message
                }
            } else {
                # try to use en otherwise or en_US depending?
            }
        }
    }

    $tmp = [PSCustomObject]@{
        background_scripts = $background_scripts
        manifest_version = $manifest_version
        name = $name
        description = $description
        oauth_autoapprove = $oauth_autoapprove
        oauth_client_id = $oauth_client_id
        oauth_scopes = $oauth_scopes
        permissions = $permissions -split ","
        host_permissions = $host_permissions -split ","
        update_url = $update_url
        version = $version
    }
    return $tmp
}

function Get-File-Hash($file){
    <#
    .SYNOPSIS
        Receives a path to a file as a string, validates the path exists and uses the globally-defined HashMode to return either an MD5, SHA1 or SHA256 hash.
    #>
    # Path
    # %SystemRoot%\system32 ([System.Environment]::SystemDirectory)
    # %SystemRoot%
    $file = $file.Trim()
    $file = $file.Trim("`"")
    $file = $file.Trim("\")
    $file = $file.Trim("?")
    $file = $file.Trim("\")

    if ($file -eq ""){
        return "Invalid File Path"
    }

    if ($file.StartsWith("system32")) {
        $file = $file -replace "system32",[System.Environment]::SystemDirectory
    }

    if ($file.Contains("<") -or $file.Contains(">") -or $file.Contains("`"") -or $file.Contains("/") -or $file.Contains("|") -or $file.Contains("?") -or $file.Contains("*")) {
        return "Invalid File Path"
    }


    $filepath = ""
    $filefound = $false
    if (Test-Path $file -PathType Leaf) {
        $filepath = $file
        $filefound = $true
    } elseif ($file.Contains(":")) {
        return "Invalid File Path"
    } elseif (Test-Path $(Join-Path -Path ([System.Environment]::SystemDirectory) -ChildPath $file) -PathType Leaf) {
        # check if in system32
        $filepath = $(Join-Path -Path ([System.Environment]::SystemDirectory) -ChildPath $file)
        $filefound = $true
    } elseif (Test-Path $(Join-Path -Path ([Environment]::GetFolderPath("Windows")) -ChildPath $file) -PathType Leaf) {
        # check if in windows
        $filepath = $(Join-Path -Path ([Environment]::GetFolderPath("Windows")) -ChildPath $file)
        $filefound = $true
    } else {
        # Check all dirs in path to see if it exists
        $paths = $env:Path -split ";"
        foreach ($p in $paths){
            $p = $p.Trim()
            if ($p -eq ""){
                continue
            }
            $test = $(Join-Path -Path $p -ChildPath $file)
            if (Test-Path $test -PathType Leaf){
                $filepath = $test
                $filefound = $true
                break
            }
        }
    }

    if (-not $filefound){
        return "File Not Found"
    }

    try {
        # Couldn't find initial
        $hash = Get-FileHash -Algorithm $HashMode -Path $file
        return $hash.Hash
    } catch {
        return "Access Error"
    }
    return "Hashing Error"
}

function Format-MetadataToString($detectionmeta) {
    <#
    .SYNOPSIS
        Receives an object representing the metadata of a specific detection and formats this to a more human-readable string for u se in CSV/Console output
    #>
	$output = ""
    $propertyCount = ($detectionmeta|Get-Member -Type NoteProperty).count
    $index = 1
    foreach ($prop in $detectionmeta.PSObject.Properties) {
        if ($index -eq $propertyCount){
            $output += "$($prop.Name): $($prop.Value)"
        } else {
            $output += "$($prop.Name): $($prop.Value), "
        }
        $index += 1
    }
	return $output
}

function Write-Detection($det) {
    <#
    .SYNOPSIS
        Receives a 'Detection' - a PowerShell custom object containing specific fields - writes this to Console, EventLog, CSV and a global array for storage depending on specified options.
    #>

	# det is a custom object which will contain various pieces of metadata for the detection
	# Name - The name of the detection logic.
	# Risk (Very Low, Low, Medium, High, Very High)
	# Source - The source 'module' reporting the detection
	# Technique - The most relevant MITRE Technique
	# Meta - Embedded object containing reference material specific to the received detection

    # Validate core fields
    $core_fields = @("Name","Risk","Source","Technique","Meta")
    foreach ($field in $core_fields){
        if (-not $($det.PSobject.Properties.Name -contains $field)) {
            Write-Reportable-Issue "Detection Missing '$field' Field! [$det]"
            $det.$($field) = "Error"
            # We will not return for now as there still may be useful information but this is a critical issue
        }
    }

    if (-not (@("Very Low", "Low", "Medium", "High", "Very High") -contains $det.Risk)){
        Write-Reportable-Issue "Detection has invalid Risk Value: $($det.Risk)"
    }

    # Before anything else, we find all datetime objects within the Meta field of a detection and generate a corresponding UTC timestamp so consumers can use either-or
    if ($det.PSobject.Properties.Name -contains "Meta"){
        $det.Meta.PSObject.Properties | ForEach-Object {
            if ($_.Value -is [datetime]) {
                $tmp = $_.Value
                $det.Meta.$($_.Name) = Format-Datetime $tmp $false
                $det.Meta | Add-Member -NotePropertyName "$($_.Name)_UTC" -NotePropertyValue $(Format-Datetime $tmp $true)
            }
        }
    }

    # If there is no reference, just set it as "N/A" for now
    if (-not $($det.PSobject.Properties.Name -contains "Reference")){
        $det | Add-Member -MemberType NoteProperty -Name Reference -Value "N/A"
    }

    # Then we do a hash of the detection to determine if it exists in a snapshot - if we are using snapshot and it exists, skip, else, keep going
    $should_we_skip = Check-DetectionInSnapshot($det)
    if ($should_we_skip){
        $script:suppressed_detections += 1
        return
    }

    $det | Add-Member -MemberType NoteProperty -Name PSComputerName -Value $env:COMPUTERNAME

	$detection_list.Add($det) | Out-Null

	switch ($det.Risk) {
		"Very Low" { $fg_color = "Green" }
		"Low" { $fg_color = "Green" }
		"Medium" { $fg_color = "Yellow" }
		"High" { $fg_color = "Red" }
		"Very High" { $fg_color = "Magenta" }
		Default { $fg_color = "Yellow" }
	}

    # Console Output
	if (-not($Quiet)) {
		Write-Host "[!] Detection: $($det.Name) - Risk: $($det.Risk)" -ForegroundColor $fg_color
		Write-Host "[%] $(Format-MetadataToString($det.Meta))" -ForegroundColor White
	}


}

function Check-DetectionInSnapshot($detection){
    <#
    .SYNOPSIS
        Receives a detection and checks if it exists in the snapshow allow-list - if so, return $true, else or if we are not using snapshot, return $false
    #>
    # First we check if we are even using a snapshot - if no, then immediately return
    if (-not $snapshot){
        return $false
    }

    # Return the hash representation of the current detection
    $prepared_detection = Prepare-DetectionForHash $detection
    $jsondetection = $prepared_detection | ConvertTo-Json
    $detection_hash = Get-HashOfString $jsondetection
    $detection_hash # for some reason, this only works when this is here - I have no idea why right now.
    # Check if this already exists in our hash array of the loaded detection snapshot
    if ($detection_hash_array_snapshot -contains $detection_hash) {
        return $true
    } else {
        return $false
    }
}

function Prepare-DetectionForHash ($detection){
    <#
    .SYNOPSIS
        Receives a detection and removes any allow-listed fields from specific detections to improve the fidelity of allow-listing.
    #>
    if ($detection.Name -eq "Established Connection on Suspicious Port"){
        $detection.Meta.PSObject.Properties.Remove('LocalAddress')
        $detection.Meta.PSObject.Properties.Remove('LocalPort')
        $detection.Meta.PSObject.Properties.Remove('PID')
    }

    return $detection
}

function Load-DetectionSnapshot {
    <#
    .SYNOPSIS
        Checks if provided snapshot file is valid and reads the content in order to prepare a list of hashes that represent 'allowed' detections.
    #>
    Write-Message "Reading Snapshot File: $snapshot"
    if (-not (Test-Path -Path $snapshot)){
        Write-Message "Error - Could not find specified snapshot file: $snapshot"
        return
    }

    $snapshot_detection_count = 0
    $json = Get-Content $snapshot | Out-String | ConvertFrom-Json
    foreach ($det in $json){
        $detection_prepared = Prepare-DetectionForHash($det)
        $detection_hash = Get-HashOfString $($detection_prepared | ConvertTo-Json)
        $detection_hash_array_snapshot.Add($detection_hash) | Out-Null
        $snapshot_detection_count += 1
    }
    Write-Message "Loaded $snapshot_detection_count Allowed Detections from Snapshot: $snapshot"

}

function Get-HashOfString($string){
    <#
    .SYNOPSIS
        Receives a string and converts it to a hash-representation, emitting the resulting hash
    #>
    $stream = [System.IO.MemoryStream]::new()
    $w = [System.IO.StreamWriter]::new($stream)
    $w.write($string)
    $w.Flush()
    $stream.Position = 0
    $hash = Get-FileHash -Algorithm SHA1 -InputStream $stream
    return $hash.Hash
}

function Format-DateTime($datetime, $utc_convert) {
    <#
    .SYNOPSIS
        Receives a PowerShell datetime object and a boolean - returns a standardized string representation - if utc_convert is $true, converts the (assumed) local timestamp into UTC
    #>
    if ($utc_convert){
        return $datetime.ToUniversalTime().ToString("yyyy-MM-dd'T'HH:mm:ss")
    } else {
        return $datetime.ToString("yyyy-MM-dd'T'HH:mm:ss")
    }
}

function Detection-Metrics {
    <#
    .SYNOPSIS
        Presents metrics surrounding all detections to the end-user for a summary view.
    #>
    Write-Host "[!] ### Detection Metadata ###" -ForeGroundColor White
	Write-Message "Total Detections: $($detection_list.Count)"
    Write-Message "Total Suppressed Detections: $suppressed_detections"
	foreach ($str in ($detection_list | Group-Object Risk | Select-Object Name, Count | Out-String).Split([System.Environment]::NewLine)) {
		if (-not ([System.String]::IsNullOrWhiteSpace($str))){
			Write-Message $str
		}
	}
}

function Drive-Change {
    <#
    .SYNOPSIS
        An annoyingly complicated function designed to help operators target mounted drive images rather than the local system.
    #>
    # HKLM associated hives detected on the target drive will be loaded as 'HKLM\ANALYSIS_$NAME' such as 'HKLM\ANALYSIS_SOFTWARE' for the SOFTWARE hive
    # User hives (NTUSER.DAT, USRCLASS.DAT) will be loaded as 'HKU\ANALYSIS_$NAME' and 'HKU\ANALYSIS_$NAME_Classes' respectively - such as 'HKU\ANALYSIS_JOE'/'HKU\ANALYSIS_JOE_Classes for each detected profile on the target drive.
    Write-Message "Setting up Registry Variables"
    if ($drivechange){
        Write-Host "[!] Moving Target Drive to $drivetarget"
        if ($drivetarget -notmatch "^[A-Za-z]{1}:$"){
            #Write-Warning "[!] Invalid Target Drive Format - should be in format like 'D:'"
            #exit
        }
        $dirs = Get-ChildItem $drivetarget -Attributes Directory | Select-Object *
        $windows_found = $false
        foreach ($dir in $dirs){
            if ($dir.Name -eq "Windows"){
                $windows_found = $true
                break
            }
        }
        if ($windows_found -eq $false){
            Write-Warning "[!] Could not find Windows Directory in Specified Target Path ($drivetarget)!"
            Write-Message "Make sure to specify ROOT directory containing imaged data (eg. 'F:')"
            exit
        }

        $script:env_homedrive = $drivetarget
        $script:env_assumedhomedrive = 'C:'
        $script:env_programdata = $drivetarget + "\ProgramData"
        $script:reg_target_hives = @(
            "SOFTWARE"
            "SYSTEM"
        )
        foreach ($hive in $reg_target_hives){
            $hive_path = "$env_homedrive\Windows\System32\Config\$hive"
            if (Test-Path $hive_path){
                Load-Hive "ANALYSIS_$hive" $hive_path "HKEY_LOCAL_MACHINE"
            }
        }

        $script:reg_user_hives = @{}
        if (Test-Path "$env_homedrive\Users")
        {
            $user_hive_list = New-Object -TypeName "System.Collections.ArrayList"
            $user_hive_list_classes = New-Object -TypeName "System.Collections.ArrayList"
            $script:regtarget_hkcu_list = @()
            $script:regtarget_hkcu_class_list = @()
            $profile_names = Get-ChildItem "$env_homedrive\Users" -Attributes Directory | Select-Object *
            foreach ($user in $profile_names){
                $name = $user.Name
                $ntuser_path = "$env_homedrive\Users\$name\NTUSER.DAT"
                $class_path = "$env_homedrive\Users\$name\AppData\Local\Microsoft\Windows\UsrClass.DAT"
                if (Test-Path $ntuser_path){
                    $full_hive_path = "ANALYSIS_{0}" -f $name
                    Load-Hive $full_hive_path $ntuser_path "HKEY_USERS"
                    $user_hive_list.Add($full_hive_path) | Out-Null
                    $tmphivepath = "HKEY_USERS\$full_hive_path"
                    $script:regtarget_hkcu_list += $tmphivepath
                }
                if (Test-Path $class_path){
                    $full_hive_path = "ANALYSIS_{0}_Classes" -f $name
                    Load-Hive $full_hive_path $class_path "HKEY_USERS"
                    $user_hive_list_classes.Add($full_hive_path) | Out-Null
                    $tmphivepath = "HKEY_USERS\$full_hive_path"
                    $script:regtarget_hkcu_class_list += $tmphivepath
                }

            }

        } else {
            $profile_names = @()
            Write-Warning "[!] Could not find '$env_homedrive\Users'!"
        }

        $script:regtarget_hklm = "HKEY_LOCAL_MACHINE\ANALYSIS_"
        $script:regtarget_hkcu = "HKEY_CURRENT_USER\"
        # Need to avoid using HKCR as it will be unavailable on dead drives
        $script:regtarget_hkcr = "HKEY_CLASSES_ROOT\"
        $script:currentcontrolset = "ControlSet001"


    } elseif ($drivechange -eq $false){
        # Load all HKU hives into lists for global reference
        $script:regtarget_hkcu_list = @()
        $script:regtarget_hkcu_class_list = @()
        $base_key = "HKEY_USERS"
        $items = Get-ChildItem -Path "Registry::$base_key" | Select-Object * -ExcludeProperty PSPath,PSParentPath,PSChildName,PSProvider
        foreach ($item in $items) {
            if ($item.Name -match ".*_Classes"){
                $script:regtarget_hkcu_class_list += $item.Name
            } else {
                $script:regtarget_hkcu_list += $item.Name
            }
        }
        $script:env_homedrive = $env:homedrive
        $script:env_assumedhomedrive = $env:homedrive
        $script:env_programdata = $env:programdata
        $script:regtarget_hklm = "HKEY_LOCAL_MACHINE\"
        $script:regtarget_hkcu = "HKEY_CURRENT_USER\"
        # Need to avoid using HKCR as it will be unavailable on dead drives
        $script:regtarget_hkcr = "HKEY_CLASSES_ROOT\"
        $script:currentcontrolset = "CurrentControlSet"
    }

}

function Load-Hive($hive_name, $hive_path, $hive_root) {
    Write-Message "Loading Registry Hive File: $hive_path at location: $hive_root\$hive_name"
    $null = New-PSDrive -PSProvider Registry -Name $hive_name -Root $hive_root
    $reg_fullpath = "$hive_root`\$hive_name"
    $null = reg load $reg_fullpath "$hive_path"
    $new_psdrives_list.Add($reg_fullpath, $hive_name)
}

function Unload-Hive($hive_fullpath, $hive_value){
    Write-Message "Unloading $hive_fullpath"
    [gc]::collect()
    $null = reg unload $hive_fullpath
    #$null = Remove-PSDrive -Name $hive_value -Root $hive_root
}

function Create-EventSource {
    <#
    .SYNOPSIS
        Creates an Event Source inside the Application event log to store detections as JSON
    #>
    Write-Message("Attempting to create Event Log Source: $evtx_source")
    if (-not [System.Diagnostics.EventLog]::SourceExists($evtx_source)) {
        # Source does not exist
        try {
            New-EventLog -LogName $evtx_logname -Source $evtx_source
            Write-Message("Successfully created Event Log Source: $evtx_source")
            # Created ok
            return $true
        } catch {
            # Error creating
            Write-Message("Failed to create Event Log Source: $evtx_source")
            return $false
        }
    } else {
        # Source already exists
        Write-Message("Event Log Source already exists")
        return $true
    }
}

function Write-DetectionToEVTX($detection) {
    <#
    .SYNOPSIS
        Writes inbound detections to the associated Event Log and Source as a JSON blob
    #>
    # TODO - Give each detection their own EID
    # TODO - Evaluate breaking up k=v of each detection similar to how PersistenceSniper does this as below:
    # snippet borrowed from PS https://github.com/last-byte/PersistenceSniper/pull/18/files#diff-594bab796584c8283d08be6a7120923a730f027fe8e213952a932de851f3eaf1R2036
    <#    foreach ($finding in $Findings) {
          $evtID = $EventIDMapping[$finding.technique]
          $id = New-Object System.Diagnostics.EventInstance($evtID, 1); # Info Event
          $propertiesValue = $finding.PSObject.Properties | Select-Object -ExpandProperty Value
          $evtObject = New-Object System.Diagnostics.EventLog;
          $evtObject.Log = $evtlog;
          $evtObject.Source = $source;
          $evtObject.WriteEvent($id, $propertiesValue)
        }#>
    Write-EventLog -LogName $evtx_logname -Source $evtx_source -EventID 9001 -EntryType Information -Message $($detection | ConvertTo-Json) -ErrorAction SilentlyContinue
}

function Emit-Detections {
    <#
    .SYNOPSIS
        Called at the end of the execution flow to emit all detections in the various specified formats.
    #>
    # Emit detections in JSON format
    try {
        $detection_list | ConvertTo-Json -Depth 4 | Out-File $script:JSONDetectionsPath.Path
    } catch {
    }

    foreach ($det in $detection_list){
        #EVTX Output
        if ($evtx) {
            Write-DetectionToEVTX $det
        }
        # CSV Output
        $det.Meta = Format-MetadataToString($det.Meta)
        $det | Export-CSV $script:CSVDetectionsPath.Path -Append -NoTypeInformation -Encoding UTF8 -Force
    }

}

function Clean-Up {
    <#
    .SYNOPSIS
        If we are targeting a non-local drive, clean up all mounted hives
    #>
    #Start-Sleep -seconds 5
    if ($drivechange){
        foreach ($hive in $new_psdrives_list.GetEnumerator()){
            $hive_key = $hive.Key
            if (Test-Path "Registry::$hive_key"){
                Unload-Hive $hive.Key $hive.Value
            }
        }
    }
}

function Logo {
    $logo = "
  __________  ___ _       ____    __________ 
 /_  __/ __ \/   | |     / / /   / ____/ __ \
  / / / /_/ / /| | | /| / / /   / __/ / /_/ /
 / / / _, _/ ___ | |/ |/ / /___/ /___/ _, _/ 
/_/ /_/ |_/_/  |_|__/|__/_____/_____/_/ |_|  
    "
    Write-Host $logo -ForegroundColor White
    Write-Host "Trawler - Dredging Windows for Persistence" -ForegroundColor White
    Write-Host "github.com/joeavanzato/trawler" -ForegroundColor White
    Write-Host ""
}

function Main {
    Logo

    # Check Outputs
    $permissions_ok = Test-OutputDirectoryPermissions
    if (-not $permissions_ok){
        Write-Message "Fatal Error - Could not create/access specified output directory!"
        return
    }

    # Create detection output files
    $script:JSONDetectionsPath = New-TrawlerOutputItem -FileName $script:filename -FileType "json" -skiptimestamp $notimestamp
    $script:CSVDetectionsPath = New-TrawlerOutputItem -FileName $script:filename -FileType "csv" -skiptimestamp $notimestamp
    if ($jsonfilename -ne "") {
        $script:JSONDetectionsPath.Path = $jsonfilename
    }
    if ($csvfilename -ne "") {
        $script:CSVDetectionsPath.Path = $csvfilename
    }
    Write-Message "Detection Output Files: $($script:JSONDetectionsPath.Path), $($script:CSVDetectionsPath.Path)"

    # Setting up required script-level variables
    Drive-Change

    if ($loadsnapshotdata){
        Load-DetectionSnapshot
    }

	if ($ScanOptions -eq "All") {
        $ScanOptions = (Get-Variable "ScanOptions").Attributes.ValidValues
	}

    if ($evtx){
        $evtx_creation_status = Create-EventSource
        if (-not $evtx_creation_status){
            # Fatal Error attempting to create event log
            Write-Message("Fatal Error setting up EventLog Source - are we running as admin?")
            return
        }
    }

	foreach ($option in $ScanOptions){
		switch ($option) {
			"ActiveSetup" { Check-ActiveSetup }
			"AMSIProviders" { Check-AMSIProviders }
			"AppCertDLLs" { Check-AppCertDLLs }
			"AppInitDLLs" { Check-AppInitDLLs }
			"ApplicationShims" { Check-ApplicationShims }
			"AppPaths" { Check-AppPaths }
			"AssociationHijack" { Check-Association-Hijack }
			"AutoDialDLL" { Check-AutoDialDLL }
			"BIDDll" { Check-BIDDll }
			"BITS" { Check-BITS }
            "BootVerificationProgram" { Check-BootVerificationProgram }
			"COMHijacks" { Check-COM-Hijacks }
			"CommandAutoRunProcessors" { Check-CommandAutoRunProcessors }
			"Connections" { Check-Connections }
			"ContextMenu" { Check-ContextMenu }
            "ChromiumExtensions" {Check-ChromiumExtensions }
			"DebuggerHijacks" { Check-Debugger-Hijacks }
			"DNSServerLevelPluginDLL" { Check-DNSServerLevelPluginDLL }
            "DisableLowIL" { Check-DisableLowILProcessIsolation }
            "DirectoryServicesRestoreMode" { Check-DirectoryServicesRestoreMode }
            "DiskCleanupHandlers" { Check-DiskCleanupHandlers }
			"eRegChecks" { Check-Registry-Checks }
			"ErrorHandlerCMD" { Check-ErrorHandlerCMD }
			"ExplorerHelperUtilities" { Check-ExplorerHelperUtilities }
			"FolderOpen" { Check-FolderOpen }
			"GPOExtensions" { Check-GPOExtensions }
			"GPOScripts" { Check-GPO-Scripts }
			"HTMLHelpDLL" { Check-HTMLHelpDLL }
			"IFEO" { Check-IFEO }
            "InstalledSoftware" { Check-InstalledSoftware }
			"InternetSettingsLUIDll" { Check-InternetSettingsLUIDll }
			"KnownManagedDebuggers" { Check-KnownManagedDebuggers }
			"LNK" { Check-LNK }
			"LSA" { Check-LSA }
			"MicrosoftTelemetryCommands" { Check-MicrosoftTelemetryCommands }
			"ModifiedWindowsAccessibilityFeature" { Check-Modified-Windows-Accessibility-Feature }
			"MSDTCDll" { Check-MSDTCDll }
			"Narrator" { Check-Narrator }
			"NaturalLanguageDevelopmentDLLs" { Check-NaturalLanguageDevelopmentDLLs }
			"NetSHDLLs" { Check-NetSHDLLs }
			"NotepadPPPlugins" { Check-Notepad++-Plugins }
			"OfficeAI" { Check-OfficeAI }
			"OfficeGlobalDotName" { Check-OfficeGlobalDotName }
			"Officetest" { Check-Officetest }
			"OfficeTrustedLocations" { Check-Office-Trusted-Locations }
            "OfficeTrustedDocuments"  { Check-OfficeTrustedDocuments }
			"OutlookStartup" { Check-Outlook-Startup }
			"PATHHijacks" { Check-PATH-Hijacks }
			"PeerDistExtensionDll" { Check-PeerDistExtensionDll }
			"PolicyManager" { Check-PolicyManager }
			"PowerShellProfiles" { Check-PowerShell-Profiles }
			"PrintMonitorDLLs" { Check-PrintMonitorDLLs }
			"PrintProcessorDLLs" { Check-PrintProcessorDLLs }
			"Processes" { Check-Processes }
			"ProcessModules" { Check-Process-Modules }
			"RATS" { Check-RATS }
			"RDPShadowConsent" { Check-RDPShadowConsent }
			"RDPStartupPrograms" { Check-RDPStartupPrograms }
			# "RegistryChecks" {Check-Registry-Checks}  # Deprecated
			"RemoteUACSetting" { Check-RemoteUACSetting }
			"ScheduledTasks" { Check-ScheduledTasks }
			"ScreenSaverEXE" { Check-ScreenSaverEXE }
            "ServiceControlManagerSD" {Check-ServiceControlManagerSD }
			"SEMgrWallet" { Check-SEMgrWallet }
			"ServiceHijacks" { Check-Service-Hijacks }
			"Services" { Check-Services }
			"SethcHijack" { Check-SethcHijack }
			"SilentProcessExitMonitoring" { Check-SilentProcessExitMonitoring }
			"Startups" { Check-Startups }
			"SuspiciousCertificates" { Check-Suspicious-Certificates }
			"SuspiciousFileLocation" { Check-Suspicious-File-Locations }
			"TerminalProfiles" { Check-TerminalProfiles }
			"TerminalServicesDLL" { Check-TerminalServicesDLL }
			"TerminalServicesInitialProgram" { Check-TerminalServicesInitialProgram }
			"TimeProviderDLLs" { Check-TimeProviderDLLs }
			"TrustProviderDLL" { Check-TrustProviderDLL }
			"UninstallStrings" { Check-UninstallStrings }
			"UserInitMPRScripts" { Check-UserInitMPRScripts }
			"Users" { Check-Users }
			"UtilmanHijack" { Check-UtilmanHijack }
			"WellKnownCOM" { Check-WellKnownCOM }
			"WERRuntimeExceptionHandlers" { Check-WERRuntimeExceptionHandlers }
			"WindowsLoadKey" { Check-WindowsLoadKey }
			"WindowsUnsignedFiles" { Check-Windows-Unsigned-Files }
			"WindowsUpdateTestDlls" { Check-WindowsUpdateTestDlls }
			"WinlogonHelperDLLs" { Check-WinlogonHelperDLLs }
			"WMIConsumers" { Check-WMIConsumers }
			"Wow64LayerAbuse" { Check-Wow64LayerAbuse }
            "WSL" {Check-WSL }
		}
	}
    Emit-Detections
    Clean-Up
    Detection-Metrics
}

if ($MyInvocation.InvocationName -match ".+.ps1")
{
    Main
}