"\Microsoft\Magnify\* [*] HKCU\Software\Microsoft\Osk\* [*] HKCU\Software\Microsoft\Narrator [FollowInsertion] Accessibility\Accessibility_Settings visua4 c|00001002|||0 c|000010de|||0 c|00008086|igxprd32.dll|G965 EXPRESS|0 c|00008086|igxprd32.dll| 965 EXPRESS|0 c|00008086|igxprd32.dll|Q965/Q963 EXPRESS|0 c|00008086|igxprd32.dll|P965 EXPRESS|0 c|00008086|igxprd64.dll|G965 EXPRESS|0 c|00008086|igxprd64.dll| 965 EXPRESS|0 c|00008086|igxprd64.dll|Q965/Q963 EXPRESS|0 c|00008086|igxprd64.dll|P965 EXPRESS|0 c|00008086|igdumd32.dll|G965 EXPRESS" in Source: sample.bin, "atch0[1]FeatureIDFILESINUSETEXTThe following applications should be closed before continuing the install:FXAssemblyVersion4.0.0.0FXAssemblyVersion353.5.0.0INSTALLLEVEL2LIMITUINullGUID{00000000-0000-0000-0000-000000000000}PIDRegEntryNameProductIDPIDUserNameRegKeySOFTWARE\Microsoft\VisualStudio\7.0\RegistrationPIDUserNameRegRootHKEY_LOCAL_MACHINEPrimaryDirVS7.3643236F_FC70_11D3_A536_0090278A1BB8REBOOTSuppressREPAIR_REINSTALLMODEpecmsuReserveAdditionalCostVS7UI8388608RunCount49UpdateProp1UpdateProp2UpdateProp3UpdateProp4UpdateProp5UserNameRegEntryNameUserNameARPSYSTEMCOMPONENTBuildTyperetURTVersionv4.0.30319LocProductNameMicrosoft Visual C++ 2017 x64 RuntimeProductCPUamd64ProductEditionRuntimeProductFamilyVCProductImagenetRTM_ProductVersion14.11.25325ProductVersionHigh720896ProductVersionLow1999110144MsiLoggingvoicewarmupManufacturerMicrosoft CorporationProductCode{B13B3E11-1555-353F-A63A-8933EE104FBD}ProductLanguageProductNameMicrosoft Visual C++ 2017 x64 Additional Runtime - 14.11.25325ProductVersion{9B0BAA88-" in Source: sample.bin, "Software\7-Zip" in Source: sample.bin, "E15F-3A1F-ACC0-B206E9DDF71C}DirectoryTable100_amd64DirectoryTableSecureCustomPropertiesIE501FOUND.3643236F_FC70_11D3_A536_0090278A1BB8;IGNOREDEPENDENCIES;INSTALLBLOCKFOUND.3643236F_FC70_11D3_A536_0090278A1BB8;JSHFOUNDVER;NEWERVCRUNTIMEVERSIONDETECTED;OCMFOUNDVER;OCMFOUNDVERLANG;REDISTFOUNDVER;REDISTFOUNDVERLANG;UNINSTALLBLOCKFOUND.3643236F_FC70_11D3_A536_0090278A1BB8;UPGRADEVCRUNTIMEWixPdbPathf:\ddSetup\SD\3\wix\outs\amd64ret\enu\cooked\vc_RuntimeAdditional_net.wixpdbreg53F6322BB82E39C10B8B09671402BCB9SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64Installed#1v14.11.25325.00reg0BD885172FDD3F2360BA97AD7C5EDA9CMajor#14reg9079944B509AC52ED7E4C365DCAC40E4Minor#11reg6CD8F4CAC824321F9376E5A42FF78528Bld#25325reg4C8C800EACC461242862DB302BECA5BDRbld#00regBF9D38C5DF54DE1066E00116CF6CB59DregF133E78A668EF156AFB700727896344Ereg780C60B396F24715F58510A458363ED5reg1FB46D02903309793538F7118D97D250reg5A2BD5D24B63D27F878F32707194C39DSOFTWARE\Microsoft\DevDiv\vc\Servicing\14.0SP#0reg89BF06DC838C21E6E04E72357ABEE837SPIndexSOF" in Source: sample.bin, "URTVersion]SOFTWARE\Microsoft\NET Framework Setup\NDP\[URTVersion]OCMSOFTWARE\Microsoft\NET Framework Setup\NDP\[URTVersion]\[ProductLanguage]UI_0UI_1UI_8UI_14UI_15UI_1607UI_1902UI_1903UI_5000UI_5001UI_5002UI_5003UI_5004UI_500514.0.0UPGRADEVCRUNTIMEdep52BBE0B31979271B1FA3BCF594BCFF58Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14" in Source: sample.bin, "TWARE\Microsoft\DevDiv\vc\Servicing\14.0\RuntimeAdditionalInstallreg5B2C908B3AC9457FFEE4E1ECD39B274AInstallerTypeMSIreg278A47E59BF6D5C44A63B53D4A941D13regEFA11F6345AF9CA4D57FF6704AC52593regCB1F4C018DA4C70E5FD71245390B875DSPNameRTMreg6E7415E2620C088B14BF095BC5155956[ProductVersion]regEF0A7649F87D4F93FE150A9564764C01UpdateVersionServicing_Key_ProductEdition_RegKey_7SOFTWARE\Microsoft\Updates\[ProductName]-regA1C4A64F0F95CB4566109088C94B3504reg52151294D41054739A1EF4AE7FCEF495regDBB7F4A70284BA9FCCDF7F47828B3593regA1674A2EB7E08608A2825A16530D89D4reg6DF4E7C52C018AF0C0558CE78329E8DCreg0A7ECFABDC41BEDF38AA31C24D54D43Creg4686D944B0F077245952D93896D439EEServicing_Key_ProductEdition_RegKey_17regCF8AAB7A42751D40CFD0BCC9E49F65E0Software\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14[ProductCode]reg2865E86F4BF45AD80935D279C884D826SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\[ProductLanguage]SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\FullSOFTWARE\Microsoft\Visual JSharp Setup\Redist\[" in Source: sample.bin, "he registry declarations that follow, '*' is used as a wild card, and registry values (as opposed to keys) are * * enclosed in brackets. * * * ********************************************************************************************************************************** --> HKLM\SYSTEM\CurrentControlSet\Control\ScsiPort\* [*] HKLM\SYSTEM\CurrentControlSet\Control\StorPort\* [*] HKLM\SYSTEM\CurrentControlSet\Control\LiveDump\* [*] HKCU\Control Panel\Accessibility\HighContrast\* [*] HKCU\Control Panel\Accessibility\SoundSentry\* [*] HKCU\Control Panel\Accessibility\ShowSounds\* [*] HKCU\Control Panel\Accessibility\Blind Access\* [*] HKCU\Control Panel\Accessibility\TimeOut\* [*] HKCU\Control Panel\Desktop [DragHeight] HKCU\Control Panel\Desktop [DragWidth] HKCU\Control Panel\Desktop [CaretWidth] HKCU\Control Panel\Desktop [CursorBlinkRate] HKCU\Co" in Source: sample.bin, "10EAC02] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [391F3325-0BA3-4083-A861-CF4F6F97A527] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [46B122C0-3767-4069-916E-3A43702F05CE] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [7BB02370-B8AE-4d29-88DE-76951D3245BA] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [58515BF3-2F59-4f37-B74F-85AEEC652AD6] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [84CA6FD6-B152-4e6a-8869-FDE5E37B6157] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [D7931411-0376-4869-A491-8D679BFC004A] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [36B58EA2-C461-4bb0-AC8E-952F59D251ED] HKLM\SYSTEM\CurrentControlSet\Services\CPK1 [*] HKLM\SYSTEM\CurrentControlSet\Control\MPDev\* [*] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI\* [*] HKLM\SYSTEM\CurrentControlSet\Services\MSiSCSI [Start] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [7A2C6C2B-E5A5-49ad-AD68-133089ACD74D] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [C75258E9-BE79-4a48-A23D-EEB6F8FB940C] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [53EF8D5F-36F3-4124-8B76-C6AD521A1021] HKLM\SYSTEM\CurrentControlSet\Control" in Source: sample.bin, "ntrol Panel\Cursors\* [*] HKCU\Control Panel\Mouse [DoubleClickHeight] HKCU\Control Panel\Mouse [DoubleClickWidth] HKCU\Control Panel\Mouse [MouseSensitivity] HKCU\Control Panel\Mouse [MouseSpeed] HKCU\Control Panel\Mouse [SnapToDefaultButton] HKCU\Control Panel\Mouse [SwapMouseButtons] HKCU\Control Panel\Mouse [MouseThreshold1] HKCU\Control Panel\Mouse [MouseThreshold2] HKCU\Software\Microsoft\Narrator\* [*] HKCU\Software" in Source: sample.bin, "ser"> MigXmlHelper.IsOSEarlierThan("NT","6.0.0.0") HKCU\Control Panel\Accessibility [Sound on Activation] HKCU\Control Panel\Accessibility [Warning Sounds] HKCU\Control Panel\Accessibility\StickyKeys\* [*] HKCU\Control Panel\Accessibility\ToggleKeys\* [*] HKCU\Control Panel\Accessibility\MouseKeys\* [*] HKCU\Control Panel\Accessibility\Keyboard Preference\* [*] HKCU\Control P" in Source: sample.bin, "Q-RoutingServer"/> MigXmlHelper.DoesOSMatch("NT","5.2.*") MigXmlHelper.DoesStringContentEqual("Registry", "HKLM\SOFTWARE\Microsoft\MSMQ\Setup[msmq_RoutingSupport]", "0x00000001") visuafunction WWHBookData_ALinks(l) { } visuaPK" in Source: sample.bin, "\WMI\Security [45755098-4291-43df-9720-B58642DD63DF] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [225B9D64-47A9-41c8-81CD-69BC02652D87] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [8EAEF9D8-C053-49d3-9205-65C703C2ECC1] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [556BC0B0-0FB5-40f2-9255-B7D9A669DAEC] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [B35694DE-D323-49d2-ABB2-8139209AD150] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [EA4D82BF-29DA-4e12-800A-E5437964462C] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [420512D9-0537-4c67-A779-84BA7B29CE9F] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [41646815-7524-4bc0-904A-CD7D5" in Source: sample.bin, "\Control\WMI\Security [E67E1BDB-D130-4143-9EB2-8BEE1899FD52] HKLM\SYSTEM\CurrentControlSet\Control\Tape\* [*] HKLM\SYSTEM\CurrentControlSet\Control\MChgr\* [*] HKLM\SYSTEM\CurrentControlSet\Control\Ataport\* [*] HKLM\SYSTEM\CurrentControlSet\Control\Storage\* [*] visuaMZ" in Source: sample.bin, "ype="Registry">HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [B4D1C606-8682-4b7a-AC6B-D883D91555FB] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [4AE27CD9-8DFA-4c37-A42C-B88A93E3E521] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [C827993C-6D1F-4194-9B5C-D7C0A5F1CFB7] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [F022F413-3BF5-47ec-A942-33B81CF8E7FF] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [FA30C290-68DB-430a-AF76-91A2E1C49154] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [5C59FD61-E919-4687-84E2-7200ABE2209B] HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [1221948A-6332-4ac2-AA04-268AABCECE4F] HKLM\SYSTEM\CurrentControlSet" in Source: sample.bin