%PROGRAMFILES(X64)%\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
%PROGRAMFILES(X64)%\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
%PROGRAMFILES(X64)%\NVIDIA Corporation\NvBackend\NvSHIM.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe
%PROGRAMFILES(X64)%\NVIDIA Corporation\NvBackend\NvSHIM.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29460806\0.dat
%PROGRAMFILES(X64)%\NVIDIA Corporation\NVIDIA Geforce Experience\7z.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29480756\0.dat
%PROGRAMFILES(X64)%\NVIDIA Corporation\NVIDIA Geforce Experience\NVIDIA Notification.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29486805\0.dat
%SYSTEMROOT%\System32\cmd.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29491702\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29497061\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29500979\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29505499\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29509085\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29511877\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29515129\0.dat
%SYSTEMROOT%\System32\cmd.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29520413\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29531222\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29537877\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29554777\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29558833\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29549383\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29563157\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29566171\0.dat
%PROGRAMFILES(X64)%\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
%PROGRAMFILES(X64)%\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
%PROGRAMFILES(X64)%\NVIDIA Corporation\NvBackend\NvSHIM.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29587136\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29582846\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29581777\0.dat
%PROGRAMFILES(X64)%\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
%PROGRAMFILES(X64)%\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29591243\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29604345\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29594310\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29599850\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29608580\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29613074\0.dat
%LOCALAPPDATA%\NVIDIA\NvBackend\DAO\29616447\0.dat
%ALLUSERSPROFILE%\NVIDIA\NvContainerLocalSystem.log
new file created
%ALLUSERSPROFILE%\NVIDIA\NvMessageBusBroadcastPlugin.log
new file created
%ALLUSERSPROFILE%\NVIDIA\NvPluginNvapiMonitor.log
new file created
%ALLUSERSPROFILE%\NVIDIA\NvContainerWatchdog.log
new file created
%ALLUSERSPROFILE%\NVIDIA\MessageBusBroadcast.log
new file created
%ALLUSERSPROFILE%\NVIDIA\NvContainerUser1.log
new file created
%ALLUSERSPROFILE%\NVIDIA\NvContainerDriverUpdateCheck.log
new file created
%ALLUSERSPROFILE%\NVIDIA\NvContainerDriverUpdateCheck.log_backup1
file renamed
%ALLUSERSPROFILE%\NVIDIA\NvContainerUser1.log_backup1
file renamed
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\NvContainer\NvContainerLocalSystem
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\NvContainer\NvContainerLocalSystem
new registry key created
(x32)HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\NvContainer\NvContainerLocalSystem\\ServiceAutoStart
new registry key parameter created
HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\NvContainer\NvContainerLocalSystem\\ServiceAutoStart
new registry key parameter created
%ALLUSERSPROFILE%\NVIDIA\NvContainerLocalSystem.log_backup1
file renamed
%ALLUSERSPROFILE%\NVIDIA\NvMessageBusBroadcastPlugin.log_backup1
file renamed
%ALLUSERSPROFILE%\NVIDIA\NvPluginNvapiMonitor.log_backup1
file renamed
%ALLUSERSPROFILE%\NVIDIA\NvContainerWatchdog.log_backup1
file renamed
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\NvBackend
new registry key created
%ALLUSERSPROFILE%\NVIDIA\MessageBusBroadcast.log_backup
file renamed
HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\NvContainer\MessageBus\\IsAdministratorAccount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\NvBackend\\ClientData
new registry key parameter created
%ALLUSERSPROFILE%\NVIDIA\NvContainerUser1SPUser.log
new file created
%SYSTEMROOT%\System32\config\systemprofile\AppData\Local\Temp
new catalogue created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\DynDNS
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\DynDNS\Setup
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\DynDNS\Setup\HostNames
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\DynDNS\Setup\RegistrationDomains
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\Services
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\DynDNS\Setup\BrowseDomains
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Bonjour\Services\SMB
new registry key created
HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.
new registry key created
%USERPROFILE%\Videos\Tdbswd56spcap
new catalogue created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS
new registry key created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\yuJ4f7df
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\VideoWidth
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\VideoHeight
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\DVRBufferLen
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\RecordingFPS
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\EncoderProfile
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\m7Yhs4x6
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\GameStreamPortal
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\AudioMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\MicMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\RecordingIndicatorPosition
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\DisplayRecordingIndicator
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{e50b41c5-1948-4b43-9d8c-544357869859}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{1D4F002B-650B-4DFB-801B-46DAAA86FFAF}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{29B68DA0-E7CC-4BEC-848D-DBC061D91507}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\DefaultPathW
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\TempFilePath
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\Uv5re3Df
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\RecEnabled
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\EnableMicrophone
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\7b476e7e-c52c-41f8-9173-7ca91538690f
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\cb31eb97-b793-4311-ba79-de8a39c35eae
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\910e2a23-7f7a-4e1e-98d4-6a719a20defc
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\DisplayGamecastIndicator
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\07c35bea-7ef2-4197-aaaa-16e354110d39
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\E4225F6D-B7DD-4606-AD0C-9A4210FCD975
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\a5c69fbf-ac70-4069-ae90-edd785754048
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\0ec8bedc-956e-4d84-862c-b96a02ae2e2e
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\0f0334de-a7a7-4ed4-b10c-3183fbefe3f3
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\83deb5b7-995f-4c51-bb2c-eee05a774062
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{4BF6E0CA-8F4F-4002-9ED5-1313851E77BC}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{95C40376-1459-4E57-BD47-6AC6F8B1F2E7}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{D9C7FBF4-263D-4B59-994B-BEF98E114480}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\IsShadowPlayEnabled
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\3A326815-225C-4B5C-92D7-730A1BA8A264
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\5108F809-A0CC-456C-AAB2-B4E292D5CB0F
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\738917F0-1EF4-4DF9-83ED-D57F8BF8F718
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\F031A804-8529-4E56-A957-9AE72F213521
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\a2572ca9-c5fb-4746-8d3e-676be41ba9e1
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\09a4eed2-705f-4679-8080-cdb466ee6fa0
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\f21edd2f-0a36-451c-97cc-4bfe45a9fe25
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\aa18ebc4-019d-4ec0-bf1d-d6300218bf52
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\66911E9A-0687-4F9D-8FCD-D027AB48D568
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\4567E854-DEB6-4D1D-994E-46CAD688325B
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\F88F4A4E-2B36-4DE1-8895-59AD2B2C1B30
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\57518901-7F82-47F4-B35F-69AA4D6C862E
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{979C82F1-A543-450D-9EBA-D82DF9A0A239}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{FCDCC7A2-EF61-4782-AF8A-74FC89A6A11A}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{E8541E5B-8DA8-4BB1-82B5-F841FDA12F5B}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{8F43CD74-8832-441B-B498-EF784F5AE056}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\{C7A32916-4E7D-411C-9AC2-B29EF8624ED4}
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\IsShadowPlayEnabledUser
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\cd410346-ee0b-452c-8aaf-e2175305da1a
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\CustomOverlayBHKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\CustomOverlayCHKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\FSToggleHKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\FSPresetHKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\FSPresetStyle1HKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\FSPresetStyle2HKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\FSPresetStyle3HKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\DwmEnabled
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\DwmDvrEnabledV1
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\NativeKeyboardInputDialogHKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\PMOCSidebarHKeyCount
new registry key parameter created
HKEY_USERS\%ID-USER-SID%\SOFTWARE\NVIDIA Corporation\Global\ShadowPlay\NVSPCAPS\\PMOCOverlayCycleHKeyCount
new registry key parameter created
%ALLUSERSPROFILE%\NVIDIA\NvContainerUser1SPUser.log_backup1
file renamed