HKEY_USERS\%ID-USER-SID%_Classes\*\shell\VirusTotal Scanner
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\*\shell\VirusTotal Scanner\command
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\63\FE2848FA\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\63\FE2848FA\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\64\FE2848FA\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\64\FE2848FA\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\\8
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\8
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\8\\0
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\8\0
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\8\\MRUListEx
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\8\0\\NodeSlot
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\8\0\\MRUListEx
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\Shell
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\Shell\\SniffedFolderType
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\64\FE2848FA\\@windows.storage.dll,-21825
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\64\FE2848FA\\@C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\oregres.dll,-131
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\64\FE2848FA\\@C:\WINDOWS\system32\NetworkExplorer.dll,-1
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}
new registry key created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\Mode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\LogicalViewMode
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\FFlags
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\IconSize
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\Sort
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\ColInfo
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupView
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByKey:FMTID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByKey:PID
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\503\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\\GroupByDirection
new registry key parameter created