--------------- QuickDiag | g3n-h@ckm@n | V3_02.04.17.1 ---------------

----- XP | Vista | 7 | 8 | 8.1 | 10 - 32/64 bits ----- - Start 10/04/2017 17:08:38

Updated 02/04/2017 | 14.30 (GMT) by g3n-h@ckm@n
Contact : http://www.sosvirus.net/

Time Zone : (UTC+01:00) Bruxelles, Copenhague, Madrid, Paris
[widen-finalis (Administrator)] - [YOUCAM8WAIT] (S-1-5-21-4183021106-2149456055-877251859-1000)

System: Microsoft Windows 7 Édition Starter  - Service Pack 1 - (6.1.7601) -  BuildType: Multiprocessor Free - OSLanguage: 1036 (040c)
System: AutoReboot: True - DebugFilePath: %SystemRoot%\MEMORY.DMP - KernelDumpOnly: False - OverwriteExistingDebugFile: True - WriteDebugInfo: True - WriteToSystemLog: True
Boot : Microsoft Windows 7 Édition Starter |C:\Windows|\Device\Harddisk0\Partition3
Boot : Normal boot
PC: AOD255 - Acer - IdNumber: LUSDG0D0170426EC0E1601 - UUID: 364EE69C-9C82-9CB1-2111-1C750822B622
Processor : X64 - 1662 Mhz - Intel(R) Atom(TM) CPU N450   @ 1.66GHz
InsydeH2O Version V3.08(DDR2) -  - Acer - S/N: LUSDG0D0170426EC0E1601 - V3.08(DDR2) - ACRSYS - 1
CoreTemp : 60 Celsius

----------| Quick


---------- | SoundDevice

Realtek High Definition Audio - Status: OK - Manufacturer: Realtek - PNPDeviceID: HDAUDIO\FUNC_01&VEN_10EC&DEV_0272&SUBSYS_10250349&REV_1000\4&350CB3CC&0&0001

---------- | Video

Chell 1.8b for Intel(R) GMA 3150 - Resolution: 1024x600 - Colors: 4294967296 - RefreshRate: 60 - 32 Bits Per Pixel - DeviceID: VideoController1 - Drivers: igdumdx32.dll,igd10umd32.dll - PNPDeviceID: PCI\VEN_8086&DEV_A011&SUBSYS_03491025&REV_00\3&33FD14CA&0&10 - AdapterCompatibility: Trixarian - RAM: 268435456
Chell 1.8b for Intel(R) GMA 3150 - Resolution: x - Colors:  - RefreshRate:  -  Bits Per Pixel - DeviceID: VideoController2 - Drivers: igdumdx32.dll,igd10umd32.dll - PNPDeviceID: PCI\VEN_8086&DEV_A012&SUBSYS_03491025&REV_00\3&33FD14CA&0&11 - AdapterCompatibility: Trixarian - RAM: 
Inegrated Video Chipset DeviceName: Chell 1.8b for Intel(R) GMA 3150 - DriverVersion: 8.14.10.2176 - SpecificationVersion: 1025

---------- | Codecs

c:\windows\system32\tsbyuv.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 12288 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\iyuv_32.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 50176 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\msyuv.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 22528 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\msadp32.acm - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 18432 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\msgsm32.acm - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 23552 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\msg711.acm - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 12288 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\imaadp32.acm - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 17920 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\msvidc32.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 31744 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\msrle32.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 13312 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\l3codeca.acm - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 64000 -  Manufacturer: Fraunhofer Institut Integrierte Schaltungen IIS - Status: OK
c:\windows\system32\iccvid.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 82944 -  Manufacturer: Radius Inc. - Status: OK
c:\windows\system32\sirenacm.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 48464 -  Manufacturer: Microsoft Corporation - Status: OK
c:\windows\system32\mpg4c32.dll - ClassName: Win32_CodecFile - FSName: NTFS - FileSize: 420240 -  Manufacturer: Microsoft Corporation - Status: OK

---------- | CPU

CPU #1 value:100 %
CPU #2 value:100 %
Total Overall CPU Usage value:100 %

---------- | Network

Qualcomm Atheros AR8152_8158 PCI-E Fast Ethernet Controller : SENT:0 bytes/sec / RECVD:0 bytes/sec
Intel[R] Centrino[R] Wireless-N 1000 : SENT:34,081 bytes/sec / RECVD:34,081 bytes/sec

Overall -> SEND Maxium:100 bytes/sec,  /  RECEIVE Maximum:34,081 bytes/sec

WAN Miniport (SSTP) -  - Microsoft - Status:  - PnPID : ROOT\MS_SSTPMINIPORT\0000
WAN Miniport (IKEv2) -  - Microsoft - Status:  - PnPID : ROOT\MS_AGILEVPNMINIPORT\0000
WAN Miniport (L2TP) -  - Microsoft - Status:  - PnPID : ROOT\MS_L2TPMINIPORT\0000
WAN Miniport (PPTP) -  - Microsoft - Status:  - PnPID : ROOT\MS_PPTPMINIPORT\0000
WAN Miniport (PPPOE) -  - Microsoft - Status:  - PnPID : ROOT\MS_PPPOEMINIPORT\0000
WAN Miniport (IPv6) -  - Microsoft - Status:  - PnPID : ROOT\MS_NDISWANIPV6\0000
WAN Miniport (Network Monitor) -  - Microsoft - Status:  - PnPID : ROOT\MS_NDISWANBH\0000
Qualcomm Atheros AR8152/8158 PCI-E Fast Ethernet Controller - Ethernet 802.3 - Qualcomm Atheros - Status:  - PnPID : PCI\VEN_1969&DEV_2060&SUBSYS_03491025&REV_C1\4&16969C7D&0&00E0
WAN Miniport (IP) -  - Microsoft - Status:  - PnPID : ROOT\MS_NDISWANIP\0000
RAS Async Adapter -  -  - Status:  - PnPID : 
Intel(R) Centrino(R) Wireless-N 1000 - Ethernet 802.3 - Intel Corporation - Status:  - PnPID : PCI\VEN_8086&DEV_0083&SUBSYS_13058086&REV_00\4&6FF3C1D&0&00E1
Microsoft Teredo Tunneling Adapter -  - Microsoft - Status:  - PnPID : ROOT\*TEREDO\0000

---------- | Memory

RAM = Total (MB) : 1037 | Free (MB) : 174
Pagefile = Total (MB) : 3199 | Free (MB) : 459
Virtual = Total (MB) : 2097 | Free (MB) : 1889

Physical Memory 0 : Capacity: 1073741824 - DIMM0 - Posit.: 0 - Manufacturer: AD00000000000000 - PartNumber: 48594D503131325336344350362D53362020 - S/N: 53733B47

---------- | SID Users

Acronis Agent User : [S-1-5-21-4183021106-2149456055-877251859-1002]
Administrateur : [S-1-5-21-4183021106-2149456055-877251859-500]
Invité : [S-1-5-21-4183021106-2149456055-877251859-501]
widen-finalis : [S-1-5-21-4183021106-2149456055-877251859-1000]
Administrateurs : [S-1-5-32-544]
IIS_IUSRS : [S-1-5-32-568]
Invités : [S-1-5-32-546]
Lecteurs des journaux d’événements : [S-1-5-32-573]
Utilisateurs : [S-1-5-32-545]
Utilisateurs de l’Analyseur de performances : [S-1-5-32-558]
Utilisateurs du journal de performances : [S-1-5-32-559]
Utilisateurs du modèle COM distribué : [S-1-5-32-562]
Acronis Remote Users : [S-1-5-21-4183021106-2149456055-877251859-1001]

---------- | SystemAccounts

Name: Tout le monde - SID: S-1-1-0 - SIDType: 5 - Status: OK
Name: LOCAL - SID: S-1-2-0 - SIDType: 5 - Status: OK
Name: CREATEUR PROPRIETAIRE - SID: S-1-3-0 - SIDType: 5 - Status: OK
Name: GROUPE CREATEUR - SID: S-1-3-1 - SIDType: 5 - Status: OK
Name: CREATOR OWNER SERVER - SID: S-1-3-2 - SIDType: 5 - Status: OK
Name: CREATOR GROUP SERVER - SID: S-1-3-3 - SIDType: 5 - Status: OK
Name: DROITS DU PROPRIÉTAIRE - SID: S-1-3-4 - SIDType: 5 - Status: OK
Name: LIGNE - SID: S-1-5-1 - SIDType: 5 - Status: OK
Name: RESEAU - SID: S-1-5-2 - SIDType: 5 - Status: OK
Name: TACHE - SID: S-1-5-3 - SIDType: 5 - Status: OK
Name: INTERACTIF - SID: S-1-5-4 - SIDType: 5 - Status: OK
Name: SERVICE - SID: S-1-5-6 - SIDType: 5 - Status: OK
Name: ANONYMOUS LOGON - SID: S-1-5-7 - SIDType: 5 - Status: OK
Name: Proxy - SID: S-1-5-8 - SIDType: 5 - Status: OK
Name: Système - SID: S-1-5-18 - SIDType: 5 - Status: OK
Name: ENTERPRISE DOMAIN CONTROLLERS - SID: S-1-5-9 - SIDType: 5 - Status: OK
Name: SELF - SID: S-1-5-10 - SIDType: 5 - Status: OK
Name: Utilisateurs authentifiés - SID: S-1-5-11 - SIDType: 5 - Status: OK
Name: RESTRICTED - SID: S-1-5-12 - SIDType: 5 - Status: OK
Name: UTILISATEUR TERMINAL SERVER - SID: S-1-5-13 - SIDType: 5 - Status: OK
Name: REMOTE INTERACTIVE LOGON - SID: S-1-5-14 - SIDType: 5 - Status: OK
Name: IUSR - SID: S-1-5-17 - SIDType: 5 - Status: OK
Name: SERVICE LOCAL - SID: S-1-5-19 - SIDType: 5 - Status: OK
Name: SERVICE RÉSEAU - SID: S-1-5-20 - SIDType: 5 - Status: OK
Name: BUILTIN - SID: S-1-5-32 - SIDType: 3 - Status: OK

---------- | Drives

A:\ -> [Fixed] | [youcam 8 setup] | Total : 1.96 Go | Free : 1.87 Go -> NTFS [ATA]
C:\ -> [Fixed] | [Acer] | Total : 211.06 Go | Free : 174.08 Go -> NTFS [ATA]
D:\ -> [CDROM] | [DTVP30] | Total : 0.02 Go | Free : 0 Go -> CDFS [USB]
E:\ -> [Removable] | [VAULT PRIVA] | Total : 3.48 Go | Free : 0.02 Go -> FAT32 [USB]
F:\ -> [Removable] | [LOUVRE] | Total : 59.5 Go | Free : 58.77 Go -> exFAT [USB]
G:\ -> [Removable] | [montre espi] | Total : 7.32 Go | Free : 2.65 Go -> FAT32 [USB]
H:\ -> [Removable] | [UUI] | Total : 7.26 Go | Free : 0.53 Go -> FAT32 [USB]
W:\ -> [Network] | [] | Total : 3.7 Go | Free : 0.47 Go ->  
X:\ -> [Fixed] | [SYSTEM & ANDROID] | Total : 4.1 Go | Free : 1.19 Go -> NTFS [ATA]
Y:\ -> [Network] | [] | Total : 30.02 Go | Free : 0.06 Go ->  
Z:\ -> [Fixed] | [youcam 8 programfiles] | Total : 2.77 Go | Free : 2.7 Go -> NTFS [ATA]

Disk Usage Information [5 total Physical Disks]

Physical Drive #0 [X:, C:, A:, Z:] : Read:706,488 bytes/sec, Written:0 bytes/sec Max Read:706,488 bytes/sec, Max Write:0 bytes/sec 
Physical Drive #1 [E:] : Read:0 bytes/sec, Written:0 bytes/sec Max Read:0 bytes/sec, Max Write:0 bytes/sec 
Physical Drive #2 [G:] : Read:0 bytes/sec, Written:0 bytes/sec Max Read:0 bytes/sec, Max Write:0 bytes/sec 
Physical Drive #3 [F:] : Read:0 bytes/sec, Written:0 bytes/sec Max Read:0 bytes/sec, Max Write:0 bytes/sec 
Physical Drive #4 [H:] : Read:0 bytes/sec, Written:0 bytes/sec Max Read:0 bytes/sec, Max Write:0 bytes/sec 

Overall - Read Maximum:706,488 bytes/sec, Write Maximum:0 bytes/sec

DeviceID: \\.\PHYSICALDRIVE3 - Status: OK - USB - Removable Media - 1 Part. - PnPID : EUCR\UB6250\COMBO_DRIVE
DeviceID: \\.\PHYSICALDRIVE0 - Status: OK - IDE - Fixed hard disk media - 5 Part. - PnPID : IDE\DISKHITACHI_HTS545025B9A300_________________PB2OC60F\4&1BE3E953&0&0.0.0
DeviceID: \\.\PHYSICALDRIVE2 - Status: OK - USB - Removable Media - 1 Part. - PnPID : USBSTOR\DISK&VEN_GENPLUS&PROD_USB-MSDC_DISK_A&REV_1.00\GENERIC_USB_MASS_STORAGE_DEVICE&0
DeviceID: \\.\PHYSICALDRIVE4 - Status: OK - USB - Removable Media - 1 Part. - PnPID : USBSTOR\DISK&VEN_KINGSTON&PROD_DATATRAVELER_2.0&REV_PMAP\001BFC3653BCBFC0698F7C35&0
DeviceID: \\.\PHYSICALDRIVE1 - Status: OK - USB - Removable Media - 1 Part. - PnPID : USBSTOR\DISK&VEN_KINGSTON&PROD_DTVAULTPRIVACY30&REV_CLVX\000FFEC697CDB0A0B000DF8F&0

---------- | Windows updates

Last detection : 2016-12-20 00:55:28
Downloaded last ones : 2016-12-21 15:45:07
Installed last ones : 2017-02-04 12:34:33
Next search : 2017-04-09 16:00:18

Windows Is Activated

---------- | Browsers

IE : 11.0.9600.17840     (© Microsoft Corporation. Tous droits réservés.)
FF : 52.0.2.6291     (©Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 57.0.2987.133     (Copyright 2016 Google Inc.)

Default : "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1"

---------- | FlashPlayer

FlashPlayer ActiveX : 25.0.0.127

---------- | Security

AV : COMODO Antivirus Disabled
AS : Windows Defender Disabled
FW : COMODO Firewall Disabled
WMI : OK
WU: Windows Update Service [Auto(2)] = Running
AS: Windows Defender [Manual(3)] = stopped
WMI: Windows Management Instrumentation [Auto(2)] = Running



---------- | Running processes

508 | [Owner : Système | Parent : 4(System) | 0.06 Mo] - (.Microsoft Corporation - Gestionnaire de sessions Windows.) - (6.1.7601.19135) = C:\Windows\System32\smss.exe     [17/12/2016 07:02:51]    CPU Usage:0 %
728 | [Owner : Système | Parent : 596(svchost.exe) | 1.09 Mo] - (.Microsoft Corporation - Processus d’exécution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe     [14/07/2009 01:11:09]    CPU Usage:0 %
792 | [Owner : Système | Parent : 784() | 5.57 Mo] - (.Microsoft Corporation - Processus d’exécution client-serveur.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe     [14/07/2009 01:11:09]    CPU Usage:0 %
800 | [Owner : Système | Parent : 596(svchost.exe) | 0.05 Mo] - (.Microsoft Corporation - Application de démarrage de Windows.) - (6.1.7600.16385) = C:\Windows\System32\wininit.exe     [14/07/2009 01:36:49]    CPU Usage:0 %
860 | [Owner : Système | Parent : 784() | 0.12 Mo] - (.Microsoft Corporation - Application d’ouverture de session Windows.) - (6.1.7601.18540) = C:\Windows\System32\winlogon.exe     [17/12/2016 06:53:40]    CPU Usage:0 %
904 | [Owner : Système | Parent : 800(wininit.exe) | 6.18 Mo] - (.Microsoft Corporation - Applications Services et Contrôleur.) - (6.1.7601.18829) = C:\Windows\System32\services.exe     [17/12/2016 07:01:23]    CPU Usage:0 %
912 | [Owner : Système | Parent : 800(wininit.exe) | 4.6 Mo] - (.Microsoft Corporation - Local Security Authority Process.) - (6.1.7601.19135) = C:\Windows\System32\lsass.exe     [17/12/2016 07:02:51]    CPU Usage:0 %
920 | [Owner : Système | Parent : 800(wininit.exe) | 1.31 Mo] - (.Microsoft Corporation - Service du gestionnaire de session locale.) - (6.1.7601.17514) = C:\Windows\System32\lsm.exe     [14/12/2016 19:48:33]    CPU Usage:0 %
1012 | [Owner : Système | Parent : 904(services.exe) | 4.56 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1068 | [Owner : Système | Parent : 904(services.exe) | 5.21 Mo] - (.IObit - Advanced SystemCare Service.) - (10.0.2.82) = C:\Program Files\IObit\Advanced SystemCare\ASCService.exe     [08/04/2017 09:34:55]    CPU Usage:0 %
1160 | [Owner : SERVICE RÉSEAU | Parent : 904(services.exe) | 4.6 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1264 | [Owner : Système | Parent : 904(services.exe) | 18.27 Mo] - (.COMODO - COMODO Internet Security.) - (10.0.1.6209) = C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe     [28/12/2016 01:20:16]    CPU Usage:4 %
1336 | [Owner : SERVICE RÉSEAU | Parent : 904(services.exe) | 4.8 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1376 | [Owner : SERVICE LOCAL | Parent : 904(services.exe) | 7.5 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1412 | [Owner : Système | Parent : 904(services.exe) | 50.89 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1448 | [Owner : SERVICE LOCAL | Parent : 904(services.exe) | 4.21 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1496 | [Owner : Système | Parent : 904(services.exe) | 15.3 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:12 %
1820 | [Owner : Système | Parent : 904(services.exe) | 1.77 Mo] - (.Microsoft Corporation - Application sous-système spouleur.) - (6.1.7601.17514) = C:\Windows\System32\spoolsv.exe     [14/12/2016 19:48:02]    CPU Usage:0 %
1844 | [Owner : Système | Parent : 1496(svchost.exe) | 0.54 Mo] - (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe     [14/12/2016 19:48:11]    CPU Usage:0 %
1860 | [Owner : SERVICE LOCAL | Parent : 904(services.exe) | 3.28 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1932 | [Owner : Système | Parent : 1844(taskeng.exe) | 1.54 Mo] - (.FreeDownloadManager.org - Free Download Manager Edge Integration Module.) - (5.1.23.5672) = C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe     [05/02/2017 18:30:47]    CPU Usage:0 %
1944 | [Owner : Système | Parent : 728(csrss.exe) | 0.12 Mo] - (.Microsoft Corporation - Hôte de la fenêtre de la console.) - (6.1.7601.19135) = C:\Windows\System32\conhost.exe     [17/12/2016 07:02:52]    CPU Usage:0 %
2016 | [Owner : Système | Parent : 904(services.exe) | 2.76 Mo] - (.COMODO - COMODO Secure Shopping.) - (1.1.20635.97) = C:\Program Files\Comodo\COMODO Secure Shopping\csssrv.exe     [01/04/2017 06:53:22]    CPU Usage:0 %
596 | [Owner : Système | Parent : 904(services.exe) | 5.18 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1028 | [Owner : Système | Parent : 904(services.exe) | 2.46 Mo] - (.Comodo - Comodo Dragon.) - (1.0.0.1) = C:\Program Files\Comodo\Dragon\dragon_updater.exe     [29/09/2016 15:26:16]    CPU Usage:0 %
1692 | [Owner : SERVICE LOCAL | Parent : 904(services.exe) | 1.95 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
1996 | [Owner : Système | Parent : 904(services.exe) | 0.18 Mo] - (.COMODO - Internet Security Essentials.) - (1.1.20283.43) = C:\Program Files\Comodo\Internet Security Essentials\isesrv.exe     [06/04/2017 14:36:55]    CPU Usage:0 %
2452 | [Owner : Système | Parent : 904(services.exe) | 7.02 Mo] - (.Hide My IP - .) - (3.0.0.20) = C:\Program Files\Hide My IP 6\HideMyIpSrv.exe     [06/04/2017 20:40:30]    CPU Usage:0 %
2752 | [Owner : SERVICE RÉSEAU | Parent : 904(services.exe) | 0.21 Mo] - (.Microsoft Corporation - Processus hôte pour les services Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe     [14/07/2009 01:19:28]    CPU Usage:0 %
3368 | [Owner : SERVICE LOCAL | Parent : 1412(svchost.exe) | 0.26 Mo] - (.Microsoft Corporation - Windows Driver Foundation - Processus hôte de l’infrastructure de pilotes en mode utilisateur.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe     [18/12/2016 07:25:09]    CPU Usage:0 %
3592 | [Owner : widen-finalis | Parent : 904(services.exe) | 3.64 Mo] - (.Microsoft Corporation - Processus hôte pour Tâches Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe     [18/12/2016 04:34:55]    CPU Usage:0 %
3676 | [Owner : widen-finalis | Parent : 1496(svchost.exe) | 0.54 Mo] - (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe     [14/12/2016 19:48:11]    CPU Usage:0 %
3908 | [Owner : widen-finalis | Parent : 1412(svchost.exe) | 1.82 Mo] - (.Microsoft Corporation - Gestionnaire de fenêtres du Bureau.) - (6.1.7600.16385) = C:\Windows\System32\dwm.exe     [14/07/2009 01:24:23]    CPU Usage:0 %
3936 | [Owner : widen-finalis | Parent : 3720() | 24.62 Mo] - (.Microsoft Corporation - Explorateur Windows.) - (6.1.7601.17514) = C:\Windows\explorer.exe     [14/12/2016 19:48:55]    CPU Usage:0 %
2676 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 2.87 Mo] - (.Bitdefender LLC - Bitdefender Anti Ransomware.) - (1.0.12.151) = C:\Program Files\Bitdefender\Tools\BDAntiRansomware\BDAntiRansomware.exe     [06/04/2017 20:50:32]    CPU Usage:0 %
3496 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 2.74 Mo] - (.Innovative Solutions GRUP SRL - Advanced Uninstaller PRO.) - (12.17.0.86) = C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe     [07/04/2017 22:38:11]    CPU Usage:0 %
3696 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 4.92 Mo] - (.Innovative Solutions - DriverMax.) - (9.26.0.133) = C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe     [07/04/2017 12:11:42]    CPU Usage:0 %
2624 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 3.08 Mo] - (.Innovative Solutions - DriverMax.) - (9.26.0.133) = C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe     [07/04/2017 12:11:42]    CPU Usage:0 %
3704 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 4.79 Mo] - (.Informer Technologies, Inc. - Software Informer.) - (1.5.1324.0) = C:\Program Files\Software Informer\softinfo.exe     [05/02/2017 18:29:48]    CPU Usage:4 %
4112 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 2.63 Mo] - (. - .) - (0.0.0.0) = C:\Program Files\EaseUS\EaseUS EverySync\bin\EaseUSEverySyncCache.exe     [14/12/2016 19:55:53]    CPU Usage:0 %
4412 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 3.55 Mo] - (.COMODO - Internet Security Essentials.) - (1.1.20283.43) = C:\Program Files\Comodo\Internet Security Essentials\vkise.exe     [06/04/2017 14:36:56]    CPU Usage:0 %
4528 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 0.17 Mo] - (.IObit - Advanced SystemCare 10.) - (10.0.1.3117) = C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe     [08/04/2017 09:34:56]    CPU Usage:0 %
5468 | [Owner : Système | Parent : 2412() | 0.08 Mo] - (.Panda Security - USB Vaccine.) - (1.0.1.4) = C:\Program Files\Panda USB Vaccine\USBVaccine.exe     [06/04/2017 20:49:27]    CPU Usage:0 %
2328 | [Owner : widen-finalis | Parent : 1496(svchost.exe) | 0.13 Mo] - (.Microsoft Corporation - Windows Update.) - (7.6.7600.320) = C:\Windows\System32\wuauclt.exe     [15/12/2016 12:45:53]    CPU Usage:0 %
5724 | [Owner : widen-finalis | Parent : 904(services.exe) | 2.24 Mo] - (.Microsoft Corporation - Processus hôte pour Tâches Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe     [18/12/2016 04:34:55]    CPU Usage:0 %
5888 | [Owner : widen-finalis | Parent : 1496(svchost.exe) | 0.52 Mo] - (.Microsoft Corporation - Moteur du Planificateur de tâches.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe     [14/12/2016 19:48:11]    CPU Usage:0 %
5288 | [Owner : widen-finalis | Parent : 5888(taskeng.exe) | 0.08 Mo] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) - (1.824.20.7559) = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe     [23/11/2016 09:33:44]    CPU Usage:0 %
4804 | [Owner : widen-finalis | Parent : 3696(drivermax.exe) | 0.06 Mo] - (.Innovative Solutions - DriverMax.) - (9.26.0.133) = C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe     [07/04/2017 12:11:42]    CPU Usage:0 %
2464 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 3.25 Mo] - (.Innovative Solutions - NeoSetup Updater.) - (3.91.0.1) = C:\Program Files\Innovative Solutions\NeoSetup Updater\NeoSetup_Updater.exe     [07/04/2017 21:36:36]    CPU Usage:4 %
1024 | [Owner : widen-finalis | Parent : 2072() | 13.97 Mo] - (.Reason Software Company Inc. - Reason Core Security UI.) - (1.2.0.0) = C:\Program Files\Reason\Security\rsUI.exe     [30/09/2016 02:51:04]    CPU Usage:8 %
5236 | [Owner : widen-finalis | Parent : 5924() | 17.92 Mo] - (.CHENGDU Yiwo Tech Development Co., Ltd. - Todo PCTrans.) - (1.0.0.1) = C:\Program Files\EaseUS\EaseUS Todo PCTrans\bin\PCTrans.exe     [09/04/2017 19:54:02]    CPU Usage:12 %
1624 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 3.17 Mo] - (.COMODO - COMODO Internet Security.) - (10.0.1.6209) = C:\Program Files\Comodo\COMODO Internet Security\cistray.exe     [28/12/2016 01:11:10]    CPU Usage:0 %
5504 | [Owner : widen-finalis | Parent : 1624(cistray.exe) | 1.79 Mo] - (.COMODO - COMODO Internet Security.) - (10.0.1.6209) = C:\Program Files\Comodo\COMODO Internet Security\cis.exe     [28/12/2016 01:10:52]    CPU Usage:0 %
6836 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 3.02 Mo] - (.Innovative Solutions - Daily Health Check.) - (12.17.0.33) = C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe     [07/04/2017 22:38:08]    CPU Usage:0 %
6696 | [Owner : Système | Parent : 904(services.exe) | 0.11 Mo] - (. - .) - (0.0.0.0) = C:\Program Files\Common Files\Innovative Solutions\Advanced Uninstaller\InnovativeSolutions_monitor_Svr.exe     [07/04/2017 22:38:32]    CPU Usage:0 %
6872 | [Owner : widen-finalis | Parent : 7504() | 0.06 Mo] - (.Innovative Solutions - Application Starter.) - (1.0.0.6) = C:\Program Files\Innovative Solutions\DriverMax\innostp.exe     [07/04/2017 12:11:39]    CPU Usage:0 %
7080 | [Owner : widen-finalis | Parent : 7924() | 0.83 Mo] - (.IObit - Advanced SystemCare 10.) - (10.2.0.721) = C:\Program Files\IObit\Advanced SystemCare\ASC.exe     [08/04/2017 09:34:54]    CPU Usage:0 %
7564 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 0.08 Mo] - (.Malwarebytes                                                 - Malwarebytes                                                .) - (3.0.6.1469) = G:\Download\mb3-setup-consumer-3.0.6.1469-1096.exe     [10/04/2017 10:39:23]    CPU Usage:0 %
4420 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 3.54 Mo] - (. - ZHPCleane.) - (2017.4.10.62) = G:\Download\ZHPCleaner.exe     [10/04/2017 10:38:48]    CPU Usage:0 %
8000 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 0.08 Mo] - (.Malwarebytes                                                 - Malwarebytes                                                .) - (3.0.6.1469) = G:\Download\mb3-setup-consumer-3.0.6.1469-1096.exe     [10/04/2017 10:39:23]    CPU Usage:0 %
8120 | [Owner : widen-finalis | Parent : 8108() | 20.36 Mo] - (. - .) - (12.10.4.0) = C:\Program Files\RogueKiller\RogueKiller.exe     [10/04/2017 11:08:41]    CPU Usage:0 %
7596 | [Owner : Système | Parent : 1012(svchost.exe) | 2.91 Mo] - (.COMODO - COMODO Internet Security.) - (10.0.1.6209) = C:\Program Files\Comodo\COMODO Internet Security\cavwp.exe     [28/12/2016 01:10:34]    CPU Usage:0 %
7980 | [Owner : widen-finalis | Parent : 7216() | 0.13 Mo] - (. - DTVaultPrivacy MFC Application.) - (3.0.0.6) = C:\Users\WIDEN-~1\AppData\Local\Temp\DTVaultPrivacy30-0256-D\DTVP30_Launcher.exe     [25/09/2014 23:56:44]    CPU Usage:0 %
7508 | [Owner : widen-finalis | Parent : 4704() | 3.64 Mo] - (.ClevX, LLC - Removable Media Antivirus.) - (3.17.0.10) = E:\DriveD.exe     [02/03/2016 17:57:54]    CPU Usage:0 %
7144 | [Owner : Système | Parent : 904(services.exe) | 9.86 Mo] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe     [17/12/2016 07:07:00]    CPU Usage:0 %
4496 | [Owner : widen-finalis | Parent : 3676(taskeng.exe) | 0.08 Mo] - (.Innovative Solutions - DriverMax.) - (9.26.0.133) = C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe     [07/04/2017 12:11:42]    CPU Usage:0 %
4460 | [Owner : widen-finalis | Parent : 3936(explorer.exe) | 3.38 Mo] - (.Microsoft Corporation - Application Windows Wordpad.) - (6.1.7601.17514) = C:\Program Files\Windows NT\Accessories\wordpad.exe     [14/12/2016 19:48:54]    CPU Usage:0 %
5764 | [Owner : SERVICE LOCAL | Parent : 1376(svchost.exe) | ?????] - (.Microsoft Corporation - Isolation graphique de périphérique audio Windows .) - (6.1.7601.17514) = C:\Windows\System32\audiodg.exe     [14/12/2016 19:47:03]    CPU Usage:0 %
5624 | [Owner : Système | Parent : 904(services.exe) | 8.3 Mo] - (.Digital Wave Ltd. - Digital Wave Update Service.) - (1.0.66.315) = C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe     [10/04/2017 16:51:34]    CPU Usage:0 %
6716 | [Owner : widen-finalis | Parent : 4324() | 29.34 Mo] - (.SosVirus - QuickDiag.) - (2.4.17.1) = C:\Users\WIDEN-~1\AppData\Local\Temp\nsv6C72.tmp\quickdiag_3_02.04.17.1\quickdiag_3_02.04.17.1.exe     [10/04/2017 15:06:20]    CPU Usage:0 %
7756 | [Owner : SERVICE RÉSEAU | Parent : 1012(svchost.exe) | 7.32 Mo] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe     [14/12/2016 19:48:33]    CPU Usage:0 %

---------- | MD5

[MD5.40D777B7A95E00593EB1568C68514493] - [14/12/2016 19:48:55] - (.© Microsoft Corporation. Tous droits réservés. - Explorateur Windows.) - [2555 Ko] - (6.1.7601.17514) : C:\Windows\Explorer.exe
[MD5.AD7B9C14083B52BC532FBA5948342B98] - [14/12/2016 19:48:25] - (.© Microsoft Corporation. Tous droits réservés. - Interpréteur de commandes Windows.) - [295.5 Ko] - (6.1.7601.17514) : C:\Windows\System32\cmd.exe
[MD5.342271F6142E7C70805B8A81E1BA5F5C] - [14/07/2009 01:11:09] - (.© Microsoft Corporation. Tous droits réservés. - Processus d’exécution client-serveur.) - [6 Ko] - (6.1.7600.16385) : C:\Windows\System32\csrss.exe
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - [14/07/2009 01:43:52] - (.© Microsoft Corporation. - COM Surrogate.) - [7 Ko] - (6.1.7600.16385) : C:\Windows\System32\dllhost.exe
[MD5.2362B7281A39807F1AA3550333A194BC] - [17/12/2016 07:02:56] - (.© Microsoft Corporation. Tous droits réservés. - DLL du client API BASE Windows NT.) - [852 Ko] - (6.1.7601.19135) : C:\Windows\System32\Kernel32.dll
[MD5.7884C1EDF5BD21749C206E8C4B5DB409] - [17/12/2016 07:02:51] - (.© Microsoft Corporation. - Local Security Authority Process.) - [21.5 Ko] - (6.1.7601.19135) : C:\Windows\System32\lsass.exe
[MD5.7660F01D3B38ACA1747E397D21D790AF] - [14/12/2016 19:48:26] - (.© Microsoft Corporation. - Distributed COM Services.) - [368 Ko] - (6.1.7601.17514) : C:\Windows\System32\rpcss.dll
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - [14/07/2009 01:41:43] - (.© Microsoft Corporation. Tous droits réservés. - Processus hôte Windows (Rundll32).) - [43.5 Ko] - (6.1.7600.16385) : C:\Windows\System32\rundll32.exe
[MD5.0780A42DBD7D9969F9BF4A19AA4285B5] - [17/12/2016 07:01:23] - (.© Microsoft Corporation. Tous droits réservés. - Applications Services et Contrôleur.) - [253 Ko] - (6.1.7601.18829) : C:\Windows\System32\services.exe
[MD5.54A47F6B5E09A77E61649109C6A08866] - [14/07/2009 01:19:28] - (.© Microsoft Corporation. Tous droits réservés. - Processus hôte pour les services Windows.) - [20.5 Ko] - (6.1.7600.16385) : C:\Windows\System32\svchost.exe
[MD5.F1DD3ACAEE5E6B4BBC69BC6DF75CEF66] - [14/12/2016 19:48:39] - (.© Microsoft Corporation. Tous droits réservés. - DLL client de l’API uilisateur de Windows multi-utilisateurs.) - [792.5 Ko] - (6.1.7601.17514) : C:\Windows\System32\user32.dll
[MD5.61AC3EFDFACFDD3F0F11DD4FD4044223] - [14/12/2016 19:46:38] - (.© Microsoft Corporation. Tous droits réservés. - Application d’ouverture de session Userinit.) - [26 Ko] - (6.1.7601.17514) : C:\Windows\System32\userinit.exe
[MD5.B5C5DCAD3899512020D135600129D665] - [14/07/2009 01:36:49] - (.© Microsoft Corporation. Tous droits réservés. - Application de démarrage de Windows.) - [94 Ko] - (6.1.7600.16385) : C:\Windows\System32\Wininit.exe
[MD5.52449FD429D6053B78AE564DEF303870] - [17/12/2016 06:53:40] - (.© Microsoft Corporation. Tous droits réservés. - Application d’ouverture de session Windows.) - [297 Ko] - (6.1.7601.18540) : C:\Windows\System32\Winlogon.exe
[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - [18/12/2016 04:35:53] - (.© Microsoft Corporation. Tous droits réservés. - Ancillary Function Driver for WinSock.) - [331 Ko] - (6.1.7601.18264) : C:\Windows\System32\Drivers\afd.sys
[MD5.338C86357871C167A96AB976519BF59E] - [14/07/2009 01:11:15] - (.© Microsoft Corporation. - ATAPI IDE Miniport Driver.) - [21.08 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\atapi.sys
[MD5.DDCE686D76C2B4DB435A3AF5BD0E691D] - [17/12/2016 06:55:05] - (.© Microsoft Corporation. - ATAPI Driver Extension.) - [129.94 Ko] - (6.1.7601.18231) : C:\Windows\System32\Drivers\ataport.sys
[MD5.77EA11B065E0A8AB902D78145CA51E10] - [14/07/2009 01:11:15] - (.© Microsoft Corporation. - CD-ROM File System Driver.) - [69 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\cdfs.sys
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - [14/12/2016 19:43:25] - (.© Microsoft Corporation. - SCSI CD-ROM Driver.) - [106 Ko] - (6.1.7601.17514) : C:\Windows\System32\Drivers\cdrom.sys
[MD5.F024449C97EC1E464AAFFDA18593DB88] - [14/12/2016 19:43:21] - (.© Microsoft Corporation. - DFS Namespace Client Driver.) - [76.5 Ko] - (6.1.7601.17514) : C:\Windows\System32\Drivers\dfsc.sys
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - [14/12/2016 19:42:58] - (.© Microsoft Corporation. - High Definition Audio Bus Driver.) - [106 Ko] - (6.1.7601.17514) : C:\Windows\System32\Drivers\hdaudbus.sys
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - [14/07/2009 01:11:24] - (.© Microsoft Corporation. Tous droits réservés. - Pilote de port i8042.) - [79 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\i8042prt.sys
[MD5.287FD6BE9A9938F103789CE0267B7980] - [07/04/2017 15:31:28] - (.Copyright(C) Intel Corporation 1994-2012  - Intel Rapid Storage Technology driver - x86.) - [460.31 Ko] - (11.2.0.1006) : C:\Windows\System32\Drivers\iastor.sys
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - [14/07/2009 01:54:29] - (.© Microsoft Corporation. - IP Network Address Translator.) - [99.5 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\ipnat.sys
[MD5.E900BD16B9EE8F09609D7FBE2027B376] - [17/12/2016 07:02:53] - (.© Microsoft Corporation. - Windows NT SMB Minirdr.) - [121.5 Ko] - (6.1.7601.19135) : C:\Windows\System32\Drivers\mrxsmb.sys
[MD5.E7C54812A2AAF43316EB6930C1FFA108] - [14/12/2016 19:48:19] - (.© Microsoft Corporation. Tous droits réservés. - Pilote NDIS 6.20.) - [695.88 Ko] - (6.1.7601.17514) : C:\Windows\System32\Drivers\ndis.sys
[MD5.A00996C9BFEF29A93B9F21DBE1DC502D] - [17/12/2016 06:50:50] - (.© Microsoft Corporation. - MBT Transport driver.) - [184.5 Ko] - (6.1.7601.23451) : C:\Windows\System32\Drivers\netbt.sys
[MD5.978E7A2E4BF4E8E70D0776EF0D9E97FB] - [17/12/2016 05:56:57] - (.© Microsoft Corporation. Tous droits réservés. - Pilote du système de fichiers NT.) - [1183.94 Ko] - (6.1.7601.19116) : C:\Windows\System32\Drivers\ntfs.sys
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - [14/07/2009 01:45:35] - (.© Microsoft Corporation. Tous droits réservés. - Pilote de port parallèle.) - [77.5 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\parport.sys
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - [14/07/2009 01:54:34] - (.© Microsoft Corporation. - RAS L2TP mini-port/call-manager driver.) - [77 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\rasl2tp.sys
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - [14/07/2009 01:53:41] - (.© Microsoft Corporation. - SMB Transport driver.) - [69.5 Ko] - (6.1.7600.16385) : C:\Windows\System32\Drivers\smb.sys
[MD5.C7E41209132B9CF084CCEA8593F61328] - [17/12/2016 07:04:14] - (.© Microsoft Corporation. Tous droits réservés. - Pilote TCP/IP.) - [1279.23 Ko] - (6.1.7601.23496) : C:\Windows\System32\Drivers\tcpip.sys
[MD5.B459575348C20E8121D6039DA063C704] - [14/12/2016 19:45:19] - (.© Microsoft Corporation. - TDI Translation Driver.) - [73 Ko] - (6.1.7601.17514) : C:\Windows\System32\Drivers\tdx.sys
[MD5.F497F67932C6FA693D7DE2780631CFE7] - [14/12/2016 19:48:20] - (.© Microsoft Corporation. Tous droits réservés. - Pilote de cliché instantané du volume.) - [239.88 Ko] - (6.1.7601.17514) : C:\Windows\System32\Drivers\volsnap.sys

---------- | Locked Applications

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0000b783-f1e1-4147-a908-3dce5bdb1879}] - (CryptoPrevent) - (%appdata%\*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0014360a-2ffa-4579-a34c-53e4b8f59fcc}] - (CryptoPrevent) - (*.png.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00161a81-66ba-4a01-a802-281b20116cf9}] - (CryptoPrevent) - (*.zip.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0023c885-b575-46e8-b7a7-da2be3063e98}] - (CryptoPrevent) - (*.pptx.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{002b71dc-2b6c-4658-9280-48796847025c}] - (CryptoPrevent) - (%appdata%\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{003ebe36-b7fb-40c6-a607-a126890528f3}] - (CryptoPrevent) - (C:\Users\Public\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00407a49-db7a-4dfe-b22a-7a04d36e809b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00542d79-772b-4ed1-b32a-e7279706a445}] - (CryptoPrevent) - (*.wma.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0054a734-b723-4862-ac4c-36e9b3d57cde}] - (CryptoPrevent) - (*.doc.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00557b82-9717-47c7-90bc-b8054a87ba2d}] - (CryptoPrevent) - (C:\Users\Default\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{006c0c17-edeb-4257-a966-16f4dfa2e190}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00a00756-6dd8-4785-bbed-264c03bc44f7}] - (CryptoPrevent) - (*.bmp.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00d10b4f-dee1-4039-9efd-5cb24b1c10d0}] - (CryptoPrevent) - (%programdata%\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0125ca2a-aa0a-4c5f-b2c7-f7600e357906}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{012d1a12-7474-4d62-ac05-e6f77fc477c3}] - (CryptoPrevent) - (C:\Users\All Users\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{014b637f-849c-4f01-8bcb-e4a96ca4000f}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01546c6e-ed31-44d0-9a30-9c2167060dcb}] - (CryptoPrevent) - (*.divx.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01550049-8bb8-4d15-af0c-02e9751bc9b7}] - (CryptoPrevent) - (*.doc.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0157ca4f-00e4-40d8-b941-75f67005ddcd}] - (CryptoPrevent) - (*.ppt.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{015d6058-b7c0-4b20-b6c9-6f2e0b09a6fb}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{017b055b-5600-4235-a4cc-81f6b0205580}] - (CryptoPrevent) - (*.rtf.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0184471f-b767-4ab4-9a77-660104c916ed}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{018bef53-df47-4899-93a9-a79fa8696986}] - (CryptoPrevent) - (*.xlsx.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01924893-fee2-44e7-8d83-653702bba994}] - (CryptoPrevent) - (*.wmv.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01c70513-16fb-4501-acd9-da081128d3dc}] - (CryptoPrevent) - (*.zip.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01ceeb34-1a81-4bd1-8321-8bc82e83d0ed}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01d5bd8f-62ad-49f5-bf68-294cbae7d0e5}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{01e65642-e3b7-4b68-a156-bd7ee8244899}] - (CryptoPrevent) - (%userprofile%\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0202dd3c-b303-48af-8fee-ccae107b0baa}] - (CryptoPrevent) - (*.wma.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0211b65f-7093-4f0b-b43a-79234b74ce2a}] - (CryptoPrevent) - (*.jpg.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{021e4cf4-e4a9-4129-a478-0c200fdd0b72}] - (CryptoPrevent) - (*.xlsx.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{024db183-c79e-4bd2-be4c-d45bcd10936c}] - (CryptoPrevent) - (%userprofile%\AppData\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{02661497-f6d7-4a3b-8130-9f5bec8db0e0}] - (CryptoPrevent) - (*.ppt.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{02b43488-7559-40b2-a756-52a9b51a9720}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{02cd3be7-0abb-48fb-b95f-fcd4bc197940}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{02d94215-e301-4868-bbe1-efbb238c322b}] - (CryptoPrevent) - (*.avi.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{02e8d62c-ef6b-4608-9243-2a6ebd49ab42}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03005800-7b11-4f5c-bd3d-bbbf0948dcd9}] - (CryptoPrevent) - (C:\Users\All Users\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03090428-1fb5-42a1-ac68-4051f37bf4cb}] - (CryptoPrevent) - (C:\Users\Public\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03196439-ff83-4289-8e85-e4a11ad90522}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{032c54cf-6d11-4594-bba3-0a910068bbe6}] - (CryptoPrevent) - (*.txt.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0366c6c4-c6dc-4d23-9817-b7729dc47db2}] - (CryptoPrevent) - (*.xls.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03730b66-f3b4-4ca2-ad7c-0629f2f5d4ae}] - (CryptoPrevent) - (C:\Users\All Users\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03753ca4-926c-45dd-832e-095c8e48a843}] - (CryptoPrevent) - (*.bmp.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{038ab4b1-28f2-434c-bf13-033fa38bff13}] - (CryptoPrevent) - (%appdata%\*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03a5ebe6-95f1-4bf3-b362-bd18a9ffff21}] - (CryptoPrevent) - (*.ppt.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03b1e1c1-a0b9-4a4a-92ba-d568c4ec7362}] - (CryptoPrevent) - (*.jpeg.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03d7ee62-6912-4799-93b6-170c812f7e0f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03e97ab6-2d64-4adb-b884-1865175d00af}] - (CryptoPrevent) - (*.jpeg.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03f16d30-b3a9-42c3-8f9d-54bc60f100c4}] - (CryptoPrevent) - (*.pub.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{03f5867d-0261-467b-8b6f-453cc9e1e53d}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0401184f-f66f-4d03-a13c-e11ae52dfda7}] - (CryptoPrevent) - (*.pub.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0405dc2c-d36f-4f92-aeb5-52467b5613e8}] - (CryptoPrevent) - (%appdata%\*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04330f35-6aa6-4c91-9046-e75e118b3b01}] - (CryptoPrevent) - (C:\Users\Public\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04398bb2-e277-4f5f-ae38-47e1f62aa6de}] - (CryptoPrevent) - (*.bmp.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04420f41-3d83-4f01-adce-7d3ed4c88b6d}] - (CryptoPrevent) - (*.mp4.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04439089-ed1d-4780-a263-193fdc378a11}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04441617-3aae-42d7-80b9-40181bd7575c}] - (CryptoPrevent) - (%userprofile%\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0453f7e0-286e-4a10-8eeb-5a88ef350b95}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0459534d-cd26-4781-8b9a-cab0ddcc1818}] - (CryptoPrevent) - (*.pdf.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{045ecae7-5182-4222-ab4d-0485916578dc}] - (CryptoPrevent) - (*.avi.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0470e0c3-0953-4929-9fa8-227ca22ab04c}] - (CryptoPrevent) - (*.png.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{047cf9aa-ecb8-4672-8b0d-ed30e14abc97}] - (CryptoPrevent) - (*.divx.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04873fe8-92ec-4de5-8090-c311824afd9a}] - (CryptoPrevent) - (%appdata%\*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{049a1743-0d95-4a8c-9bfb-fa30a0b9e4f7}] - (CryptoPrevent) - (*.mp3.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04a07cd8-635c-4527-8550-342aa09f1f5f}] - (CryptoPrevent) - (*.divx.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04c0f1e6-526c-4d10-a363-9237e913f0d4}] - (CryptoPrevent) - (*.avi.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04d55d46-1363-4eda-9394-c521a59424c0}] - (CryptoPrevent) - (*.jpg.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04ded51c-857e-46ff-a408-e2d8dc59613c}] - (CryptoPrevent) - (*.avi.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04deebb2-994a-41ff-8341-f912935ba37b}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04e37bc3-4f03-4e3e-ad30-6e227b53de02}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04e70dca-319a-40d0-89a0-bcb9f985099e}] - (CryptoPrevent) - (*.pptx.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{04fd7f15-0fc6-4594-9dac-bfd5e07b79ac}] - (CryptoPrevent) - (C:\Users\Default User\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05236f9c-8a50-4d6c-a4e8-4d3e56174b41}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0531c2bb-c480-4b16-a61e-84e5cf6852b8}] - (CryptoPrevent) - (C:\Users\Public\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05390986-b446-44a7-a982-182b1d6c3dce}] - (CryptoPrevent) - (*.wav.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{054c2858-1ef6-4475-aa92-77191d18b370}] - (CryptoPrevent) - (*.divx.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{055aed7c-6996-4744-8501-5a0c1c872671}] - (CryptoPrevent) - (*.docx.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{055f33c3-a2a5-4f4e-92a0-6a27e97a38a4}] - (CryptoPrevent) - (*.rtf.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0560b7a1-5c01-4bbc-bad3-71668450d3ee}] - (CryptoPrevent) - (*.gif.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{058936af-2f09-4dac-99a6-91706db05381}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{058dab4d-7fc4-4390-839b-5ee2b41094f0}] - (CryptoPrevent) - (C:\Users\All Users\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0598bebb-2e53-4335-bbe6-60c6fc704d29}] - (CryptoPrevent) - (*\u202e*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{059d1867-40f8-4642-8497-12b4a1eade00}] - (CryptoPrevent) - (*.pdf.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05a5454e-854d-4da1-8a26-291e37e28605}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05b06700-867a-4142-a274-571f71cc360b}] - (CryptoPrevent) - (*.wma.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05b559fb-aa75-44f9-9193-35d2ff2c8aa8}] - (CryptoPrevent) - (*.zip.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05c9a859-3154-4c1d-8bf8-00ff186c3754}] - (CryptoPrevent) - (*.mp4.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05d04eb4-e104-41f2-ba31-0bacf345dcce}] - (CryptoPrevent) - (%userprofile%\AppData\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05ddb98f-331d-4597-b2db-4f7124c62fd5}] - (CryptoPrevent) - (*.rtf.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{05e6bd2c-a2ac-42bc-80af-8d08f4680a52}] - (CryptoPrevent) - (C:\Users\Public\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06041ea7-b97d-4491-b97b-b588cdfae4dd}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06061e4c-5978-450f-b554-2a384b8e4fa7}] - (CryptoPrevent) - (C:\Users\Default User\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{061151f7-3083-44eb-aed0-53a208318ba2}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06147b2d-d5ca-42ab-bf45-6944dd92e89f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{061d3ad4-03ff-4451-be8c-a62918e86b09}] - (CryptoPrevent) - (*.doc.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0631e983-5ad4-41f3-b201-68b211fb5275}] - (CryptoPrevent) - (*.xls.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0645114e-9a66-4fd9-9658-920945123e37}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0647a2b0-ab54-4efe-ab55-aab1e1968121}] - (CryptoPrevent) - (*.txt.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{065100b1-59d1-41ac-a60a-a31db015d454}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0658118e-8cb5-4bfe-9734-cfa245a76cc2}] - (CryptoPrevent) - (*.pub.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06657033-3144-4fbb-98bf-fd72e49faf16}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0684bd32-b36c-465a-94e1-36bc33d852dc}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{068f0a72-184b-4c33-b481-5e20cbd0c8b4}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06993048-0790-48e7-ba85-a4a9465465cd}] - (CryptoPrevent) - (*.divx.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{069b8a29-33a3-465a-aec6-e56646050700}] - (CryptoPrevent) - (*.jpeg.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{069f0c9e-9c02-409b-8dc4-1686811c6812}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06b452b4-42c3-46f5-b340-90ba1273184a}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06bdd73e-52fa-4602-a511-bf365a74853f}] - (CryptoPrevent) - (C:\Users\Default\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06c81644-9ae3-4e4c-8711-687a593e83a1}] - (CryptoPrevent) - (*.xlsx.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06cc9fe4-d5f6-4c76-af0a-2b480b94d666}] - (CryptoPrevent) - (%appdata%\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06e059d3-55f9-476a-915b-b2900fa95ecd}] - (CryptoPrevent) - (%appdata%\*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06fb0a95-1e2d-4390-8f91-bdf0fe13ca0a}] - (CryptoPrevent) - (*.pdf.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06fca701-181f-4a36-a086-188c6ff101c5}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{070780b7-6fab-43d3-a4ee-729a6b7d3531}] - (CryptoPrevent) - (*.bmp.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{071797aa-e3bd-460d-bb50-a3515bdb6e1c}] - (CryptoPrevent) - (*\u202e*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0732132a-04ae-44d5-af76-c06ecb1c6af9}] - (CryptoPrevent) - (*.doc.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{07593571-e5b1-463b-aea9-753d3beb357a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{079a445d-bf79-48b0-bd33-3033c50bd2b6}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{079d8559-00bf-4dea-a89a-bb039f393f51}] - (CryptoPrevent) - (%userprofile%\AppData\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{07b2df65-9f84-4705-8f5c-6cb51e4390a9}] - (CryptoPrevent) - (*.pptx.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{07f99dc4-6fc8-4ed9-958d-bc057ab8ab52}] - (CryptoPrevent) - (*.png.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{07fd32ff-cd60-4261-8ad6-fac88d3f1046}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{07ffdd00-894d-41e1-a44b-de68f483ecbd}] - (CryptoPrevent) - (C:\Users\Default\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08284162-3b81-47cb-9f14-f6295f2dcc9a}] - (CryptoPrevent) - (%userprofile%\AppData\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{082f463f-7e4d-4e4e-b710-a0e087dd80fd}] - (CryptoPrevent) - (*.rar.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{083d9b61-bd64-4fda-927c-1b8e01eaa938}] - (CryptoPrevent) - (*.xls.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0841caf5-3786-4829-92d2-3014709cf2f7}] - (CryptoPrevent) - (%temp%\x86.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08420210-2d12-432a-9b90-f6f6c5b74fbf}] - (CryptoPrevent) - (*.docx.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{085b12c2-8487-422d-a3f4-65e89d765f63}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08633656-e35b-489f-a3e5-420ba538252b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08686b65-5f36-4e7c-9794-d0c1da6169a8}] - (CryptoPrevent) - (*.mp3.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{086dbdff-24dd-4c5b-97a3-f971455f772a}] - (CryptoPrevent) - (*.xls.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08705aa0-3c8e-419b-a5f7-3b90211aac4a}] - (CryptoPrevent) - (%programdata%\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{088b2df7-1681-41da-a4f5-cd1b08489352}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08a31313-2005-414d-a2dc-b15c1545f813}] - (CryptoPrevent) - (*.bmp.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08a57008-9864-4319-830d-ea080700e5c1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08afd3d5-5cea-476e-afeb-9e4a68da8431}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08b66ae8-07a6-4de3-8bf6-cffb10f12161}] - (CryptoPrevent) - (*.gif.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08d06347-2b6b-42c8-8aad-2ed1208ecfcb}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{08d7255f-9d06-4f3e-b7eb-f3a95618d6b1}] - (CryptoPrevent) - (*.txt.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09280db8-2771-4606-99fc-439a4d535aba}] - (CryptoPrevent) - (*\u202e*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{094b29e7-2be5-4be0-96e0-e155e9546dde}] - (CryptoPrevent) - (*.xls.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09847749-5a02-4bce-b001-5f4dcb8caf29}] - (CryptoPrevent) - (*.7z.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0990f0d2-d5e5-4e42-acee-454e8ef28123}] - (CryptoPrevent) - (*.rar.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0992a9d4-742f-4b13-9d49-64a22e7b8cda}] - (CryptoPrevent) - (*\u202e*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09ad8922-dedd-4eed-96de-63ef0fad4adc}] - (CryptoPrevent) - (%systemdrive%\*\svchost.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09b279f7-50d5-4c11-b187-26302bdc8b9b}] - (CryptoPrevent) - (%programdata%\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09baca0f-e8a3-4616-a6c9-3de2e7e3db01}] - (CryptoPrevent) - (*.jpg.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09c95718-2140-4695-b9a5-26f3fa485442}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09dfb6a2-1ab2-493f-8dd4-42fb5dc97179}] - (CryptoPrevent) - (*.jpg.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09e4d60a-8679-46b4-be77-613ed0eeeedb}] - (CryptoPrevent) - (*.zip.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09e678a5-05c5-49e4-a747-eec0c28d957e}] - (CryptoPrevent) - (C:\Users\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09ec132a-7fef-42dd-9a1d-c5c16dc4b94a}] - (CryptoPrevent) - (C:\Users\Public\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{09fb87f1-77a6-4a8b-a8fe-7ac745da570b}] - (CryptoPrevent) - (%userprofile%\AppData\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a01cee1-fbdd-4f76-a916-7137d7f98296}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a216c00-8262-4926-8c55-c81974bb8d00}] - (CryptoPrevent) - (*.rtf.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a228c12-5bf3-4217-9602-72ea1861f51f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a28d218-8637-447b-8f3f-21eda60b86b3}] - (CryptoPrevent) - (%userprofile%\AppData\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a2a299c-df4a-4227-b37c-345dd4d416dd}] - (CryptoPrevent) - (vssadmin.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a3dfc11-183a-4266-8dce-63688ebf68ee}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a3ef37f-51f4-43b6-9a28-ef5d85ff054f}] - (CryptoPrevent) - (*.divx.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a467f2a-72c6-4f22-b47a-2d36c21cc0e6}] - (CryptoPrevent) - (*.gif.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a63626f-dbb9-4f78-a430-8552ec10c653}] - (CryptoPrevent) - (*.pdf.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a71ca8e-7f04-48e3-b4dd-3e954b7cf4d6}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0a7b2235-2839-4bdf-a66f-374a79db1f8f}] - (CryptoPrevent) - (*.xls.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0aa68dbd-cb39-4c67-841e-19d8d4bd1aa0}] - (CryptoPrevent) - (%userprofile%\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ab6b544-32a3-48b1-9b8b-9458e5946e4a}] - (CryptoPrevent) - (*.wav.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0abeeafe-e25e-4794-a284-b88038029aeb}] - (CryptoPrevent) - (C:\Users\All Users\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ac82afd-60d3-4f2b-8121-29ea107c0485}] - (CryptoPrevent) - (C:\Users\All Users\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b034126-6b60-486c-b3ed-7002ccd1e8f0}] - (CryptoPrevent) - (*.xlsx.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b0d5107-cdb3-426a-b672-405e2de421e6}] - (CryptoPrevent) - (%programdata%\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b0f0b22-7734-4d76-8e56-33aa6bc7a198}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b2b3b81-b511-4db0-bd96-c73006088c0c}] - (CryptoPrevent) - (*.ppt.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b582b4e-1603-4e69-b4eb-a93bf6a08854}] - (CryptoPrevent) - (%appdata%\*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b5ccf26-e16a-4aea-879a-72d54291f9a2}] - (CryptoPrevent) - (*.xls.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b6a1569-0c57-4255-b72d-3a75d44d8de7}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0b979311-d63b-4520-a441-a4a5249cc0d2}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0bcffa14-be0c-4469-aa05-b23279d674bc}] - (CryptoPrevent) - (*.png.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0bd56252-fce5-4bb2-a02e-285e61aa6ef9}] - (CryptoPrevent) - (*.txt.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0bd8a3a6-b7d2-4f7a-b423-a1b14b7b3423}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c064564-b1ec-482b-8ea3-e880033a4ff4}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c24787c-5ac2-4439-b125-e2ef237d936c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c29bcc1-21f3-42ea-95d9-bb4f6a4da826}] - (CryptoPrevent) - (*.avi.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c2cd18b-e7b0-4988-bdb5-0810e8badc32}] - (CryptoPrevent) - (C:\Users\Default User\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c2eacfa-36ed-4be8-be84-4fdaa923c7b0}] - (CryptoPrevent) - (*\u202e*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c3ac49e-571e-4677-9515-26e480857b49}] - (CryptoPrevent) - (%userprofile%\AppData\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c533eac-9f43-46ed-887f-9d765b870ee0}] - (CryptoPrevent) - (*.rar.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c629baa-c0b1-4ca5-8e02-e423ed569d81}] - (CryptoPrevent) - (*.doc.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c72d23d-b347-4dfb-8d65-05e0fe24d124}] - (CryptoPrevent) - (*.pdf.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c76ea67-4c07-4a2f-9366-918ad82a46f4}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c9376a9-a390-43d0-8d24-2d0ba9004c39}] - (CryptoPrevent) - (%userprofile%\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c95a94c-f67d-43da-b4a0-86f6c507a7e7}] - (CryptoPrevent) - (*.txt.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0c99a45f-3088-44c0-9af1-d3753eeb1f83}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ca3a10a-adc8-4606-b587-bd2c76e104c9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0cb5b7d1-e2a1-4a23-96b7-ae1c33f2294a}] - (CryptoPrevent) - (*.docx.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0cbc7830-e4b6-46ed-b89d-e6e5231806f6}] - (CryptoPrevent) - (*.bmp.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0cbfb988-f0dc-4359-82ea-821e8eb88743}] - (CryptoPrevent) - (%programdata%\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0cca28fb-f008-4fe1-9c17-18220ba16ae8}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0cd0dc8a-2f7e-4273-b050-748178fba512}] - (CryptoPrevent) - (*.gif.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0cd92ce6-bd1e-475e-bcff-5c5bb1cc08ba}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ce9ecb6-e8cd-41e2-91e6-0be4bbc1fc3a}] - (CryptoPrevent) - (%programdata%\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d012135-5059-4886-b577-d6fba2c49cf6}] - (CryptoPrevent) - (*.xlsx.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d0357d4-2eb5-4419-8d00-825460b3e2b6}] - (CryptoPrevent) - (C:\Users\Default User\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d0915ca-8400-4496-859d-c820166fb021}] - (CryptoPrevent) - (*.xls.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d113638-b567-45c9-830e-8f215c2cafcf}] - (CryptoPrevent) - (*.wma.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d1292e7-7066-4b2a-b307-d6fde11fdc08}] - (CryptoPrevent) - (*.wav.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d20bfb7-ace9-4f31-9f05-e01d48c3ad38}] - (CryptoPrevent) - (C:\Windows\Temp\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d34551b-f9ea-4996-a9e3-873fb7ebc07c}] - (CryptoPrevent) - (C:\Users\Public\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d3c1c42-92bd-4a9b-9adc-e87fb44f42f7}] - (CryptoPrevent) - (*.7z.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d62a251-3985-435b-aa0e-6d3cf1c2d396}] - (CryptoPrevent) - (%appdata%\*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0d6c253b-bfe8-4451-9512-eed1cb056fbd}] - (CryptoPrevent) - (*.jpg.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0da7de5c-9894-4d24-a059-48dd02876175}] - (CryptoPrevent) - (*.bmp.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0daae574-ba74-4ee4-a6dc-d98df15f41eb}] - (CryptoPrevent) - (*.rtf.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0daeff6b-155d-433b-9bfc-61f1402df8cc}] - (CryptoPrevent) - (C:\Users\Default User\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0db7e89a-7e9f-4fe7-85b5-8a1059749f54}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0dbbbee5-be9d-4837-b922-cf51acb38a03}] - (CryptoPrevent) - (*\u202e*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0dcdb3a8-edfb-4082-b717-0fa3f5228c67}] - (CryptoPrevent) - (*.doc.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0de6ead4-6595-49ef-aea5-ab3650447b38}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0de9a4b7-1c2d-4ff0-b0c2-0dabfb2f9f5b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0df28349-b7ae-407c-a3f8-40b306c06861}] - (CryptoPrevent) - (*\u202e*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0dff8664-b202-486a-9a58-b91225e2a11d}] - (CryptoPrevent) - (*.pdf.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e021c41-7d88-43a3-9e5e-d2c2add52798}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e1e886e-58e7-44b7-aa2e-dc2ba018d537}] - (CryptoPrevent) - (*.png.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e1feac5-dbd2-4eda-8185-07e7720dd5fc}] - (CryptoPrevent) - (C:\Windows\Temp\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e282d19-dfd7-4e0e-90e1-13410315251c}] - (CryptoPrevent) - (*.mp3.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e39e578-2f97-4ba8-895a-76270244890f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e67a418-312e-4d9d-a8d8-d4250711ca5b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e797cc1-63e2-42e8-ab2e-91892239eca6}] - (CryptoPrevent) - (C:\Users\All Users\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e8fecbd-f6e9-4c70-a180-b54b915c1a37}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e982ae2-8143-4244-9f97-6457c1b90d76}] - (CryptoPrevent) - (%userprofile%\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0e98c758-774d-43b5-a0ec-2d4d2157db0e}] - (CryptoPrevent) - (C:\Users\All Users\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ea86355-064f-48ec-bec0-02a0e6a6d2ee}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ead08e0-4f96-481b-833d-9a4330685352}] - (CryptoPrevent) - (C:\Users\Default User\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0eb721a9-0352-46a3-828c-bf16fb2df256}] - (CryptoPrevent) - (%appdata%\*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ebd5417-2447-446c-b095-74040c7c4b29}] - (CryptoPrevent) - (%userprofile%\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ed146cb-56f1-4136-996b-0782013d0d8c}] - (CryptoPrevent) - (%programdata%\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0ed20585-851a-48be-a576-b3be6eaeb50a}] - (CryptoPrevent) - (*.png.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0eebca0b-77ee-40cd-b67c-a95aa286f421}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f03386a-3dd1-450b-966e-9b5851d0debd}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f3416be-bccc-4bdd-814a-7298868ef979}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f3b8ef7-8a89-4d26-88cb-7d15fda9ae97}] - (CryptoPrevent) - (C:\Users\Public\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f3dff53-cd5a-40e9-be50-223d8b57253a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f400deb-27b0-45b4-be05-2aed3a555516}] - (CryptoPrevent) - (*.wav.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f49789c-cead-48a6-96c6-58bd0236d7fc}] - (CryptoPrevent) - (*.xls.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f4a61b5-8ab1-4592-8a4a-1751a277c65b}] - (CryptoPrevent) - (*.docx.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f793b82-00cf-4ff0-9766-8982685e69cc}] - (CryptoPrevent) - (%programdata%\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f9304db-de98-4e03-90ee-b01a5de333aa}] - (CryptoPrevent) - (C:\Users\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0f95fdd1-4bf2-4c2d-95cd-3c2ff6acdd07}] - (CryptoPrevent) - (*.7z.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0fb7958c-cc5d-4343-9afd-ed45665ddbb7}] - (CryptoPrevent) - (*.ppt.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0fbf66fb-08e7-4568-ba70-7a17ec706dca}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0fc20f56-1d3b-41f2-b0f1-c4a116a5279b}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{0fe6e27a-5b38-4b89-a88b-e67571f211b6}] - (CryptoPrevent) - (%programdata%\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10028e56-b544-46c2-8618-0eeea98d6e86}] - (CryptoPrevent) - (*.mp3.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10118f6c-5b78-480b-afbe-916b5435170d}] - (CryptoPrevent) - (%appdata%\*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1029c5b4-5fd5-45c3-9ea5-a859d2e999a7}] - (CryptoPrevent) - (%appdata%\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{103bce30-6e1c-4bcd-a6c6-e5e990775353}] - (CryptoPrevent) - (*.avi.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{104857e5-e33f-4fb9-8bf9-7eb835dcb3be}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1053a47d-38fd-4a2d-aa63-1b8af9ddb3ae}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1056d2da-b753-4412-a0c3-f8aa160776a2}] - (CryptoPrevent) - (*.avi.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{105ea90f-be97-4930-99ff-e9abac76fbd7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10758887-ca96-4847-8dfa-7daa0aac7acf}] - (CryptoPrevent) - (C:\Users\Public\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10788e5a-adfb-4225-a312-eef0689f3316}] - (CryptoPrevent) - (*.mp4.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1087340a-ea36-4523-b548-983a1c6daf7c}] - (CryptoPrevent) - (*.divx.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{109bac60-323c-4f2e-a4b7-0371a1e5580e}] - (CryptoPrevent) - (*.pptx.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10af81a4-621c-4148-9cba-f27ffa2560f9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10bdb3f3-37c5-45f0-83be-420f00e6032f}] - (CryptoPrevent) - (*.ppt.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10ddbab4-c3cb-4e2b-9d8b-c76d8d4bbab4}] - (CryptoPrevent) - (%programdata%\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10de2d9d-aaac-4c73-98a3-91c8decb5b2e}] - (CryptoPrevent) - (%programdata%\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10e3018f-50d5-4f35-a3a3-fa79c0a39774}] - (CryptoPrevent) - (C:\Users\Default\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1106be1b-1a64-4698-8dde-d415a322b145}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{111a7226-dca4-4c53-ad74-c0cbc81f6d99}] - (CryptoPrevent) - (*.ppt.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{111b894a-37f3-40a7-a1b0-ec9a5ceabdba}] - (CryptoPrevent) - (*.jpeg.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1122d661-681d-499a-9766-291303f219b4}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11360348-7c5f-4f6d-a2e6-fe7d93d7c619}] - (CryptoPrevent) - (*.avi.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11415d63-dfa0-4b7c-9ddf-fd4f22ab9574}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11517ef6-3a39-4834-befb-2c00e71d0868}] - (CryptoPrevent) - (*.png.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11530aac-218a-472c-9b43-ba683a040f6d}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1163ba6f-5110-4c54-8ce3-58dd2d1da7a2}] - (CryptoPrevent) - (*.rar.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1185dac3-242e-4ac1-81a8-3f9e90579947}] - (CryptoPrevent) - (C:\Users\Default User\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{118edb3b-d290-4fea-815e-fc14dcecdefd}] - (CryptoPrevent) - (*.rar.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{119ebe29-44e9-4d5f-ace4-37e63566d07e}] - (CryptoPrevent) - (*.gif.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11a73e93-9ed2-4d40-9f85-50a08735a4a0}] - (CryptoPrevent) - (*.wav.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11b5c4b7-d50c-4dba-9403-a2270ea7340f}] - (CryptoPrevent) - (*.png.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11b86c6c-8682-42e4-a8ac-278860cfba88}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11c2fef1-2e94-4773-a850-a26512c1a277}] - (CryptoPrevent) - (*.png.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11e3653d-c0a7-486f-822e-0b596055a153}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11f0b34b-ac49-491d-a323-291d5af947dd}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11fb81eb-ff65-4613-91eb-4cea24e7f025}] - (CryptoPrevent) - (%userprofile%\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11fd5548-cd3f-4a23-8e8e-69897b8c9e74}] - (CryptoPrevent) - (C:\Users\All Users\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{11fdb8d6-5f38-461e-892a-62caf378dd45}] - (CryptoPrevent) - (%userprofile%\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{120a8d10-b7f9-4113-a75d-24e7086923ea}] - (CryptoPrevent) - (*.divx.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12609122-57f2-44f2-a2bc-a9f34650fbf9}] - (CryptoPrevent) - (*.7z.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{126346c3-ebfb-49a7-8b75-211308d33ba0}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{127575e8-8134-4a3c-ba91-6ec58a37676f}] - (CryptoPrevent) - (*.bmp.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12855a2c-adac-4658-b2e1-9867e7ec6e91}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12c8cdfe-8d92-4220-9000-06df9040c93e}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12cb051c-bc96-43c4-bfdd-350a11670c88}] - (CryptoPrevent) - (*.doc.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12dff7e2-dc49-4010-9687-4cde8581afab}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12e71f10-98e2-47b4-abf7-efff30314478}] - (CryptoPrevent) - (*:\$Recycle.Bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{12f36f97-28b9-4615-859d-7dcac9a61eeb}] - (CryptoPrevent) - (C:\Users\Default User\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{130d7503-d145-470f-8c45-d85bf6d4c551}] - (CryptoPrevent) - (*.rar.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{136960fe-663c-42b6-9f42-acf7c937fd47}] - (CryptoPrevent) - (*.pub.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13785479-3f53-4af2-945a-f4d9445d71b2}] - (CryptoPrevent) - (%temp%\clean.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{138864bd-4a4a-41f2-a406-8fdbfe20c104}] - (CryptoPrevent) - (*.xlsx.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13990a78-afe3-4fac-9766-eb8083e3cc7b}] - (CryptoPrevent) - (*.jpeg.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13a501d3-8d8b-4e62-80a8-4f8f432028c9}] - (CryptoPrevent) - (*.wmv.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13c630ec-c2e7-4b4d-9c13-ff3192baf625}] - (CryptoPrevent) - (*.divx.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13ca2985-c514-482e-86af-da7f0a768b3d}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13ca3dca-4d0b-4dd3-a15e-2a034fdf59b3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13ca6d40-bbfd-4650-910a-765103420b4f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13da8aae-6bf1-4d2e-ab64-5ed286e3e450}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13dc3169-464b-4c50-aa8e-0a577601a86f}] - (CryptoPrevent) - (*.zip.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13f89146-939e-4556-b670-d684a2c7f0ae}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{13fd235d-a3d3-46d2-9032-2cf03ad55239}] - (CryptoPrevent) - (%temp%\Ponmsiyyks.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1416dc45-a48c-490f-b1b5-ad3962a7ab40}] - (CryptoPrevent) - (*.mp3.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1421bac3-02d2-4fd4-9b80-1435c4db8566}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{142cd9d7-b112-41cf-8b4d-f2514887ccc9}] - (CryptoPrevent) - (*.jpeg.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{144fe7f6-813a-4a1e-b09b-7a9d45c90c9b}] - (CryptoPrevent) - (*.rar.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14534a36-93c5-4d58-9a3e-bce5c87583ca}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14662306-f470-44ac-ad51-3707506a4993}] - (CryptoPrevent) - (*.mp4.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{146aff08-1bea-4288-b8db-69772b8f27dd}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14716446-b7a8-4a87-922d-2f4290bde0ac}] - (CryptoPrevent) - (*.divx.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1475116f-75e1-42a7-845a-6780d1d236e2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{148f367d-ec8f-430c-baa0-8b743724e116}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1498e9b3-e939-4aff-a7d4-b2491293ca58}] - (CryptoPrevent) - (*.wma.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14b45298-57b9-4ee3-8a18-7d33f3d201c1}] - (CryptoPrevent) - (*.xls.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14bb1516-1b12-4998-8519-1329a8f2cfba}] - (CryptoPrevent) - (*.docx.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14c71a5b-9149-4b27-94d3-582e5f11848b}] - (CryptoPrevent) - (%userprofile%\AppData\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14c98b6b-2fc7-425d-b081-2568e30595fd}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14e07914-bd5b-4696-b1ad-c57a3a26e334}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14e4f66b-3064-4feb-9043-d458692c292c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14fad9cf-c23e-41e8-bf9d-12c88fe91e0d}] - (CryptoPrevent) - (*.pptx.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{14fc0040-0b24-4bb0-ab0c-b86f719d4816}] - (CryptoPrevent) - (*.xls.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15031d48-0874-42eb-a5c2-8f6632f48de0}] - (CryptoPrevent) - (*.pptx.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{150a45ed-c899-4a89-8691-8123343e364e}] - (CryptoPrevent) - (C:\Users\Default User\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15363a19-924a-43e2-97cb-7502328a6332}] - (CryptoPrevent) - (%systemdrive%\netpass.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15383083-2072-42fb-9b79-12c522a85ab4}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{155ecacd-9b18-47b8-816b-bfe1d7ed47e6}] - (CryptoPrevent) - (C:\Users\Public\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1562545d-30c7-4c42-a647-cf6098ef87f7}] - (CryptoPrevent) - (*.mp3.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{159a240c-b078-4a06-9b05-3e58135e2ea9}] - (CryptoPrevent) - (*.mp3.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{159adbce-3df1-4cb4-8548-b573fc39c1b3}] - (CryptoPrevent) - (%programdata%\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15adde72-bbc5-40b5-9a09-c25f4945fee1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15c1944f-d8a7-4aa7-8ada-49f5f59ee880}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15c4eb3e-5992-433a-ae7d-9389399a276f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15c7cd50-b556-4b06-9de1-b45dc5b70ae0}] - (CryptoPrevent) - (C:\Users\Default\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15ccda29-2061-457b-9057-6335e786946c}] - (CryptoPrevent) - (C:\Users\Public\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15d4bb7b-f23f-430a-83cd-87a8a4aa3fd1}] - (CryptoPrevent) - (*.zip.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15d555e2-2824-40cc-bde3-4b129e20f52b}] - (CryptoPrevent) - (*\u202e*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15e1e5bc-8497-4f18-a028-a35f310d6e35}] - (CryptoPrevent) - (C:\Users\All Users\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{15fe21dc-2ed0-466e-98cd-be1cf65df591}] - (CryptoPrevent) - (*.bmp.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1609de34-30d8-452d-bc68-7e28127ec62d}] - (CryptoPrevent) - (C:\Users\Public\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{162009a8-7dc1-4ff3-afd9-cace99571329}] - (CryptoPrevent) - (*.7z.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{163ae446-2070-4341-92b4-04b4570efdd1}] - (CryptoPrevent) - (*.wmv.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{164d01a4-aa21-4ade-b286-9e95ccc1ee31}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1661ab60-4951-4a90-920e-66ece409b49b}] - (CryptoPrevent) - (*.pub.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16636240-d157-4077-8311-d64651d035b0}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16697214-974c-4b5f-8972-5108347a7668}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{167a2a62-e621-4de0-9edd-37fad97e12c6}] - (CryptoPrevent) - (C:\Users\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{167bd9aa-9602-4ee8-aa03-370b89117208}] - (CryptoPrevent) - (C:\Users\Public\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{167e5af7-4e45-44af-b1fe-452c83ea6591}] - (CryptoPrevent) - (*.xlsx.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{168300c8-b9dc-4fc4-937a-1412ad13f03b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1683ccf2-1b4c-4fe6-a3f8-35792c0c876f}] - (CryptoPrevent) - (*.rtf.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1685ae00-b049-487f-a554-d02dfb1ef022}] - (CryptoPrevent) - (*.gif.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{168752e4-4872-4c74-bb48-c87e6af099f1}] - (CryptoPrevent) - (*.pdf.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1693824e-ccd9-48fe-b5a7-c63e16f31c4c}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1695586c-2449-4fd2-8415-123835241c13}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{169c2aef-ba8a-45c7-b354-ec2fee1c8897}] - (CryptoPrevent) - (C:\Users\Public\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16a26965-eaac-4a5d-9259-3a27ae29340a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16c3688b-a275-42c4-af7b-71d824e9257d}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16d2c3a8-284d-41a3-ac6c-053a883c2f96}] - (CryptoPrevent) - (*.xlsx.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16e09e68-bc5c-4f73-8502-59d9e1cab6ce}] - (CryptoPrevent) - (C:\Windows\Temp\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16e344d6-0f0f-4206-a088-f23042227d81}] - (CryptoPrevent) - (*.doc.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16e68ce8-f254-48cd-9cd1-5b58ae6bdc2d}] - (CryptoPrevent) - (C:\Users\Public\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{16ec79e5-cc88-4d05-87c9-be1daeea5e39}] - (CryptoPrevent) - (*.wma.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{171b143d-1532-419e-8a56-6f1d51ebc17c}] - (CryptoPrevent) - (%temp%\windefrag.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{173e2624-3ab9-4056-821e-f5809be82baf}] - (CryptoPrevent) - (*.rar.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1751b42f-a2f9-40a2-a361-ac0b3348d339}] - (CryptoPrevent) - (*.avi.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17521543-c700-4d6e-ae00-93c5f162c2cf}] - (CryptoPrevent) - (%appdata%\*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17559afd-a6d0-4181-aced-df0b9fb29e5c}] - (CryptoPrevent) - (*.jpeg.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17589c4d-57b1-474b-b9fe-9ac478f78c20}] - (CryptoPrevent) - (*.7z.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{175cb673-90c1-4d55-863d-6bae13713c2c}] - (CryptoPrevent) - (*.xls.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1796d099-2486-401f-bd51-fe6e16e93225}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17a05d8c-a5d8-4257-b17d-0441f14e992e}] - (CryptoPrevent) - (*.wmv.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17aea582-34fd-45f1-a886-3aad17d7fa27}] - (CryptoPrevent) - (*.bmp.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17c3209e-2967-48de-9dbb-bab7f6e1a561}] - (CryptoPrevent) - (*.mp3.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17d5401d-3b16-4ddc-b4e1-79d2435ddaa6}] - (CryptoPrevent) - (*.xlsx.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17dc8928-3a37-4683-ba78-5f02243614ac}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17df8771-6d3a-496f-b76e-13b2028f98d1}] - (CryptoPrevent) - (%appdata%\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17e0475b-ad2d-4b5c-b522-ab055cdfa2f3}] - (CryptoPrevent) - (*.wmv.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{17f5a06e-e780-45da-9dba-3ff4cd0fc602}] - (CryptoPrevent) - (C:\Windows\Temp\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{181cda3d-6780-4a1b-b471-c9a5fb3f703b}] - (CryptoPrevent) - (*.png.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{183827c0-8cc3-4de9-b2ec-a66c8867a492}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{18400d73-5d3b-4e63-a9b9-b471890ab368}] - (CryptoPrevent) - (*.wma.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{18428a6b-567d-4c03-a9ed-9a6bea503e3e}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{18770fec-0426-4ff5-830c-588f6836561c}] - (CryptoPrevent) - (*.xls.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1880576e-5519-429c-80b2-af7c60436b49}] - (CryptoPrevent) - (*.jpg.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{188800ce-03b3-414f-8d8d-d4a2bd959c53}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{188ef3a1-cb2a-45c7-bd53-b6a23d5bfa34}] - (CryptoPrevent) - (C:\Windows\Temp\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{18c9c02e-5900-4005-84d1-51f6e9d45943}] - (CryptoPrevent) - (*.wmv.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{18d46926-0c6b-4e38-837f-30e00c86e652}] - (CryptoPrevent) - (%appdata%\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{18edeaad-93a2-4e04-a950-64ccf443aa5d}] - (CryptoPrevent) - (C:\Users\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19031440-e578-422a-b61a-b5d26eed95c9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{190d2b83-6192-4a42-a854-4d3db82ce2ce}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{191847e7-3014-484b-bf0a-8670fd5422c3}] - (CryptoPrevent) - (*.pdf.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{192a6fe9-c674-438b-bdd9-bd7ec7280421}] - (CryptoPrevent) - (*.7z.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1948d5f5-6b0c-4f7d-b9a0-0c4bd9a468cf}] - (CryptoPrevent) - (*.jpeg.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{194a5f2f-a98b-4498-b2eb-de42d850acdb}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19530713-f851-4e46-8422-54121331a500}] - (CryptoPrevent) - (*.ppt.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{195489a4-57c0-4741-94c9-6dd06c465e83}] - (CryptoPrevent) - (%appdata%\*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19835d39-96e4-4aac-951f-95312dcfdd0d}] - (CryptoPrevent) - (*.wav.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19a7aeef-03d4-4403-ae8a-494c94edba28}] - (CryptoPrevent) - (*.xlsx.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19c9f154-1263-4ec1-beb4-e598b54133e5}] - (CryptoPrevent) - (*.jpeg.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19e8dfbe-b615-48ad-a4e9-eb4eedfcf0f0}] - (CryptoPrevent) - (C:\Users\All Users\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19f2d9bd-d13c-4d21-993c-ce8bc7c374dc}] - (CryptoPrevent) - (*.xls.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19fae591-99ae-41ef-b855-642d183be35f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{19ffb503-88c3-4bed-b905-0d7d66ae9c09}] - (CryptoPrevent) - (*.wav.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a29d3f3-0c65-4913-96d1-0918432b2274}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a2bd0fc-3fa1-4dd7-a1af-95a365f03317}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a5a48cc-d12b-4215-8b51-ea8f9c181150}] - (CryptoPrevent) - (C:\Users\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a6c7058-9dd1-4bdf-a8c6-e63ccb412724}] - (CryptoPrevent) - (*.avi.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a7dccd7-a41e-49d1-81a8-2f6f76c88b71}] - (CryptoPrevent) - (C:\Users\Public\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a8150fc-4bd2-4e22-95b9-31170788b81e}] - (CryptoPrevent) - (*.mp4.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a93d94f-cf74-4563-a121-774d81f46b93}] - (CryptoPrevent) - (*.pub.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1a9d6b16-53c2-45fc-af79-4e4ee84af353}] - (CryptoPrevent) - (C:\Windows\Temp\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ab60bc3-a076-4df1-b89f-251618a46c84}] - (CryptoPrevent) - (*.xls.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ac0f007-e4ed-47fd-a410-b20f00b04e54}] - (CryptoPrevent) - (*\u202e*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ac8431f-5356-41c6-a23e-0b37b1a6f2be}] - (CryptoPrevent) - (*.divx.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ad91085-111b-4e8f-8d0b-ac2a43897c5e}] - (CryptoPrevent) - (*.jpg.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ae00e07-0297-488d-ad05-181468bd9664}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b114348-4606-42c6-8eec-4ad30e10865a}] - (CryptoPrevent) - (C:\Windows\Temp\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b18c4ae-7c2c-4ce8-b714-0a5df58ec65d}] - (CryptoPrevent) - (*.xls.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b2bf94f-8894-43da-977e-c23d9ac860ab}] - (CryptoPrevent) - (*.bmp.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b3230b1-125d-436d-9e58-b9d3d7654e81}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b3a70ca-c940-43ed-8aa7-e4d863498564}] - (CryptoPrevent) - (%appdata%\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b5e9e65-8c2e-4d2c-a078-212c5ac4f390}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b68cc03-fd5b-4389-a78f-19a7b418ae9f}] - (CryptoPrevent) - (*\u202e*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b78df38-a770-4d0a-b039-c9b8fd9f873b}] - (CryptoPrevent) - (*.zip.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1b9c8a5d-5f74-4c10-9e2d-7ae712d3b058}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ba1b861-5847-46f7-882b-b61dccd1ce0e}] - (CryptoPrevent) - (%programdata%\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1babff2a-efcd-442e-a730-e87e2cc6a144}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1bc4d6d6-f849-4f2d-a85c-4f6e2d291e61}] - (CryptoPrevent) - (%appdata%\*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1bdbe96b-9eb0-43a3-8d1e-d1950e51f34d}] - (CryptoPrevent) - (%temp%\RegAsm.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1beb251e-3ac8-479d-833d-f592fd55e60a}] - (CryptoPrevent) - (*.bmp.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1bf016a1-6bac-4c75-839c-a673918dbf61}] - (CryptoPrevent) - (C:\Windows\Temp\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1bf7d593-7879-422c-954f-edb058a4e569}] - (CryptoPrevent) - (%appdata%\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c2ab355-f6f9-4cc6-bf14-51550d3a7812}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c3c1840-46ed-4e5d-b866-b2e956b9700a}] - (CryptoPrevent) - (%programdata%\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c4c9389-fa46-4f25-a74a-eab859dd6058}] - (CryptoPrevent) - (*.docx.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c500cdb-d681-45fe-85a6-8ef1005ee030}] - (CryptoPrevent) - (*.png.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c6916f6-ea86-468f-b02a-f4085deda61c}] - (CryptoPrevent) - (*.bmp.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c881e0f-acea-4e07-a737-de2ea034b4d5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c8ff21f-b725-42de-be39-58a9a286b294}] - (CryptoPrevent) - (*.docx.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1c9ff381-82b8-44cf-941a-fc0e3cc7ed9b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ca162f9-5459-4f3a-9141-085e83001734}] - (CryptoPrevent) - (*.doc.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1caf8cd1-9380-479e-b579-0d7e40caa403}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1cbfe431-ee08-4661-b01f-01ce9413a021}] - (CryptoPrevent) - (*.jpg.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1cc037a1-5508-437c-bc3b-a37c94bec84f}] - (CryptoPrevent) - (C:\Users\Default\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1cdf268e-d1c2-4257-96de-b81798a4e32c}] - (CryptoPrevent) - (*.mp4.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ced824e-e53a-40af-b048-01ccb0aee9de}] - (CryptoPrevent) - (*.jpeg.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d1ff907-2a8a-458b-bf24-5c35bd85f98d}] - (CryptoPrevent) - (%appdata%\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d212395-d5df-4c1a-8d70-25afbcba89ac}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d257cc5-2056-4782-ad00-7af7509bdb59}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d569881-ca61-4d7f-a670-54b7a7ab422a}] - (CryptoPrevent) - (*.jpeg.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d585948-f40a-413b-898d-1f07c5fc4b98}] - (CryptoPrevent) - (*.wmv.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d861e1d-d0ad-453f-a0a2-e12a26c386bf}] - (CryptoPrevent) - (*.wma.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d8cae53-0aec-4b3a-962e-36a3aa1690e6}] - (CryptoPrevent) - (*.txt.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1d9fb2b7-dc67-4186-90b3-5c6ec7604a4d}] - (CryptoPrevent) - (*.avi.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1da460e6-117f-4b9d-b3dd-c3de1d93acb6}] - (CryptoPrevent) - (C:\Users\Public\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1dad48c3-b6f7-4748-8a98-f26cf7f4d149}] - (CryptoPrevent) - (*.txt.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1db4442a-2fd1-480c-b766-b2e16473280a}] - (CryptoPrevent) - (*.rtf.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1dd2222a-6a00-4c01-a9ff-0b4ff9ef5927}] - (CryptoPrevent) - (%programdata%\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1dd5e8cb-ac15-461b-9324-b085cd9efdaa}] - (CryptoPrevent) - (kek.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1df9f56b-a5b3-412d-9e5b-f72cd76c78ac}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e0a7041-d640-469d-8c2b-1a93a1d47702}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e316541-cca4-47f2-9a5b-b8f139628594}] - (CryptoPrevent) - (*.pdf.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e36a3c1-a9e4-4c57-8484-14be38384929}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e3c3105-5e96-4ef6-b7d6-26a7fa096261}] - (CryptoPrevent) - (C:\Users\All Users\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e4acb56-1069-4433-93cb-9e49938938e2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e567c5c-06b2-49f2-9789-7c15be84a855}] - (CryptoPrevent) - (*.jpg.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e80869c-1248-43b4-a3d7-c26e0ab62c9f}] - (CryptoPrevent) - (C:\Users\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e83be9e-8f8d-4166-8409-df8caab73a86}] - (CryptoPrevent) - (*.png.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e87e2d2-f683-464f-b6ee-73b57bbfe9c5}] - (CryptoPrevent) - (*.xls.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e887efd-1201-457c-873b-61ef7fa6bec3}] - (CryptoPrevent) - (*.pdf.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1e918908-da50-4164-9278-1ca6e0994f06}] - (CryptoPrevent) - (*.jpg.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1eae370b-7724-448f-b23e-e7cd47374855}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ebf8d8b-6a01-40a8-b983-836398c64cd1}] - (CryptoPrevent) - (*.jpeg.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ec09dd6-d34d-4b90-8701-d804438ad499}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ed1aeac-7e13-4e31-8156-1514c450aabb}] - (CryptoPrevent) - (*.zip.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ed64734-837d-4bd0-a337-6daea768fbcd}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ef0fafd-78a7-47d7-945f-383b9a820b83}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ef24b3a-36c0-4379-8a9e-cab5209ef7a2}] - (CryptoPrevent) - (*.mp3.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1ef5260c-4ecd-4676-8889-5fb506bc90fc}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1efb53da-dc15-483b-bcd2-cb2394134a15}] - (CryptoPrevent) - (C:\Users\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f01dbfd-48c7-430b-8449-1e4365d2874f}] - (CryptoPrevent) - (*.docx.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f046b22-0255-49d4-a75a-ec996556d776}] - (CryptoPrevent) - (*.pdf.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f0ab81a-41b1-4d17-9344-83b07d6d7b5f}] - (CryptoPrevent) - (*.7z.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f10b914-0f17-4fa8-9649-c73ae8880b00}] - (CryptoPrevent) - (*.7z.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f35d434-3266-48c8-b7f2-bd150638d1e2}] - (CryptoPrevent) - (*.txt.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f5ca1c2-bf0e-41b2-9310-ceaa5d92074c}] - (CryptoPrevent) - (C:\Windows\Temp\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f5fab4f-ee2d-45ef-bbd2-2b799f5d5554}] - (CryptoPrevent) - (*.txt.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f641dd4-8103-46bd-896e-ba099dd6fac0}] - (CryptoPrevent) - (*.bmp.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f66eb9c-c51d-48dd-9292-8b5739d798ba}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f737af9-abfd-4630-b40c-597906223d3b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f7b9787-8724-4387-8cbc-81efc00f59a9}] - (CryptoPrevent) - (*.jpeg.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1f8f17ab-61a1-4522-98a0-745da4780868}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1fadaba9-37bc-45eb-ae9c-236c2971b030}] - (CryptoPrevent) - (C:\Windows\Temp\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1fb81ffb-318f-4876-9b8e-e3e125df086b}] - (CryptoPrevent) - (C:\Users\Public\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1fc9b8f5-442f-4581-8332-94241d45b174}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1fceab2e-e70d-43f2-a53f-4700e21bd19c}] - (CryptoPrevent) - (*.pub.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1fd2af10-67fb-4a13-b7d8-c7c9f12c0392}] - (CryptoPrevent) - (*.7z.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1fe7f8ca-f6cb-45d7-abe3-cf1c73f762a2}] - (CryptoPrevent) - (*.png.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{201346d5-56cb-4ccb-8e99-7592a3da25a1}] - (CryptoPrevent) - (C:\Users\All Users\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2032ffc3-6617-4108-a9c3-00950146bfda}] - (CryptoPrevent) - (*.xlsx.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{205fabed-a420-4a6a-8882-86d925a93378}] - (CryptoPrevent) - (C:\Users\All Users\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20627959-b47b-4ff6-9ee6-99b67b618c45}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{206b9c24-0344-4ec7-9ee9-052a8fa51eed}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2073e33d-f750-4166-9da4-a19c6b387061}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20777d4d-b7c2-4631-8f43-0856c44a806b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20846473-c001-4223-ab1e-0da35cff91bb}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20ac19a4-b382-4dd2-858f-4bdbb97a679f}] - (CryptoPrevent) - (*.wmv.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20b78caf-555e-4213-bf2e-44efd0e21c3d}] - (CryptoPrevent) - (*.jpg.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20c495f3-674d-497d-aa0b-81a6970ba5ef}] - (CryptoPrevent) - (%temp%\software.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20c57513-9865-4f37-b727-963a813e4b92}] - (CryptoPrevent) - (*.7z.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{20f4b430-2f78-477a-824f-b5b96a87d5fa}] - (CryptoPrevent) - (*.gif.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21014e83-e3c1-4cd5-85fa-ab8e7306a6f5}] - (CryptoPrevent) - (*.ppt.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2116aab6-b4de-4fe7-bf23-c50a499e6a69}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{211a3030-4448-4a43-bb00-bb90c2cf97dd}] - (CryptoPrevent) - (%temp%\imgdesktop.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2129207f-66ea-49d9-9bec-51d0a0af9aad}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2138fbe4-7325-4be1-a912-c2c9ba3ac2e1}] - (CryptoPrevent) - (C:\Users\Public\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{213a1182-4db0-4f44-9b5b-f420fd2ef965}] - (CryptoPrevent) - (*.png.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{213e64d8-bc69-487f-ab04-b985513bef51}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{214d1353-0e55-4d02-8b16-57864a97ac17}] - (CryptoPrevent) - (*.gif.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{218fa472-8d21-499d-b78c-04f5dfc5474e}] - (CryptoPrevent) - (*.mp4.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2197f64b-5a55-418e-b7d0-3a3574ced131}] - (CryptoPrevent) - (%userprofile%\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2199ed67-8fd3-4275-b974-a7c0c76ffe30}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{219b9cd9-2e5a-400c-bbb3-52e577f9575b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21b4862d-2ffc-4361-9451-465d0b40c705}] - (CryptoPrevent) - (*.ppt.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21dd418f-0107-410f-908d-570a22194d4d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21e29346-391b-4d75-b4d8-bb2f873d7489}] - (CryptoPrevent) - (%programdata%\Windows\csrss.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21e8b565-eaf4-4674-9668-5054eed54f9b}] - (CryptoPrevent) - (C:\Users\Default\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21edd1d4-9258-481d-bad8-ef5a95e7c46b}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21efc4f8-fe1b-46a5-bcf4-c023332a9473}] - (CryptoPrevent) - (*.wav.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21f2c2ab-21c5-4fc8-8e3b-5397e1e5f8be}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21f2ed96-4195-4fcd-82f3-eaaa4b7cf7fa}] - (CryptoPrevent) - (*.docx.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{21f4b5c2-03b7-4003-b598-e88faad97175}] - (CryptoPrevent) - (*.wmv.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{223a793a-6e89-452c-807a-acca01312401}] - (CryptoPrevent) - (*.rtf.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2272143d-6069-413e-949f-b0cf019cddce}] - (CryptoPrevent) - (cipher.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2286e675-4679-43d2-af6a-09a267dc55a9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22a1c08d-c4f7-4e99-8a02-8f0297ed665b}] - (CryptoPrevent) - (*.7z.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22a6de8d-8da9-49de-bebb-7d55351610de}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22b419d1-aaa7-480f-b467-f4a2a3f05171}] - (CryptoPrevent) - (C:\Users\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22c6354f-e072-40bf-8a44-033e8b110100}] - (CryptoPrevent) - (*.txt.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22caffa1-d7b9-40f8-87e7-8509c69af108}] - (CryptoPrevent) - (*.xls.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22ced194-9189-4783-8ed9-70175ba189d6}] - (CryptoPrevent) - (*.txt.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{22f2bd1d-c37d-4170-a5f4-098d8368ed89}] - (CryptoPrevent) - (*.jpg.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{23097460-8c80-4fd1-a872-da88190660da}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{230bfef4-5dcc-44a0-b20b-e1648ec9aaa7}] - (CryptoPrevent) - (*.rar.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{230c03aa-46d7-477a-9a5a-0e09bf569559}] - (CryptoPrevent) - (*.pptx.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{230deec7-5fe4-47f7-a070-8207f550a94c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{231cb0b2-4188-4736-b590-918e3185497d}] - (CryptoPrevent) - (*.wav.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2325fc59-6a41-4326-8be1-8eb0eb8aa473}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{233e4cc2-9782-46b6-9f49-e5a5af6abd61}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{235eb5f0-df67-4eb9-a098-db339c0f97d9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{23638888-3f08-4e3a-9687-84accb9146f9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2374e7dc-ee5f-4110-9099-624c5388a046}] - (CryptoPrevent) - (*.rar.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{23789a1f-d14e-45dd-8810-0168d984d0b3}] - (CryptoPrevent) - (%userprofile%\AppData\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{237a79e2-fcce-44c8-bf1c-15ce4ea6621a}] - (CryptoPrevent) - (*.wmv.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2390aefb-bdda-40e7-8bad-85ffe77ab9bf}] - (CryptoPrevent) - (*.jpg.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{23d9c39c-bcb6-44d0-b21d-62d6589bdfed}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{23dae3a6-5d37-4062-ac29-4fbba14a84b4}] - (CryptoPrevent) - (%userprofile%\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2407a20d-fc04-435e-8390-45d60c980d4d}] - (CryptoPrevent) - (C:\Users\Public\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{240a96c9-1485-4201-a99c-093f7757834e}] - (CryptoPrevent) - (%programdata%\*\svchost.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{240c7494-1719-4fbc-a69b-a0aac96c74c5}] - (CryptoPrevent) - (*.doc.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{241da63e-56ae-479f-a19d-b789678bd219}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2428b026-ac52-40dd-8097-eee673824c86}] - (CryptoPrevent) - (*.avi.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{245dc217-7fca-4f7b-9687-7d6b1821e08c}] - (CryptoPrevent) - (%temp%\dsadee.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{246d61a8-0372-4471-9c8d-0f5f7f15bd4a}] - (CryptoPrevent) - (*.ppt.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{247f2e58-6159-4b87-953d-d3d5576f9391}] - (CryptoPrevent) - (*.7z.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2492a1b7-264c-4e84-9bfb-ac97caf50df0}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{249fdd86-03f6-48cd-ae7b-40bd92d25fd7}] - (CryptoPrevent) - (*.jpeg.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{24b5dae9-8943-46c6-8ce9-33c23895f88a}] - (CryptoPrevent) - (*.txt.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{24be8737-6950-4671-9389-014db91c8dca}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{24dca52a-2350-4ade-a614-9fc4bddbc89e}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{24ea8534-4bad-485b-925b-07c8a67861eb}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{24fd2491-2c96-4cd5-9923-24645b687989}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{250bdc21-83ed-4d6e-be3d-ce60bd21d8f9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{250d2f9b-f0b1-45d8-98ef-ba96c310edf4}] - (CryptoPrevent) - (*.wma.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{251a4e2e-198b-44fe-8040-aa94ddbd714a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25331f34-cf32-4fcb-886b-64d84724ddd6}] - (CryptoPrevent) - (*.rar.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{253d58c7-136d-4e43-9648-844f0720ebbc}] - (CryptoPrevent) - (*.7z.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{254ab475-387d-448a-a54d-7f2f10ea5335}] - (CryptoPrevent) - (%userprofile%\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2558f354-5199-488f-a22c-d26d2b5dc0e4}] - (CryptoPrevent) - (*.jpeg.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2568bfda-3dbb-4082-859c-47f6334c4c29}] - (CryptoPrevent) - (*.png.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{259a1a88-ee6f-44fc-8c15-d56017a01d6b}] - (CryptoPrevent) - (*.png.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25a6f6ac-fae1-47ed-b933-de7921f3b2ca}] - (CryptoPrevent) - (*.wma.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25ae6332-b9e6-4aec-bde6-08df8e4e8178}] - (CryptoPrevent) - (*.xls.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25c242f1-d541-406e-8dca-0e3b6d6d63b6}] - (CryptoPrevent) - (*.wmv.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25c53351-47c2-4697-b7e2-2b2a63df1241}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25c7b3ff-cc17-49d9-a32b-fcacfd9c5d96}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25c83f9f-15ad-49a0-9bc6-dd278817e160}] - (CryptoPrevent) - (*.pub.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25e1e5ce-f471-4b82-bb11-39eb5499211f}] - (CryptoPrevent) - (*.avi.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25eeb83f-10d3-4bc9-bc88-1dae8b141066}] - (CryptoPrevent) - (*.docx.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{25f05158-3988-4606-8b05-dafcc227d59b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{260bcc8e-b4b5-43ce-91c5-d7e2d43231b7}] - (CryptoPrevent) - (*.pub.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2611638a-e2db-4a13-ae87-4afc34cc140d}] - (CryptoPrevent) - (*.rtf.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{262760d2-920d-4707-8306-37c7614b2a33}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{26583084-4e67-42c7-be69-a7e7726b4ab7}] - (CryptoPrevent) - (C:\Users\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{265941a1-0fd1-40b9-845b-690249b773c4}] - (CryptoPrevent) - (C:\Windows\Temp\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{26680e25-a773-4110-9be2-06f873d17bf2}] - (CryptoPrevent) - (*.mp3.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{266a61f5-8c0b-4c19-a855-478577dfb0a0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2691b069-0101-4962-a5e8-d754c7f5c912}] - (CryptoPrevent) - (*.xls.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2696df3d-1b8f-44a4-91b4-b9b192c5dc3a}] - (CryptoPrevent) - (*.avi.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{26dbc7ec-92fb-43ae-bc67-fb0e96ce7fa4}] - (CryptoPrevent) - (*.jpeg.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{26eab0cf-75fc-4582-995f-9b4df3aa6a99}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{26fc6d69-2c0a-48f7-b79c-d1eccd0b7d28}] - (CryptoPrevent) - (*.bmp.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{26fecd11-7eee-418f-9ee7-4e80d649ce0f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2712c560-55c9-44c9-8411-68f58403a8d2}] - (CryptoPrevent) - (*.xlsx.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2729d3dc-62c2-4992-a4e4-b0db9dd767c5}] - (CryptoPrevent) - (*.txt.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2742ea40-84f4-4897-b273-3913186b0a0b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2750819e-6f7e-49af-8bbb-ba25d280796f}] - (CryptoPrevent) - (*.zip.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27863678-4c98-4dac-89c5-7aaf3e59962b}] - (CryptoPrevent) - (C:\Users\All Users\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{278877f5-b8bc-46eb-8ee4-e305d99747c4}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{279f66ae-e408-43d9-9cce-11c9937bb620}] - (CryptoPrevent) - (*.zip.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27cc467c-51d2-43f7-b72b-b8704e95e63c}] - (CryptoPrevent) - (*.avi.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27cf3942-f6f6-4253-8372-6988f980f5c0}] - (CryptoPrevent) - (*.pdf.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27d11bce-94e3-45dc-9a94-928e0b695405}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27d41141-3a24-41b4-841e-c7f6929908e5}] - (CryptoPrevent) - (*\u202e*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27dd382c-1e3a-4776-b3bf-ae24da693138}] - (CryptoPrevent) - (C:\Users\Default User\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27e32223-9946-48b3-b89b-cbb05fdb592e}] - (CryptoPrevent) - (*.rtf.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{27fd2884-80de-410b-a55f-8bd33a64874e}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28016693-b873-4df4-ba3a-b88cd76149cd}] - (CryptoPrevent) - (C:\Users\All Users\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2836580c-d69a-4fc8-8e26-9a48171b18d6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2845003e-b620-4797-b8f7-1b8fb62473aa}] - (CryptoPrevent) - (*.pub.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{284a07f2-cdeb-4d18-af80-5075f2a814be}] - (CryptoPrevent) - (C:\Users\Default\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{284f30a8-d5e2-4863-b743-cdbd1dcdec3a}] - (CryptoPrevent) - (*.zip.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{285886e6-d605-422a-8fab-a0733c7e5974}] - (CryptoPrevent) - (*.docx.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28605e01-5bca-4113-8487-9a2d4c83468a}] - (CryptoPrevent) - (*.png.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2862aa5e-5337-40f3-9e38-45b9fc6a885c}] - (CryptoPrevent) - (*.pdf.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2882e140-83b7-4d30-ba8e-f19a4080c1fa}] - (CryptoPrevent) - (*.doc.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{288ccc9f-9978-4d04-9a81-8e30df749c25}] - (CryptoPrevent) - (%userprofile%\AppData\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{288e968b-9d92-43ce-886e-cdf2781bfb25}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28992257-9eff-4460-ba13-4f49073db53c}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{289b5a0f-a49d-4359-836c-ed5c1828fbe8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{289bb5f6-e20a-49fa-b1e1-3f3a36372a2f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{289c7462-d4ca-4c4a-9383-27507e939926}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28a6bd98-a55a-4d15-992c-6a0093df40e0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28c28399-1f9f-4707-9414-8f61795c4cee}] - (CryptoPrevent) - (*.png.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28d9fb37-9b52-43fe-8eb6-2fd172c27b14}] - (CryptoPrevent) - (C:\Users\Public\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28da0499-ff17-45c7-830f-9501b09fcf26}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28dbdf90-589f-4570-ba14-7cc17503acfa}] - (CryptoPrevent) - (%systemdrive%\dcrypt.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28e52562-d2fc-4e9b-ac9b-397d39d9ff43}] - (CryptoPrevent) - (C:\Users\All Users\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28e60f81-fdf8-43a5-9a2e-86a3e182168f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{28f59566-bb6d-4a96-a402-4709f71e2776}] - (CryptoPrevent) - (*.xls.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{29074514-1f4f-49df-b8e9-9b0d40b6cef5}] - (CryptoPrevent) - (%appdata%\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{291bc14b-4b84-4a24-b061-2c466065b594}] - (CryptoPrevent) - (*.pdf.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2935b031-e89e-495c-8580-316151855cf7}] - (CryptoPrevent) - (*.xlsx.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{293b8204-ac03-482f-b8d6-26ee091147d2}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{296416db-2ca1-41ac-a8e2-0c08a2416f7d}] - (CryptoPrevent) - (*.wav.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{297a7d5a-eea2-46c7-9677-0b9ffc16d600}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{29a645e5-85f4-4988-a032-4499a43c3d51}] - (CryptoPrevent) - (*.pptx.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{29ac9dec-e9ca-42b8-9cc0-549e1de33408}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{29b22021-ed75-4d9d-b2c2-4e7316f68d94}] - (CryptoPrevent) - (*.mp3.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{29ccbf46-53b7-4203-b4ac-897c24b4740f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{29ecd499-bdf1-4b95-81ad-9a61f3ae3143}] - (CryptoPrevent) - (*.docx.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a23df7d-3d88-405b-9520-85c920a3b02e}] - (CryptoPrevent) - (*.wmv.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a4e6480-94f7-4bce-8a73-095311de3681}] - (CryptoPrevent) - (%appdata%\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a4fd34c-c756-49fb-a0b9-ae65a479f91d}] - (CryptoPrevent) - (*.rar.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a5cf138-2de9-43c0-b5a3-548b3e4d68fc}] - (CryptoPrevent) - (*.mp3.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a856729-5904-424d-8068-05493e9ec723}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a86f144-34b2-48a4-9911-4a24a01f5f9f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a8bd0f7-2eb2-4034-9951-1a70e9b71933}] - (CryptoPrevent) - (*.txt.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a8ee307-8efe-4afa-9f5a-186fb61ce8b1}] - (CryptoPrevent) - (*.wav.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a95b660-6e45-4a8f-a04a-047e48a69f43}] - (CryptoPrevent) - (*.rar.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2a9b75f4-ba08-4646-9e27-26cbcf790081}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2aa0d440-ef93-490f-9aa6-bbe4b045d05f}] - (CryptoPrevent) - (*.pptx.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2aa11dbe-0af0-4180-81c2-a251a196cae8}] - (CryptoPrevent) - (%programdata%\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ad7f6fb-cda4-4850-9027-ae59587f33db}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ae0f307-b8e8-486d-a089-7bcf1a66358a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2aedc09d-9863-4a6d-b1a7-2b28be4c0e12}] - (CryptoPrevent) - (*.rar.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2af0b4ae-50bd-4cdb-891f-54c3559d01ed}] - (CryptoPrevent) - (*.wav.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2afe888d-57ed-4488-8c86-6a7182d29d46}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b036491-9ffa-413a-bced-724db3f9dedf}] - (CryptoPrevent) - (C:\Users\Default User\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b1117a3-87c7-46a4-a488-b89a52bcb4a5}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b181efd-575f-4557-a982-b1f8a3cc44de}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b2203b1-6751-4780-9580-de927c710083}] - (CryptoPrevent) - (*.wav.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b25c594-8124-4b01-8533-9349be8d80d2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b475762-8315-49e7-9bd4-6776aaf8d86b}] - (CryptoPrevent) - (*.jpeg.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b64d10d-81f8-4b9b-935f-b04635991f58}] - (CryptoPrevent) - (*.xlsx.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b7703d3-a6c8-448b-b8a5-3fefb23305d2}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2b8cdd30-b4a2-4ea5-b0c3-93997f5fa801}] - (CryptoPrevent) - (*.wma.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2bad2ecf-b5b1-44f6-949d-9c00865bf6ac}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2bafa233-3e51-4e43-8875-e162e9070071}] - (CryptoPrevent) - (*.jpeg.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2bb364fd-952d-4acf-a9bd-25307d82849a}] - (CryptoPrevent) - (*.pptx.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2bc77d2e-172e-4031-82a3-f7b484270d21}] - (CryptoPrevent) - (C:\Users\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2bfa10be-624b-4717-8343-54d96df1b4ca}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c026b71-01f6-4994-a4e1-0c3d87e64a60}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c0fb056-1fad-40d6-8df2-e00b990595be}] - (CryptoPrevent) - (C:\Windows\Temp\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c307389-c580-4f7b-99b0-db3c1b98a8b8}] - (CryptoPrevent) - (*.pub.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c33d8fa-0750-436d-ba0a-f61ac7e24cb1}] - (CryptoPrevent) - (*.jpeg.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c35e4f7-662b-4dac-97e9-5b962e40191b}] - (CryptoPrevent) - (*.ppt.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c4f7e8a-e37c-4172-bd0e-536982c422e8}] - (CryptoPrevent) - (*.wmv.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c5459b5-402e-4b1e-be0e-159e189ebf3a}] - (CryptoPrevent) - (*.wmv.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c781042-1341-4c3f-8c97-ea99d0a07d34}] - (CryptoPrevent) - (%appdata%\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c7affd8-e8c5-40ae-8d3c-ca9f0a0695b0}] - (CryptoPrevent) - (C:\Users\Default User\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2c9c9918-58a5-452c-bec7-9009f14fbb84}] - (CryptoPrevent) - (*.txt.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ca35de4-2614-4ad2-9e56-9a91c1cf525f}] - (CryptoPrevent) - (*.gif.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cab5916-cda2-4fff-bd3d-206cda51a73b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cb15eac-b02f-4260-a75e-c6786ca974ed}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cb3d594-f268-401c-87f0-c6380615b6b8}] - (CryptoPrevent) - (*.jpeg.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cc310df-0036-488d-99ef-e1aace74f70f}] - (CryptoPrevent) - (%userprofile%\AppData\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cd5ee3b-ded3-4441-b564-dea99b1140d6}] - (CryptoPrevent) - (*.wav.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ce86966-7ebb-4a89-905f-05e3d74ca10c}] - (CryptoPrevent) - (C:\Users\Default\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cf00417-0395-448a-8ddc-05e553a80187}] - (CryptoPrevent) - (%userprofile%\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cfc9162-bcc5-45cf-9b15-a2012b5ffca7}] - (CryptoPrevent) - (C:\Users\Public\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2cfe1647-e1f5-484e-807e-2f7cf795f2ab}] - (CryptoPrevent) - (*.avi.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d05ccad-1fab-4b90-a121-9cffc01eebbc}] - (CryptoPrevent) - (*.gif.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d13c2bf-4c15-4a35-a076-02bfe1dcd682}] - (CryptoPrevent) - (*.rtf.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d1cc983-8c37-42d5-bdfc-2bcac05823c8}] - (CryptoPrevent) - (%userprofile%\AppData\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d2e77be-3635-484f-a404-1ebc4cdbea23}] - (CryptoPrevent) - (*.ppt.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d4539fb-905e-4241-8430-6dd8161f4a08}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d4e659a-a0e1-4a6f-baa8-89efd266e0b8}] - (CryptoPrevent) - (*.divx.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d544bc4-d55a-454c-9fcb-bcca2b7c6fe6}] - (CryptoPrevent) - (*.pdf.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d5e8e2e-607d-476d-b797-e775507d497a}] - (CryptoPrevent) - (*.jpeg.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d65cb79-ed3a-44bf-9bec-6cbe6d0bbfc0}] - (CryptoPrevent) - (*.gif.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d6d1c7e-0e71-45b6-8e65-77b3bda8ae05}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2d827dd3-57d2-475c-8061-3f989b23e46e}] - (CryptoPrevent) - (*.doc.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2da2e33e-797d-4334-9ac3-45ebcd84aa2a}] - (CryptoPrevent) - (*.jpeg.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2dd1b8b8-1886-4582-9c50-7661123bc99f}] - (CryptoPrevent) - (C:\Users\All Users\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2de64126-5267-44f9-866d-cee2afed7b65}] - (CryptoPrevent) - (C:\Users\Default User\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2dfeac90-5c6e-42d1-8eff-8ee2a1a43646}] - (CryptoPrevent) - (C:\Users\Public\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2e2c47cd-cffc-4856-8385-26f8e9868ac1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2e37195b-f6a3-4fc5-8d1a-3cb837905f33}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2e565ff0-8081-4e8a-807a-b40b85812a58}] - (CryptoPrevent) - (*.bmp.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2e5cb1f6-08c0-40c3-bb96-762b182735df}] - (CryptoPrevent) - (C:\Users\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2e60feea-9750-4f37-b817-6693f72f3216}] - (CryptoPrevent) - (*.avi.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2e8c8d0e-a5ad-4b44-9cc4-13859f5522c6}] - (CryptoPrevent) - (*.avi.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2eab86cb-7331-4841-a8f1-5a517d402e15}] - (CryptoPrevent) - (*.wav.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2eb569a6-e411-449b-b18e-182b85f88596}] - (CryptoPrevent) - (*.mp3.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ec49ddb-2272-41bb-bd52-07408856df54}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ecbbefe-e188-4c19-9386-bd37aa413b06}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ee43c33-6841-425c-b8ce-695a4a485493}] - (CryptoPrevent) - (*.divx.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ee626d4-d4ff-4996-8c5e-11a0403b9885}] - (CryptoPrevent) - (*.rar.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2eeb14b3-966d-48cb-8d0f-ad57dfa20e20}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2ef96c61-e4cb-4408-b6fa-3fcc2b4784cd}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2eff5217-f4c2-4d89-b5b0-da02db3d784e}] - (CryptoPrevent) - (%programdata%\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2f44165c-3c39-4fa0-9ee7-d87361be799a}] - (CryptoPrevent) - (*.rtf.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2f4e6457-c5e6-4074-94d8-50bd780fcdb8}] - (CryptoPrevent) - (*.rar.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2f561d4e-701a-401f-9343-729c7b16bafe}] - (CryptoPrevent) - (*.zip.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2f9aec50-7764-4be6-b986-34d320a9e724}] - (CryptoPrevent) - (%userprofile%\AppData\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fc28825-39d7-4350-97c6-9f16f13ee80d}] - (CryptoPrevent) - (*.gif.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fc6b80b-29a1-4e99-ba64-09f38c3fc7cf}] - (CryptoPrevent) - (*\u202e*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fd40901-8863-47e5-a7fb-53cc088b4c55}] - (CryptoPrevent) - (%userprofile%\AppData\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fd9a3bf-6027-4539-8e20-553cc7bd6a18}] - (CryptoPrevent) - (*.zip.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fe1537b-e02c-462b-871f-a10c486f87d7}] - (CryptoPrevent) - (%programdata%\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fe8163a-477e-4779-a756-e3869e6eae6f}] - (CryptoPrevent) - (*.wav.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2fee6e5e-f336-4a48-b712-a817108a6fc7}] - (CryptoPrevent) - (*.wmv.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{303b7e3f-55de-48a9-bfb7-8974f2264bca}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30516bd0-f933-424e-97de-ffdf65233b6e}] - (CryptoPrevent) - (*.mp3.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{305342f7-5fad-44a1-b2e9-2b36b692de5a}] - (CryptoPrevent) - (*.wma.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3054fd16-f8c2-465a-ac3c-3da04702f8a9}] - (CryptoPrevent) - (*.pptx.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{306d5873-8790-4a01-bd0a-41177bcd94f4}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30760a1d-4718-4a13-9e2e-5fa166d00677}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3078cc00-346e-4e1a-adde-5650c134f6ce}] - (CryptoPrevent) - (%userprofile%\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30a5dcd9-41a2-45f4-ab11-d5a9e7ff176d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30acae85-1ae6-403e-a5ac-d179d79045c0}] - (CryptoPrevent) - (C:\Users\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30b3fd80-5adb-45de-be82-9218d8abca67}] - (CryptoPrevent) - (C:\Users\Default User\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30b6bf1c-8a83-497e-90ed-e7ca280d395f}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{30b9d606-b9dd-48d1-a165-13302c9bcf98}] - (CryptoPrevent) - (*.mp4.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3104dccd-ecfa-47ca-8a13-20d075a7f931}] - (CryptoPrevent) - (*.pptx.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3112c084-b1bb-462c-9192-aa58f9a86431}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{311c17f3-3377-4bc7-83e5-c6d2e8c999b1}] - (CryptoPrevent) - (*.avi.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{313812ea-aea7-43e3-8727-beca0492fd25}] - (CryptoPrevent) - (*.ppt.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{313a0444-3327-4b3e-b118-35ecef805780}] - (CryptoPrevent) - (%appdata%\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{314fa054-515d-4f97-9259-3af114c80b60}] - (CryptoPrevent) - (*\u202e*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{315156e8-c5f6-4162-9c78-c71c16c62e1f}] - (CryptoPrevent) - (*.bmp.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3153db71-40f1-499d-9ccc-a496d2f025d8}] - (CryptoPrevent) - (*.divx.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3175154f-8d8f-436c-9c78-108e1306decc}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3189b995-1a95-49b5-83d1-d116df51a674}] - (CryptoPrevent) - (*.wmv.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3195727d-3665-4164-b025-4e0f0cfca0ad}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{31a94b1e-98ff-4bbe-89b6-a4cfa2f4d536}] - (CryptoPrevent) - (*.gif.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{31beaeec-789b-40c0-a2ca-9a0789daccfa}] - (CryptoPrevent) - (*\u202e*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{31e5be0b-8ae6-4545-b767-febdccd726d8}] - (CryptoPrevent) - (C:\Users\Default\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{31f5a593-223c-4aff-baad-07979b5a1c4d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{31fc5c1e-17be-4485-85a1-a01830ff68d6}] - (CryptoPrevent) - (*.zip.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{320d44cf-1ea5-4e3a-a961-c541aa879d96}] - (CryptoPrevent) - (*.xls.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32535eb5-6d29-48b8-9bc6-58da84b6304b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3266bc35-4d26-417a-918c-9d8c36dda715}] - (CryptoPrevent) - (C:\Users\All Users\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3266f0d0-6e0f-4915-81a7-9e1e012ce062}] - (CryptoPrevent) - (*.mp3.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{326732c7-9e7e-4903-a38e-1312cf212a0d}] - (CryptoPrevent) - (*.avi.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{329fc1a6-1ede-485e-95f3-60adedd5b3a0}] - (CryptoPrevent) - (*.rar.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32a42f49-bbd9-418e-a8a6-09a3f44bf8de}] - (CryptoPrevent) - (*.avi.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32a4a69b-ea82-4caf-99cd-91ac3e0f7d81}] - (CryptoPrevent) - (C:\Windows\Temp\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32a71f87-f9cb-4392-bed6-7588c5adf120}] - (CryptoPrevent) - (C:\Users\Public\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32b95dfb-f1dd-46a0-9ad9-8e595e1226f4}] - (CryptoPrevent) - (C:\Users\Public\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32ca300e-5803-4b80-b594-d125aa2b7a98}] - (CryptoPrevent) - (%userprofile%\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32cc9149-c546-422a-9fe3-41be4394c580}] - (CryptoPrevent) - (C:\Users\Public\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32da5252-8ddd-403e-a5da-ee3716cc3155}] - (CryptoPrevent) - (*.pdf.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32f6cadc-b379-4970-916c-3c13060e44df}] - (CryptoPrevent) - (*.jpg.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32fa3e5a-3241-4ab2-9d87-55b7d12275e0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{32fe0aaf-e379-4d04-a6f2-1004843bbfbd}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{331dc905-f6e7-4e8a-bcc4-2a64e652343d}] - (CryptoPrevent) - (%userprofile%\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3321109b-1ac7-4827-9f7c-698713ea48cb}] - (CryptoPrevent) - (*.ppt.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33256afd-7bd1-40d8-99da-772ad18d2892}] - (CryptoPrevent) - (*.gif.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3343ce61-4b00-4ce7-9a37-79753c6b7d08}] - (CryptoPrevent) - (*.7z.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3359a01f-2ff7-4b59-b164-98d558b9b3f7}] - (CryptoPrevent) - (*.ppt.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{336c653c-e9cc-4ad4-8b3a-71301d76cc22}] - (CryptoPrevent) - (C:\Users\All Users\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3371be23-450b-466a-a7f3-ef1b01ee94fd}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33798bcb-0c94-43dd-9e27-6575431bd5c8}] - (CryptoPrevent) - (%appdata%\*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3395493d-1df7-4f2e-bc84-de486871f69c}] - (CryptoPrevent) - (C:\Users\Default\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33963244-bdb1-4162-8cc4-f1d1924c7386}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33b38181-1757-4562-b57c-0862151bad15}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33c19eeb-ec83-47ae-a449-7875c7343c3e}] - (CryptoPrevent) - (*.txt.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33c7116c-af37-486c-86b7-5664223b03a4}] - (CryptoPrevent) - (*.bmp.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33c72101-8a28-490e-b9df-42b759823cf2}] - (CryptoPrevent) - (%userprofile%\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33d12103-4e65-4691-a32f-eb4d3c70f0a6}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33d49bfd-e377-4a18-a6a0-469b333e96f2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{33fb27f2-52b7-45a7-9cfa-be8806fcf96d}] - (CryptoPrevent) - (C:\Users\Default\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34009861-130a-4d09-8c2c-19e4820ecf3f}] - (CryptoPrevent) - (*.divx.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3418e158-f73d-4449-8adf-01f9bd3815b4}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{342e436a-1527-4041-9da6-7b9a3817fcc4}] - (CryptoPrevent) - (*.wav.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{344f008b-63a7-40f8-9818-61c70f8ffdb0}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3451a66b-c6a9-4983-aed1-61d83af43c75}] - (CryptoPrevent) - (*.divx.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{345d2dda-b256-4041-bb91-595fe8cfc6b8}] - (CryptoPrevent) - (*.pptx.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{346a397c-c1b3-428f-91de-98f655a4841c}] - (CryptoPrevent) - (C:\Users\Default\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{347adcb6-72be-4e33-814e-6cacc483199e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{348cb83b-8c28-4d3c-b4c8-c96cd7bdccf8}] - (CryptoPrevent) - (C:\Windows\Temp\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{349caa65-1460-4bc4-810c-7e54ba0c52b1}] - (CryptoPrevent) - (*.wmv.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34a46258-a19c-4774-8adc-b609060c7ea5}] - (CryptoPrevent) - (*.mp4.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34a777c1-2400-4621-83c5-4c04af00228d}] - (CryptoPrevent) - (C:\Users\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34a916f6-eb7f-4f6f-a6aa-47748aa49fe8}] - (CryptoPrevent) - (*.jpg.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34b47ff9-2429-488a-a718-2aced5e88353}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34b54518-c108-42ca-86e6-6cc648f76f91}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34c5b635-1ab7-4a00-aa2a-32f9f2aef33b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34c85f43-b6d0-4c84-9cfa-4b4b9ab87b8f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34cb448e-6ba7-4a01-a0df-852e55cda169}] - (CryptoPrevent) - (%userprofile%\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34cf59b9-25a2-4b2d-adf2-1846511ae70b}] - (CryptoPrevent) - (*.pub.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34e60496-6755-43a7-8079-0c568919404f}] - (CryptoPrevent) - (*.docx.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{34ecb4e8-1fb1-4123-bfec-2d6fcf810226}] - (CryptoPrevent) - (*.docx.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{35084e26-9190-44d1-a127-b3293e72f949}] - (CryptoPrevent) - (*.bmp.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{350cd9b1-5b0f-473f-841d-9f405289cda5}] - (CryptoPrevent) - (C:\Users\Public\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{351069cc-f797-419e-a2cc-36678c91171c}] - (CryptoPrevent) - (C:\Users\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3511a618-bad9-4bf2-a260-23cb1dc91fe4}] - (CryptoPrevent) - (*.pub.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3519e814-0f54-4821-8ea1-26a4bf7a4774}] - (CryptoPrevent) - (*.wma.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{352c8513-685b-4bce-9e73-cd201d027069}] - (CryptoPrevent) - (*.gif.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{353a2661-8b90-49ba-afa5-a05614a8bcc1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{354f7bec-a88a-407b-95d4-08b2536471c6}] - (CryptoPrevent) - (C:\Users\Default User\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{357766f3-e8ca-46c7-b302-905f8c7ce5a3}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{357cc67b-b05f-452a-95e6-63084f839751}] - (CryptoPrevent) - (*.zip.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3583b231-e0f9-44a4-8206-0655856b157d}] - (CryptoPrevent) - (*.bmp.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{35985e60-c960-4c0d-b0f0-30f043c062df}] - (CryptoPrevent) - (C:\Users\Default User\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{35ac430c-cba1-4a41-b460-3a31a0000004}] - (CryptoPrevent) - (%userprofile%\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{35c53639-66c5-4e6a-8391-8d8f32e1b7fe}] - (CryptoPrevent) - (*.avi.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{35e66d9a-5bc7-4f1f-974f-dcda3fd76a24}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{35ea3e50-373d-45b0-9d3f-d8450904bc2e}] - (CryptoPrevent) - (*.rar.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3610cdb2-b8db-4154-805a-ac6dab0d45a0}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3644cfc7-d763-4ee2-8d20-876e178e5896}] - (CryptoPrevent) - (*.pub.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36579202-df38-4b8e-bca3-a1cbe4cc7a61}] - (CryptoPrevent) - (C:\Windows\Temp\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36673931-894a-413b-9090-a7e1f7e47d2d}] - (CryptoPrevent) - (*.wmv.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36805d68-7573-4e66-bb06-3707b71b132c}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{368a84c6-ff29-4575-b934-67e9d6215377}] - (CryptoPrevent) - (*.mp4.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36c8f4e1-3edc-4a2f-98c0-4f37156d24cf}] - (CryptoPrevent) - (*.bmp.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36d0cc33-ff38-4304-aa9b-ecf1b254035b}] - (CryptoPrevent) - (C:\Users\All Users\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36d71c98-ebdf-4a79-bdcf-21d3951a9eaf}] - (CryptoPrevent) - (*.gif.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36eb16f8-c662-4a42-9481-e24a0d2afc4e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{36ece5be-b271-40e4-9cfd-9a6381acadd9}] - (CryptoPrevent) - (*.avi.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{370d55ed-53e1-41e2-bdc7-e2beb2535095}] - (CryptoPrevent) - (*.xls.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37408879-fa85-4fc2-b997-a724cb3dae9e}] - (CryptoPrevent) - (*.bmp.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3741612e-f6b4-4d7e-9f9c-3498a8e18e0d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{374851cb-ebdc-41bc-9249-30a092adaf9a}] - (CryptoPrevent) - (*.xlsx.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37489e5d-9022-431a-a5c7-8b03ac965770}] - (CryptoPrevent) - (*.bmp.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3749c647-543d-423b-9764-aef4b8629c94}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37715a13-7268-4e36-8d21-eec489ae1aa2}] - (CryptoPrevent) - (*.avi.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37732330-899f-4b39-a295-657d5250a23d}] - (CryptoPrevent) - (%appdata%\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{377635d5-24cc-442d-97f9-977209941d5c}] - (CryptoPrevent) - (*.rtf.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3794faee-2560-479d-b322-b03fbed2dbaf}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{379d1553-518b-4bb9-a3f1-274c892132ea}] - (CryptoPrevent) - (%appdata%\*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37a013fc-19a6-4d63-b0a3-c7f17acac567}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37b7004f-1952-4037-9106-261f9168bf26}] - (CryptoPrevent) - (*.ppt.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37dbd2f0-0084-4ee9-a0ac-8bd2220842fe}] - (CryptoPrevent) - (*.mp3.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37f4b480-6300-4a37-86b0-3488e8314e5d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{37ff5611-b734-4197-992d-ad7d5951d352}] - (CryptoPrevent) - (*.png.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38238311-5f43-4d5c-80bc-52d45ba1aeaa}] - (CryptoPrevent) - (*.mp4.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{383a1fdb-eb65-47e7-94dc-01d2c1d5ca1e}] - (CryptoPrevent) - (*.zip.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{384b339f-a2a3-4f63-92a9-156067d6475c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38569eae-29aa-410d-8a28-58370a97762e}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3860b179-b794-4c4b-8f12-cccf9dca1bd3}] - (CryptoPrevent) - (*.wmv.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3868d461-fe72-4b5e-a00a-edcb2ea271db}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38768f5b-1fad-43dc-a4c4-9286ec8f3ba0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38772679-82d0-44ef-b30b-d3477f22b1dc}] - (CryptoPrevent) - (C:\Users\Public\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{388277e4-2830-4dfb-a2fe-95fae8fc59f8}] - (CryptoPrevent) - (%appdata%\*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38830adb-baad-406d-a07d-18c150d3c419}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38979391-55c2-4935-8538-945a02fbfbd0}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38aafd4e-6a30-4e80-b489-1459ac1db914}] - (CryptoPrevent) - (*.jpeg.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38adddf5-7d37-4c88-9c9d-447e980a63b2}] - (CryptoPrevent) - (*.xls.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38bbe20a-90b2-4c2b-9a86-c25a04a6d987}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38bf01f7-06ed-4106-b8e1-fefaec814867}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38d98338-801f-4c96-b31a-f105fb59970e}] - (CryptoPrevent) - (*.pub.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38dc637d-4b3a-4254-b1b5-715630a51069}] - (CryptoPrevent) - (C:\Users\All Users\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38f8d53a-8b7d-4210-af55-2ad39f51c788}] - (CryptoPrevent) - (*.pub.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{38fec001-11cb-4b4c-8fec-57d2558be621}] - (CryptoPrevent) - (*.jpeg.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{390c3bad-3cf9-4e59-a7c5-642e106eba7e}] - (CryptoPrevent) - (*.wav.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3924bca9-8e18-4e58-9445-2349056ca7c9}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3933ed9f-0043-4d23-ad1a-5aab885d44d6}] - (CryptoPrevent) - (%userprofile%\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39343eee-6bce-4b97-b82d-8818bc54f32b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39586805-aaa7-4900-8202-65f43d821d97}] - (CryptoPrevent) - (C:\Users\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{397583b8-8ff2-49f4-9dac-b3816ab7317e}] - (CryptoPrevent) - (%temp%\IKvtxoiPx.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{397a4e38-21c5-4356-b279-3ee4e54aedea}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{397d98ae-aaf9-473b-8d89-1b620e109f56}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{397dda2d-eeb8-47f0-aad1-fed49a300bc8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39817296-3c5f-4d60-aa29-84d445a1be02}] - (CryptoPrevent) - (%userprofile%\AppData\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39848a18-d571-4591-bb5f-6a5a562d1b52}] - (CryptoPrevent) - (*.zip.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39a32a78-bab5-454d-a439-0c0b3cb92d20}] - (CryptoPrevent) - (*.docx.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39a70044-8d0d-407e-a0f7-53d96e486d0a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39aec1f1-3569-4848-ad2d-af3e84046dd8}] - (CryptoPrevent) - (*.bmp.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39cafe04-f55b-4e45-9088-0c5832beab50}] - (CryptoPrevent) - (%userprofile%\AppData\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{39dddd59-b33c-4239-990b-e607ef4e9f14}] - (CryptoPrevent) - (*.docx.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3a187ab6-911c-489d-84c9-fc2e3e0afc21}] - (CryptoPrevent) - (*.gif.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3a1fda87-8120-49c8-b873-12a67d22d548}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3a730da7-6e98-4f3c-a601-a4d097674c43}] - (CryptoPrevent) - (*.png.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3a8884fb-763e-42b1-bf72-2f4f3d6e8f90}] - (CryptoPrevent) - (*.pptx.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3a976944-d11b-4617-91ef-de4a85401880}] - (CryptoPrevent) - (C:\Users\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ab074dd-d8ca-46c9-86aa-584587d6aad3}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ac078a2-28fa-4a74-8090-818627d7f69d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ac2e1ea-c11d-4c3c-9f4e-3021e2ffb6b0}] - (CryptoPrevent) - (C:\Users\Public\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ad43ccc-224e-4535-9d5e-8fe2455eb6a3}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ad8f749-7473-43a3-b275-9d5a0e72be75}] - (CryptoPrevent) - (*.ppt.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3aeba716-3f43-4641-bf29-02ff4c05d756}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3aec25c3-34fe-459a-973e-2f8ece3abe2f}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3afeaa71-dde7-4f61-9fff-3b55588a2653}] - (CryptoPrevent) - (*.divx.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3b1a3ab1-2cb9-4ca3-8c52-bef2b15278b0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3b396034-080b-47dc-8ad4-c5486adb79b1}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3b74ad30-1477-45be-8b44-04680cbf9d9b}] - (CryptoPrevent) - (%userprofile%\AppData\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3b7ba36a-9323-4b80-b655-812feb6bcdee}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3b961853-74a6-4357-a6a8-da6482c19c58}] - (CryptoPrevent) - (*.pptx.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ba5ba7f-ab65-4e83-9335-bec51d73fe63}] - (CryptoPrevent) - (*.wma.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3baa66c9-d64e-420d-8448-791ec7001a21}] - (CryptoPrevent) - (*.rtf.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3bdb2e0f-53a3-48e4-aa2c-40535f930cd1}] - (CryptoPrevent) - (*.ppt.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3be440f2-a54f-4dc1-9cc8-7bdff685a111}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3be4932b-efc5-4ffe-a592-d19ea867d40c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3bfacfe9-89fa-4676-8eb8-b2015310a270}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c031fe1-d795-4a0a-975c-d83561707b58}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c11100b-5c50-44fa-b5f5-08be8368de94}] - (CryptoPrevent) - (*.divx.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c153865-9ada-43f3-b6d1-254eb18113e5}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c303952-618d-42db-9378-ec2e35d37d9d}] - (CryptoPrevent) - (*.wmv.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c78a27b-63ae-4e8f-9854-22cda6da59b1}] - (CryptoPrevent) - (*.divx.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c79fb22-8919-41a4-adfa-373bd8de26c7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c8b2004-f9f4-4e6e-a4b1-f1aa1d5109b9}] - (CryptoPrevent) - (*.doc.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3c9acfa7-c05e-4360-980c-6132e96079ce}] - (CryptoPrevent) - (%appdata%\*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ce43125-b041-4fd7-8906-df4debf34315}] - (CryptoPrevent) - (C:\Users\Public\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d03a14c-71d2-44e6-86bd-8ae326a336b6}] - (CryptoPrevent) - (*.wmv.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d0eea69-9587-4aa6-b1c0-6ad128eace48}] - (CryptoPrevent) - (*.pub.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d6f0b44-c817-42ea-932c-c3b6c2e5f2c4}] - (CryptoPrevent) - (*.pdf.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d75b741-a888-43ed-90dd-cc5e1df90985}] - (CryptoPrevent) - (*.ppt.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d861105-636a-4513-a0dd-a560299c05c9}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d918cd0-1be1-4cce-801b-80eea91f8d26}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3d93f9bd-2af7-4fd2-ab7b-343ddcc39a50}] - (CryptoPrevent) - (*.mp4.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3db7f6f2-2452-4fbf-aa02-c5dc927df4a3}] - (CryptoPrevent) - (*.gif.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3db8338d-c56a-40d8-bb6c-97b003f225b9}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3dc32c4a-fe78-4f2d-926d-3a2225888da0}] - (CryptoPrevent) - (*.png.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3dc35e62-e1dd-496c-8901-b519aff5ecb7}] - (CryptoPrevent) - (*.rar.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3dc65fa9-9d45-4196-be67-9d81b90e46fc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3dd5e934-b92d-4e89-9804-3b8629e318f8}] - (CryptoPrevent) - (*\u202e*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3dd7ec1c-cfda-4722-ab35-ed0eda1466b8}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3de4146a-c373-4f9b-bd10-a6c550b458be}] - (CryptoPrevent) - (*.pub.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3de4a907-8fb9-4c1b-b236-466bc9add404}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3de6251e-dcfb-4879-8bf1-42e7d7df4212}] - (CryptoPrevent) - (*.mp3.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3de86823-70b1-4dcd-8564-2c9963c12c68}] - (CryptoPrevent) - (C:\Users\Public\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3deb5eb2-e6ca-42ce-a616-57075f7f1730}] - (CryptoPrevent) - (*.7z.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3df4580f-81a3-40d5-9464-c393f25506bd}] - (CryptoPrevent) - (%programdata%\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3df4c935-ded3-407f-b6d1-f2360b101f09}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3e039bad-b47c-40b2-a8cc-b0d66c39b46c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3e05803f-4769-43e1-8bae-add2598be1ff}] - (CryptoPrevent) - (%appdata%\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3e1779d5-4e53-41de-8dd7-1d1c33c2c69d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3e2ac8b5-c833-4f2d-90b1-24e7e9ed60e8}] - (CryptoPrevent) - (*.rtf.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3e358f13-1804-4ecf-ba04-51f10cfd09db}] - (CryptoPrevent) - (*.rtf.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3e9b3c50-6773-494b-92cd-7eda4e7b1fc5}] - (CryptoPrevent) - (*.pub.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ea03ed5-fd35-4cfc-bb8e-0de6be02b50a}] - (CryptoPrevent) - (*.bmp.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ec19faa-5f1c-430f-96a9-971e94442d3d}] - (CryptoPrevent) - (*\u202e*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ec3d5aa-3f1d-452d-a69a-3e7520f81268}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ee6d989-d28d-408f-b3a4-0901fbce30c0}] - (CryptoPrevent) - (*.pdf.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ef98fe0-8fb3-4058-ba0b-ae6bed6a004f}] - (CryptoPrevent) - (*.wma.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3efc26e2-6b98-478a-a8de-848828cef155}] - (CryptoPrevent) - (C:\Users\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f06856b-d6f1-4497-b47b-56df8be08518}] - (CryptoPrevent) - (%userprofile%\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f0c4434-9e4c-403a-bdc1-d4bd4f006134}] - (CryptoPrevent) - (*.jpg.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f0fcc24-4853-41f3-a5db-efd3092e0aa5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f17e9db-b75f-43ad-94ef-7d829adc90d6}] - (CryptoPrevent) - (*.xls.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f20bd65-b4e7-4b56-917c-cc29fef64c47}] - (CryptoPrevent) - (%programdata%\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f2bb7c1-91c4-4b65-bf57-03db633ebec9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f3bed8f-c4ca-40dc-8fe5-e7079ef62350}] - (CryptoPrevent) - (*.gif.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f3d4189-ad34-4881-becf-ff4e4cf956d4}] - (CryptoPrevent) - (*.mp3.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f6b91a9-0750-4d10-bc06-977ec3bf9cb2}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f6d3e26-f542-4463-ba74-61bb29ca28ad}] - (CryptoPrevent) - (*.xlsx.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f82052a-4596-44c8-8a6d-22523dc5d001}] - (CryptoPrevent) - (C:\Users\All Users\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3f94bf35-4356-4023-b934-049371bf994a}] - (CryptoPrevent) - (C:\Users\All Users\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3fa2cd00-bf01-4ad9-acfb-77cc4809952c}] - (CryptoPrevent) - (*.mp3.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3fcd849d-df3c-4046-99d9-46e6a958bef6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3fe0115e-7071-4e1c-af81-73c8ca382d17}] - (CryptoPrevent) - (*.doc.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3fe924fb-2f45-48a3-8d9a-b6fbd12d9615}] - (CryptoPrevent) - (C:\Users\Public\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{3ff695dd-c8cf-438e-ad3b-c79c9c181e20}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{400290b4-a325-4cd6-ba2e-6401c55f003e}] - (CryptoPrevent) - (%programdata%\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{40277b93-965f-41a9-bf03-ac1533476131}] - (CryptoPrevent) - (%appdata%\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{403b8e6d-1f8f-4669-8948-0eba3233ccc8}] - (CryptoPrevent) - (*.7z.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{404e57f4-a6a3-48a4-a676-feddffa1e1a5}] - (CryptoPrevent) - (*.png.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{40591cf4-bd2d-437c-9188-8864ee25201e}] - (CryptoPrevent) - (*.xls.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{407640f7-3f8e-4353-a7b0-1858ce326398}] - (CryptoPrevent) - (C:\Users\All Users\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{408f45cb-ee13-4580-98ba-284d141042dd}] - (CryptoPrevent) - (*.zip.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4090b89d-0a7f-4eda-8482-5dd26f5486ac}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{40a0287e-d390-4317-a827-62f4a409febd}] - (CryptoPrevent) - (*.ppt.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{40b52269-1682-4675-96ab-d14dd4e14587}] - (CryptoPrevent) - (*.wmv.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{40fff3f9-1472-42dd-8f9a-4653140bed75}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{412e55dd-3f5f-4e02-b44c-42ff945da480}] - (CryptoPrevent) - (*.bmp.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{413cf805-424c-467e-9646-d1ae26aa5f96}] - (CryptoPrevent) - (*.7z.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{415f2cea-fcc4-4840-a77c-8d5783091434}] - (CryptoPrevent) - (C:\Windows\Temp\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{419a18c4-0c4f-4d64-8416-a2b7e7ca57a3}] - (CryptoPrevent) - (*.mp4.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{41c69419-a2b9-4243-8cbf-914568e970b1}] - (CryptoPrevent) - (*.bmp.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{41cf08fa-4da6-4ef9-8c2c-e7175a62493c}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{41e77a63-5951-4ddd-af47-0835854ead16}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{41f0a83d-3ec4-4c5c-b08d-379c9cfd812c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{420ac40e-224c-451c-bd6c-a966e32f5a1b}] - (CryptoPrevent) - (*\u202e*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{420d47ec-cf33-4347-9ddd-901c100b5ce3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{420d8e82-6a14-4b7c-9a31-760067aa28ea}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{421bd846-f3a4-4cd1-8585-6919812558e3}] - (CryptoPrevent) - (*.gif.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{421f121c-045a-4841-8205-18549adc5105}] - (CryptoPrevent) - (*.pdf.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4228e778-85fb-4c95-bb9a-d8df41a43543}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{422c5779-5b7c-4033-9a89-e617cbcc8c67}] - (CryptoPrevent) - (*.doc.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{423b490f-1f60-41d9-a70b-e1000c24dfe0}] - (CryptoPrevent) - (%userprofile%\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{424fcfcd-cb40-40e5-9f0c-066139618936}] - (CryptoPrevent) - (*\u202e*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4253b0ef-b916-486a-9a1c-0fa213430295}] - (CryptoPrevent) - (C:\Users\Default User\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{427d3a09-e486-4fe9-bae6-7cd85300b44b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{428650ff-9b29-4960-ba5d-755851d5b57c}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{428f17db-0fb3-4165-8da7-139e37d0f1a8}] - (CryptoPrevent) - (*.pdf.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42908af8-0ff0-4d18-80c7-abc9d670a71d}] - (CryptoPrevent) - (*.jpg.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42a130f2-0bff-49da-8f75-fd3a0febb6bc}] - (CryptoPrevent) - (*.mp4.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42bde971-42c2-4b1a-8c9d-fd2423d39841}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42c2dd77-a698-4ba0-baaa-34ac1bb66b3a}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42ccaa24-b633-4527-a8c0-239aaf55bbcd}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42d15525-7caa-4a68-aba3-c987f67c63ed}] - (CryptoPrevent) - (*.mp4.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42d2c44e-0e98-4283-88ed-60bc05183582}] - (CryptoPrevent) - (*.wav.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42dd301c-f776-4e1f-a306-ef10a5df151b}] - (CryptoPrevent) - (*.mp3.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42de9a3c-dfa8-4005-b010-53c3262b9b49}] - (CryptoPrevent) - (*.zip.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{42e3e111-4209-4e1c-8ff1-ae3141971d3f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4327c093-32ff-4226-a325-9461e8f0044b}] - (CryptoPrevent) - (%appdata%\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43407c72-564b-4d2b-ae54-295f668d4bf6}] - (CryptoPrevent) - (%appdata%\dbddbccdf.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4343eb0b-f9a2-40bf-87b6-c691354e60a1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43445b60-d6da-4f1e-82bb-0beea6e9fb1b}] - (CryptoPrevent) - (*.xlsx.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43455353-c162-413b-9aee-ebcde609ed96}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4362836c-c6f2-4f3f-87d2-14cf31d621f3}] - (CryptoPrevent) - (*.wma.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43690464-84eb-4014-a635-95024726670d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{436abb71-c041-4427-b20c-007a810af1f7}] - (CryptoPrevent) - (*.7z.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{436bdd9d-b65b-4e43-95b2-5a0e3fc7fa32}] - (CryptoPrevent) - (C:\Users\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{436c545a-560b-46c9-88a7-02566d4d0b97}] - (CryptoPrevent) - (*.zip.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{437d16d1-2717-4886-ada6-c7d74a6433b2}] - (CryptoPrevent) - (*.wav.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43a8831a-14de-4aa3-b5e9-a33adca56d1b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43adfb5c-c94a-4b25-95a1-01c34f1d341e}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43c4bdfa-aca3-42e3-b2f4-afc3d9ea4877}] - (CryptoPrevent) - (*.wmv.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43c68371-90be-426e-96be-552106072976}] - (CryptoPrevent) - (*\u202e*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{43d51afd-eea4-4b4a-bd50-8639974981cb}] - (CryptoPrevent) - (*.wma.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44352f06-5d52-4487-85d6-f9175f176df6}] - (CryptoPrevent) - (*.jpg.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4435fa37-6af5-43a3-be37-f10de2b0f540}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4469d5b6-8986-4ab2-828d-5288b97ffe81}] - (CryptoPrevent) - (*.avi.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44733331-5f2b-4395-b5c2-00669f49e05e}] - (CryptoPrevent) - (*.docx.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{447b8e20-8c60-415d-90f8-4b80b7372956}] - (CryptoPrevent) - (*.rtf.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44807982-65ab-4284-a96a-44a8ba2d6315}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4490e1c2-f34f-4764-b881-0c492971f5a2}] - (CryptoPrevent) - (*.mp3.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44bb1877-01e1-4a6d-94ae-0d77e902b391}] - (CryptoPrevent) - (*.mp4.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44c20e8d-0dab-4292-af5d-27622ce53ec9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44e2d24a-fd6d-40ed-b3e5-1a7a4fdac4b4}] - (CryptoPrevent) - (*.pdf.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44ee6063-dbb2-4691-a616-d0ab90d9ab59}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{44ff37b7-0594-4dbb-a3ed-7b47a8c86518}] - (CryptoPrevent) - (%userprofile%\AppData\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{452802e9-8d94-409a-91fb-b6656a6c44ce}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4540558e-4ecf-425d-84c8-e411ff2ea0ee}] - (CryptoPrevent) - (C:\Users\Public\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{455cace0-d8e8-4692-8733-e7e063528f10}] - (CryptoPrevent) - (%temp%\svchost.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4567051d-7a86-4207-b9e7-8da49b3b3153}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{457628d8-7403-4f75-99ae-4a450ac9d96d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{457ec72a-b08b-42bc-89b2-26ae74fc9d75}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4581b445-fe16-4fcf-aafa-50f19410f878}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{458bb3fb-e190-4471-90f3-5d35e03a3035}] - (CryptoPrevent) - (*.doc.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4595f4a7-a2c2-49a5-9ef3-960d57256017}] - (CryptoPrevent) - (%userprofile%\AppData\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{459a53bc-efb1-4b2c-a1e3-7cc8377c5862}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{45b90ebf-ceda-449a-9fc9-a03f24c2601c}] - (CryptoPrevent) - (*.wma.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{45e55a5e-5001-44f2-99ee-34071590e3f1}] - (CryptoPrevent) - (C:\Users\Default\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{45ec3bf6-1b76-4a72-8766-63ae5bca5710}] - (CryptoPrevent) - (*.bmp.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{45f42821-1610-4842-8505-104df90f9578}] - (CryptoPrevent) - (*.xls.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{45f89fac-3394-4847-90ca-b57b74058c27}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{45faca1b-9a59-436b-ab82-902ce5b5eeeb}] - (CryptoPrevent) - (C:\Windows\Temp\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4603c40f-4d01-4ce7-9c75-0bcc6d6f478b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{460aa33d-a28c-4bcf-98f0-54e2dd6fcd18}] - (CryptoPrevent) - (*.gif.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{460c1089-7179-44df-ad37-a4c5e7fc6418}] - (CryptoPrevent) - (*.avi.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4617f700-8b95-4c2f-bd26-11746b8fbb59}] - (CryptoPrevent) - (%appdata%\*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{461e3eba-46b4-4fbc-ad05-b2be0285a22e}] - (CryptoPrevent) - (*.txt.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{462dd7c6-44a2-4656-899a-689569a6a461}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{463a9d0d-be99-48bc-88a6-73d5483f1e35}] - (CryptoPrevent) - (*.avi.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{465aaf0a-0906-4367-9b90-5b1497f1219a}] - (CryptoPrevent) - (*\u202e*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{465f6346-6a9d-4a11-88cd-2837f9a68413}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4663064c-2163-4d54-b338-200924438ad5}] - (CryptoPrevent) - (*.jpeg.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4673c9b6-e093-4a4e-beee-83065145b5d9}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4677a68b-2929-4d42-a23f-44b1829af860}] - (CryptoPrevent) - (*.gif.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4687bc6b-ed96-4b2b-95ac-070afff245b5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46880226-98ce-4643-a3aa-6f2b9910bf96}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46951e8e-fc9e-44b5-bb3e-d1110d65b74b}] - (CryptoPrevent) - (%programdata%\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4696dad4-3944-4123-98b2-18c829b079a9}] - (CryptoPrevent) - (*.rar.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46971df6-cae1-4f14-a4cc-a47f87258393}] - (CryptoPrevent) - (*.xls.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46a76b4f-6e30-407a-b97b-044bdd2d1262}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46ac9fe7-1ed2-4ae1-a5b4-ed56ac367f47}] - (CryptoPrevent) - (*.pptx.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46ef5c3d-150d-4403-a891-f3c1568c835c}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{46f09e30-bd66-49c6-b5dc-330d9406df58}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{470c4162-0ee9-45fc-85b4-6081bae982c2}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47102a88-2385-4798-8d84-b29d66c0edac}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47267c6c-bc48-4be3-923c-cb1aa49673f5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\IEUpdate\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4741fa6a-6f04-4eab-8e5e-222636d16313}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4761c9ba-3307-4bf6-a925-2eded4d789cc}] - (CryptoPrevent) - (*.avi.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4778f92e-4ef5-4d7a-92fd-121674640b60}] - (CryptoPrevent) - (*.xlsx.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{478d3069-20c9-4fb0-ab8a-6c6b83a635fa}] - (CryptoPrevent) - (%appdata%\*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{479c90dd-cefb-4e94-ad75-b9639ddac342}] - (CryptoPrevent) - (C:\Users\Default User\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47aaa4b3-1507-4523-b2d2-adb68d2ab7a7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47ae3e11-d69a-4b09-ab21-d4adbfe635f6}] - (CryptoPrevent) - (%userprofile%\AppData\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47d98520-7f93-4800-9fe4-7cf7c10b4b60}] - (CryptoPrevent) - (*\u202e*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47f9c8f4-048a-4d82-8a91-70fb0a381020}] - (CryptoPrevent) - (*.xls.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{47fd8441-fc02-4ae2-a984-461172d1e1b5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{480c3a97-9524-4717-acb5-a9a63031a71a}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{482a7716-3356-4cb6-bc14-b5d312fb4ea9}] - (CryptoPrevent) - (*.mp4.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{484686d2-d5f5-4685-a40e-f72db9fb11ee}] - (CryptoPrevent) - (*.txt.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4858f0c6-1b69-45ab-b215-cd9401c102a2}] - (CryptoPrevent) - (C:\Users\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{487006c2-29e5-4f4e-8280-5b1f30cdfd6c}] - (CryptoPrevent) - (*\u202e*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{48987171-25a8-42a8-9343-6e1474f952ed}] - (CryptoPrevent) - (C:\Windows\Temp\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{48b0f6e4-018d-4708-9c2a-4f7baa85f005}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{48ca9443-f2e9-4bc4-9c0b-377a6a2ebc14}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{48d53034-bcd5-40a2-a08b-02e3371240fc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{48eede77-9ad5-40ef-aced-dc30edb8c074}] - (CryptoPrevent) - (C:\Users\Default User\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49168617-e626-48e6-863d-90c17cdb8cfa}] - (CryptoPrevent) - (*.rtf.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49188955-0121-43b7-9b1b-edca95e15881}] - (CryptoPrevent) - (*.jpg.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{491aa45d-a2b8-4f1e-8fec-4548ec019b4b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4931cb33-2de9-4026-b544-2991d438363d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4940ebd0-2acc-409a-81ab-7b96da6f3058}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49475f1e-5c33-4a2a-9b6a-c3883a4b1036}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{496e2a6d-fed5-4cde-9847-9631f811e898}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{497b4bf3-df60-4716-a18b-c9c34ab240fa}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{499e167c-4359-4d25-a48c-64ccc0d1a279}] - (CryptoPrevent) - (C:\Users\Public\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49a89056-8c50-4065-9acd-f2bfee26ee00}] - (CryptoPrevent) - (*.mp4.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49d77329-2d68-4d01-9584-3d682224cc4c}] - (CryptoPrevent) - (*.wav.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49de2827-266f-4ffc-bf4c-5da4a2cea913}] - (CryptoPrevent) - (%userprofile%\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49ef9815-5433-4a3a-9c84-5f26a53cda33}] - (CryptoPrevent) - (*.wma.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{49fad229-045d-4828-a953-aab226f486fc}] - (CryptoPrevent) - (*.gif.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a05fae6-2333-40ed-8bb2-cb43e097d889}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a10893b-eb98-4533-8cb7-cbd92770d82d}] - (CryptoPrevent) - (C:\Users\Default\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a19cf63-304b-4bc8-8519-37ac4019d8d1}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a1fb3e0-b773-455d-98fc-7e4c03c52b08}] - (CryptoPrevent) - (C:\Users\Public\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a295c1d-f3f8-45fb-95a7-341875a9d4fb}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a2a6844-15d3-4694-91a7-0cdee5270274}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a339da8-eb06-4435-baa3-c076806b88ae}] - (CryptoPrevent) - (*.rtf.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a392751-a050-4c75-817f-82a311834f43}] - (CryptoPrevent) - (%userprofile%\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a4efe7c-14e9-4748-ba30-fc414bdbbf72}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4a6e728c-be10-4a34-80de-791f8415c10e}] - (CryptoPrevent) - (*.xlsx.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ac28768-8ec2-42da-8968-5235c61efe39}] - (CryptoPrevent) - (C:\Users\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ad1692f-079c-46db-b383-a05a4a31008e}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4add1087-5054-4fda-a6d3-9291d1277cc8}] - (CryptoPrevent) - (C:\Users\Public\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4aeed222-e0df-4a9c-ae8d-5fc6b1029af7}] - (CryptoPrevent) - (*.divx.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4af0a206-b303-4612-a7e2-7b45614cc1c4}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4af9e46d-31f9-4ab7-b643-6d4838022ee0}] - (CryptoPrevent) - (*.jpg.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b03365a-a138-4e84-b10f-4bc89c4db436}] - (CryptoPrevent) - (*.doc.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b075ac3-3955-4f99-9e0a-03cb2f38c093}] - (CryptoPrevent) - (C:\Users\Public\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b3752eb-a4ad-45bc-b4d3-89311d370dfa}] - (CryptoPrevent) - (*.xls.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b385b03-a23b-4d06-a842-275fc8f7a1ee}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b3fe4b5-5292-4828-bdb2-f4f98e3661d3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b5ef0d7-71c1-400a-b221-87ec2b0f3b4b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b65a667-101a-413f-9807-e22f64f51ae6}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b7149b5-a5f3-4a33-9342-46cc510ccf71}] - (CryptoPrevent) - (*.divx.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b75d123-929f-4d6a-9631-db0938ce1ed1}] - (CryptoPrevent) - (*.bmp.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b7c4c67-44e2-4cae-b460-3d1510670b81}] - (CryptoPrevent) - (*.mp4.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b8591fe-b29f-4744-9b88-c9f7ee820861}] - (CryptoPrevent) - (*.divx.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4b882274-1142-4aa6-be71-986661742721}] - (CryptoPrevent) - (*.pptx.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bac08b4-1d87-426a-9269-ed6df2dcb121}] - (CryptoPrevent) - (%userprofile%\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4baeaa3d-cfed-4504-ac68-8535035bdc30}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bc20b38-f039-425d-8f22-407e82539bb5}] - (CryptoPrevent) - (*.pdf.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bc55a60-202f-4a28-9cd6-dd13449b578b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bc9ac09-16df-4c49-a345-0c77fed5df3d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bcb042f-b51d-479d-826d-7b35b26209df}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bcf54d0-00ce-43fd-815b-03f7ce861870}] - (CryptoPrevent) - (*.wmv.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4bdfc890-1079-4683-8dd7-e4447f1cbcb9}] - (CryptoPrevent) - (*.png.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c1709e6-ea26-450a-a614-7b105c05a190}] - (CryptoPrevent) - (*.xlsx.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c1e95e1-576a-4b13-a2ef-c7427a078908}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c244641-d66b-4a72-9142-1d44e42de658}] - (CryptoPrevent) - (*.ppt.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c288122-90a6-429b-b884-3411c81df3d1}] - (CryptoPrevent) - (%userprofile%\AppData\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c2e1e5c-8bea-4dcd-9e20-359f31ac093a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c3e87ee-bfea-4891-93a1-a0a370bc42c7}] - (CryptoPrevent) - (*.xlsx.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c41fbee-591a-46b5-8643-e01450dab264}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c45d96a-6b68-4b2e-90f3-8afcf92bb479}] - (CryptoPrevent) - (*.jpg.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c81d7bc-ecf4-4bef-912b-92fd257b7914}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4c8c7bcb-5456-4ed5-84d1-6c3da73dd7db}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ca67af5-91ae-4f9e-9614-03d5ac059209}] - (CryptoPrevent) - (*.pub.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ca88af6-ba34-4706-9a41-7e0e3ed2d977}] - (CryptoPrevent) - (C:\Users\Public\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cbaee7c-67f3-46e8-a0ab-ab6f76722db5}] - (CryptoPrevent) - (*.pdf.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cbc5775-b92c-4ced-8ef4-c68d140df16d}] - (CryptoPrevent) - (*.xls.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cc0dbc0-657f-4729-8a6e-44d93b8af140}] - (CryptoPrevent) - (%userprofile%\AppData\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cc786aa-1de3-4aaf-a840-a3abefe84f79}] - (CryptoPrevent) - (*.7z.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cd78423-94fb-4150-b361-b562614cdff9}] - (CryptoPrevent) - (*.mp3.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cd7c012-4bf6-49ea-97c3-63c5e2b57dcd}] - (CryptoPrevent) - (C:\Users\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4cf7f9b2-cb26-46a2-95c6-e18e89ad2d1b}] - (CryptoPrevent) - (C:\Users\Public\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d330d2b-3e9c-4027-b9ff-d35619915952}] - (CryptoPrevent) - (*.wmv.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d3b7277-f84f-41f1-a0dd-edcaf32a1884}] - (CryptoPrevent) - (*.png.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d4fca2f-b9ba-4976-8429-0301961c25e9}] - (CryptoPrevent) - (C:\Windows\Temp\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d51db0c-47cd-450a-a63c-514da2fecf9e}] - (CryptoPrevent) - (*.jpeg.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d607004-a4d8-492c-b868-163bfd5cd527}] - (CryptoPrevent) - (C:\Users\Public\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d75f318-5113-4037-ba80-e6d9ee4a871c}] - (CryptoPrevent) - (*\u202e*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d7a17a7-9d8f-48cb-9d68-c53344e98b79}] - (CryptoPrevent) - (%appdata%\*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d8d715d-27b0-4634-b614-bed124a3ac64}] - (CryptoPrevent) - (*.wav.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4d92788f-d9ea-45d5-bb26-38e22ff52c0d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4dac5c14-f6e7-4a86-a848-a40a18b18fef}] - (CryptoPrevent) - (*.mp4.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4db92b00-b5a2-4563-af1c-0655ef7a6d80}] - (CryptoPrevent) - (%appdata%\*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4dca270a-b1e2-4cce-8271-59913c368a0c}] - (CryptoPrevent) - (C:\Users\Default\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4dcefbd0-ec91-4424-965b-c199d767eb3e}] - (CryptoPrevent) - (*.pub.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4df4cfa4-4973-4525-9e1f-5c0b3b7ce03e}] - (CryptoPrevent) - (%appdata%\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4dffbaf9-1357-42a2-99e2-ef9439a7449b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4e192796-a9f6-403e-94f6-de3002635e9e}] - (CryptoPrevent) - (%programdata%\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4e2a45fc-ac9d-4879-974e-01ecf7830311}] - (CryptoPrevent) - (C:\Users\All Users\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4e4260b1-d526-4de9-878f-0ae7c804078b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4e427d7f-b1ef-4830-aa82-d3420d2d0c3f}] - (CryptoPrevent) - (*.wma.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4e50c152-6784-4f29-8199-17438222e8a2}] - (CryptoPrevent) - (*.pptx.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4e875117-f813-485a-846a-8a1d62ec70d3}] - (CryptoPrevent) - (*.zip.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ea4bea1-ea19-4e28-99cc-097f0d6b9b85}] - (CryptoPrevent) - (C:\Users\All Users\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4eae17aa-6b1b-4b71-9c83-9dc0bbee7bf4}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ebd2489-9168-4678-b6e0-e5edf5d06cc5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ebea87c-bb46-4d3f-aa8c-53613f856847}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ec0f110-026d-4066-a26a-3fea64f6d6d0}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ef0216a-eb74-45b6-848c-d9924e8220d1}] - (CryptoPrevent) - (C:\Users\Public\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ef3a5ee-45ab-4868-916f-4fc7ee289f72}] - (CryptoPrevent) - (*.pdf.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4ef75408-667d-41a8-a3b1-b1125425ac5d}] - (CryptoPrevent) - (%programdata%\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f054d05-e57b-473e-a083-b48f9deb71b0}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f055a50-3dd9-4992-aa4d-5c8941a57774}] - (CryptoPrevent) - (*.jpeg.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f119d97-6246-479c-987b-d35eb4100e75}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f193257-334b-49fc-ada1-8a057ffc696b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f3bb1f9-6fbd-458c-b881-652f5ce495a1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f4c14d8-18dd-4278-ad4d-bd675f605ce9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4f9ca63c-f8a5-481a-89c4-df07f8b72ab9}] - (CryptoPrevent) - (*.wmv.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4fa8177a-6c57-4cc0-a11c-db7e08d3a5d4}] - (CryptoPrevent) - (C:\Users\All Users\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4fb0cc14-9b5e-4382-aa5f-49911e6fdf39}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4fb7411a-7651-4a30-a51e-74e451975802}] - (CryptoPrevent) - (*.xlsx.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4fb7bf3f-3635-4e76-b05d-2a0fc828f8c8}] - (CryptoPrevent) - (C:\Users\All Users\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{4fc77868-6ca4-4439-9781-f45e682141a4}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5016db4d-d236-48c1-a3a2-72bd80faf746}] - (CryptoPrevent) - (%programdata%\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5038be95-3595-4081-a703-8be336dfdeda}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{503c0a18-f08f-4694-baf6-294e8ecdd39e}] - (CryptoPrevent) - (*.jpeg.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{505a90ef-dd23-44a4-abe3-96ac79e625dc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{505de598-29f1-40c6-8301-05c6bca02e47}] - (CryptoPrevent) - (C:\Users\Public\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5060f8c4-7820-4202-ad96-6fd6073ed938}] - (CryptoPrevent) - (*.ppt.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50653b5e-b7af-4b2c-bfd1-00a13e81e65f}] - (CryptoPrevent) - (%userprofile%\AppData\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{507fd854-a733-45c3-8da0-12a8198b2042}] - (CryptoPrevent) - (*.rar.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{508b5264-ecea-4b2e-98dc-b74eedff3a2b}] - (CryptoPrevent) - (*.doc.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50930109-912e-4c2d-b761-902aebce00d5}] - (CryptoPrevent) - (*.rtf.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{509527c8-e319-4f16-b79a-e9b0f1ccf463}] - (CryptoPrevent) - (*.xlsx.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{509a1536-462e-48a0-8107-df5c09b55a21}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50b56e59-24df-449a-b519-65ab0b981866}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50bb1fb9-ffd1-425f-b89c-2e6186e4bcb5}] - (CryptoPrevent) - (*.pptx.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50d225f1-b221-468d-9cea-d914e788b5dc}] - (CryptoPrevent) - (%appdata%\*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50de953c-2b7e-4de9-b18b-f7c4b08c94c8}] - (CryptoPrevent) - (*.pub.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50e17952-0f85-43f5-81b6-d1ea38d0d0de}] - (CryptoPrevent) - (*.doc.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{50e2bacf-5b88-4d87-99b0-2ad1351e0c92}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{510028d7-112b-4a01-aa5c-9101c800ad58}] - (CryptoPrevent) - (*.jpg.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5100b6b1-6eb5-4bb3-a6da-6a130c4e6ded}] - (CryptoPrevent) - (*.wav.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{511c4398-f4d6-416a-81e3-2b982960de3f}] - (CryptoPrevent) - (%appdata%\*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51311ea6-d15e-449e-bd67-2334b0773568}] - (CryptoPrevent) - (*.pub.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51377701-2111-4f17-8ba0-a8d455517cfe}] - (CryptoPrevent) - (C:\Users\Public\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{513e34bd-6454-4c3c-9d69-adee647b2fc4}] - (CryptoPrevent) - (*.ppt.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{514160ed-0d33-4854-9a78-117004334f2f}] - (CryptoPrevent) - (*.png.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5147eb9d-e9e2-4420-9438-6b849db83ad2}] - (CryptoPrevent) - (%userprofile%\AppData\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{514c96eb-5fd9-4bcf-bb71-9f620c8be3d0}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{514fff70-1795-4f8a-85d8-8fe8b0cbb1f1}] - (CryptoPrevent) - (*.pptx.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51530d08-eb2a-4c9f-bcbb-fc1cfdd7be95}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51a183bf-a3d9-4202-abc1-ba971cdc4f10}] - (CryptoPrevent) - (C:\Users\All Users\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51b206b8-785b-4eaa-949d-5536e452a50e}] - (CryptoPrevent) - (*.7z.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51b3862a-0cdd-428a-94b8-76f87a7c1e3d}] - (CryptoPrevent) - (*.jpeg.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51bd4d2f-a86e-40a5-8124-b7b312478547}] - (CryptoPrevent) - (*.docx.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{51ee27c4-e534-45c2-b5ba-552d9af892a5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52132aa8-093f-48f4-960f-76c00b3dd524}] - (CryptoPrevent) - (*.mp4.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{521721ce-e3dd-49d5-b444-60b452c4281d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{521a2cc5-7cb3-4e36-91d0-5c482c42d788}] - (CryptoPrevent) - (C:\Users\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{522d055a-3c80-4af9-b922-f259c0823370}] - (CryptoPrevent) - (*.xlsx.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52370cf1-fe63-4877-b2d7-675b4ace336f}] - (CryptoPrevent) - (*.rar.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5237c9d2-3148-4e85-a306-2a9a6ba85ece}] - (CryptoPrevent) - (*.7z.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{523fce28-7b8e-4f74-988d-22789fba965d}] - (CryptoPrevent) - (%appdata%\*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5243840d-1378-4c93-9396-e08bc53d544a}] - (CryptoPrevent) - (*.mp3.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{525f024c-ca98-4c86-ae67-54b319207651}] - (CryptoPrevent) - (*.pptx.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{526bbc11-4862-4887-8b5d-e5d99201c7b8}] - (CryptoPrevent) - (*.docx.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5278a233-29f9-4d41-a6f4-aa4916fd26a0}] - (CryptoPrevent) - (C:\Users\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{527e3301-0870-4e7f-a85e-e8ce5d1fe29f}] - (CryptoPrevent) - (C:\Windows\Temp\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{527f3046-0156-4c31-a4b5-f8a35295e22a}] - (CryptoPrevent) - (C:\Users\Public\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{528086f6-26be-4dcd-83b9-a0592a987870}] - (CryptoPrevent) - (%appdata%\*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5290bc1a-0eb0-4a24-a57c-3b184dccc0bc}] - (CryptoPrevent) - (%userprofile%\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52b8dae0-f869-4dac-b158-e5db2efe8471}] - (CryptoPrevent) - (*.rar.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52be04de-025e-46bb-9c59-88af3f27b984}] - (CryptoPrevent) - (C:\Users\All Users\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52c38045-85f7-45ed-98e9-982e4e3397fb}] - (CryptoPrevent) - (*.rar.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52e9a472-b418-49da-8c82-68835e9fb957}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52ea0597-27e3-489e-b2b4-04db999e6895}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52ec866d-fa4e-48e1-9bcb-9395e439ce29}] - (CryptoPrevent) - (C:\Windows\Temp\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{52eeda75-c781-4f0b-ad73-6c4a450fe275}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5304da56-3661-459c-ba28-a35f1d8e8a8f}] - (CryptoPrevent) - (C:\Users\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{53096e1d-c46f-4661-817d-abc592e525bc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{530a9fbb-8a73-4706-a6c8-0627b8f08098}] - (CryptoPrevent) - (%userprofile%\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{531401d9-d1ca-4cb3-a620-23789fb2c20b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{531a1dbe-0b4c-42d2-acd9-b319aeb1833d}] - (CryptoPrevent) - (*.bmp.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5320bbc9-969c-41dd-94c7-ea60e0b9e655}] - (CryptoPrevent) - (*.7z.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5340861a-c396-4758-8ea7-409fa50e5806}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{536d444f-cbd4-467a-b09e-e4dc8bd94fbf}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{537c192f-9af5-49bf-90ee-01e30e49839a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{537d03e6-8ef0-4867-b17c-44a9056ac6d1}] - (CryptoPrevent) - (%programdata%\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5389772e-3b6a-42d6-b324-a76571fa722a}] - (CryptoPrevent) - (*.doc.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{538a0235-bf37-4385-845c-9a522a262537}] - (CryptoPrevent) - (*.txt.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{538c0a95-24c6-42e0-96ac-9a0bfedcde48}] - (CryptoPrevent) - (*.pdf.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5394793a-c39b-4fc7-9656-a628e3289776}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5396299a-5998-4073-a29b-2b70d865e675}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{53d42ae1-83c2-4d49-9998-85d992af6499}] - (CryptoPrevent) - (C:\Users\Default\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{53d85748-660f-4342-9a49-dbb448988a88}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{53e8d3ba-1f56-452b-9ec4-0d2bed9d4454}] - (CryptoPrevent) - (*.7z.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54046265-e945-4e78-9d29-30fa20d64c25}] - (CryptoPrevent) - (C:\Users\All Users\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5413c1a3-dc75-48f8-8ec1-017e1285396c}] - (CryptoPrevent) - (*.avi.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{541cabe0-cfd0-4cb6-82de-cdb781382899}] - (CryptoPrevent) - (C:\Users\Default\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{541e70cd-c073-4cbb-95c5-1a6ddf00981a}] - (CryptoPrevent) - (*.rtf.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5425bd73-4f7b-4426-9ae3-8d7e8721707d}] - (CryptoPrevent) - (%temp%\bbv.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54398379-3ad9-496f-be68-573bcb4b57e8}] - (CryptoPrevent) - (*.divx.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{543fb9fc-5049-4f4f-9e7b-68c42681a57b}] - (CryptoPrevent) - (%appdata%\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5446132f-91bf-444b-b02f-7ff996cef19e}] - (CryptoPrevent) - (*.ppt.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5448b1f9-142f-4a80-9adf-585032dd6eab}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5452b766-d060-468a-bd5d-6c76b23bd02b}] - (CryptoPrevent) - (C:\Users\All Users\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5454f582-80b6-4eab-8afd-3b2a3e414c8e}] - (CryptoPrevent) - (*.xls.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54a7b30e-007b-4421-95dd-7c1665ad7243}] - (CryptoPrevent) - (*.docx.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54afcc27-b141-4e2d-981c-c73285f6421f}] - (CryptoPrevent) - (*.mp3.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54b21f1c-e582-4aff-9235-7eea829f3989}] - (CryptoPrevent) - (*.docx.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54b2b1cc-c8b2-4afa-97d6-a6efc0663a95}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54be574f-b788-44d6-ae28-dbae600aca83}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54e106d3-b31f-42ba-905f-b7c61f9f401c}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54ebe69e-2d1f-47e3-82ed-8c3910abe7a5}] - (CryptoPrevent) - (C:\Users\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{54f890c9-f3db-4091-9771-0de5353a3297}] - (CryptoPrevent) - (*.doc.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{551408d7-7e19-4fc8-919b-3994ec47a442}] - (CryptoPrevent) - (*.rar.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{551ee0d4-0125-4c76-bb0c-cd8e2a63ebc4}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55226572-5b09-4b11-9a4d-d52339bf4b1e}] - (CryptoPrevent) - (*.ppt.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{552a5f2c-e845-424f-ab83-d96f4a4a3899}] - (CryptoPrevent) - (magic.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{552a9597-517f-488a-a932-85644c91bc68}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55304384-24f1-46f9-947f-c16621fe437b}] - (CryptoPrevent) - (*.avi.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5532dc97-84aa-4516-97f2-4c93fc89482f}] - (CryptoPrevent) - (*.mp4.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55369cfd-ad7a-4fc9-af68-d59823f9a3f7}] - (CryptoPrevent) - (C:\Users\All Users\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{553e8349-5737-414a-adea-be02d6027fc5}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{554e4094-699b-42b4-bad1-7db0d79ef84b}] - (CryptoPrevent) - (*.zip.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{555bca9b-4390-4e9b-92f9-56663d7da785}] - (CryptoPrevent) - (*.zip.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55604b05-6565-45d6-9d15-0133440c4c68}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5562a745-3550-4507-b4b9-313786e663b9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55722362-83ff-48bf-af09-e832d32a4eac}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5575ac3b-81b0-4aa0-855e-7fc9ff0c3242}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55a265fe-6149-41be-a9a7-62edfd57d710}] - (CryptoPrevent) - (*.ppt.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55a681d0-2059-4a0c-bc01-79176390ac25}] - (CryptoPrevent) - (C:\Windows\Temp\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55c3731b-48d4-4b05-a3a1-dd63053861b5}] - (CryptoPrevent) - (*.gif.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55e9668e-ce7f-47dc-96e1-344349fdf9f7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55e99510-f9dc-4bcf-92d5-bc8b8cb08270}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{55ef0c1a-0e50-4b2e-a84e-3a561d1f94ff}] - (CryptoPrevent) - (*.jpeg.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5604c7d1-0766-441c-a83c-d2655ad7bdc3}] - (CryptoPrevent) - (*.png.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{562bf249-c73e-46cb-88a2-101f7f95793c}] - (CryptoPrevent) - (*.mp3.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{562d88fe-af3e-45bb-b246-deec52e60200}] - (CryptoPrevent) - (*.docx.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{563447c2-ec68-4891-a2de-07153d29ac2e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{566f0828-ca90-4e82-a6ce-054302483eb4}] - (CryptoPrevent) - (*.ppt.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{56716362-78a6-451b-903f-81f5eb0118a0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{567bb894-2331-4019-b756-2ae61a3fa708}] - (CryptoPrevent) - (%programdata%\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{568a206a-f615-4d48-815d-f74fe008dbfe}] - (CryptoPrevent) - (C:\Users\All Users\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{568f50eb-aa52-4588-8854-56d33f7d6b35}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5695591b-c2b9-41b3-96be-b985aee04572}] - (CryptoPrevent) - (*.wmv.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{56cc6017-bf4c-4434-a2a9-ddfecf8a5e21}] - (CryptoPrevent) - (%userprofile%\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{56d5989f-4318-4c90-88d4-d51d51e12101}] - (CryptoPrevent) - (C:\Users\Default User\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{56e07a68-196a-436c-a464-d6066cb18a76}] - (CryptoPrevent) - (*\u202e*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{56eadc29-a6fe-4a97-965c-a95573a4b915}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57037fe0-a3f6-4322-86c1-be0c50bd37a4}] - (CryptoPrevent) - (*.pptx.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57138c89-60e2-4f86-898e-33d06aee1be0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5735e095-e0e9-4bc6-9d37-ef8e1f626396}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5736aec7-0fc1-48d2-81e0-8f490fb58e10}] - (CryptoPrevent) - (%userprofile%\AppData\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{573c4c17-e0ef-41bf-aa3a-d32095b9c83d}] - (CryptoPrevent) - (*\u202e*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5741036b-403d-4df2-a6ba-ba80fd58f261}] - (CryptoPrevent) - (*.jpeg.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57518e92-1f90-404a-ba30-f3ab423669d9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{576eb915-9098-47b5-81b0-af85c9ba6a12}] - (CryptoPrevent) - (*.jpeg.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{577610d7-4128-4a59-bc9f-2909bbf7f2c6}] - (CryptoPrevent) - (%appdata%\*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{578049bf-d869-4441-9656-2a68c082401b}] - (CryptoPrevent) - (C:\Users\Public\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5788d5fe-6537-4d65-9a8e-ae3ace959157}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{578ae1e6-36d2-4d9c-9dac-ba19347c557b}] - (CryptoPrevent) - (*.zip.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57a3fe58-7436-475a-99d3-7dbcfd58339b}] - (CryptoPrevent) - (*.rar.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57a42437-d7a3-4734-9412-8fe4d94bbc4d}] - (CryptoPrevent) - (C:\Windows\Temp\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57a639e1-b8dc-48e3-9870-820b7570c7f4}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57aae681-764e-492c-a444-646f437ee365}] - (CryptoPrevent) - (*\u202e*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57b17456-366a-4338-8119-520e6ad6ebf1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57bd707b-2bbf-4178-92cc-ea10c16698a9}] - (CryptoPrevent) - (*.txt.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57d0ab2b-07db-48ef-8c3c-a81bdf122de0}] - (CryptoPrevent) - (*.pub.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57e76e6c-46b9-44c3-8aa2-4e3b46a4d732}] - (CryptoPrevent) - (*.rar.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57eda24b-9ff7-4a8c-a280-df5ca8008b83}] - (CryptoPrevent) - (*.avi.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{57fa5ab3-47bb-47de-a2d1-913a750c2644}] - (CryptoPrevent) - (C:\Users\All Users\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58143d08-3e47-4bf1-97f9-2440589ea5bf}] - (CryptoPrevent) - (*.mp3.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5820a20f-d59c-4ac5-8551-6b2a0d61ccf3}] - (CryptoPrevent) - (C:\Users\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58255252-aba6-4ca3-b9f1-c1cfd278c7d5}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5825f717-a240-407a-81da-70cf78955b62}] - (CryptoPrevent) - (%userprofile%\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5836c0d4-d40d-42bb-a8c6-756dd2733565}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5839f31a-3932-422d-a775-00617d768251}] - (CryptoPrevent) - (*.mp4.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{583fc1b2-cd8c-4477-8fc7-ad8309ba48bd}] - (CryptoPrevent) - (*.mp4.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5842c2c1-75df-4c3e-9668-3b97eb70a716}] - (CryptoPrevent) - (*.wmv.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5845de76-6a3f-4e08-89d4-07718281125b}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5855a1c5-3af1-4345-bac1-0d121035e107}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{585ac8fc-19b3-4ef5-888b-44b413975b10}] - (CryptoPrevent) - (*.jpg.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{585f23b5-7477-45a1-8b70-e5badd48f5eb}] - (CryptoPrevent) - (*.xlsx.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58811ebc-6dd0-490b-b5b1-258e2ca80ee7}] - (CryptoPrevent) - (*.gif.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58a1715d-0e42-4128-912c-a69dbd464f76}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58bc2057-fd99-48c2-bd86-7e8e8f8ce6cc}] - (CryptoPrevent) - (%programdata%\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58be537d-9b9b-4f9b-839b-07a1f89a8956}] - (CryptoPrevent) - (*.mp3.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58d5fa2b-658e-453c-93c1-63b3f61e342a}] - (CryptoPrevent) - (*.docx.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58db59c1-ce19-4bcf-866e-9f2ebfa08b2d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58e34180-c8ed-4d62-ad62-47682b9ca935}] - (CryptoPrevent) - (*.docx.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58e40a72-ea6c-40c7-b68e-d93bcc211d4c}] - (CryptoPrevent) - (*.bmp.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{58ed6b9f-622f-49b7-b289-c1c59e0eb7c4}] - (CryptoPrevent) - (*.ppt.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{591141f1-bfa9-472b-b9db-bb489b0b768f}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{591231cf-715d-4025-aaea-1326492ec1da}] - (CryptoPrevent) - (msoyasdx.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{592211f6-558b-4262-899e-a399f7cc5549}] - (CryptoPrevent) - (*.bmp.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5922c8f5-b0b3-459e-b2c7-d4d03d07438c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{59310a3b-c75c-4044-9e86-964ab6030c15}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{59340c7b-58e3-4cb8-a17c-3e375518438e}] - (CryptoPrevent) - (%programdata%\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{594cfa3f-dafb-4f12-a1d5-ab48d9028cac}] - (CryptoPrevent) - (*.rtf.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{594d0e50-9a6c-47a0-ab81-0cf026c46d0b}] - (CryptoPrevent) - (*.wmv.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{595c3153-adc3-4686-b6ad-594cea5f85cb}] - (CryptoPrevent) - (*.wav.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{597a07c6-504d-4831-a5b1-92049a6bf464}] - (CryptoPrevent) - (*.doc.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{598832fd-457e-4456-b656-9dc01677e5f3}] - (CryptoPrevent) - (C:\Users\Default User\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{59928f6c-ac89-40ec-ac45-4be2ef0fbbbd}] - (CryptoPrevent) - (*.docx.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{59c1a9ca-be7f-429f-a5af-495769e7b8d9}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{59e3413a-1d49-47a0-b325-6f3c042a32af}] - (CryptoPrevent) - (*.xlsx.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{59fdddac-b330-4641-bcea-04f939afe1c6}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a017a78-0a4c-4378-89ce-abdafc8ce698}] - (CryptoPrevent) - (%appdata%\*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a0a662f-2bc9-4e8f-be5d-bd3cef4ec537}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a1155f3-5aab-41ee-84d8-bc4d0fcc8016}] - (CryptoPrevent) - (*.wav.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a1318ad-29dc-4d1e-8242-28e7c3e70c7f}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a153108-ca09-4e44-b6ea-1fb000cdadba}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a20fa72-6913-4ae1-bd9e-49125966bd72}] - (CryptoPrevent) - (C:\Users\Default\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a24ca41-b55e-456b-a6f1-33282a127743}] - (CryptoPrevent) - (*.jpeg.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a3442f5-8678-4f06-9cbb-d912bf169f6c}] - (CryptoPrevent) - (*.pdf.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a3a0820-3070-4fd8-b481-4545fa2b6007}] - (CryptoPrevent) - (C:\Users\All Users\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a3b6ad4-dde8-4ebd-bc4a-6ee674bb5697}] - (CryptoPrevent) - (*.wmv.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a41c852-9fc7-4e35-8f10-ae7858b26aa6}] - (CryptoPrevent) - (*.rtf.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a4ba53c-6910-4696-98ed-b26e689ad001}] - (CryptoPrevent) - (*.txt.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a519417-954a-4fe2-bfa5-76d4c1ae761b}] - (CryptoPrevent) - (C:\Users\Public\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a5b86ac-0a96-415c-9704-40e39f8c08b5}] - (CryptoPrevent) - (C:\Users\Public\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a643742-12e7-4660-b021-51fa6f4e1b4f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a6594fa-d76d-4122-88d8-c89365960f3f}] - (CryptoPrevent) - (*.wmv.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a767596-f6ad-457e-b386-61edc72519a7}] - (CryptoPrevent) - (C:\Users\Default User\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a91fb82-8cd2-48c4-a3ed-71d8c16af3ff}] - (CryptoPrevent) - (*.jpg.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a98fc11-0efa-4670-8e9a-748930fdc60a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5a9e96f3-2b38-4841-8963-57de787d821d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ad35855-d049-4a0c-8083-a36e462c0005}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ad60f68-fc76-47bf-9dc9-97e2aad45576}] - (CryptoPrevent) - (*.avi.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ad669f7-785b-4fba-ba3c-620bdac950cf}] - (CryptoPrevent) - (*.wmv.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ae11900-e138-4f15-b1cc-304ae14c9ada}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b01e0ca-dbbb-4ee5-84b0-d0f8a91eb0ac}] - (CryptoPrevent) - (*.xls.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b0300d1-4e05-4667-8c5c-d0fd021752ed}] - (CryptoPrevent) - (C:\Users\Default\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b1af4f9-1d70-4045-b715-64c49150b84c}] - (CryptoPrevent) - (%appdata%\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b5aa112-e8e7-4e65-a846-bba6af803d91}] - (CryptoPrevent) - (*.divx.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b62f713-041c-44a2-974c-77f0de255799}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b84657d-1818-4c53-bc2b-99c686c890d2}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b875be8-43a2-4444-ae30-92dbd5bad64c}] - (CryptoPrevent) - (%userprofile%\AppData\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b8a4917-0fb1-4ec7-9431-adea8fb839fe}] - (CryptoPrevent) - (C:\Windows\Temp\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b8ba941-25d8-4c7f-bdbb-fc047b8d728c}] - (CryptoPrevent) - (*.jpg.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b8ce9f8-5f70-4a3f-8262-dfe8bb12793d}] - (CryptoPrevent) - (C:\Windows\Temp\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b8eb509-8da2-4433-822c-a86a9e291ad4}] - (CryptoPrevent) - (*.divx.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5b8fe9a8-bdfa-42f6-b4ee-06f10a77942b}] - (CryptoPrevent) - (*.rtf.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5bea9930-f04a-4e44-9be5-4c0746b9c582}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5bfaa8bb-940e-4c92-8d13-9bdd6557412a}] - (CryptoPrevent) - (C:\Users\Public\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5bfd0992-7857-455a-868e-8c9f2017df74}] - (CryptoPrevent) - (*.png.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c0c292d-c21c-46f3-968a-f7bd50642378}] - (CryptoPrevent) - (*.docx.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c129838-ee5d-4331-b113-5da1747530f3}] - (CryptoPrevent) - (*.pdf.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c1f154a-574b-4b0b-ba19-d92174653987}] - (CryptoPrevent) - (*.bmp.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c26d5ba-dc42-4712-b58d-94bf8971e3a2}] - (CryptoPrevent) - (*.rtf.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c2e2c8f-a197-45d7-9802-00f055b391a0}] - (CryptoPrevent) - (%userprofile%\AppData\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c3adfa4-9c7f-46e1-961f-986a8f19e5fd}] - (CryptoPrevent) - (%appdata%\*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c46e5ea-b34e-4756-a96d-63dc6bf26c98}] - (CryptoPrevent) - (*.wav.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c6b2f77-c37f-4f77-8c9c-a3afb7e5992c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c7c1c58-8944-4099-a7ea-472e196d354e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c7d1ba6-96ae-4356-af55-3ac93da85180}] - (CryptoPrevent) - (*.ppt.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c8d0ef5-06e0-4af4-abb4-ff282ded19e6}] - (CryptoPrevent) - (*.pub.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5c9dd795-446d-4731-8387-d8acce921413}] - (CryptoPrevent) - (C:\Users\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ca7b1bb-542c-4573-be3c-5bfde2ab18ca}] - (CryptoPrevent) - (7_Sp.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5cb100c3-aaec-4d86-a178-995c29e6f086}] - (CryptoPrevent) - (%appdata%\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5cd1db51-ffbe-45dd-b757-a851aa07ea43}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ce1f000-bb70-46aa-9225-ac8947dd7990}] - (CryptoPrevent) - (*\u202e*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ceae9cc-1c23-4c46-9161-d54d74d5c912}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d07aed1-3d52-456c-9991-54976ecf00da}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d4173a4-7b41-4742-af64-53a3a9483598}] - (CryptoPrevent) - (*.zip.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d4ddffa-e0d4-4656-87b0-813aaea79bc1}] - (CryptoPrevent) - (%appdata%\svchost.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d5c065f-daaa-45cb-989a-79c10e7219f3}] - (CryptoPrevent) - (*.7z.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d677b71-b3b3-433f-a42d-14669c89c189}] - (CryptoPrevent) - (%appdata%\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d827a7f-19a3-4101-a4c9-f4cc21b4dd23}] - (CryptoPrevent) - (*.mp3.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d893a7c-b821-4bea-b767-d6f81c3a5d7f}] - (CryptoPrevent) - (*.wmv.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5d9092c4-c3b0-4582-a0a6-f278dde78cfd}] - (CryptoPrevent) - (%temp%\drvpci.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5db341e4-486b-4467-a8d3-610d53d97989}] - (CryptoPrevent) - (*.rar.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5db876a3-7fe6-4db8-bfb8-2522e901d002}] - (CryptoPrevent) - (%programdata%\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5dc4bb7e-004d-452c-bb7f-b2096cb58db2}] - (CryptoPrevent) - (*.xls.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ddbc8d4-8a68-4bed-87bc-a20fa5d2f688}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ddd0069-d38c-4660-ad73-653c0268f7f8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5de742d3-2a25-4965-93f0-2535c6a97306}] - (CryptoPrevent) - (*.png.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5de9f6a8-4879-4f3e-9b3d-1ad6844e521d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5dfb01c8-e42d-4f6a-91d4-64e64534f0d0}] - (CryptoPrevent) - (*.avi.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e049b02-c9e1-4002-a4c1-059a83d86faa}] - (CryptoPrevent) - (C:\Users\Default User\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e0aff82-769e-4b4c-b1ca-e1f6a31e7b96}] - (CryptoPrevent) - (*.avi.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e1a5877-4cfe-4a0b-aba9-a6a46d21f739}] - (CryptoPrevent) - (*.wav.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e298788-6536-4c0c-a3ad-7bfbd4cdbcf5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e32436c-6629-46cc-95a1-e09ffa084d0a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e62772b-836e-455b-9c41-d9322b1e55c5}] - (CryptoPrevent) - (*.xlsx.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e6bfe2a-288b-4f76-ac5f-7d5ab13e9fd5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e71d7f5-702d-47cf-92cc-e88c331b028d}] - (CryptoPrevent) - (*.rar.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e7f8e29-6259-4ab8-8840-4ce902380834}] - (CryptoPrevent) - (C:\Users\Default\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e880d71-9af3-4ff4-a439-4746a9d8985b}] - (CryptoPrevent) - (%appdata%\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e8906d5-4f96-4819-93e0-9713b7de8a5d}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5e99be7b-23bb-4ae1-8ac7-39b3e722c60b}] - (CryptoPrevent) - (*.zip.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5eafdff9-d7c0-449f-a5a3-48b48609f97e}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5eb94df3-b5e3-46b5-a149-012b38c6568d}] - (CryptoPrevent) - (*.mp4.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ee3962c-d667-49bf-b279-1cbcab5bb4c9}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5efc0af3-32fc-4124-a26b-4f162ed247a7}] - (CryptoPrevent) - (*.txt.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5efe7646-5388-4544-998e-0d65088cd941}] - (CryptoPrevent) - (C:\Users\Default User\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5effe010-f919-4516-8530-56e1f35cc149}] - (CryptoPrevent) - (C:\Windows\Temp\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f0feb53-50a1-4374-8e52-52dc2e977fa0}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f16cbf0-c21c-4983-a63e-790fdeb09bea}] - (CryptoPrevent) - (C:\Users\All Users\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f20ca83-ebbd-4632-a992-b57da513c24d}] - (CryptoPrevent) - (*.wmv.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f36f03f-b6c3-4c05-b65c-c2c7669a5bc3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f40bc58-5445-4f9c-b5c9-6346846e678b}] - (CryptoPrevent) - (C:\Users\Default\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f4495d3-8646-4387-88a4-53dc7d372166}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f5ca0f8-7f45-473a-a93f-0194f1a2788e}] - (CryptoPrevent) - (*.bmp.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f6820b6-b562-41f0-b7fe-bc793ef2f728}] - (CryptoPrevent) - (C:\Users\Public\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f805f42-7060-4800-b191-28cc46c46e73}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5f9066cc-75a6-4aaa-908a-64a5d4ec2999}] - (CryptoPrevent) - (*.divx.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fa8b97a-dd2e-4e9b-a267-b923c61ceea8}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fb4282b-b1c3-4143-9117-731e46eb1511}] - (CryptoPrevent) - (*.jpeg.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fb587ec-a46e-4ffa-8595-5e9600d3123a}] - (CryptoPrevent) - (C:\Users\Public\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fba3257-5c5f-46f4-b8e3-c86a2cf4416b}] - (CryptoPrevent) - (C:\Users\Default\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fcadfbe-a775-4d1a-896d-c9b5370e2e1c}] - (CryptoPrevent) - (%userprofile%\AppData\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fcd3871-ecd0-4662-8141-ae03b71f8c01}] - (CryptoPrevent) - (*.rtf.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5ff1f83e-8f77-44a6-84ec-054df6649af4}] - (CryptoPrevent) - (*.txt.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fff3e33-0df7-445d-92e9-f06c8bb63b39}] - (CryptoPrevent) - (*.wmv.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{5fff83b9-7fb8-45a9-8c9a-5648b8e3a593}] - (CryptoPrevent) - (*.wmv.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6003f036-c783-4934-818d-167c85993ae1}] - (CryptoPrevent) - (%programdata%\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60077f8a-ae5a-47ef-8c2a-939769f7a6bc}] - (CryptoPrevent) - (*.rar.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{602a0282-abdb-40a7-a39c-1e4c652a968f}] - (CryptoPrevent) - (*.zip.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{604c0f7c-73a8-414e-a941-76bf01a619a3}] - (CryptoPrevent) - (%userprofile%\AppData\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{604fa058-1192-4969-81f4-1ebb8dc06aca}] - (CryptoPrevent) - (C:\Users\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6053d631-f166-4d62-a214-b10c9d743d9c}] - (CryptoPrevent) - (*.wma.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60567bcb-db7b-4ae4-b788-90926a8a238e}] - (CryptoPrevent) - (%appdata%\*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{606544a2-1883-45a2-8514-aabadcac8770}] - (CryptoPrevent) - (*.gif.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{608df723-7cdb-4235-9e61-5495b567fb42}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60a52343-0e2a-4b24-9c68-42e26275a3c6}] - (CryptoPrevent) - (C:\Windows\Temp\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60a95f8b-e627-431b-a095-f753b798dd88}] - (CryptoPrevent) - (*.rtf.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60b9b945-8b13-416b-911a-143bf820340d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60e4753d-6fb7-4725-af26-9a140abdd249}] - (CryptoPrevent) - (C:\Windows\Temp\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{60ec2a46-e282-479a-bfd8-e0dd35c8df50}] - (CryptoPrevent) - (C:\Users\All Users\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6100c71d-a11b-456c-b734-a53476a8571f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6104bf3d-ade5-4382-875b-b3ae18c99099}] - (CryptoPrevent) - (*.docx.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{613fb852-8125-427c-bd33-25a2c432cf30}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6141afca-1e82-463a-b64a-6e59e6ca36a8}] - (CryptoPrevent) - (*.wav.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{614379c9-4485-4ce0-9bbd-debe3ac50ebf}] - (CryptoPrevent) - (*.avi.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{616f9326-b75a-4283-b61d-ec72df91ed4a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61794ea3-9912-4135-a775-c7b0192f199b}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6188afa7-4965-42f3-99c7-46c8395a2145}] - (CryptoPrevent) - (*.xls.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{618f127d-60c5-44d6-af9d-1bd1b6fa1928}] - (CryptoPrevent) - (*.wma.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6197fe2c-28c0-4055-a1a4-c90fa2bbcd3a}] - (CryptoPrevent) - (*.divx.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61a93aae-8c32-47cd-a31a-b25a28d762cd}] - (CryptoPrevent) - (C:\Users\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61cac844-5ee9-43f9-8f96-1268b38f7feb}] - (CryptoPrevent) - (*.pdf.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61d299a5-30af-4b61-957c-361a0a426bfa}] - (CryptoPrevent) - (C:\Windows\Temp\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61d4829f-dd36-4ddc-926c-9e4929212188}] - (CryptoPrevent) - (%programdata%\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61d7b6bf-2b99-4ca2-8e12-1ba4c9bc2d6d}] - (CryptoPrevent) - (*.jpeg.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61eff4fb-7a7d-4ab9-9433-4996bb8f0c25}] - (CryptoPrevent) - (*.mp4.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61f44a05-615a-4317-9937-4c1dec70b688}] - (CryptoPrevent) - (*.doc.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61f9996c-addb-4177-91f1-7ddcfa174d5a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{61fa572d-547e-45f2-b9b3-9bdb992f739d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62037b94-5989-49ec-964b-ced68f0ea00f}] - (CryptoPrevent) - (*.divx.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{620c6452-22ee-421c-85d3-55dcc423e61c}] - (CryptoPrevent) - (*.avi.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62232b51-b7df-474d-893e-05f5d4ce438a}] - (CryptoPrevent) - (%appdata%\*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{622dba8e-6822-40c1-be92-d34c040839f6}] - (CryptoPrevent) - (C:\Users\Public\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6230f021-43b9-4e26-ab62-8e0c65e33e4c}] - (CryptoPrevent) - (*.docx.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62324b04-2e93-462e-8b00-0f58a8cd82c5}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62537021-2fd8-4fd4-836f-5f9df393d76a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6255630a-973a-4ebf-9a91-ea6fe23fa2a2}] - (CryptoPrevent) - (*.ppt.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{628815b3-8911-455e-9cd8-5322ef477d00}] - (CryptoPrevent) - (*.bmp.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62b03b51-a3c0-4b7a-b9a4-9b9eb1862c43}] - (CryptoPrevent) - (*.mp3.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62b2bdbe-9ddd-401f-9fc3-6fa48d4d69cd}] - (CryptoPrevent) - (*.mp4.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62be747c-310b-4368-9498-50a818f4682d}] - (CryptoPrevent) - (C:\Users\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{62d00e78-47b5-4e63-acf6-15a03d0fb300}] - (CryptoPrevent) - (*.rtf.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63133191-0092-4ce7-b5c0-c1535027cfbd}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63237f7e-bfda-44cb-8017-16b0fa00e798}] - (CryptoPrevent) - (C:\Users\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6325fa4d-9cb9-419c-bbb0-9a6ce14a82b8}] - (CryptoPrevent) - (C:\Users\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6328d790-cd00-4173-b58f-8d3b84cc573d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63333d4c-df34-4774-899f-0be64ddfd50a}] - (CryptoPrevent) - (*.pptx.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{634251e4-76a4-4dd5-bd80-6ed42bab3f5c}] - (CryptoPrevent) - (*.avi.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{635b15da-a85f-4445-9223-f21f30a192ee}] - (CryptoPrevent) - (*.wma.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6364178c-2634-4805-b2a0-d124310dae3f}] - (CryptoPrevent) - (*\u202e*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{637f7235-4179-4ed0-b522-4b8f1bbe2cee}] - (CryptoPrevent) - (*.doc.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63811f26-4d0f-4bc4-b1c6-f0b8c5783c65}] - (CryptoPrevent) - (*.jpg.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63838f95-da56-425d-bcab-c8f3b041f065}] - (CryptoPrevent) - (%appdata%\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{638565fc-ca8d-425b-ac06-795bba818b36}] - (CryptoPrevent) - (*.txt.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63a31b41-4d86-410e-ba6d-e98e837ba291}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63b431f6-4cd2-4875-92b5-31aa4bdf5e8d}] - (CryptoPrevent) - (*.docx.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63b7e5eb-fdba-4576-b194-0e301002f002}] - (CryptoPrevent) - (%appdata%\*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63b85659-c9aa-4983-846f-ffb317f21161}] - (CryptoPrevent) - (%appdata%\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63ee106f-126d-4437-8973-637da9a25d04}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63f9abc5-edd5-4c9f-90f2-56272e3f80f3}] - (CryptoPrevent) - (C:\Users\Public\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63fb0777-313d-4fe5-b8d5-47b8b379ab6c}] - (CryptoPrevent) - (*.xls.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{63fda507-9d54-4ac3-a57a-b87334c2a9f8}] - (CryptoPrevent) - (C:\Users\Default User\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6404c83b-4c06-4f08-98c3-209837df7f54}] - (CryptoPrevent) - (*.docx.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6422cfad-4c43-4dcb-a847-6f8541e020a1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6424f048-cd09-4e44-bf2e-5f64928ade23}] - (CryptoPrevent) - (*.wmv.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{644e0e77-2dc0-4e4d-acd3-e176b41ee9e4}] - (CryptoPrevent) - (*.pdf.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64513a41-e257-409f-8f5b-67e01e562322}] - (CryptoPrevent) - (*.avi.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6456046f-767d-4a2d-a3b0-b26b63e7339e}] - (CryptoPrevent) - (*.pub.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64719ea1-844d-4a67-98d7-c2173cac7e49}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{647ffa36-f02b-4bdd-b294-d50c3a9d09ba}] - (CryptoPrevent) - (C:\Users\Default User\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64831f1f-d08b-4c3a-aa69-8b30abca128a}] - (CryptoPrevent) - (%appdata%\*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64abbd89-17a7-40a0-8243-133ca143976f}] - (CryptoPrevent) - (C:\Windows\Temp\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64ace82b-3c44-4d26-bc1b-2562fa20e1c7}] - (CryptoPrevent) - (C:\Users\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64ca28b2-8063-44e0-9272-87d5068577d9}] - (CryptoPrevent) - (*.wmv.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64d873eb-8d5b-4e54-9ff9-3a55a59df254}] - (CryptoPrevent) - (%userprofile%\AppData\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64eba06a-b0a6-43e4-babd-66871e812a8b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64f6c6f8-3e4b-4f81-9347-30b20926c59c}] - (CryptoPrevent) - (*.xlsx.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{64f9c2e3-9b6a-4428-8dec-d9f6b56228eb}] - (CryptoPrevent) - (*.zip.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{651d5f33-97b1-4153-ab2e-a641dd29f0a6}] - (CryptoPrevent) - (C:\Users\Default User\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6560bd00-0e05-4802-8ea4-3b96e5f9bb96}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{656bd9e5-b3b7-47dd-a86d-ed52a9b4815c}] - (CryptoPrevent) - (*.wma.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{657cb32c-cda6-4c7d-821f-f5509ecf927d}] - (CryptoPrevent) - (%programdata%\Steg\steg.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{65822a31-9386-46ef-a2ac-d5b84e1a038d}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{65cbffa0-2537-4580-9896-3a52d523851c}] - (CryptoPrevent) - (C:\Users\Default\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{65f5d552-bfe2-4652-8a57-183b4af593bc}] - (CryptoPrevent) - (*.rar.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{65fae922-5e15-47d3-aea7-d1d1f7d78be7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6603248a-23af-4ca1-a60a-ad43375a687f}] - (CryptoPrevent) - (C:\Users\Public\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{660c9f2f-bce2-4e76-8b05-e13f211dab5d}] - (CryptoPrevent) - (C:\Windows\Temp\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66118d53-b7e8-4072-a161-4f811583b1c4}] - (CryptoPrevent) - (*.pub.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{661e0c4a-22ae-45a3-be07-7daf935d0d7b}] - (CryptoPrevent) - (*.wma.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{662cbc9a-a870-4d9b-8094-3f989e24871a}] - (CryptoPrevent) - (C:\Users\Default User\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66356a4f-742e-4c00-af3f-015067dd9c5d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{664010ca-a4c5-4ccb-9fa6-4efd3572a484}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{665a5552-c2dc-41e5-b200-b7af3afb1ad3}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6660d4a9-48c0-4dca-b119-fd87c13ca252}] - (CryptoPrevent) - (*.wma.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66796a19-6b26-45ad-a719-dd667ca7ce3a}] - (CryptoPrevent) - (%appdata%\*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66858902-879d-4cd3-83e7-9aaf09a73339}] - (CryptoPrevent) - (*.divx.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66afbef5-2186-43c3-ac00-0e942c650492}] - (CryptoPrevent) - (*.jpeg.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66b580a3-4941-4e77-9c1d-8047b4051a14}] - (CryptoPrevent) - (*.pptx.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66bf6f39-a92a-46f6-b1fc-fb11cc132f4f}] - (CryptoPrevent) - (*.doc.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66dabeca-888c-4f2d-919e-bc6929e9f8b2}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66daddfc-8c3c-466b-b99e-2aef5429fcdf}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66e01887-3097-4293-ab80-8464dda945d0}] - (CryptoPrevent) - (C:\Users\Public\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66ee010c-1ac1-4b7f-b166-11a296bd757b}] - (CryptoPrevent) - (%appdata%\*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{66ffa7aa-5d32-44a6-a216-6c5bd3117d99}] - (CryptoPrevent) - (*.divx.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{670c5170-fd22-4bef-9db6-eda2c3d21510}] - (CryptoPrevent) - (*\u202e*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{671cbc93-5df8-46e7-ba15-820a916e9ae6}] - (CryptoPrevent) - (*.divx.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{672b90c6-10b7-40df-8fac-f8c58bcff134}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{672ee415-e052-42da-a14b-d8181b61dbac}] - (CryptoPrevent) - (*.ppt.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{674aab5a-b45b-48e9-aaf3-17a9ae2d362c}] - (CryptoPrevent) - (C:\Users\Public\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{675c0a11-9fef-49cb-ad0e-d8ad0ee69b9f}] - (CryptoPrevent) - (%appdata%\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67624d16-0564-404f-b8da-d09284874b28}] - (CryptoPrevent) - (*.xlsx.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6769bcf5-1fc7-4cb1-9690-5a2435adb86c}] - (CryptoPrevent) - (C:\Users\All Users\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6773cb60-b069-479a-82e7-cc037f6bb166}] - (CryptoPrevent) - (*.wav.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6785752a-92a5-48f2-b501-50d533ea156d}] - (CryptoPrevent) - (*.gif.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{679dd5ab-3495-42c3-a4c8-3caa608dde88}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67bde20b-1006-47ec-b5a2-45c0afcb5e1b}] - (CryptoPrevent) - (*.pdf.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67bf3186-8ba9-4323-b497-d36a1d3de662}] - (CryptoPrevent) - (*.rtf.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67c8d4fa-b2d4-47c1-974a-dde1de4140a9}] - (CryptoPrevent) - (C:\Users\Public\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67cd9a4d-750b-49bf-a72e-e5eb90c470a2}] - (CryptoPrevent) - (*.rar.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67d78246-9b0e-43a2-ad18-5667d7c82aa8}] - (CryptoPrevent) - (*.avi.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67d897e3-318b-4ad7-a6dc-99190c5f68ff}] - (CryptoPrevent) - (*.doc.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67d972b9-58e2-435a-a668-b7d61afd4ed6}] - (CryptoPrevent) - (*.wma.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67ea9eb6-9ded-41a1-8691-80f901d076ba}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{67f461a9-d728-4698-b6a3-38f33738683d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68014f8b-d397-4423-bfde-fb53c1ac9fe7}] - (CryptoPrevent) - (*.txt.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{680593d4-4c8b-4204-b13b-d51a492a6729}] - (CryptoPrevent) - (*.mp4.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{682cbf8a-a250-4977-82c9-2d15ed73c22a}] - (CryptoPrevent) - (C:\Users\All Users\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6835e304-874a-4b58-9e60-afea0d3f3ba3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{686a9553-b68b-4a81-a0bd-be1bc8a3bb31}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68823a24-08b2-4168-b660-059b6e1c88f4}] - (CryptoPrevent) - (C:\Users\Public\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68885158-760d-4362-84c2-e8274f9d3f60}] - (CryptoPrevent) - (C:\Users\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6888c244-4583-4d78-b0d4-f1e81d990a94}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{688f2f8f-d9be-4063-94e9-153e8e9a0d56}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6899ba17-c316-4f31-87cc-475e04baaed8}] - (CryptoPrevent) - (*.7z.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68a3bbb0-0e26-432f-8b90-a8fd6c4cb59e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68c114fa-bed8-4435-9d20-2b87ece3a54c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68d72369-7953-43c7-9b13-48ef42894123}] - (CryptoPrevent) - (*.doc.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68e41986-3bd1-43bd-8585-08e13abcb879}] - (CryptoPrevent) - (*.doc.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68e9200c-9373-4f13-a629-7aea2c3fc2de}] - (CryptoPrevent) - (C:\Users\Public\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68eb908d-1c7f-466f-aef9-ebb7fcae308d}] - (CryptoPrevent) - (*.divx.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{68fc6cae-5188-41ab-9cab-0d7345ff0054}] - (CryptoPrevent) - (C:\Users\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{691d4175-a8c3-4ead-b2ba-596a2a020999}] - (CryptoPrevent) - (*.xlsx.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6936fb15-d0d4-4f26-8b7c-0107c13221f2}] - (CryptoPrevent) - (*.7z.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{693f76e3-e84f-48cb-b926-55fd47ad4cec}] - (CryptoPrevent) - (*.pptx.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69471995-78fc-4c3b-8f5d-3bc56b7fb01e}] - (CryptoPrevent) - (*.doc.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6950a160-ea26-4a67-9812-e2c9fb43a81e}] - (CryptoPrevent) - (*.bmp.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69553744-d570-4614-a175-0627b870f49e}] - (CryptoPrevent) - (*.zip.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{697e6f65-3205-4708-beea-8a9a4acc225d}] - (CryptoPrevent) - (%userprofile%\AppData\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69910b8d-f187-4545-a1b2-c83bba5da60f}] - (CryptoPrevent) - (*.jpg.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69965bd1-bc48-4a49-abc4-fa373e923e55}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69ac4ff8-f865-4309-9571-76a6d971ce78}] - (CryptoPrevent) - (%userprofile%\AppData\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69b06b3a-7714-47c1-94ff-6619ebf72f7a}] - (CryptoPrevent) - (*.doc.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69b8b0f7-4f2a-4d12-a591-80ac25fe22fb}] - (CryptoPrevent) - (%userprofile%\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69d3d5ae-6de8-4b26-9166-be2eb4ece61d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69e3adae-7641-402a-b777-6cd2efbb5dd9}] - (CryptoPrevent) - (C:\Users\Public\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{69eb65fe-3eeb-47df-8e76-592587429d0a}] - (CryptoPrevent) - (*.mp3.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a069b5b-ca6a-44a7-99a7-d7fcb797ca61}] - (CryptoPrevent) - (*.png.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a236a39-c162-4b07-82a8-b4294d29c5ba}] - (CryptoPrevent) - (*.xlsx.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a512e00-402c-483d-a718-518f4695a489}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a5608b9-1428-45f8-93c9-8290f033817e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a6d0307-71f9-411b-9a25-561b152bceba}] - (CryptoPrevent) - (*.pub.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a79f0fa-15d2-445e-a5ca-672a55387d33}] - (CryptoPrevent) - (C:\Users\Public\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a8813df-3f81-446e-810a-a191df79aa2d}] - (CryptoPrevent) - (%appdata%\*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6a8f99a0-43ad-41bf-9300-de700a225d3c}] - (CryptoPrevent) - (*\u202e*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6ab21f4f-ad5b-40bf-baf1-ce6c73a18b0a}] - (CryptoPrevent) - (%appdata%\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6abb0a24-9a33-4afe-8902-fa247f500a16}] - (CryptoPrevent) - (*.bmp.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6ac3ed24-8ce1-4f36-8391-2797d6a7ea3b}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6adaa7b1-13d1-4797-94c0-1bb94bb11f7f}] - (CryptoPrevent) - (*.wmv.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6adcf536-fe6b-4cab-8387-35cbe816fe94}] - (CryptoPrevent) - (*.zip.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b020c7f-e7a5-4e21-a788-b9f58d682cf9}] - (CryptoPrevent) - (C:\Windows\Temp\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b037687-bd1c-4fd6-ae95-09d91e6dc6b4}] - (CryptoPrevent) - (%userprofile%\AppData\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b13c646-4764-4e3c-9327-9b4ea1705c2a}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b16cc4a-a4a5-492f-a085-04f9b1218de1}] - (CryptoPrevent) - (*.pptx.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b2520f6-8f1e-4234-979b-599e32eee29f}] - (CryptoPrevent) - (*.pdf.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b30122c-d7b8-481a-b7be-38228ac53924}] - (CryptoPrevent) - (*.mp4.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b4b4a3c-eebb-44cf-bea2-b30522790346}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b63b15d-1f59-4a83-8440-61c180a4fa11}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b85df47-fb86-47e2-a53a-b12cef9a9ae7}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6b8bf8bd-3558-4aa3-9d03-fde4071fe203}] - (CryptoPrevent) - (%appdata%\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6bacdf77-553f-4868-b3c2-74bca05d01ae}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6bcc3160-5176-4378-be9e-5d7e1157366a}] - (CryptoPrevent) - (*\u202e*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6bd2ce4e-898e-4b83-8ede-30f96a58890b}] - (CryptoPrevent) - (*.jpg.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6bf7395a-deb0-4275-b560-5e1bdb1dbf68}] - (CryptoPrevent) - (%programdata%\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c2968e3-07ca-4bb0-bad0-8bfde16e10df}] - (CryptoPrevent) - (*\u202e*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c37edf4-db72-4dfc-b4e8-2ae4d0c368bf}] - (CryptoPrevent) - (C:\Users\Default\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c389df8-c947-4d99-910d-f50a7ff90f34}] - (CryptoPrevent) - (C:\Users\All Users\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c3bddc0-c5a2-4a1c-8bfa-f3de701ed300}] - (CryptoPrevent) - (C:\Users\Default\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c49c9e4-a954-4c25-a015-ad778314aea1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c49d991-859f-44bf-9f6d-35c8e44df03d}] - (CryptoPrevent) - (C:\Users\All Users\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c54f909-0305-40eb-8635-a112b74d7251}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c65f165-af5b-40dd-becc-443a8338b534}] - (CryptoPrevent) - (*.wmv.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c7c389b-a4d5-4d7e-b344-1905137eeb2e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c7fc99b-d27e-4143-b03f-84440c6a00c2}] - (CryptoPrevent) - (*.wav.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c9909d7-f9d4-46e1-8b61-dab867f61d6d}] - (CryptoPrevent) - (*.wmv.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6c9c4b70-dcf6-42fa-9f52-65a51512e656}] - (CryptoPrevent) - (*.mp4.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6ca69913-22d8-42ce-8913-fc50a49b4c77}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6cb051f7-8cf8-49e3-9402-469f7460bc29}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6cd22813-15d0-445d-ae52-ab35cd0aea0c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6cd62485-cbeb-4673-bba9-5280bc8934a8}] - (CryptoPrevent) - (*.pptx.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6cf55102-d5bd-4794-b041-a6de5fd14101}] - (CryptoPrevent) - (%userprofile%\AppData\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d26cc16-5edf-44cc-9b59-1f9c133a4097}] - (CryptoPrevent) - (*.zip.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d2d84a4-8155-4473-8d78-29ba1b783f32}] - (CryptoPrevent) - (*.pdf.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d3869a6-3d2e-4c1d-b7d0-f3ce3415ccbe}] - (CryptoPrevent) - (%userprofile%\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d4318e7-ed62-42ca-95eb-42c9a3785ed8}] - (CryptoPrevent) - (*.avi.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d448512-4484-4601-a33b-3fcad17c38e4}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d4b93fd-e3d6-4a57-a66c-8aa219e0def0}] - (CryptoPrevent) - (%programdata%\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d4ded6c-0712-461c-8c98-afde035dd5fe}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d73a9b3-cb7d-49a9-be25-3c091d48deba}] - (CryptoPrevent) - (syskey.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d7b9943-8706-4af3-ba80-04610aab0999}] - (CryptoPrevent) - (*.bmp.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d8722f5-927b-487f-bf3d-699e06bef7f5}] - (CryptoPrevent) - (C:\Users\Public\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d91a953-2fb4-4ddd-bb9c-061c96db40ae}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d93f7b8-a5dd-481b-861b-0013e7e7ae53}] - (CryptoPrevent) - (*.zip.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6d967afd-daff-4311-b14a-7b276656053e}] - (CryptoPrevent) - (*.wmv.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6db6335e-e69c-4fea-afa7-98253af77fc3}] - (CryptoPrevent) - (C:\Users\All Users\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6dbcd5eb-994e-48c4-812f-adcf93d2e23c}] - (CryptoPrevent) - (%userprofile%\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6dc07f07-cc29-4fd6-ab34-dc042d89e977}] - (CryptoPrevent) - (*.docx.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6dda0014-17bd-4201-a7fb-5cda678ad016}] - (CryptoPrevent) - (*.divx.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6de6174a-b175-4074-821e-995e8087b3b1}] - (CryptoPrevent) - (C:\Users\All Users\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e040b56-4d9d-475b-8c54-9d61a0027404}] - (CryptoPrevent) - (*.txt.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e045f40-6240-40a8-bbfe-7844513d4957}] - (CryptoPrevent) - (%appdata%\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e12b98d-8d75-4f78-982f-11c90d31079f}] - (CryptoPrevent) - (%userprofile%\AppData\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e3255a8-2c0d-42b1-bb98-e0d373ec6bd9}] - (CryptoPrevent) - (C:\Users\Default\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e4efe70-a6c5-42d2-96b3-cbea020cc0a5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e54ae72-6b5a-425c-9efd-be5f570f8df9}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e730061-25d9-4f15-a1c1-38ce9d5e805e}] - (CryptoPrevent) - (*.docx.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e755e34-3bb2-4d53-81fa-dae178285962}] - (CryptoPrevent) - (*.zip.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e7d941a-4345-4e6b-9deb-7916796be58b}] - (CryptoPrevent) - (C:\Users\Default\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e7dff1d-61b8-4eac-a2e6-6054851986c3}] - (CryptoPrevent) - (*.xls.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6e959140-e936-4289-ad2a-e23da7e981f0}] - (CryptoPrevent) - (*.doc.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f07e76a-8c89-43a9-9aed-08cc209c9db8}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f1bfd1f-5a1d-4f8e-836b-db2f93d0f6bf}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f303dda-0c90-415b-a8f3-f58c162a8a01}] - (CryptoPrevent) - (C:\Users\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f47f136-8c8b-4e89-8eb7-825b88ad6a41}] - (CryptoPrevent) - (*.png.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f551512-5f44-4527-abdc-ad4b2b55768a}] - (CryptoPrevent) - (*.docx.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f78f313-81de-44c6-aac3-d242ef1009f8}] - (CryptoPrevent) - (*.zip.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f952a2e-3fd5-4d88-ab87-0be0188309f2}] - (CryptoPrevent) - (*.mp4.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6f9ea430-1ee7-433c-b32b-c2738ddc2d95}] - (CryptoPrevent) - (*.jpg.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6fa99ac9-e294-41ec-bb37-563c87a5ffca}] - (CryptoPrevent) - (%appdata%\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6fb8a1a0-7fcc-4a3a-ad7e-9a8620aa5f56}] - (CryptoPrevent) - (*.rar.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6fbf0627-9565-4c92-ad21-dfd8ff09e2c0}] - (CryptoPrevent) - (*.xlsx.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{6fd9917f-b2ac-4b0a-81d6-06f356175a2f}] - (CryptoPrevent) - (*.mp4.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{700f5635-d58f-4db2-a8a9-f68822cb70fd}] - (CryptoPrevent) - (*.xlsx.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{700f8304-2bd9-4272-bd4f-ac09da9058b6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7023c0b1-5e91-4b2c-9823-d0e5cb119722}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7024be0d-fac6-4c10-86f3-d941ab8fdda3}] - (CryptoPrevent) - (*.txt.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7042e0e1-b21c-4df1-97ad-9fb55792e8aa}] - (CryptoPrevent) - (*.avi.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{705af851-342a-4072-874c-a2acde1f6aac}] - (CryptoPrevent) - (C:\Users\Public\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{705c8fce-2cd7-483b-b261-bf76c603d80e}] - (CryptoPrevent) - (C:\Users\Public\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7070f97b-1366-46b9-bd20-44294767e65f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70766f80-9944-46e1-8701-75ac50925cd3}] - (CryptoPrevent) - (C:\Users\Default\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{707925ec-de87-46c3-bd68-725ec38d473b}] - (CryptoPrevent) - (*\u202e*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{707cdf3b-d5b4-4d64-8fe1-fda4d29a0751}] - (CryptoPrevent) - (*.mp4.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70acd838-6273-45be-b58a-cd8b26a093ef}] - (CryptoPrevent) - (*.divx.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70b6f9c2-13a7-4dbb-815b-76e45840b802}] - (CryptoPrevent) - (*.ppt.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70e04f87-f0bd-4ea1-b02f-0c983c7044e1}] - (CryptoPrevent) - (*\u202e*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70e68df0-de5d-47e4-bd32-94b68fca0a79}] - (CryptoPrevent) - (*.pdf.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70f1a7fd-3cc5-4b1c-b8c1-a3c12fb48f60}] - (CryptoPrevent) - (*.zip.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{70ff1372-8593-4e98-ad66-887eb190050f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71047570-4fc7-4319-b9f1-7e89e2da80fb}] - (CryptoPrevent) - (*.wmv.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71127c79-9023-4c9f-9a8c-cc6b57cac00b}] - (CryptoPrevent) - (*.mp4.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{711597c1-27a6-4130-bdbf-5e02d9075018}] - (CryptoPrevent) - (*.jpg.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{711edb14-604c-41fc-a967-72881e455a0d}] - (CryptoPrevent) - (C:\Users\Public\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7130fb7c-a840-467a-95ae-53e9365ec475}] - (CryptoPrevent) - (*.png.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71483d1e-db41-4951-8705-272fb77a62e5}] - (CryptoPrevent) - (*.zip.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{716263a3-b9f9-4a63-be12-f0619cfda944}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7163fce9-3cff-4073-87ab-d3b2725fb034}] - (CryptoPrevent) - (*.pdf.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71688dcb-0bda-4a2f-8578-98a12c44cf45}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7177d019-770b-4d6e-9819-0c2eb318b175}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{718f71b4-c01a-4f1e-94ac-19bf92065435}] - (CryptoPrevent) - (*.jpg.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{719c874f-1d9c-4981-ace6-b578cba5aded}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71a8004a-24b1-4627-abfa-228b9ca194f8}] - (CryptoPrevent) - (*.wav.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71b8c492-236c-4228-b3af-1e2ea8cadd49}] - (CryptoPrevent) - (C:\Users\Public\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71c62408-e5d0-4c22-95ab-4addd0ced635}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71d76d44-3e7c-44cb-9a67-9a9d89e1a7ee}] - (CryptoPrevent) - (*.pub.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{71f537b7-52f5-4981-92e7-a72936ca939a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72469e8f-4d66-4d02-9eff-80561af447c6}] - (CryptoPrevent) - (*.doc.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{724b57e6-941f-455d-92f5-3e2093759cb4}] - (CryptoPrevent) - (*.ppt.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{725baca7-37af-4931-b023-04de8be6c4d3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{726d5abf-8e4f-43fc-aa70-e6ccfc4e0d27}] - (CryptoPrevent) - (*.gif.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{727e13fd-58be-4f8a-a2a7-6b424a59d46a}] - (CryptoPrevent) - (*\u202e*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7280ddd9-0ec7-4196-9767-19589fef264a}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{728b67b8-e182-420e-a70e-274a1020099b}] - (CryptoPrevent) - (*.xlsx.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72944c51-36c7-4beb-84a5-841a0fef008f}] - (CryptoPrevent) - (*\u202e*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{729bbd2d-df1c-4a3f-abbd-ee8a6bf20ee1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72ae2d02-b8ea-4d3e-b1d2-59b2b7c64e78}] - (CryptoPrevent) - (*\u202e*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72af1238-0727-4ff3-8c64-ae2f4d410591}] - (CryptoPrevent) - (*.mp3.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72c04dc6-7fe0-42a0-ae45-8e67814c49ea}] - (CryptoPrevent) - (*.wav.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72c5db20-117b-4ff6-8b5c-1fbf3ce52617}] - (CryptoPrevent) - (*.wmv.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72e6e0c0-6aa0-4952-bd89-158217da5c96}] - (CryptoPrevent) - (%userprofile%\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72ea8439-b47e-480a-8c88-d96275aea11c}] - (CryptoPrevent) - (*.7z.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{72fe52e7-8bd6-4222-b9d8-e3b307f11887}] - (CryptoPrevent) - (C:\Users\Public\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73065307-7c01-4f79-9434-1ee551eafd9c}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{730c165a-3261-4f6c-8e56-c5d72d61188e}] - (CryptoPrevent) - (*.mp4.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{730ed42c-07c0-4287-bbac-5c44f1e6f529}] - (CryptoPrevent) - (*.wma.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{732cf1b3-4400-46a9-b4d1-c55134028f2c}] - (CryptoPrevent) - (*.wma.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{733324db-6ae8-4fa1-a7a7-96424c1bac72}] - (CryptoPrevent) - (*\u202e*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{734c8b38-5986-4240-8191-663bb86b52be}] - (CryptoPrevent) - (*.png.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73589442-c305-4d59-b559-38a72c73af61}] - (CryptoPrevent) - (*.avi.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73750df2-c663-4ea8-a372-dbcb8827ee3a}] - (CryptoPrevent) - (*.gif.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{737dcf8e-2c9e-49ad-9510-1002163cc978}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73a4ef5e-505c-4650-852a-9d7639501fbb}] - (CryptoPrevent) - (*.mp3.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73b26373-c925-490a-a89f-8c552f73413b}] - (CryptoPrevent) - (*.wmv.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73d896a6-0165-4f08-b8f4-b87ffa6c311d}] - (CryptoPrevent) - (%userprofile%\AppData\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73d9a14c-57a9-4980-9fee-5b06e2363a63}] - (CryptoPrevent) - (*.mp4.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73db1d35-5d8a-450b-a7a9-07939771fd7e}] - (CryptoPrevent) - (C:\Users\Public\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73ea9077-b12f-45d3-8b4f-103a74dd6557}] - (CryptoPrevent) - (*.pdf.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{73f7017c-cecf-49d4-a3fe-2869680c393a}] - (CryptoPrevent) - (*.ppt.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74041873-f222-445d-b404-a4c8e71f6924}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74209ce3-261e-47c3-9e56-c99f4b2458df}] - (CryptoPrevent) - (*.xlsx.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{743b2cea-db71-4262-a8ba-10b67ec4af2d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{743b981e-41e5-48cb-be01-ac023b3b9dd3}] - (CryptoPrevent) - (%systemdrive%\Network Prosoft\*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7459fecc-d2a8-4885-aa9c-ddb249640cf4}] - (CryptoPrevent) - (C:\Users\Default\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7467439c-5765-4cf5-a531-5627e925fc90}] - (CryptoPrevent) - (%appdata%\*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{746cc33f-f88e-4708-b310-20baa04afce5}] - (CryptoPrevent) - (*.rar.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74782fc9-698d-4118-8e86-7106c21462d2}] - (CryptoPrevent) - (*.zip.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7481d4d3-3968-481e-9f40-9f15b58b3d09}] - (CryptoPrevent) - (C:\Users\Default User\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7485d9bf-c2e0-4b04-aa6c-6f5dd2e33c3a}] - (CryptoPrevent) - (*.divx.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{748b60f4-5a24-49fd-811d-4ade75b63af8}] - (CryptoPrevent) - (*.wav.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74a04393-ec4c-4255-bce6-8e84fca03233}] - (CryptoPrevent) - (*.wma.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74d3562b-7956-4eaa-adcf-f8a7ea4289c3}] - (CryptoPrevent) - (*.docx.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74dd7151-0591-47d3-954d-5e7f0a057fcc}] - (CryptoPrevent) - (*.mp3.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74e6f558-df82-4d69-8eef-9b8376ac0f9c}] - (CryptoPrevent) - (%appdata%\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74ec1d51-4d69-49c0-94d3-35ce28ce8f76}] - (CryptoPrevent) - (*.rtf.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74f4383f-b036-40ee-b8ff-915101cb8af7}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{74f4cdc5-09df-47af-8dba-40fa6a82f44b}] - (CryptoPrevent) - (*.rtf.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{750b040f-245c-4887-80c6-d64165bf2d3c}] - (CryptoPrevent) - (*.docx.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75153b90-064e-46bc-bb48-83a7eb69124f}] - (CryptoPrevent) - (*.wmv.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7519d534-c792-4338-b15c-5484e0daaf35}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75342f42-601f-4def-935e-7ee71746f49a}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7539ee06-cf20-47e1-a299-16075899f131}] - (CryptoPrevent) - (C:\Users\Public\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7550104a-794c-4659-91d7-e6cb63988980}] - (CryptoPrevent) - (*.avi.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75552f3c-df67-4c63-92b3-f95ab028790a}] - (CryptoPrevent) - (%userprofile%\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7592d91d-357b-4aeb-ae51-f817c6897c15}] - (CryptoPrevent) - (%programdata%\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75a4042c-c0ae-49bc-912c-e2945e4acb2f}] - (CryptoPrevent) - (*.png.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75a59b90-cc85-4592-88f5-ec284db8c84a}] - (CryptoPrevent) - (*.ppt.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75b3da45-7bf0-489d-835f-3a4c28d57e88}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{75bb65ad-2700-4d08-9110-b5e6a66cf37e}] - (CryptoPrevent) - (*\u202e*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{76178f33-ae30-4eba-bf4d-e59407b4ab69}] - (CryptoPrevent) - (%userprofile%\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7629ee1b-e71c-4470-9302-4ed57242227f}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{76655a5f-9ea6-4cc8-9838-ec46818d2e2c}] - (CryptoPrevent) - (C:\Users\Public\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{767932ce-26d4-4651-a3ae-06b35197beeb}] - (CryptoPrevent) - (*.xls.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{767b8ca9-a140-442a-8cd1-14d25d041f5e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{768634df-cbe7-4ece-bde7-220c21a66db8}] - (CryptoPrevent) - (*.pptx.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{76cd0382-0aa5-403d-a84d-06c82a6163a8}] - (CryptoPrevent) - (%appdata%\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7702d3f8-38be-4c43-bb0d-57becd1bc3a2}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{773789fc-ece0-4f16-a802-570f330b6c14}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77564b14-c9e9-4096-83ee-99d106057b56}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77747b32-0f56-4f79-81c9-96ecde0d14e4}] - (CryptoPrevent) - (*.gif.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{777d46b9-497f-4b16-bde3-5dc6cb33d451}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77a2fe9c-2180-4100-a69c-376861da89f1}] - (CryptoPrevent) - (*.mp4.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77a62ddd-109f-4359-b097-764dc5d9c70c}] - (CryptoPrevent) - (C:\Users\Default\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77bdd377-3a82-4f51-bae7-301bd08bce35}] - (CryptoPrevent) - (*.doc.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77c056d2-8d96-4b9f-ac32-7f0c10691a4f}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77c5a3a2-34b2-4bd3-aed1-76afd461343d}] - (CryptoPrevent) - (C:\Users\Public\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77cdbad0-1990-4361-88d7-f38c8ffe1b48}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77d247b9-5459-402b-b9d3-6f294fc2d625}] - (CryptoPrevent) - (*.wma.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77d4d3e7-c60f-4b3a-8618-5441152ee2ec}] - (CryptoPrevent) - (*.pptx.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77e356e0-0ebe-490e-8ca2-c134757e0f45}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{77e5f3be-2fda-48d0-bbf9-54f9365c74a5}] - (CryptoPrevent) - (C:\Users\Default User\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{78024032-6276-4c1d-b45d-342191957a1b}] - (CryptoPrevent) - (*\u202e*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{782a2727-8b06-473e-971e-45cf480604e3}] - (CryptoPrevent) - (*.pub.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{782fb08e-beb5-471c-80c0-b9176acac2bd}] - (CryptoPrevent) - (*.png.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{783ec42d-b6c0-4545-9b48-98e24447373c}] - (CryptoPrevent) - (*.rar.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7852c35d-734c-4578-8413-da47f09724b3}] - (CryptoPrevent) - (*.bmp.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{785b68cd-32db-45e1-bd4c-99093f8d0768}] - (CryptoPrevent) - (*.mp3.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{78628ba7-0744-4a77-854b-f28871134e42}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{78838ec8-a2cd-4559-93b2-78e888f1a86e}] - (CryptoPrevent) - (*.docx.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7889f0c7-d2d4-4090-813b-f8d5d5f4d630}] - (CryptoPrevent) - (C:\Users\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{78a0ed55-038a-470e-b7b7-c851d86a2a3c}] - (CryptoPrevent) - (*.wmv.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{78bc8c87-2472-45c3-a313-bff6800288bd}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{78bcd1b7-6ca3-4cbd-96bd-4c7015cb5986}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7918c6c2-c718-4600-b756-6e4d09e01d7c}] - (CryptoPrevent) - (%userprofile%\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{791d1762-1a8e-4b54-ac56-4faae9c3481e}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79337016-3a8d-4052-8e07-ec75119f5f4e}] - (CryptoPrevent) - (*.wav.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7935e474-c342-4b7e-8614-04fb99836c5a}] - (CryptoPrevent) - (C:\Windows\Temp\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7945cdb5-8d9a-4806-9a4f-950a689b1aa1}] - (CryptoPrevent) - (C:\Users\Public\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7945e0a1-f1e4-4a17-a351-0490f2157fe2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{797306ea-e1ac-4ca3-85c8-4c237aeb8d27}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7975ef1b-b3e6-4999-beba-c6f934526175}] - (CryptoPrevent) - (*\u202e*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{799c4509-0143-4269-bdd0-1256124239d9}] - (CryptoPrevent) - (*.ppt.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79a95b10-4f40-4227-ba9d-00c140f43dbe}] - (CryptoPrevent) - (C:\Users\Public\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79c4deb6-e9fa-4b4a-acc2-6407c6f75715}] - (CryptoPrevent) - (*.avi.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79c90a4c-8c57-435e-a00a-555e927abb26}] - (CryptoPrevent) - (*.rtf.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79e86938-6f75-4c22-941b-ff089385df97}] - (CryptoPrevent) - (*.gif.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79eea35a-3249-4d69-b188-762c6f60bdf8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79f00728-b551-4a98-adb8-cd15d862d651}] - (CryptoPrevent) - (*.txt.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79f3ea18-596d-4e46-98bf-1cfd6457f18e}] - (CryptoPrevent) - (*.7z.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{79f53834-adaf-4622-88f6-16c76d89ff76}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7a069802-4b45-4768-b504-d485e344ba5f}] - (CryptoPrevent) - (%appdata%\*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7a46c117-4513-4e62-817f-92bf295344d0}] - (CryptoPrevent) - (C:\Users\Public\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7a54fa20-e84a-4933-b112-2567f8a674e0}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7a58ba28-7c59-43c0-9206-12360d49f842}] - (CryptoPrevent) - (*.xlsx.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7a6602af-86a1-4ad8-8a82-eb5f1208c341}] - (CryptoPrevent) - (*.jpeg.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7a835ce1-3c1e-49aa-82c7-905de9de3c05}] - (CryptoPrevent) - (*\u202e*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7aa3795a-86cf-4590-8fe8-17afba72af00}] - (CryptoPrevent) - (*.xls.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ab798a6-3499-4d8e-b7a1-7e0dd0c347bd}] - (CryptoPrevent) - (*.mp3.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ab84a7e-fe6d-4e44-be50-280dccf16c88}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ae48408-f7c7-45d4-887b-723ae88cde4e}] - (CryptoPrevent) - (*.pub.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7aec6209-698c-4134-a6b0-5c8c8fcc2394}] - (CryptoPrevent) - (C:\Users\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7af04279-f2d9-4132-a831-f8632cb63c1d}] - (CryptoPrevent) - (*.xls.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b006ca2-767d-4d94-bd4a-34af3d9c6ad9}] - (CryptoPrevent) - (C:\Users\Public\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b040f0b-0f3b-4ea4-b0d5-75c6c9ec32fe}] - (CryptoPrevent) - (*\u202e*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b04de5d-8bb3-4c73-b9e8-0b5241e2827b}] - (CryptoPrevent) - (*.mp3.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b0904ec-d07f-471e-80c9-26321c6149c7}] - (CryptoPrevent) - (*.divx.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b111fb9-7694-413c-8407-1c3c14f4af0c}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b1bbd7e-c487-4bbc-9db8-14eeefec772b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b2501af-1d48-424e-83fe-b7052dc75a7d}] - (CryptoPrevent) - (*.txt.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b318ecb-c85b-4dc2-818e-9c063b15cbfc}] - (CryptoPrevent) - (C:\Users\Public\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b381323-50c0-4e93-ba12-804ffb5656c8}] - (CryptoPrevent) - (C:\Users\Public\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b4c4458-4bd9-460d-8a29-1faf7c6475f6}] - (CryptoPrevent) - (*.pdf.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b603d5c-a67d-49b0-9e05-8d061068ed99}] - (CryptoPrevent) - (*.png.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b644df7-a912-43b9-b2d4-00148a58e4fd}] - (CryptoPrevent) - (*.wmv.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b67c482-e4c5-4c1d-8f97-e93803dbc3b1}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b67c6b4-863a-49c3-b177-a0fa94545318}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b7dc82c-943b-4c0a-9c49-656f4014a960}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b93307f-1db5-4e96-b743-55e376f44d11}] - (CryptoPrevent) - (*.wav.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7b95be31-5bfd-4342-9b84-4842c9925a1d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ba155fc-5284-441d-82f2-6d03ec5459b7}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7bb58e21-f1a4-40d9-bdde-3ac914762abc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7bd57f06-6c42-4921-b5a9-2de25c84cac6}] - (CryptoPrevent) - (C:\Windows\Temp\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7bdeb163-b6b5-4e4b-818a-7357b67eb545}] - (CryptoPrevent) - (*.wmv.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7be42873-50b1-4d13-b78c-82810544835b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7be6ebf5-b1d2-4585-bbaa-ed9c6f7cae37}] - (CryptoPrevent) - (*.rar.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7be75db9-3ef3-4f8e-9cfe-8ba6a2fcc8a1}] - (CryptoPrevent) - (*.xls.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7bee8de2-68de-4aa1-ba1f-80b7989477fc}] - (CryptoPrevent) - (*.mp3.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7bfeaeee-d171-4b38-b737-1786255695f9}] - (CryptoPrevent) - (C:\Users\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c0f716c-54d8-4416-b826-78a4174b83b3}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c3f8648-1e6b-4859-bf66-132194b80f73}] - (CryptoPrevent) - (*\u202e*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c4f364f-21ee-49bd-bb7f-74fbe2291638}] - (CryptoPrevent) - (*.png.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c5938cf-74b4-44ae-8eca-66844d3010dd}] - (CryptoPrevent) - (*.png.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c59bc64-b541-4488-af18-58e3c34cb7aa}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c62e1de-3138-4360-879b-8e070f5faf4f}] - (CryptoPrevent) - (*.jpg.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c688981-02cb-4ac5-96da-243424af3f62}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c695812-3e5f-4470-97a6-b18f66e243ce}] - (CryptoPrevent) - (*.jpeg.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c7a5fe5-1908-4746-a661-68ed155c9273}] - (CryptoPrevent) - (%userprofile%\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c84fd1b-b04e-4ebe-adbe-05776c5f08e6}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7c89d3d0-dc91-41e4-a2a8-4ad634011ac8}] - (CryptoPrevent) - (*.docx.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ca453a5-1ddb-4e87-898a-e1825291f474}] - (CryptoPrevent) - (%userprofile%\Calipso\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7cbf6cc7-79f3-4901-b3a9-ddd52dc96807}] - (CryptoPrevent) - (C:\Users\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7cc95715-3445-4ae7-81df-e2fb43532f93}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d2c8f33-9fb9-44d9-9c51-7306bfac0993}] - (CryptoPrevent) - (*.wma.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d38cca8-ea1c-4d20-90be-d3b6ad79ba08}] - (CryptoPrevent) - (*.wma.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d3edc84-afb5-46d1-98bc-46987bd99ae9}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d629d08-3dda-4f5e-8817-9386102fea91}] - (CryptoPrevent) - (*.gif.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d6ae843-e3a0-4e63-8d38-4edda65dcd23}] - (CryptoPrevent) - (*.ppt.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d72c551-7b90-4f15-a369-74a100d5e3bc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d7779aa-ca47-4483-a73b-ad6a421d3a98}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d9e4195-12ee-41b5-a98c-b10dc298a4eb}] - (CryptoPrevent) - (*.rar.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7d9f17fd-256e-4f18-8722-8edb97b8ee14}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7da905eb-4595-47fa-9d13-12d0a4baec68}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7dbcda83-aacc-4a4f-b504-7f5d81e8ded0}] - (CryptoPrevent) - (*.jpeg.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7dbec55e-8009-48ad-b4d4-927aa1026934}] - (CryptoPrevent) - (*.pptx.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7dbf8722-8584-44d8-82c7-196c77bfeccc}] - (CryptoPrevent) - (*.wav.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7dc8940a-619a-415c-a8b2-2b4e9d3c65e1}] - (CryptoPrevent) - (C:\Users\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7dd7f043-1fcb-4745-978e-3afbf7981502}] - (CryptoPrevent) - (*.pptx.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ddb0042-4acb-4e39-ba41-eb3c5772faeb}] - (CryptoPrevent) - (*.gif.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ddeeba0-33a0-44f5-864f-bae4f3cb50d7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7df7c931-7d02-481b-a217-38ace75ea80c}] - (CryptoPrevent) - (*.wma.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7dfca60c-73bf-4630-aa7b-c5900eee77fd}] - (CryptoPrevent) - (*.jpg.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e087a2f-d946-452a-b041-f8f7139df11f}] - (CryptoPrevent) - (*.7z.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e09a0f9-a855-47ee-aeb1-5b3b63152595}] - (CryptoPrevent) - (*.pdf.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e0c627c-fe14-4848-b6e4-3ab13763093b}] - (CryptoPrevent) - (%appdata%\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e2974b8-3307-42d0-b219-986cc4f83f97}] - (CryptoPrevent) - (*.avi.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e44fff0-f561-4549-aad8-49f840e41a13}] - (CryptoPrevent) - (%appdata%\*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e4b5ed7-f07e-4606-80d6-f4194d6a8795}] - (CryptoPrevent) - (C:\Users\All Users\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e52d4ba-f21e-4940-9524-c9ee5e68df46}] - (CryptoPrevent) - (*.png.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e747c62-9db6-4d6d-8c08-2d6b3f095d12}] - (CryptoPrevent) - (C:\Windows\Temp\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e77d91b-08cf-4d17-875d-7451c3a9b31a}] - (CryptoPrevent) - (*.zip.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e795c8b-1148-4c31-ad83-03c8dd482970}] - (CryptoPrevent) - (*.bmp.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7e975a96-4769-4b12-b978-723c2484d0d1}] - (CryptoPrevent) - (*.gif.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ea913b1-b2d8-4c3a-98a4-c4654944535f}] - (CryptoPrevent) - (C:\Users\Public\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7eb5008b-bcb2-4ea9-b77e-c28db1e3b24b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ec94bc9-ab4b-4444-8221-db20416d59a5}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ee996f1-0ab1-4b6a-9d61-eb24cce0bff4}] - (CryptoPrevent) - (C:\Users\Public\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ef6db99-164f-4b1b-a410-9f1624a20602}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f069bb8-6722-4a18-9be8-f4bf9ed2c6e0}] - (CryptoPrevent) - (*.pptx.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f2f3cf0-bec3-4ce2-a6c8-9c74c4064dad}] - (CryptoPrevent) - (*.gif.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f45e9a3-8ba8-4583-8335-37461f4b22b1}] - (CryptoPrevent) - (*.pptx.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f5055bf-f19a-4222-b659-ef41795d7aa1}] - (CryptoPrevent) - (%programdata%\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f583e38-9631-4294-a407-320e472226f5}] - (CryptoPrevent) - (*.rar.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f591bff-5aca-4d2a-bd2d-7dcab33acc46}] - (CryptoPrevent) - (C:\Windows\Temp\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f5b3fe1-81da-44c4-9260-8e59cca81baf}] - (CryptoPrevent) - (C:\Users\Default\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f660f35-b20e-46f5-b73a-df81942204d0}] - (CryptoPrevent) - (*.jpg.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f6ae92e-f750-434f-ad36-fdd15e9221fc}] - (CryptoPrevent) - (*\u202e*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f6fa101-eb8b-4c16-ace8-e622d9e1f0cc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f83ffe9-2c8c-43fb-b050-87b442e9d836}] - (CryptoPrevent) - (C:\Users\Public\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7f8f9474-8009-4996-9884-44c98f12d495}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fb7cfb7-efde-4832-8b04-a1acf3fb02a2}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fc27d91-c34b-4ff4-8502-759582d4c841}] - (CryptoPrevent) - (*.jpeg.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fc30c15-2d4a-4c36-874e-cd9e3be2f35a}] - (CryptoPrevent) - (C:\Users\Default\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fc898bf-3a38-4f8f-a02e-a9241ec1e034}] - (CryptoPrevent) - (*.xlsx.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fcf3e35-7ee1-4964-886f-7045a945777c}] - (CryptoPrevent) - (*.pptx.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fd3fc5d-a2c6-4c5b-968f-0c739e8b3a1d}] - (CryptoPrevent) - (*.pub.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7fdcbc1c-f2c9-4214-8e2b-ff31136f12af}] - (CryptoPrevent) - (%programdata%\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{7ffa063b-65af-4d18-9f56-f5ecfd46a2b9}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80188e37-5aa7-4f90-a3ce-5c34995d435a}] - (CryptoPrevent) - (C:\Users\Public\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80286a34-99b8-482d-910d-bd623ff727ff}] - (CryptoPrevent) - (*.xls.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{803e7e2d-5d09-44c9-9605-e3cdf33e548c}] - (CryptoPrevent) - (*.avi.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80425b6b-2ee9-43be-bd43-0aacce217c9d}] - (CryptoPrevent) - (%appdata%\*\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80a0bb79-918e-4621-8bb0-0a9f334e41bf}] - (CryptoPrevent) - (*.docx.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80d11899-8eba-4dff-9471-99a4817aba90}] - (CryptoPrevent) - (*.jpg.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80e2008e-a266-4a84-8862-fd8a7ef11a54}] - (CryptoPrevent) - (*.jpeg.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80e705e4-cd30-4c8a-b72a-8b3a380f3923}] - (CryptoPrevent) - (*.pub.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80f04c0e-3ee8-47f2-8c39-c0c34f3df389}] - (CryptoPrevent) - (%programdata%\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80f1f0d4-c4b5-43c5-b183-20c829a84102}] - (CryptoPrevent) - (%appdata%\*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80fa7d15-e4de-45df-ae45-0f72abf1d8ca}] - (CryptoPrevent) - (*.avi.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{80feac73-8a31-40dc-8ed7-c4a9402696f3}] - (CryptoPrevent) - (%userprofile%\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{811b4980-bdc2-4dbc-9ccd-af6aa3fd6d39}] - (CryptoPrevent) - (*.txt.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8132218c-33d6-4197-8efa-263db63da15a}] - (CryptoPrevent) - (*.pub.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81332e38-69af-4bde-b858-603128650008}] - (CryptoPrevent) - (*.docx.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8150d24c-18b7-42c1-818b-a1c41ca1714a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81840be4-218d-40a2-907b-fbb63fc91d3b}] - (CryptoPrevent) - (*.mp3.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8189cf92-ae67-48ff-9bc8-0f31bf716490}] - (CryptoPrevent) - (C:\Users\Default User\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81945751-7c54-4313-b0f5-b1645adfb010}] - (CryptoPrevent) - (*.zip.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81970c28-ad0d-4604-9b62-2bf6d0bf6a6d}] - (CryptoPrevent) - (%userprofile%\AppData\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81a151ac-5fac-4a8e-9ec3-80d5e6c1ad91}] - (CryptoPrevent) - (*.gif.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81b64dca-cb46-4e54-b951-de9688f9c556}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81c1876c-a610-4d7e-86cc-ccf8e761e6b3}] - (CryptoPrevent) - (*.wav.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81c73317-134e-4a5b-a329-f73e21b5402c}] - (CryptoPrevent) - (*.docx.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{81ce66f4-dd74-4a05-95a1-6a2801ab980f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{820e2305-5249-4b0a-8cf4-741354c59cf6}] - (CryptoPrevent) - (*.xlsx.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{823345df-ef1d-4450-a44c-410948922d41}] - (CryptoPrevent) - (*.pptx.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8235f038-a24a-4dfb-8c63-628054ebe571}] - (CryptoPrevent) - (*.divx.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8247602d-cb57-4676-88d9-d036dd06fc4a}] - (CryptoPrevent) - (*.wmv.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{824d4a44-69ef-4c9f-a32e-4254ecb49a2c}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{82526d9e-13ff-4913-bac2-0b0ffd4405e4}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{82b49de0-6f2c-4d2b-867d-14386b901012}] - (CryptoPrevent) - (%temp%\new.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83071a63-b1cd-471a-8770-927c2546aeb7}] - (CryptoPrevent) - (*.pptx.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8314ea21-3ea1-4de6-bb71-964c8df066b0}] - (CryptoPrevent) - (*.rar.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8317d71c-d71b-4670-86e2-1f73c3d5253e}] - (CryptoPrevent) - (*.bmp.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{834b93d5-7ce9-4257-95cc-08f9a2f60151}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{837e5c2e-9bb5-4c0a-8ee7-3b3bf4ae69f5}] - (CryptoPrevent) - (*.pdf.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83838b97-ebf8-4717-9501-90b46dd241d0}] - (CryptoPrevent) - (*.xls.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83a037d8-f476-47e8-bc23-5cb5797d9d45}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83a938f7-bcb9-40a0-ae47-e29d1193fc6a}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83b0c6ea-705e-465c-9e74-fc8322ced959}] - (CryptoPrevent) - (*.wma.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83b204a1-986c-474f-895e-950fe242023a}] - (CryptoPrevent) - (*.avi.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83c5b411-f03e-4c8c-afef-9f65634d68d6}] - (CryptoPrevent) - (*.txt.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83caca3b-8b6b-4450-b534-2c022714f216}] - (CryptoPrevent) - (%appdata%\*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83cb7237-9392-4fce-a036-2497ecb65494}] - (CryptoPrevent) - (C:\Users\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83d34945-0a94-45af-aa21-9c0344717f39}] - (CryptoPrevent) - (*.doc.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83d3ffe9-8756-496c-8732-af000503e2c3}] - (CryptoPrevent) - (C:\Users\Default\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83d78690-ef26-4c03-9591-99e4e11a3547}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83e36f90-ba16-4135-98b4-ff9eb0791a4d}] - (CryptoPrevent) - (*.txt.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83e6ee60-63e9-4993-887a-a199b9d79e0a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83eafee3-1f2a-4e7c-984c-b1ca99ce7bdd}] - (CryptoPrevent) - (*.ppt.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{83ed1ea0-42ca-424b-adce-76e4a427ff02}] - (CryptoPrevent) - (*.pdf.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{841b5634-2506-44ed-ac90-d8e68c446a0b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{841e52b1-a2ee-44f7-973d-74421bc0cafb}] - (CryptoPrevent) - (C:\Users\All Users\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8429882d-72ec-4fef-a036-b03c31749386}] - (CryptoPrevent) - (C:\Users\Default\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84365691-e494-42aa-9ada-1fbd474b31b4}] - (CryptoPrevent) - (*.mp4.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{843ea137-fff8-4bc7-8da6-549de7cfe71b}] - (CryptoPrevent) - (*.docx.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8441b88d-30fc-4353-9c6c-ae02870bcbc7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{846370d6-17a1-4b59-bf6b-f4f3f1a98dd3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8475ccef-a62e-4aad-870b-335b782d8af8}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{847f2cae-5767-46d4-bb52-beb29b5cc858}] - (CryptoPrevent) - (%programdata%\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{849230a5-16a2-456d-bc4c-20436554cbe7}] - (CryptoPrevent) - (*.xls.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84952e11-2c5c-4a07-a322-98eeaf30d54b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{849ad425-6fec-4c0e-b1c2-6ec9a9bf67bc}] - (CryptoPrevent) - (commerc.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84b118ab-d8da-4547-9870-9ee83229d7fc}] - (CryptoPrevent) - (*.wmv.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84b186c2-f061-4743-8bbc-b4a64265dd44}] - (CryptoPrevent) - (*.ppt.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84c1e6f9-38b3-474f-b0b1-141f9286e91a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84ca686f-6b2c-4641-a9fe-3912a228bb32}] - (CryptoPrevent) - (*.wav.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84e181df-7b74-4dec-a7d5-60a571b26be4}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84e7c002-f13e-4ea5-8b3b-56023d7d3237}] - (CryptoPrevent) - (%userprofile%\Pokemon\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84ecd4cc-f865-44cf-85a0-d06073379b4f}] - (CryptoPrevent) - (%programdata%\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{84f87cf5-08ec-4be4-9b5d-bb2d3c5916f1}] - (CryptoPrevent) - (%appdata%\*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{850f36ac-7b6d-4445-89a9-db364dc129a9}] - (CryptoPrevent) - (*.rtf.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8550a844-131c-4bab-935c-d9652bd138e4}] - (CryptoPrevent) - (*.jpg.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8556028b-e231-44de-b33c-4479d65b58a1}] - (CryptoPrevent) - (*.xlsx.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85641b61-34be-4958-be76-0fcc30e1423c}] - (CryptoPrevent) - (C:\Users\Default\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{857e23ff-2010-4cb7-ac05-73a79396dd2c}] - (CryptoPrevent) - (*.pptx.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85815137-0c14-4ea4-b0cb-fa4cf9c5285d}] - (CryptoPrevent) - (*.mp3.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{858c5b7f-422d-4174-9d19-778a08cf6e83}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{858f37f6-89b5-42ec-a584-1a6ce3a1b653}] - (CryptoPrevent) - (C:\Users\Default\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{859df8de-f21a-4265-84d6-ec388f4462e5}] - (CryptoPrevent) - (deleteMyProgram.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85a6a5f4-15ae-4e4f-b126-d70420cf42e5}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85bcf601-e812-4cae-944c-54150cad3055}] - (CryptoPrevent) - (*.xls.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85c57f91-69a7-48f7-89f2-8564dbb1e863}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85d1c431-31b7-4523-b200-af513dc2a9f9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85d83f47-b3d2-459e-9d09-c81c88f73102}] - (CryptoPrevent) - (*.xls.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85f4eecd-acc2-4688-b5ea-19d0d9a32925}] - (CryptoPrevent) - (*.divx.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85f778b5-f5ce-430d-b503-0a436b472ec9}] - (CryptoPrevent) - (*.gif.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85fa493c-6b8b-42e0-bd2b-adb490d82011}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{85fdcc57-cc18-48e6-a378-156263c86eec}] - (CryptoPrevent) - (*.png.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86082957-3126-4ec2-9931-62ba5dfeadbe}] - (CryptoPrevent) - (*.wma.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{860bc789-8989-4bb9-88cc-a255d68ce146}] - (CryptoPrevent) - (C:\Users\Public\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{860e5bc3-4187-4616-ad76-2e77bce8cd17}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{860f6547-647f-4192-b69f-6cf73b6f5ec5}] - (CryptoPrevent) - (*.rar.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{861bbd28-a106-4fd7-adee-318a7de4ea64}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86271dd2-5084-4828-a3bc-ee66a42287fd}] - (CryptoPrevent) - (C:\Users\Public\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{862c33ec-c478-424c-88f2-9c8d2d722e58}] - (CryptoPrevent) - (%appdata%\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{866a17e3-f658-47a9-95cc-9be4cec45ed6}] - (CryptoPrevent) - (%userprofile%\AppData\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8682c2eb-abb7-4ec1-99a0-1d5a4efc1a07}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86918481-e2d2-4370-9373-188a4c80c93d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8692a49b-42c3-4292-8cc9-5ef9da53f8d5}] - (CryptoPrevent) - (*.doc.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86a9c6d9-b07a-42ee-9fe1-28979155b4c7}] - (CryptoPrevent) - (*.rar.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86c33c35-c847-43ea-b677-558a22ef9d3f}] - (CryptoPrevent) - (*.zip.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86d915a4-b46b-43ea-9682-34a67dd10514}] - (CryptoPrevent) - (*.wma.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86dd3f06-89a5-429a-af62-9c18161d9ffc}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{86ebbce8-0657-4424-9592-6b1c948446a2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8708db39-689c-4954-ab82-22bd94c6a76c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8717ae2b-4925-45f2-a21e-f0d2d3f5e734}] - (CryptoPrevent) - (*.wmv.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{871f6bce-1916-42dd-969e-e55600658590}] - (CryptoPrevent) - (C:\Users\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{874bb501-3c6b-449f-a32c-a6a218b3f7c9}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8784c85a-9a46-422f-bc34-bbad90efd0e3}] - (CryptoPrevent) - (%programdata%\rkcl\ldr.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{87889f2b-06b3-4e1f-bd31-4138de85378f}] - (CryptoPrevent) - (*.bmp.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8790697a-9fb0-4bbf-885d-5b727a59dd6f}] - (CryptoPrevent) - (*.rar.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{87b12a58-a9e6-41ad-ad4a-791988be5241}] - (CryptoPrevent) - (C:\Users\Public\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{87c48f1d-cb94-499c-b0b1-5d3cfa903b6b}] - (CryptoPrevent) - (*.docx.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{87e2466a-386e-4a8c-bc20-977901eda1ea}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{87e26600-56e6-42d2-84a5-efd3f7b737ca}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{87f04f16-25ba-4d41-8bd4-53a6232efa97}] - (CryptoPrevent) - (%temp%\freegaza_israeli_killers.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88066bed-f2c6-4a06-91af-e3de068ab9db}] - (CryptoPrevent) - (*.jpeg.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88072cc7-75fb-42d1-85e7-092d70fdc353}] - (CryptoPrevent) - (C:\Users\Public\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{880d4431-d892-4cad-bce9-0028200787df}] - (CryptoPrevent) - (*.gif.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88164c63-c67b-4b1e-8480-a29d966eaf8a}] - (CryptoPrevent) - (*.rar.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8851b3c2-bf99-48a9-bed6-a67107f6d429}] - (CryptoPrevent) - (*.wma.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8852c428-c1a9-417e-99e8-f7906a808be7}] - (CryptoPrevent) - (*.pub.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8852c673-2642-46ce-b3df-5bf7fe0288a4}] - (CryptoPrevent) - (C:\Windows\Temp\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{885d5e15-af13-48a8-9457-8dab2b588a53}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8866a975-44d9-4096-9701-a5458dd4eeee}] - (CryptoPrevent) - (scsvserv.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8875a250-b951-4450-a415-e11f3652fe40}] - (CryptoPrevent) - (*.wma.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8877a123-9ba8-4c11-9751-f33f8246ad72}] - (CryptoPrevent) - (*.divx.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{887bc71f-b406-4589-9262-e95ebb920181}] - (CryptoPrevent) - (*.wav.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8898ef53-41f6-4c5f-8153-3aa2132828a3}] - (CryptoPrevent) - (%userprofile%\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{889c19d6-cea9-41a4-9d46-7ab4fc0042cd}] - (CryptoPrevent) - (%appdata%\*\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{889f2223-ab4c-42f0-88c8-cf631991bb41}] - (CryptoPrevent) - (%programdata%\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88a30f16-8719-4b0f-a0a0-98cdf74901f1}] - (CryptoPrevent) - (*.jpg.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88b4ec4e-ecb5-499b-be57-799442045430}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88bc6b77-3dcc-454b-a23b-b15dee030059}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88c4fa17-17d0-43be-b39f-47c38121d810}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88cdfa49-5a0b-477d-9caa-ee15fe92561f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{88e57988-06a9-4f74-98bf-b2b6984472c5}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{89085a79-3839-4eef-a553-a6623571b9de}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8917efab-3dd7-47cb-8577-f580272dcb42}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{892ef7bd-d7ec-4ba1-b130-b5ed36755c5a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{893f8f46-ecc6-4b64-a71e-e1931a97559b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{895644e0-6778-4928-a722-84280b8b73d9}] - (CryptoPrevent) - (*.pptx.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{895e889e-374c-4b70-b740-66d335da2bca}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{89687148-d16c-4412-a969-fd3919257fca}] - (CryptoPrevent) - (C:\Users\Public\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{896aea7d-9a0f-4bf0-8dca-3bb7a9d2bc5a}] - (CryptoPrevent) - (C:\Users\Default User\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{896c2d64-5053-46ed-a31e-5b2a3d06f947}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{89773c53-13b5-43db-94f7-bd4b1299d998}] - (CryptoPrevent) - (C:\Users\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{89b57adf-b22b-482a-8b56-189e4f4c397b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{89cd7dec-a7bc-4f8e-90da-b69773c551e0}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{89e9cc39-51f1-4cd6-ab95-a78ad34d8cd4}] - (CryptoPrevent) - (*.rtf.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a0ad47b-8039-4adb-a849-0cfca8c43157}] - (CryptoPrevent) - (C:\Windows\Temp\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a57b2ab-fed6-4f6e-8a04-65415876d649}] - (CryptoPrevent) - (*.rtf.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a74ea19-2754-4d96-9ac8-ea56da64a653}] - (CryptoPrevent) - (*.mp4.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a870f9c-fe9a-4e87-a93f-dad93783ae19}] - (CryptoPrevent) - (*.pub.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a88d705-9ff4-4851-b89b-0c33c399dd97}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a8b12a3-3a90-4969-97f3-ab52b08dcc90}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a8e853e-e8b4-4e90-a150-6e58a09bf575}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8a91ddf7-ebe9-4912-a308-b56bfef0d122}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ac0a97e-9c68-4d43-b6e8-b35f50f986f7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ac0e3cd-5d59-433d-98f3-a6a805b56747}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ac2965b-43b2-4913-b32d-d827a9c43425}] - (CryptoPrevent) - (C:\Users\Public\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ae18ed7-acac-44fb-ab07-079b6a9ffbca}] - (CryptoPrevent) - (%userprofile%\AppData\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8aeb4603-e1d1-4026-9c77-4ac8c0b333dc}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b1374b0-9f74-4b58-badb-76b3736fd896}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b1d29aa-67c8-4353-b4e0-2b752f3d9b64}] - (CryptoPrevent) - (C:\Users\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b23241c-964a-478b-b5c4-97a4ebcadb04}] - (CryptoPrevent) - (%userprofile%\AppData\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b2ff821-79f5-472c-ab9a-a0534fd44261}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b3962e3-85fc-45e2-b532-043003e544d1}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b48f1d4-fd16-4b27-ac71-e60c12336738}] - (CryptoPrevent) - (*.txt.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b5ad760-338a-41a4-a2b0-096ed7c5005b}] - (CryptoPrevent) - (*.ppt.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b5e4fcc-3df2-4bdb-b62c-f13471e5717d}] - (CryptoPrevent) - (*.xlsx.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b670b11-83bf-4270-854b-7416ff258a0d}] - (CryptoPrevent) - (*.jpeg.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b73e389-d260-4407-a1c5-e9e43834289d}] - (CryptoPrevent) - (*.rtf.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b81cef6-4f26-4b18-af55-e3e22d22d19d}] - (CryptoPrevent) - (*.docx.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8b937483-d637-40f1-9cd5-38926ee4b92d}] - (CryptoPrevent) - (*.rtf.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ba41bcf-d9ae-4d45-8bdb-554996112edb}] - (CryptoPrevent) - (*.mp3.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8bb2c0d6-0508-4696-8130-8efca5037818}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8bbbca68-4329-4453-801d-f8781bdc80c3}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8bd511a1-8bcb-434f-96d4-8c88960e5956}] - (CryptoPrevent) - (pokemongo.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8be9a5d3-9b7e-419a-92ed-f36de9245d14}] - (CryptoPrevent) - (*.txt.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8bfad066-461b-4319-aeb9-01aca1ed9390}] - (CryptoPrevent) - (*.7z.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8bfe7bfb-b726-4396-957a-54ebefe8af7f}] - (CryptoPrevent) - (C:\Users\All Users\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c162b5b-ae73-4a79-8091-2983704fd0a6}] - (CryptoPrevent) - (C:\Users\All Users\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c2000a4-44bf-4708-a7e7-4983551f0552}] - (CryptoPrevent) - (*.pdf.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c21d853-5e5d-4348-8e5e-7220e7910ffd}] - (CryptoPrevent) - (%appdata%\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c3641a5-7168-4413-92e6-82059db66b7c}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c39cd53-1202-450c-8b01-195f8945b16c}] - (CryptoPrevent) - (C:\Users\Default\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c3aae0c-d07d-4b61-b842-71ca763d2bdf}] - (CryptoPrevent) - (*.pub.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c40fa4d-c131-479c-b123-37c0ccc61598}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c52743d-c822-4e9e-aba5-249364dbaa73}] - (CryptoPrevent) - (*.wma.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c58816c-2ad8-4751-891d-037c67c2f14d}] - (CryptoPrevent) - (*.avi.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c7766b2-fbb4-4cf4-8f81-a52b62323fe7}] - (CryptoPrevent) - (*.xls.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c83f353-ca3d-4a38-9428-1bc17b8786d1}] - (CryptoPrevent) - (%userprofile%\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c85193f-ae96-4bad-9a67-7d2a747eef76}] - (CryptoPrevent) - (*.mp3.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c859370-d6f2-4fce-b84b-0b19e86175fe}] - (CryptoPrevent) - (*.7z.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c924026-45d5-41b1-bb33-2fc52ded2f45}] - (CryptoPrevent) - (*.rtf.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8c92ca22-cb74-4a15-9173-37361a7c2a29}] - (CryptoPrevent) - (%appdata%\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ca36ecc-3b15-40d1-9f39-4176fa7a2161}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ca8d00b-e712-44da-842d-0cca1372259e}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8cb33469-5587-4189-bf56-47ffbf7eb84b}] - (CryptoPrevent) - (*.jpg.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8cc2cdf0-f07b-4427-b4cc-bb6a24329292}] - (CryptoPrevent) - (*.rar.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8cc80430-7a80-4c7a-b20e-5662cb44593d}] - (CryptoPrevent) - (C:\Users\Default User\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ccbde69-3bc9-4b8a-bf78-b105bf1eafd3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8cd31100-42b7-4579-abe3-72d141bccb7a}] - (CryptoPrevent) - (*.docx.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ceb9b8c-0b29-4de7-9159-e439795df890}] - (CryptoPrevent) - (%appdata%\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d0121e6-aa66-4577-a4cc-e7cbb0d43507}] - (CryptoPrevent) - (C:\Users\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d18adf3-2352-4f45-a006-4ba6b476d2fd}] - (CryptoPrevent) - (*.png.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d1e1d8a-1e65-4995-bde3-2f6e66298f27}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d56e7f8-3cfd-4ed9-9a7a-39534116f6b8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d5812a6-cad6-42e6-bf2e-9c48fac5f73a}] - (CryptoPrevent) - (C:\Users\Public\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d605e20-adab-4318-9bd7-58e34668f8c7}] - (CryptoPrevent) - (*.pptx.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d712107-561e-4648-afc2-3b8218701520}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d75c647-c280-413a-8e36-6848b5c9b9f3}] - (CryptoPrevent) - (*.zip.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8d8bf8f1-ec4e-41cc-8bca-5a59c4853a22}] - (CryptoPrevent) - (*.divx.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8da0e193-d10d-4729-9ce7-c9560ff13abb}] - (CryptoPrevent) - (%appdata%\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8daacc4c-9d07-45bd-ab16-9901d4d4a551}] - (CryptoPrevent) - (*.xlsx.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8db49e6d-f25e-42c3-bee2-794fa47e825d}] - (CryptoPrevent) - (*.zip.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8dc37aa5-9d24-4295-aef9-0644d88086c4}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8dcb349d-0a21-495f-8a0f-2587f5c6088a}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8dcc6fd4-8023-4fac-80be-650a3686e9a3}] - (CryptoPrevent) - (C:\Users\All Users\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8dde48b9-75d9-48b1-8e73-58d84b9634a6}] - (CryptoPrevent) - (C:\Users\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8de85be1-db28-49fe-b807-d50445e7937b}] - (CryptoPrevent) - (*.mp4.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8dea07ce-001d-448b-9123-3055cd92fcfd}] - (CryptoPrevent) - (C:\Users\Public\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8deaa1ca-5714-41d3-9bea-53bb65517f82}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8dee5480-301b-41c7-bfc3-3f8534a14aad}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8df92b1c-1a6c-4d07-bd69-124e85585f67}] - (CryptoPrevent) - (*.xlsx.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e15fc9b-7267-4959-8173-00f0bd301c74}] - (CryptoPrevent) - (*\u202e*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e2c7781-a748-40c7-9591-2bb2813de2ef}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e2fa9b4-3d9a-4f66-af25-5c73afabd4e9}] - (CryptoPrevent) - (*.pdf.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e342e99-96f1-44b9-83c9-8d53d9e0d97a}] - (CryptoPrevent) - (*.mp3.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e4eb8ee-cf27-482e-814e-e47fcf1bba35}] - (CryptoPrevent) - (%userprofile%\AppData\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e501ff2-1d12-47cf-9999-4d82e7b39bb2}] - (CryptoPrevent) - (%userprofile%\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e69852e-c8c9-455b-bc9d-4551fa39d61a}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8e75a1d7-f8ca-4828-a55d-74f703aea686}] - (CryptoPrevent) - (%programdata%\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ec2b259-8f28-4bc6-98d5-73b9f3523459}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ec79d46-d0d5-45e8-96c0-137eaa224acc}] - (CryptoPrevent) - (%appdata%\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ec92af4-72f1-4dfa-8afb-d442d205b111}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8eda81a0-fc10-4b3d-9b4c-3be3174c35cf}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8eee4792-bde2-4341-a0c6-b40915e1de23}] - (CryptoPrevent) - (%appdata%\MS\Def*nder.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8eefd4f4-8753-4d8a-8660-e7e6c2dcf31e}] - (CryptoPrevent) - (*.zip.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ef602c6-1097-4075-a2ba-5fca16c75f5b}] - (CryptoPrevent) - (*.xls.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f0b8aca-3d8d-47a9-a2d9-30940e1f7e95}] - (CryptoPrevent) - (*.mp4.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f0ba125-a9c3-4bcc-b147-9948bd631beb}] - (CryptoPrevent) - (*.avi.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f231be7-4bf2-4877-b710-d7c929d5f0fa}] - (CryptoPrevent) - (*.jpeg.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f23682f-29d2-4428-8c2e-6f4ffbbadb93}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f2639e2-270c-4f9b-8463-f8ba6e704839}] - (CryptoPrevent) - (*.pdf.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f267645-5019-4742-8bb4-0c7c17fbfac7}] - (CryptoPrevent) - (*.pub.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f383ec1-3447-493b-9d62-ca4a15b14f16}] - (CryptoPrevent) - (*.doc.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f3b77dc-a502-4cbe-a892-ce2a72bb7dca}] - (CryptoPrevent) - (*.pub.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f3cdf37-cd88-4154-bb97-12676fa300c7}] - (CryptoPrevent) - (*.doc.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f8476fa-074c-45e3-8b6f-38a2052f0a73}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f9521e8-5e40-4397-98a9-8ada1b7b877d}] - (CryptoPrevent) - (C:\Users\All Users\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8f9813d5-3726-4c54-97b0-9409b7abb146}] - (CryptoPrevent) - (*.jpeg.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fa2b6bb-7485-48df-a98f-5533a130fbed}] - (CryptoPrevent) - (*.mp3.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fa3f12c-c2de-4990-828b-d0fadc64544c}] - (CryptoPrevent) - (*.gif.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fbc4d0d-a00f-4843-8479-9a0cadfd98ee}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fcdc1f4-ccbe-4871-a306-16d16703330f}] - (CryptoPrevent) - (*.wma.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fcf0526-6eb2-429d-9c5b-70d1732ee65b}] - (CryptoPrevent) - (*.mp3.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fd42630-fa83-4d77-a554-b0d4e80fd016}] - (CryptoPrevent) - (*.xlsx.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8fdfca0c-d596-4837-a97c-3279c4848454}] - (CryptoPrevent) - (%userprofile%\AppData\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{8ff53a53-69a1-4e64-884a-2b25124836df}] - (CryptoPrevent) - (C:\Windows\Temp\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9023932f-2feb-4606-b60c-76ae6d06c299}] - (CryptoPrevent) - (%userprofile%\AppData\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{902b3f07-479a-4603-84ab-4e0680ae5934}] - (CryptoPrevent) - (*\u202e*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{902be6a6-e13d-4378-bf16-60e27b0cb1d5}] - (CryptoPrevent) - (C:\Windows\Temp\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90437870-c2d0-4f7b-b224-b998dcea78ec}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9045dd82-1b01-49c9-910f-3b66e81037f9}] - (CryptoPrevent) - (*.doc.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{907a46cb-efd1-4f75-a6d8-5200ef5110d0}] - (CryptoPrevent) - (C:\Users\Default User\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{907d4228-99b8-483a-85c1-5c54e2ac6361}] - (CryptoPrevent) - (*.pptx.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90a282ba-2159-40e0-a821-f19f9e22394b}] - (CryptoPrevent) - (*.pptx.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90ab45fd-627c-4416-ae2e-28f8b5dbd723}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90b419c0-0418-4cbf-ad69-836596e72156}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90be230d-7d1c-4c57-baab-172a98edbfac}] - (CryptoPrevent) - (*.docx.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90e4d082-e77a-405d-8ea5-ea9787d53460}] - (CryptoPrevent) - (C:\Users\Default User\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90eabe48-217f-492a-8200-7c3698d4e340}] - (CryptoPrevent) - (*.jpg.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{90fc7ee7-0523-48cc-8fdb-da8fe73045c0}] - (CryptoPrevent) - (*\u202e*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9101a7c5-2997-4780-82f6-f1ba14e2463b}] - (CryptoPrevent) - (C:\Windows\Temp\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9101c073-d0de-47c3-90ed-fccc0ae15d39}] - (CryptoPrevent) - (%appdata%\processor.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91331197-e714-4463-ad70-c1af89a249a9}] - (CryptoPrevent) - (%programdata%\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{913351aa-deea-4693-a777-b7fbf71a5176}] - (CryptoPrevent) - (*.doc.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{913fa23c-2e77-4594-a605-26612e591307}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91547b2e-a294-4830-bd12-a7bded029c99}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{915d8531-5249-4edf-9386-bb710538561e}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9161dde2-3527-4bbd-96c9-b59fdb55a09a}] - (CryptoPrevent) - (C:\Windows\Temp\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9162ba53-543a-4d99-911c-d71b81415576}] - (CryptoPrevent) - (*.divx.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9167f924-16c4-4dca-9117-fbf8fc90a66f}] - (CryptoPrevent) - (*.bmp.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{916a27be-890d-4b78-bcc0-d3128d41842c}] - (CryptoPrevent) - (*.pub.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{916d063b-f452-4997-9bb3-9032b0da4753}] - (CryptoPrevent) - (%appdata%\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91730db3-6963-436d-aebe-f3e5acb26eb7}] - (CryptoPrevent) - (C:\Users\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9177b9db-cf3a-437e-b393-9e254e2b1411}] - (CryptoPrevent) - (%appdata%\*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91c4b98a-d8d2-4dcd-ab8f-6e6a6cc41668}] - (CryptoPrevent) - (*.zip.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91d68966-d277-4288-9683-67ad0a674d50}] - (CryptoPrevent) - (*.pptx.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91e7c528-e4a8-4d3d-9e51-45b5288a1cbf}] - (CryptoPrevent) - (*.zip.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91f4e84e-14de-42fc-b5bc-253113821c1a}] - (CryptoPrevent) - (%appdata%\*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91f7e502-dda1-4a4f-af1c-6f35f9f02ccc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91f8d231-d1e8-4321-843c-e35f640ca2d3}] - (CryptoPrevent) - (*.doc.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{91fda43e-06c6-44bc-b5a9-ecb4753df212}] - (CryptoPrevent) - (*.ppt.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{920fb86e-93be-4391-af2c-395b8ecc5c01}] - (CryptoPrevent) - (C:\Users\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{921b0497-aa62-482a-8359-b9c5069b5fad}] - (CryptoPrevent) - (%temp%\winpnp.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9221704c-27b3-4435-948b-9a03d36ecf21}] - (CryptoPrevent) - (C:\Windows\Temp\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{92365e00-4716-44fc-9254-6630ab9e3010}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9246480e-fc64-4bd1-9bea-b4a69e4c8a24}] - (CryptoPrevent) - (*.7z.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{925b4dd9-034e-4e52-bff0-c22c2ec72852}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9273a075-e01a-475f-8748-bfa3aa425dea}] - (CryptoPrevent) - (*.pptx.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9275a60b-d05f-488c-a943-c110a2d29a9b}] - (CryptoPrevent) - (C:\Users\Default User\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9293ea50-d579-4d94-92d7-7ab1653a5988}] - (CryptoPrevent) - (*.txt.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9297dbbb-2775-45ca-9f89-d50e943582f7}] - (CryptoPrevent) - (*.jpg.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{929a5979-148b-42a6-8f37-0c2bda34ee73}] - (CryptoPrevent) - (WifiHack.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{92b0494f-fefe-48a2-b4ee-6cffd699275f}] - (CryptoPrevent) - (*.wma.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{92b9a917-f4d9-4c47-8499-539d725176a9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{92fc831a-7613-44e4-8ba3-c4460c257019}] - (CryptoPrevent) - (*.zip.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{92fdbd6c-0cfc-40f0-8f2d-12e5352b90c1}] - (CryptoPrevent) - (*.rar.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9314a8e1-30f6-42ef-9a99-6c8859e0aad6}] - (CryptoPrevent) - (*.xls.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9316731f-c9f3-47f4-983f-7c35ab36286d}] - (CryptoPrevent) - (*.rar.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{932b98ea-757f-4843-b01f-79bba37b5047}] - (CryptoPrevent) - (extratools.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{932cc65c-d40b-4798-9823-377b1a35cf2c}] - (CryptoPrevent) - (%appdata%\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{933c2ec3-4117-4d0d-9c76-65f38825eb12}] - (CryptoPrevent) - (C:\Users\Default\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{934609d8-ef5b-4df2-a936-033f41f597a7}] - (CryptoPrevent) - (*.doc.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{934e5f05-081c-4139-a2dc-56f50a7d9f78}] - (CryptoPrevent) - (*.wma.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9376efa8-cfda-4c01-88d4-0c42e13f6c44}] - (CryptoPrevent) - (C:\Users\Public\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{937d3e8e-5de4-4524-8466-82096049e367}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{937de42e-56fa-40f3-9a68-6a6257fdcbec}] - (CryptoPrevent) - (%userprofile%\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{93924351-1596-4db3-92a9-ee0aae1c5bcf}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{939cdb78-2d40-4f16-b5c0-553db2c72295}] - (CryptoPrevent) - (*.zip.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{93c37520-ad58-454f-9930-12fc1e6a58e3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{93fc76f2-1b12-43bd-b4a1-952d5294d6c5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9406e6f3-4bc8-4ca2-b8b8-ac1f027b92d1}] - (CryptoPrevent) - (C:\Users\All Users\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94139268-3560-4f01-b4d4-0e33d010fd19}] - (CryptoPrevent) - (*.rtf.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{941c9d56-205e-4499-b1b4-7713923eee00}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{943189a3-45ec-4d4f-85e4-37c8059d6dc8}] - (CryptoPrevent) - (C:\Users\Default\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{943220c0-b2d3-4d7c-9b62-99a7e4ea1493}] - (CryptoPrevent) - (*.rar.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94684ade-6ef5-4764-8eb3-b23696224cf8}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94706f0a-c81a-47e4-9cb5-5d0a190bc681}] - (CryptoPrevent) - (*\u202e*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9478ef06-43a6-4f3b-9269-60029cfe80fb}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{948e2614-e6b5-4006-bcb5-ca645ca72ee3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9491d6b3-083f-47c2-8c99-ca69ad7dc794}] - (CryptoPrevent) - (*.rtf.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94ba8432-43fc-406e-8e5d-e335b63bc852}] - (CryptoPrevent) - (C:\Users\Public\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94bc1804-ceeb-4c03-aa36-7e806b103600}] - (CryptoPrevent) - (%appdata%\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94d33c7c-cc11-407f-a1ed-dd008d42b09e}] - (CryptoPrevent) - (*.avi.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{94ebc62c-0e1c-4132-9d66-a1a0a4c76e05}] - (CryptoPrevent) - (*.xlsx.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9519b183-0ddb-4be3-b2bf-f35bae2f00ee}] - (CryptoPrevent) - (*.divx.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{952c0797-f7b1-49e8-b74c-91273d18c9e5}] - (CryptoPrevent) - (*.mp3.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{952eb7b8-66e8-4afa-9767-e610b1ffff67}] - (CryptoPrevent) - (%appdata%\*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{953b7a68-3159-498f-837c-1c5e15a6eae5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{954cba34-ff39-4861-8d46-660bcb6d316c}] - (CryptoPrevent) - (*.pdf.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{956bca3d-9868-4621-b3f0-f0278971e839}] - (CryptoPrevent) - (*.avi.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9585095f-4ed7-4e60-b855-ffe61c8c69df}] - (CryptoPrevent) - (*.rar.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{958f55f4-22e8-487b-bbd9-c2cc883fc287}] - (CryptoPrevent) - (*.avi.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{95a104a9-25e1-47a8-904f-6b79c6178b5d}] - (CryptoPrevent) - (*.wav.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{95d55a84-d4b5-4cd3-be13-00d70c8f98ac}] - (CryptoPrevent) - (%userprofile%\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{95e3c496-b356-4db6-8988-b9392157e6a1}] - (CryptoPrevent) - (*.xls.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96058bf0-389e-4c16-bdb8-99733e873461}] - (CryptoPrevent) - (*.xls.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{960d05bd-5df5-476d-9ccc-2f41858cd008}] - (CryptoPrevent) - (*.wmv.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9610095f-edc7-4484-8c59-2bdefb31110f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{961313e0-900c-407f-b092-11c75be57e93}] - (CryptoPrevent) - (%userprofile%\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{962c62c5-d124-44bc-a84b-1fae6e11b7ec}] - (CryptoPrevent) - (*.rar.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96370e7e-6030-4b79-bf53-596b0ca8f0d2}] - (CryptoPrevent) - (*.avi.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{963c525e-7f45-4653-831d-1d7cb4e78e03}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96502132-7478-4f73-9081-06c17cf6754f}] - (CryptoPrevent) - (*.pdf.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96587bef-5fee-453a-8585-d247bde0e3e1}] - (CryptoPrevent) - (%appdata%\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{966eaafb-c251-40d0-bc2a-da9e89d40440}] - (CryptoPrevent) - (*.wma.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96971127-6beb-473c-8769-d2a407963a44}] - (CryptoPrevent) - (*.docx.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96a72847-35e3-4b5d-9105-d585dac275b2}] - (CryptoPrevent) - (C:\Users\Public\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96a96b6e-e643-4c6b-8b84-e0433da00bc5}] - (CryptoPrevent) - (C:\Users\Public\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96cc6403-c1a6-482d-aebe-9af03b3ceb1d}] - (CryptoPrevent) - (C:\Users\Default\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{96d2fc34-6390-4218-bcf0-ec774e465d0a}] - (CryptoPrevent) - (*\u202e*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{970a1b9a-36fe-4afa-b7e7-6cd2fa0831f2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97185dc4-4ea4-4939-8be6-f26eb258c789}] - (CryptoPrevent) - (*.mp3.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{973c6361-1df4-4d32-853f-ce927434c68d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97547443-90bc-493b-9ab6-4bccc80c2da2}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9768e08c-e56d-433d-ac8f-e07c1aaf322f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{976de0bd-d83f-4603-93fe-bd2c8456970e}] - (CryptoPrevent) - (*.docx.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{977e4aa7-3771-4118-8d7d-07df4ae96b5c}] - (CryptoPrevent) - (*.xls.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9783a0cf-a313-4811-bee2-852c51819c74}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{979e1127-6fb1-49d6-af17-0e4602201bef}] - (CryptoPrevent) - (%programdata%\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97af209b-f610-4acc-8150-031f2e86b5f8}] - (CryptoPrevent) - (*.wma.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97c517d0-464d-44f7-add0-cf6b0181e084}] - (CryptoPrevent) - (*.png.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97c5389b-b92d-4fc5-883d-cccf4681b9ea}] - (CryptoPrevent) - (*.xls.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97c53b0f-6247-43ab-8c2b-e0739563f70e}] - (CryptoPrevent) - (*.gif.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97cf9fec-6390-4f28-8fee-caaaeee388d3}] - (CryptoPrevent) - (*.jpg.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97d39e37-0dd2-493f-be9b-7ed364d520f2}] - (CryptoPrevent) - (C:\Users\Default\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97d81f21-5d66-40af-a4cd-58bfa4db90ec}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{97ee45ea-ebfe-4389-be3f-be3383290377}] - (CryptoPrevent) - (*.pdf.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98183a59-73c2-4cd4-adec-b930bbd59988}] - (CryptoPrevent) - (C:\Users\Public\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{981f8403-a6de-4acf-acf3-f37bd704b2f2}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98288a0d-793c-4d9b-bbf0-d3b118b7e597}] - (CryptoPrevent) - (*.txt.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{982d0b11-2cd0-4929-9880-bca18e1bd1d7}] - (CryptoPrevent) - (C:\Users\Public\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9832acad-58c9-47ab-a461-3bc3861c1fc2}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{984342ad-ec04-436a-aa33-80812074db65}] - (CryptoPrevent) - (*.docx.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{984fc2bc-f1a3-4b85-ad91-40ab3b5d1c06}] - (CryptoPrevent) - (*.mp3.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9854d8ec-309f-47d3-b403-2898a4005401}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9859d00c-ce80-48df-9109-4197d12c17e1}] - (CryptoPrevent) - (*.xls.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{985a9ac0-4391-4887-b2f3-ddf2718409df}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{987862f0-1266-4619-b815-351269dd6f36}] - (CryptoPrevent) - (*.wav.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9891e0f6-22e2-40aa-9f07-e257aeefb73a}] - (CryptoPrevent) - (*.png.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9895b070-deae-4e7e-a7cf-aa8aaa8f3df9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{989cb39d-1be1-4db6-9d2f-6d0bb9158c95}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98a47880-ff96-4826-8e1b-4a7e8629c545}] - (CryptoPrevent) - (*.png.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98bb59e2-cee3-4c2f-8a24-ba5054b7101b}] - (CryptoPrevent) - (*.zip.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98c13c27-49b4-46c0-a85f-b1792feccf8d}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98de934a-3eb0-4169-b6c8-b45c5599c927}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98e82293-9aec-4d0a-a8b9-01f1dc48b1bf}] - (CryptoPrevent) - (*.wmv.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98fcf22d-2705-4e15-8f5b-2a0562c1b920}] - (CryptoPrevent) - (*.rtf.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{98fd1fdf-cf5e-4e44-b5bc-1a53c2217f23}] - (CryptoPrevent) - (%appdata%\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99092499-beb4-43d6-8044-6d450036e6e2}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{992306a7-711a-478b-8e3b-c4646578f3bb}] - (CryptoPrevent) - (C:\Users\Public\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99348472-e7c5-4447-a3d6-3a19eb88b31b}] - (CryptoPrevent) - (*.bmp.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{993a49a4-f66c-4120-808a-4acd646e3fe8}] - (CryptoPrevent) - (*.mp4.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9973e134-5386-4d87-b773-851f7d0d0c9c}] - (CryptoPrevent) - (*.txt.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9978b51b-b16e-41f0-94e2-c9b2b5eb1a56}] - (CryptoPrevent) - (*.wma.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{998790c3-e1f8-46da-9f9d-af15a9bc60df}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{999613cb-ad24-4648-a936-a8aa5fb0438c}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99a27407-2788-4e34-8962-890852d0ba8a}] - (CryptoPrevent) - (*.bmp.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99a405f6-6f4c-4b83-bd21-741cf2ea5f1f}] - (CryptoPrevent) - (*\u202e*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99a45b8f-14d3-4216-a293-24e244b2286f}] - (CryptoPrevent) - (*.bmp.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99acde95-ecd1-46f5-8281-db76dd7a2cc4}] - (CryptoPrevent) - (%appdata%\*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99b20e9c-6605-44bb-b2f5-82cecf82cd08}] - (CryptoPrevent) - (*.ppt.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99d8b1e6-9c7b-4892-ad06-f2ba15949a84}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99f1fa6a-a32a-4f53-9dfa-01546fed06ad}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{99fa3d26-d026-4ddc-ae88-48df63c53930}] - (CryptoPrevent) - (*.rar.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a166208-9202-433b-883c-5a244afac2d8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a2a2190-901a-47c0-a17a-c2b3d5760157}] - (CryptoPrevent) - (*.pdf.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a3b1fb1-db2d-4ee7-8a04-09d980f0f6ce}] - (CryptoPrevent) - (*.pub.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a6809e7-660b-46be-bdcd-f909f4b4f81e}] - (CryptoPrevent) - (*.7z.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a76c822-c863-4d84-b139-3d53e0d71c4e}] - (CryptoPrevent) - (%programdata%\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a7c77c6-ec4c-4446-a690-3039a42447aa}] - (CryptoPrevent) - (%programdata%\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a88af59-9660-4496-b681-6dc76f791a68}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a8cf4c2-d31f-4fc7-96c2-538fdac6786b}] - (CryptoPrevent) - (*.pptx.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9a9531e9-c609-4bb2-bcfb-e5ea8151bb94}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9acd4f71-0194-422d-99ae-67e5a4716bad}] - (CryptoPrevent) - (*.wav.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ae31042-c250-4e9e-b623-3b2eef0c5bce}] - (CryptoPrevent) - (C:\Users\All Users\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ae51acb-a742-49f7-b883-430aa7a707a5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9afdc873-3db9-4b98-a27e-eaf247124849}] - (CryptoPrevent) - (%appdata%\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b00dde0-2a9e-469c-8577-9db7404ef051}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b488596-e3ba-44bb-9aa4-1d710eb0ef16}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b4f9a39-259a-47b1-babd-1ad9792f4d16}] - (CryptoPrevent) - (C:\Users\Public\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b52ff2f-910f-4e79-82bd-55f9d1fc03ba}] - (CryptoPrevent) - (%appdata%\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b7559ab-d08a-4ef7-a17a-ff2b97352e30}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b7b4f60-01a4-413e-b943-b4c6a4bd92e5}] - (CryptoPrevent) - (*.pub.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9b977fb9-7bc2-4f6b-ba70-a00309620b6f}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9be4006e-0c3d-4c15-8af2-a47c54b612b0}] - (CryptoPrevent) - (C:\Users\Public\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c0d8186-22b2-485c-a9ae-651a898e27e8}] - (CryptoPrevent) - (*.rtf.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c10f34d-deba-4c7b-948d-44d5e62e6828}] - (CryptoPrevent) - (*.7z.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c14d715-8efc-485a-8ab1-06d3fe1d5fd2}] - (CryptoPrevent) - (*.rtf.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c2c3d02-715a-4fc8-8fec-5878287f405e}] - (CryptoPrevent) - (*.divx.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c3491be-57ec-4e8b-881c-496a556bb334}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c42af41-0db5-4fbc-b34f-367534deb8b3}] - (CryptoPrevent) - (*.pdf.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c488bc5-11a8-41a7-aefb-163b3dd0f30d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c64031e-8098-4ecc-ad04-ba70dfd2f4f7}] - (CryptoPrevent) - (C:\Users\Public\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c7179d2-7c0c-49b3-9d5d-e4977ca457bb}] - (CryptoPrevent) - (C:\Users\Default\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c8a8d39-83b6-4923-9d6d-6387d32252f9}] - (CryptoPrevent) - (%userprofile%\AppData\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9c8f6bbd-6e03-43ef-9bc0-a9ac1d37dd34}] - (CryptoPrevent) - (*.wav.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ca43529-4f4d-42b6-bf46-5d3e1eb9a6ff}] - (CryptoPrevent) - (*.pub.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cb3aeee-e7ad-4cf1-9c1b-267a4c850aad}] - (CryptoPrevent) - (*.mp4.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cb873ac-483b-4d32-bc42-511981d8873f}] - (CryptoPrevent) - (C:\Users\All Users\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cbe8683-2f22-4a32-b324-4c60764b44b9}] - (CryptoPrevent) - (*.doc.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cc670df-0e29-4cb7-8698-daf625fb5ab6}] - (CryptoPrevent) - (*.7z.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cc6ddf8-46fe-4898-85ab-81faca4010d9}] - (CryptoPrevent) - (*.ppt.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cd9bfa3-29d7-4620-96c4-f484c33cf1b2}] - (CryptoPrevent) - (*\u202e*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ce28de4-bb54-4e57-8424-1c7870c100af}] - (CryptoPrevent) - (*.docx.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cee3fde-13a8-41d4-805f-9b644124887d}] - (CryptoPrevent) - (*.png.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9cfacc3e-6ecc-4d06-b3e2-eabf96133a91}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d016e10-b4bd-4575-aed8-f27ca47063b2}] - (CryptoPrevent) - (*.pdf.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d18be75-5a16-4d0f-9707-7cca9afe9957}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d1b732f-0b3b-4ddd-bf8c-07129877513a}] - (CryptoPrevent) - (C:\Users\Default\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d27c43b-e940-456e-9a41-c82e29a4bb82}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d29708f-06d3-4814-b713-747cb52a2c34}] - (CryptoPrevent) - (*.bmp.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d2d863a-b833-4a30-9952-f87a77141466}] - (CryptoPrevent) - (%programdata%\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d336030-fa3e-4f5b-ba2f-515293ab2b54}] - (CryptoPrevent) - (*.pptx.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d574ddd-d505-4b27-8b35-1ad7afba6046}] - (CryptoPrevent) - (*.mp4.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d5f8c47-a9de-419f-811f-cac95c0ee032}] - (CryptoPrevent) - (*.zip.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d6caf5f-fb58-4074-82b3-6219b19ef779}] - (CryptoPrevent) - (*.7z.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d6d14c1-50fb-47ed-8226-dc732fe2aac6}] - (CryptoPrevent) - (*.ppt.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d7ba4eb-a41f-44ea-9ec0-3dd6daaa5c8f}] - (CryptoPrevent) - (*.wma.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9d87b99f-4062-48cf-8801-c08b6007ced5}] - (CryptoPrevent) - (*.pdf.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9da5c123-8066-41a5-9841-77c222abcd21}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9db279de-95ca-4875-a662-dd36fe671b1b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9dbc9980-4230-45a1-9bf8-953e36f1edf3}] - (CryptoPrevent) - (*.jpg.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9dcbbc66-7e73-40fc-bf59-18996b22425b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e21c2ce-d767-4720-aded-d9d474df7438}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e247979-ba71-4037-8bc4-39552338d5f2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e25b616-9a2f-4f99-8210-68ada86626bb}] - (CryptoPrevent) - (*\u202e*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e337c4e-905e-4ef6-92b9-2cbc9102d65c}] - (CryptoPrevent) - (*.jpg.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e35982c-4288-4a27-bb88-b28f993329a3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e381b4f-49e5-4e4c-93ee-3ce9b4d87889}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e3d372d-3995-4949-93a4-c5ceef6eae2b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e3fea8c-4389-44e8-9e56-cfcaf4a8a860}] - (CryptoPrevent) - (*.txt.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e449e67-5ff2-40db-aa53-7d52ecd31782}] - (CryptoPrevent) - (*.gif.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e476fb0-6158-448a-b130-abb01c04ac1c}] - (CryptoPrevent) - (*.7z.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e4af06c-37f5-4fc5-82ce-a342812513bf}] - (CryptoPrevent) - (C:\Users\All Users\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e53130f-6ccf-4833-ac32-5768f7f7b00f}] - (CryptoPrevent) - (*.png.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9e7d759b-52e2-4bcc-a0f3-f2d26350428c}] - (CryptoPrevent) - (*.jpg.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9eae0ecd-412c-4984-9872-5aaa5432754c}] - (CryptoPrevent) - (*.wav.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9eb9bbd3-9b42-4e59-bc9d-cf67ecad00da}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ec4abf7-bbf0-4a26-8b8f-140061e4b69f}] - (CryptoPrevent) - (*.zip.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9eccc8dd-80b3-4089-ba6f-764d92b140b1}] - (CryptoPrevent) - (*.png.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f163e68-1fea-4be2-9464-c9d72388c101}] - (CryptoPrevent) - (*.txt.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f2f5918-1926-4fc3-af0b-b8391f9dcb82}] - (CryptoPrevent) - (*.7z.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f39fe0c-9f03-467b-9795-037a7530f56f}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f4bbca6-6cbc-4953-a7f2-ff56016d164f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f5cfe32-8ec5-4c07-a705-5223f39b457e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f60493c-47e3-490f-ad52-60fb74973f16}] - (CryptoPrevent) - (*.divx.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f61cc82-579d-4b75-bee7-a67ee2be594b}] - (CryptoPrevent) - (%userprofile%\AppData\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f77d0fe-75a4-46bb-8c3e-f5cedac67320}] - (CryptoPrevent) - (C:\Users\Public\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f7e9dca-b82d-4e51-92a5-96fbcf1b479e}] - (CryptoPrevent) - (*.doc.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9f959a37-e295-4b3d-a85d-454bb8764127}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9fcbeb35-d8a1-42e3-822c-2dbe1da1a82e}] - (CryptoPrevent) - (%appdata%\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9fcdc15f-0f48-4a87-b9a6-e969d7f1c12d}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9fcf2a95-eb50-4d71-9d9d-57c759041001}] - (CryptoPrevent) - (*.txt.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9fe66f93-4218-477b-8700-36868c65de9d}] - (CryptoPrevent) - (%programfiles%\*\svchost.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ffd4f96-44eb-4826-b634-bf9ad7e499a7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9ffeb813-5f47-4db5-acf0-eebb52ba62b6}] - (CryptoPrevent) - (*.zip.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{9fffa568-c30b-48ed-a637-dd2b04fb5a71}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0032d09-8201-4f4e-8adf-a1e6f193a1e9}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0038e92-459e-47d4-b7ff-a2d387cc2d93}] - (CryptoPrevent) - (*.pdf.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a032e2f0-9d40-4b1f-a944-b65a644514e5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a03737a4-de2f-4988-9c4e-44ba8db20f0a}] - (CryptoPrevent) - (%userprofile%\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a058e6fe-4a2e-492a-a582-4889c32761a1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a076c8f9-dc6f-46ed-9aae-7209fb7e656a}] - (CryptoPrevent) - (*.pub.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a083e851-826e-4af7-940d-f7ca3a490513}] - (CryptoPrevent) - (*.pub.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a08f56ef-1e66-4a79-b174-65d5633bc9e3}] - (CryptoPrevent) - (C:\Users\Default User\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a098f5ff-9db6-462e-8b79-a8336a34d4ed}] - (CryptoPrevent) - (*.png.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a09b860f-0697-453f-89a4-398f795f7a85}] - (CryptoPrevent) - (*.jpeg.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0a08bdd-7301-4285-9c3b-f8cd0d80ab29}] - (CryptoPrevent) - (C:\Users\Public\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0b7577a-08d7-49bb-843e-0717133cb3c1}] - (CryptoPrevent) - (*.jpg.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0b79b03-6246-41e7-82de-8f4b1488076b}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0bbfb6b-c4b0-422e-9d20-74d54446d036}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0cb326d-74fa-41b9-bb02-4888257d9fad}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0ce49f8-8766-437b-97c9-47e696480e3b}] - (CryptoPrevent) - (*.bmp.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a0ec585a-b0ae-4baf-8ae5-2e02f66075eb}] - (CryptoPrevent) - (*.divx.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a100ada9-f31e-4cbd-80a8-f8625eae68f9}] - (CryptoPrevent) - (%appdata%\*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a121b960-af93-495a-96ca-ec364359c385}] - (CryptoPrevent) - (*.7z.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1489a8f-8b6c-45c9-be28-499b5d1c2be7}] - (CryptoPrevent) - (*.mp4.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a14c082c-50a1-42c7-9895-3e937416a311}] - (CryptoPrevent) - (C:\Users\Public\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a166f678-47f9-4017-8885-a7bbfc099585}] - (CryptoPrevent) - (C:\Users\Default\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1a3dcc7-b36a-42a6-ac13-7c98963df249}] - (CryptoPrevent) - (%appdata%\*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1cab04b-7ba1-4228-bd54-166f11edf674}] - (CryptoPrevent) - (C:\Users\Public\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1ccecd7-eacd-434b-85d1-58476d4f2439}] - (CryptoPrevent) - (*.pub.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1d4160c-cf9e-4f93-9a44-517f06bdb9ca}] - (CryptoPrevent) - (*.7z.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1ea7cb4-24b7-4985-a739-856b44d11cc3}] - (CryptoPrevent) - (*.txt.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1f6df8c-e304-40e5-9136-fd29b639c4c9}] - (CryptoPrevent) - (*.zip.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a1fea1ba-9837-443e-8c3f-914d491232d2}] - (CryptoPrevent) - (*.jpg.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a20ee91e-b6a9-4b4d-ad4e-c082351093ad}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a214f916-5738-4ee7-be02-419aedf74d03}] - (CryptoPrevent) - (*.divx.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a215af56-eb8f-49b1-8b2e-3aafe9bb16ae}] - (CryptoPrevent) - (C:\Users\Public\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a22c0f7e-652d-4e20-968a-66b69ddcfc23}] - (CryptoPrevent) - (C:\Users\Default User\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a25866b4-ce7d-42d4-98a8-a7ca68e195e9}] - (CryptoPrevent) - (*.zip.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2693075-2529-4175-aa2a-5c5be930167d}] - (CryptoPrevent) - (*.pub.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2752257-ea2d-440a-8230-2a694a5fea17}] - (CryptoPrevent) - (*.wmv.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a28bb415-fb79-46c9-bce0-32ce155843b2}] - (CryptoPrevent) - (C:\Users\Default User\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a29a7ce1-f0d5-41c1-aadc-5d7553c26802}] - (CryptoPrevent) - (*.doc.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2abe8ee-f802-4835-8c00-70ef7125e443}] - (CryptoPrevent) - (*.divx.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2adcb08-e9db-4360-b65b-07800482b21b}] - (CryptoPrevent) - (*\u202e*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2b3ade0-ac4e-4542-9d33-7a5c6e3ca096}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2dede98-b060-436b-8136-0a3d7e02c653}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a2f96665-243a-421e-bbb2-665fb4d7689b}] - (CryptoPrevent) - (*.xlsx.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3096f23-b86d-411f-8bc0-0469563bbeb9}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a30afd09-4f59-45f7-b171-683ad178c915}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a34fad01-b2df-4b50-826c-ed48f550a12a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a35e7c1e-220a-45c4-b7db-75071ee1f4fd}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a361b816-09c4-47d6-a621-b9984077cd1f}] - (CryptoPrevent) - (*.xls.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a372dd22-9219-4f00-98fe-2fe016a9c1ed}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3ada2dc-9ecc-4d1e-baae-c29a80972c2b}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3b998f8-be4b-47c8-a902-c5a9eb159dfb}] - (CryptoPrevent) - (%appdata%\*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3babbf1-f2b9-4da6-9951-a6c11c353486}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3bb512e-6546-4141-91ef-497824b39608}] - (CryptoPrevent) - (*.pdf.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3ee3548-b360-48cd-b0ff-3eb5b012db93}] - (CryptoPrevent) - (*.7z.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a3fc4db7-c011-4219-92df-8bfb65a15f5d}] - (CryptoPrevent) - (*.zip.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4073f41-8e44-4be6-9131-7056841bdc97}] - (CryptoPrevent) - (*.xlsx.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4196a03-4da1-4ee9-8ec9-3bd163487d9e}] - (CryptoPrevent) - (*.docx.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a43b4dcb-48b7-45c1-974d-f468ed43dffb}] - (CryptoPrevent) - (*.docx.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4687423-1c91-485d-8a71-68b500884b8a}] - (CryptoPrevent) - (*.rtf.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a46a2c46-64a2-4ea9-bee2-1fb5e94731a9}] - (CryptoPrevent) - (C:\Users\Default\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a475b517-26a3-468c-9c64-c828ea56ea44}] - (CryptoPrevent) - (%appdata%\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a482a560-1307-4f3f-96b8-ca9c000be167}] - (CryptoPrevent) - (%systemdrive%\dccon.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4baaf75-1803-493c-8c72-cc0c27562b1a}] - (CryptoPrevent) - (C:\Users\Public\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4c72f46-0d33-4cad-8397-373e75bddc22}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4d1257c-2b45-44b1-8024-dbbfd6ec2482}] - (CryptoPrevent) - (*\u202e*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4e1ea83-3071-4abc-9c92-9edc6bbc4eb5}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a4fad31f-fafe-4106-83de-88526000c86b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5308ceb-bcdb-49a0-9c6e-c00ecd1e9f4f}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5629fc8-9721-4cf4-b27f-aca1c2c96b10}] - (CryptoPrevent) - (*.doc.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a58ca44d-f086-418b-9e3c-18acef3c61f1}] - (CryptoPrevent) - (%userprofile%\AppData\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5ac65c8-8a63-4b05-9b17-8458baf0db7a}] - (CryptoPrevent) - (%userprofile%\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5b60c4b-356a-419f-bbc3-c28c2739ea85}] - (CryptoPrevent) - (*.divx.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5bfd40b-3841-4d73-911c-0da120b85552}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5c3f189-f1b4-4502-bceb-ba2e996c2db4}] - (CryptoPrevent) - (*.mp4.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a5dc3087-7cb4-4275-a910-0d3b62f13252}] - (CryptoPrevent) - (%programdata%\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6181ae2-3315-443d-828c-fa321fd96d65}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a623202b-e546-49bb-bff2-87f1936fe059}] - (CryptoPrevent) - (C:\Users\Public\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a625d96e-d997-4158-a0c9-371397fb8163}] - (CryptoPrevent) - (*.jpg.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a62b4c2e-83b9-4b4c-853e-1e79ecda85ca}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a63d521c-af98-452f-bee7-d76b9cfafebe}] - (CryptoPrevent) - (*.7z.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a63f4641-ebed-495b-9ca0-c1872d2403b9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a65ec174-eaa0-4938-acbf-4cbad49e65b2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a673cac6-db74-4792-9408-b5c4e99bd6f0}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a67850c2-825d-4285-8819-3db92a8079f2}] - (CryptoPrevent) - (*.zip.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a67a059a-a5f1-4b06-bb7f-9a085a82adcb}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a67f0666-8539-4ffb-b399-771a5d268711}] - (CryptoPrevent) - (*.avi.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a687d973-6e08-4cfa-9178-ec304144bc55}] - (CryptoPrevent) - (%userprofile%\AppData\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a69db055-1d22-403c-8117-25f39990a8f4}] - (CryptoPrevent) - (C:\Users\Default\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6b0ede6-a21b-455b-a3f9-3e0545e618d8}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6cd0a16-52c0-4f3a-b2c9-cf699f51aa7e}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6d401dc-8d25-4167-9fa7-1ee97574f8ac}] - (CryptoPrevent) - (%userprofile%\AppData\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6e63b79-2061-44c6-a14f-a252c83e9516}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6e81ec2-b4b5-481a-9df6-079784758b30}] - (CryptoPrevent) - (*.mp3.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6e8e792-1e07-420c-9251-acdd247d1ef5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6ec949c-9375-49b5-991d-e421c6e4f16e}] - (CryptoPrevent) - (*.pub.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a6fe1225-d93b-44d9-9192-b1b73a79c7e1}] - (CryptoPrevent) - (C:\Users\Default\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a7155373-07f0-48dd-b714-787488a0bbda}] - (CryptoPrevent) - (%appdata%\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a71af532-6aa9-4832-b8d1-703b91cf238d}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a72aaf59-e44c-428e-b3cc-090ddd8d3334}] - (CryptoPrevent) - (*.mp4.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a72c03f6-cd5a-4f8c-9fc3-33b75b9282a1}] - (CryptoPrevent) - (*.png.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a72d8e3a-84bc-4b4e-bed1-84dac5ecebb4}] - (CryptoPrevent) - (*.avi.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a737f74b-92a8-45c5-be9a-e11d75967bd2}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a753bcca-ec4d-4432-8422-ee6c7882c94c}] - (CryptoPrevent) - (%appdata%\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a76e4368-5a47-48f9-94e7-3d3c8aa8af20}] - (CryptoPrevent) - (*.divx.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a772f2e7-7e7e-49ce-ae20-0b2aa96e9312}] - (CryptoPrevent) - (*.rar.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a781b2df-3a8f-461e-baa6-72264d8ee225}] - (CryptoPrevent) - (*.jpg.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a791dfd6-c52b-420c-aed6-d98a05ed0f75}] - (CryptoPrevent) - (*.ppt.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a79f4ba9-e529-4731-9881-7338cf9ab1a4}] - (CryptoPrevent) - (%userprofile%\AppData\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a7bb572c-d88c-43c3-acda-3ba238f2e16c}] - (CryptoPrevent) - (*.docx.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a7d83dc7-bd53-40b9-b066-844fe1361da9}] - (CryptoPrevent) - (*.avi.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a7f7cdbe-8ef7-476f-88a0-01728fa5085d}] - (CryptoPrevent) - (%userprofile%\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a80501f1-1feb-481a-bee7-d610f27cfdc7}] - (CryptoPrevent) - (*.bmp.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a83e7eaf-4b57-4e71-ab78-27a011065110}] - (CryptoPrevent) - (*.jpeg.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a85bf706-3e09-433a-b678-63c0865a5f96}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a862aace-f8f8-4600-99f9-a95d0ee54a99}] - (CryptoPrevent) - (%appdata%\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a8656c27-e55c-4525-b0cd-b053dd996944}] - (CryptoPrevent) - (%appdata%\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a86a202a-3e71-4948-b16c-b1b5c8747925}] - (CryptoPrevent) - (*.wmv.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a86dcc5a-2b1e-4147-99db-645dc2b421d5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a8710b1e-9f24-4692-98cc-e76b4bf386b7}] - (CryptoPrevent) - (*.pptx.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a872cd91-c5f4-4a3f-a073-7164ecf53ecd}] - (CryptoPrevent) - (*.jpg.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a8802914-46e4-4e20-8ce2-80d4d2c91c59}] - (CryptoPrevent) - (%appdata%\{213D7F33-4942-1C20-3D56=8-1A0B31CDFFF3}.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a880914c-7c4c-424e-ba6c-dd8a099c27d5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a8aa0ae9-2730-492c-8b59-b9496d1f1734}] - (CryptoPrevent) - (*.rar.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a8adafb3-23e7-4a1c-b438-81259ca8785a}] - (CryptoPrevent) - (*.pdf.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a8f6ce5a-4ad1-41e4-86e6-54c382220607}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9269855-ed91-440f-9c26-40e4f2e3dfaa}] - (CryptoPrevent) - (C:\Users\Public\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a92b04ac-1a68-4697-b42a-6632e96a61ed}] - (CryptoPrevent) - (*\u202e*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a934a09d-9f30-49d7-8b78-7e384dbba6f6}] - (CryptoPrevent) - (*.wma.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a93595fd-6eaf-4ac8-b10a-bb2c135e808b}] - (CryptoPrevent) - (C:\Users\All Users\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a953c96f-078d-465f-91f6-e5f8c9d1a202}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a97f55fd-a35d-4462-959b-8e36e028f70c}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a994efe6-20d6-46a9-82db-912a2a0109b5}] - (CryptoPrevent) - (*.mp3.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9ad94c7-b4eb-49de-b982-7622da939e6c}] - (CryptoPrevent) - (C:\Users\Public\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9c8f9bf-2268-4113-970d-5916e778fcc2}] - (CryptoPrevent) - (*.doc.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9ce2f3a-9a1b-4522-a9cc-18d39dcf01ab}] - (CryptoPrevent) - (*.jpeg.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9ce5def-f43b-4f6a-9cd7-d01c36e0d63f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9df003c-b5b1-4310-b9f6-a91a76d38452}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{a9f6b6db-18ea-402a-b2a5-362c39148d47}] - (CryptoPrevent) - (*.png.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa2a174a-88d8-4699-908c-8be53e6c208e}] - (CryptoPrevent) - (C:\Users\Default User\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa2c9c33-fd7b-41f0-b932-86823d3b0096}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa2ea07e-f4b8-48ff-b3b8-153205bb0ddd}] - (CryptoPrevent) - (C:\Windows\Temp\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa498207-527b-4101-ad03-11590afc8a3b}] - (CryptoPrevent) - (C:\Windows\Temp\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa5521b5-074d-484c-b022-ea02d124b607}] - (CryptoPrevent) - (C:\Users\Default User\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa78b0fe-a44f-4ed3-9987-c9acb4e823f3}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa8ed497-bf48-4f31-8f9a-250694dc415c}] - (CryptoPrevent) - (*.rtf.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aa97ad33-a1bd-4429-bb89-8a06883f0574}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aaa82a76-d7c7-468e-af40-2dda79ebce5a}] - (CryptoPrevent) - (%userprofile%\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aacb8f68-9e1a-4119-9ea5-0dadc1fe86cd}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aafaf493-5f9f-4d89-bd7a-813dd4a476c7}] - (CryptoPrevent) - (*\u202e*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab02f164-68a7-4ea4-873d-faaeb49f49c6}] - (CryptoPrevent) - (*.zip.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab062804-7c2c-4a4e-a5d7-6a255a18ccd4}] - (CryptoPrevent) - (*.jpg.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab2d3715-819f-4e98-9b8a-d53c4e1866ce}] - (CryptoPrevent) - (*.7z.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab3b15a5-5acf-4821-9110-4eb88efb6d83}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab45919c-f9da-4498-bbd0-1256d6f5d49f}] - (CryptoPrevent) - (%appdata%\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab5ddbd4-e2a3-48fb-8411-8f76eb15df34}] - (CryptoPrevent) - (*.divx.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab5e7ce4-f254-4020-8239-7e86c1156590}] - (CryptoPrevent) - (*.pptx.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab6e4ace-17d6-4938-a0a8-5b00f3224a7d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab71d9ad-f225-405b-beb8-d6384e6f6bec}] - (CryptoPrevent) - (*.ppt.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab82f800-cae1-47b3-b1e7-6324e46698ae}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab98b268-5d16-448a-b496-fb2678ec9672}] - (CryptoPrevent) - (C:\Users\Default\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ab99e533-9f25-4cce-9846-8e3bfc851455}] - (CryptoPrevent) - (*.wmv.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aba55bbf-0513-4820-a2b0-874525a12b4c}] - (CryptoPrevent) - (*.jpeg.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{abb0ec17-26ec-4985-b297-de9fe23ea0f2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{abc02862-c0ea-4c08-b5fb-f9a2a0caa599}] - (CryptoPrevent) - (C:\Users\Public\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{abe177d5-c774-4ccf-a07a-d5a859d76b17}] - (CryptoPrevent) - (C:\Users\Default\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{abf1365d-6537-4616-9fc8-2ed30acd6e64}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{abf70077-7d87-4b3b-a6d6-c35185586d94}] - (CryptoPrevent) - (*.doc.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac0e7ae2-3a5b-425f-8a0a-afb978028ccd}] - (CryptoPrevent) - (%programdata%\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac167fbd-d12d-4512-89ce-b2b19e0d43f2}] - (CryptoPrevent) - (*.wmv.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac25596e-410b-42ab-b896-13db8a465756}] - (CryptoPrevent) - (%systemdrive%\Mount.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac4dded9-d4b8-4641-8f99-4249951b8fd9}] - (CryptoPrevent) - (%userprofile%\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac560c4d-4b93-4aa6-8e7f-e18c7abb41ee}] - (CryptoPrevent) - (*.pdf.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac6ca929-042d-4e3d-b2ea-456dc36870b5}] - (CryptoPrevent) - (*.7z.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac7e0e80-c4a8-4839-b1c1-328025d5fe67}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac8a1f2a-2611-4fd4-9bb0-bae7b17c2279}] - (CryptoPrevent) - (*.png.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac8d2c50-8e0d-49d1-85fd-5640006fbf27}] - (CryptoPrevent) - (*.mp4.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac925caa-4502-4397-b821-bcd46257bb7a}] - (CryptoPrevent) - (*.txt.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ac95dc94-a0e3-4011-aaeb-3e38a1e60423}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{acdd1650-1723-458c-a2f4-833a2aadd4d8}] - (CryptoPrevent) - (*.mp4.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ace4bd2c-9cd8-4f21-bd3a-e6631743e43d}] - (CryptoPrevent) - (*.gif.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ace56f5a-200b-4279-9b38-97f30507a516}] - (CryptoPrevent) - (%userprofile%\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ace62da6-1a53-4c10-9052-e185a4da9489}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ace95e27-72df-48ed-8504-8fba2aaca19f}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad0d7acb-a795-4a0d-a252-6439cb8196a7}] - (CryptoPrevent) - (*.pptx.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad17ecab-3962-4d78-8009-5727e85a0185}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad21997b-afe8-42ea-abb4-fa832a651f53}] - (CryptoPrevent) - (*.doc.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad416ce7-4dd3-4453-94b3-5d4daf6ce6a5}] - (CryptoPrevent) - (%userprofile%\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad53cc01-2b37-491e-a658-f7bd4c39a819}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad57c1bb-1fdb-42f2-8522-0b382a49dc39}] - (CryptoPrevent) - (*.mp4.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad5ac153-361d-462a-8d01-5c4ee1298917}] - (CryptoPrevent) - (C:\Windows\Temp\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad6155be-325e-4779-b843-9b0dac381c3b}] - (CryptoPrevent) - (*.gif.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad672a00-e5f8-4401-bf55-f22a05cb7ae0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad6bb22c-a1bf-4609-99ef-91fe84072f4c}] - (CryptoPrevent) - (*.wmv.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad6ef1bc-05f9-496b-a0c0-3bea9c3521c1}] - (CryptoPrevent) - (*.xls.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad7321a5-0def-4168-a421-f9e1e451aa39}] - (CryptoPrevent) - (%userprofile%\AppData\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ad847ad1-e7cb-4cf6-9ec6-ae53efdc00d2}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ada7a5eb-030f-429a-9a11-bd81d0e2ccd3}] - (CryptoPrevent) - (C:\Windows\Temp\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{adb4496a-29b9-465f-b573-6804d24a6b92}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{adb59a6c-d3f0-444e-923a-6f5e59116193}] - (CryptoPrevent) - (*.wma.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{adb7e6fb-3cb8-40ba-a20e-8c9d7b3be384}] - (CryptoPrevent) - (*.divx.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{add68cb4-7c2e-4ada-997c-891fb67ef1f3}] - (CryptoPrevent) - (*.docx.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ade7daf0-51e4-4272-892f-ae298344ee2d}] - (CryptoPrevent) - (*.avi.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae046408-eec2-499b-9f14-62f0ede97d7a}] - (CryptoPrevent) - (C:\Users\Public\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae0ceca4-49ad-4885-afb0-42e29570b64a}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae24470e-cdea-42d6-bfbe-225a206ea60a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae256ea0-b05f-4ae8-adb8-b9710f7e61b7}] - (CryptoPrevent) - (*.jpeg.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae295a99-4866-4eca-bec6-01d47f0e7e5f}] - (CryptoPrevent) - (%appdata%\*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae3a3fcc-70d0-4e46-95db-796b10e62959}] - (CryptoPrevent) - (*.7z.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae3a5540-2c87-4da0-befb-3f74749ec4d6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae3bec44-17fa-4695-a602-31b467e025ad}] - (CryptoPrevent) - (*.divx.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae52bba7-4945-4019-9947-81bcc4a048e9}] - (CryptoPrevent) - (%appdata%\*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae6c12a3-e883-4ddc-9206-2735518e37f9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae752291-c217-4c7b-b71e-a9bac56d356f}] - (CryptoPrevent) - (C:\Users\Default\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ae85a74c-8c3a-4017-98ca-f3aaf8a1f170}] - (CryptoPrevent) - (%appdata%\*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aea07699-e2df-49e4-9332-d4ec3645b616}] - (CryptoPrevent) - (C:\Users\Default User\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aecab803-faab-403c-b0ab-5eda77afa6a7}] - (CryptoPrevent) - (*.pptx.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aed97a3b-5d0a-4fc4-97bd-71fa6fdce39b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aeda3a37-b216-46ad-b221-b2f5ee5e3e06}] - (CryptoPrevent) - (*.pub.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aedf7343-b53a-4c05-bf3f-60befe09db6a}] - (CryptoPrevent) - (*.txt.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{af38e257-0bc6-47d7-b133-fd6ba2192404}] - (CryptoPrevent) - (*.txt.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{af62fa40-e556-41ad-8540-fa578db20065}] - (CryptoPrevent) - (*.doc.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{af678a8c-1b04-435b-992e-1b3fc2381ab3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{af6872d2-192b-4741-9646-046cff70c710}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{af7f86db-b817-4de2-97b9-d2687f77a2ce}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{af985ffa-89bb-4785-9141-e6412e120ed4}] - (CryptoPrevent) - (*.xlsx.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{afb8de9e-a0b1-443b-8d39-da1dd1ee5182}] - (CryptoPrevent) - (*.ppt.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{afe1a4f2-e2a9-4f96-9677-c7e7a891d4a3}] - (CryptoPrevent) - (*.txt.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{afe6abe8-63ac-4355-a769-33de8c313e24}] - (CryptoPrevent) - (%appdata%\*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{aff63a74-af2c-4075-b661-2e243c3ed888}] - (CryptoPrevent) - (%programdata%\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b001a498-1f56-4ad7-b3e2-099a47b31263}] - (CryptoPrevent) - (*.pub.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0089ea8-202d-4499-bda7-5217f906abe7}] - (CryptoPrevent) - (*.ppt.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b018eed0-fd8c-4a67-ac1d-b3f9dff3a16f}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b044bb92-24e2-4abe-8452-03667eea4ec2}] - (CryptoPrevent) - (*.pdf.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0591c92-5b66-4592-b639-c4f36c67c58c}] - (CryptoPrevent) - (C:\Windows\Temp\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b05ec883-0e9a-495c-b7c4-acaa14ad733b}] - (CryptoPrevent) - (*.ppt.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b07fc148-dd51-4ee9-9a01-6f4a372217a0}] - (CryptoPrevent) - (*.wmv.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b09d5363-4678-4c78-ae61-3bde6dd6e5fa}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0b3f969-6f33-45f2-b860-3e988865274a}] - (CryptoPrevent) - (*.wmv.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0c1b5d6-fa69-418c-9935-667b58534071}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0cd3038-70e4-42dc-9201-106d0ec16071}] - (CryptoPrevent) - (*.png.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0d9f6fd-4eb3-4865-b9b5-577ea6be5d6e}] - (CryptoPrevent) - (%userprofile%\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0dc054c-a25f-440e-be50-59248739d460}] - (CryptoPrevent) - (*.wma.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0fc4420-5789-4c2a-ad94-6799f4af4a7a}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b0ffd292-625c-4855-bdba-618bfa80c5ae}] - (CryptoPrevent) - (*.png.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b10213c4-297b-47c1-85fa-668393cfa43c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1103f32-bf82-47c2-89b8-4586c35bd871}] - (CryptoPrevent) - (%appdata%\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b11bd5cc-c6bf-485d-b41f-ae4088d11b50}] - (CryptoPrevent) - (*.bmp.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b128f3df-2cfc-4696-9bd3-3ae4e99a6f4f}] - (CryptoPrevent) - (*.jpg.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1318584-28a7-48b0-8a3a-708ad145f742}] - (CryptoPrevent) - (*.pub.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b13e295b-bbef-45fe-a677-9aa8d09dee06}] - (CryptoPrevent) - (*.jpg.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b14af5da-e78e-4cbb-b889-05958c53a79d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b14cb21e-2285-4f52-9936-b918401025c3}] - (CryptoPrevent) - (*.docx.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b17591cf-895c-4499-bbd0-e5a10d8c3ab0}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1afdc3d-eaae-406c-9c85-c7c30100c090}] - (CryptoPrevent) - (*.pub.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1b6c90e-bc1a-4b08-bc78-7fee75c8bcf5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1cabe85-7f3b-45bc-b643-b2d5e532af0c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1cec88b-efac-455e-ad8b-7f95c0112917}] - (CryptoPrevent) - (*.docx.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1d24bf5-15e9-429e-bdd1-8ac1d07830aa}] - (CryptoPrevent) - (*.rtf.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1e075df-7f16-4f49-9ebd-c5374547d498}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b1e820cc-d27e-4d71-adca-db6e5da264dd}] - (CryptoPrevent) - (*.jpeg.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b212d120-088e-4e79-9c49-e6ef29409e4a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2291678-3944-48d6-9a59-865f9fa4075a}] - (CryptoPrevent) - (*.png.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2297e9f-9f9f-4c86-a582-9a38a9a0fa4e}] - (CryptoPrevent) - (*.jpg.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b296e778-987f-4652-8522-3904d2e5185d}] - (CryptoPrevent) - (*.jpeg.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2cba557-d5c1-4acf-ac42-f03935bb736e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2dc0024-c1c8-4495-9632-1a358074d169}] - (CryptoPrevent) - (C:\Users\Default\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2f1b8f9-380f-4982-8944-50848b114625}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2f41b87-1e2f-4392-abb0-921a2dc33fd2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b2fcb6b9-4eec-4861-9115-e4fad61d9790}] - (CryptoPrevent) - (%programdata%\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b301d619-26cb-4a8f-881d-78360bd9e04a}] - (CryptoPrevent) - (*.xls.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b302d4a3-8a25-4902-b936-b0bc8bb6b43d}] - (CryptoPrevent) - (*.docx.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b30c7384-070b-46a1-b043-15265c9e2a88}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b322cc7f-335a-41cb-807d-e2e9542cd4dc}] - (CryptoPrevent) - (*.png.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b332b341-7e83-40d8-b63c-0e729f2c72c5}] - (CryptoPrevent) - (*.avi.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3367702-1ccd-4de3-994d-e4cb1d34b3ff}] - (CryptoPrevent) - (*.png.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b33893d5-1cc8-457c-9601-4967e920a810}] - (CryptoPrevent) - (*.rar.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b368fe8d-4add-438b-9c62-87177a8efa59}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b36ad0cf-b637-45fc-ad1b-184351e16427}] - (CryptoPrevent) - (*.txt.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b36cb02d-f1a9-4f96-952c-48e95dc0ca0a}] - (CryptoPrevent) - (*.wma.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b37a402d-9c5e-4088-8dc9-0f547801eeb6}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3a10a24-f04e-4227-a2f3-d7e50a600527}] - (CryptoPrevent) - (*.xlsx.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3a51edb-57f4-455f-aa1f-920161911e39}] - (CryptoPrevent) - (%userprofile%\AppData\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3b04761-77f5-4254-906c-395d5ae3b6b3}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3b29931-dddc-4906-9996-9371802ca156}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3b492ab-d63c-43f7-8c80-56821768c213}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3cbf687-19a3-490e-8762-9a3239377e7a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3d03e1f-2d78-4f9f-b75d-b2e870a6df19}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3d3f278-12c2-4537-89d3-b70e25233e9a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3daf250-6674-4db1-925c-1ce4e18e6241}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b3e65210-e88b-42f7-ad31-9d9547400912}] - (CryptoPrevent) - (%temp%\windrv.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4480068-8ea2-4bd8-aadd-12983d582e32}] - (CryptoPrevent) - (*.pptx.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4512bb2-cae5-4681-9f94-17e6ce7d40e6}] - (CryptoPrevent) - (%temp%\x64.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4788442-be78-4ca3-bc2b-cfaf305abd8f}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4790ed1-529f-4424-994f-90ad58b78e56}] - (CryptoPrevent) - (*.txt.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4806892-2a98-4311-bece-d3a48203575c}] - (CryptoPrevent) - (*.xlsx.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4819fd4-0453-4cc2-9dad-9e302eec52e9}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b48b0e99-9f85-457f-99be-fe0901a6abe8}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b48d4ab7-d6fd-47b0-b7e4-14f415896b71}] - (CryptoPrevent) - (C:\Users\Public\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b490bca8-1e93-4f21-bf6c-e95cc3d0b606}] - (CryptoPrevent) - (C:\Users\Default\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b49e5b82-2c8f-4d12-812b-ad80025934a6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4ae73d1-049c-4cd0-b704-df32d559972c}] - (CryptoPrevent) - (C:\Users\Default User\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4b81d52-7c68-4c8e-9e01-04029d57c81b}] - (CryptoPrevent) - (*.pdf.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4b887fb-79df-4b03-9bc8-da1746786109}] - (CryptoPrevent) - (*.7z.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4bbe070-adef-44a1-82eb-3600c93baef7}] - (CryptoPrevent) - (C:\Users\Default\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4d1be9b-4b6e-473a-a231-facae60ef746}] - (CryptoPrevent) - (*.pdf.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4df9e37-4310-4c1c-8a24-69b168311b22}] - (CryptoPrevent) - (C:\Users\All Users\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b4f87fcb-21ef-4c6e-9d98-4380159ba346}] - (CryptoPrevent) - (*.docx.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b509847c-67cf-4da5-810e-d9103ca45a59}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5169e93-3777-4b45-815a-977b1878f1d0}] - (CryptoPrevent) - (*.avi.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5196252-9a4c-446d-b924-164badb45f0b}] - (CryptoPrevent) - (C:\Users\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b557c2df-38c3-493d-ac5a-b77daaeb3e88}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b55ce5d5-7656-4976-a037-4edc9d2dc133}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b55fa830-ac95-4be7-9a71-c0fce8f49ac8}] - (CryptoPrevent) - (*.gif.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b568424d-ec03-44a8-8381-a2ba76691921}] - (CryptoPrevent) - (*.ppt.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b56bd082-bb3e-40ff-b534-de84f471cc2c}] - (CryptoPrevent) - (%userprofile%\AppData\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b57591b2-93c3-4dc2-8f55-b349ec0e1986}] - (CryptoPrevent) - (*.wma.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b58481f5-40cc-40fd-8e6e-e7cbfce3417b}] - (CryptoPrevent) - (C:\Windows\Temp\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b585d078-56ea-471d-9c53-c57f3e4c2dce}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b58f885a-cb1b-435f-91c8-3850247a839b}] - (CryptoPrevent) - (*.pdf.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5912088-cb4b-479c-b3a9-0594a9a1814b}] - (CryptoPrevent) - (%appdata%\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5962853-519b-40e2-9b48-09966bde2642}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b59a60f7-7466-4a99-8f28-2c55ea9aaa61}] - (CryptoPrevent) - (*.mp4.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5a8514f-a9b6-45a9-946e-8549198641e1}] - (CryptoPrevent) - (*.rar.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5c7bdd6-8bb8-4d17-9829-af9dd52d98b0}] - (CryptoPrevent) - (%userprofile%\AppData\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5ce8604-1f30-473a-bea5-58f7e7b8cd77}] - (CryptoPrevent) - (*.wma.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5d6d8a0-935b-46be-9ac9-f6bb3a217948}] - (CryptoPrevent) - (C:\Users\Default User\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b5f3d9b5-cd4b-46d5-9459-a5ad71def90a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b60c0561-669b-4695-8dce-33f9ef1e3194}] - (CryptoPrevent) - (*.7z.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6258330-5647-4366-8775-0b9ff55d0632}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b62e108e-e0b3-4fb0-84c9-740a7e1d1108}] - (CryptoPrevent) - (C:\Users\Public\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6490b76-aaa5-4761-91ae-1cae9b209fe2}] - (CryptoPrevent) - (%programdata%\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b657cb18-a5f1-46db-8b52-c644bc28ed2e}] - (CryptoPrevent) - (*.gif.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b67ac7cc-64a9-469a-8f81-71b45faa65c4}] - (CryptoPrevent) - (C:\Users\Public\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6880c7a-4c63-41fd-9dc4-7fbf871bf5cb}] - (CryptoPrevent) - (*.gif.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6b08a0e-967c-4dd2-bcc8-75a37a41532f}] - (CryptoPrevent) - (*.rar.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6b0d717-e9a2-4319-9c7d-42d0369b4526}] - (CryptoPrevent) - (%userprofile%\AppData\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6bd9213-2e08-42c4-951b-9971a4b40508}] - (CryptoPrevent) - (*.7z.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6e9be07-8519-43ba-941d-b8b077c44178}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6f1af3e-b43d-4300-b1ff-c4b33d2b2673}] - (CryptoPrevent) - (C:\Users\Public\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b6f6142e-6565-4e1e-97fb-9c077e6aea74}] - (CryptoPrevent) - (lsassw86s.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b70b05c5-77e2-4746-895b-005a310eff33}] - (CryptoPrevent) - (*.rar.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b712a7e6-11f3-489b-b67a-603eb176dbca}] - (CryptoPrevent) - (*\u202e*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7150417-f1ea-418d-abac-ecaceeba9a36}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b71672fe-913b-49d0-bf02-97873e61ac19}] - (CryptoPrevent) - (C:\Users\Default User\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b719968a-3d71-4759-a94a-a9395598f760}] - (CryptoPrevent) - (*.pdf.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b71a29b4-231e-49a9-8483-74def483047c}] - (CryptoPrevent) - (*.gif.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b73779d4-3ae8-4ace-894e-89865fc5c5cb}] - (CryptoPrevent) - (*.7z.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b74983ee-aa06-421a-8d66-e737d1d8be23}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b749d0c9-ecb6-4bc8-bcec-bd4a00f9ddbf}] - (CryptoPrevent) - (*.wav.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b74d8903-bfc2-4b15-83a4-61191eaf3f38}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7703d6c-adfb-45dd-abf0-a833b0779d66}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b77c5a7d-ffdc-40ab-9796-53022e7b7c31}] - (CryptoPrevent) - (%userprofile%\AppData\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b78c8c11-d095-4894-b4ed-e20e7590e34d}] - (CryptoPrevent) - (*.pptx.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b78def4b-86a7-4d88-8bcf-481de0919b36}] - (CryptoPrevent) - (*.gif.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7917ef2-3508-4a85-884b-314ac831055a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b79ab91f-65fe-4b3e-9f31-eb7642097b8d}] - (CryptoPrevent) - (*.pptx.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b79adbe2-9966-4538-9e73-154a8394cebd}] - (CryptoPrevent) - (*.xls.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7bda95c-249b-413d-b51c-87125c3402dd}] - (CryptoPrevent) - (*.txt.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7c88e43-aa59-434a-97c2-ab98da94a602}] - (CryptoPrevent) - (*.wma.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7cf947f-fe3d-4d53-a9a8-fcb813cc34d9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7dd471d-7148-4431-b2d7-fcf590be12f6}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7f53067-cf96-4dc9-8b3c-436bff475505}] - (CryptoPrevent) - (C:\Users\Public\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b7f72b7a-56c0-41ed-a818-e29e54ce2ed7}] - (CryptoPrevent) - (%userprofile%\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8087ecc-315d-4e4d-8629-4f005a6e7ca7}] - (CryptoPrevent) - (*.txt.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b80c7fc9-ca68-4e6f-a60f-6ed844bfb21a}] - (CryptoPrevent) - (C:\Windows\Temp\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b810053f-8cec-4960-8714-5908b0b9fb81}] - (CryptoPrevent) - (*.xls.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b81ec0eb-078b-4377-a977-126f772ca37a}] - (CryptoPrevent) - (*.mp4.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b82aa0c5-23dd-456a-adac-945a0cc5ba32}] - (CryptoPrevent) - (*.zip.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8363a2b-7ee0-4d51-a411-f92f2b7ade73}] - (CryptoPrevent) - (*.wav.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8380776-af5a-4f4c-a064-ecd84d07bf87}] - (CryptoPrevent) - (*.wmv.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b838c489-6f1c-481f-9220-191bc0ea9dfe}] - (CryptoPrevent) - (*.gif.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b83db5d7-7ded-4f69-94eb-7361aa75e5e7}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b85cb54f-7828-4507-8b68-6d422d7b84ee}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b868ebfa-f1bb-4182-9b20-5594d90c255b}] - (CryptoPrevent) - (%appdata%\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b86fc54e-b255-4792-b1e5-3ea11a668dd5}] - (CryptoPrevent) - (*.wma.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8960b0b-2ae3-42ed-a307-490cdc2e8cc4}] - (CryptoPrevent) - (*.divx.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b89d452f-1fb9-48ae-8172-4f730229dfcc}] - (CryptoPrevent) - (*.mp3.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8a67f95-7609-461e-b181-67d2464db214}] - (CryptoPrevent) - (*.rar.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8c93ae4-789d-4b70-8540-d3891c22eec3}] - (CryptoPrevent) - (*.gif.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8df8194-4766-4cd7-ae61-b11970c8c00b}] - (CryptoPrevent) - (*.jpeg.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8fd96a1-91b6-4231-91b6-12cca90b7415}] - (CryptoPrevent) - (*.jpg.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b8fdcd06-db64-4cbc-98f7-cf54d851b547}] - (CryptoPrevent) - (*.xls.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b91188a9-39d2-471c-9af7-d62cce32f068}] - (CryptoPrevent) - (C:\Users\Default\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b915af78-c200-4ad2-8ee9-631a1fef7c58}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b92171dc-eb35-4630-9738-aa9cef8e3673}] - (CryptoPrevent) - (C:\Users\Default\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9283ceb-9197-4146-8e8c-7a1e1c5f4a60}] - (CryptoPrevent) - (*.rtf.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9333757-7fdc-4623-a8be-fd295177e786}] - (CryptoPrevent) - (*.pptx.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b94594bb-6ee1-4849-b750-53eb08f5294f}] - (CryptoPrevent) - (*.mp3.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b966c099-e28a-4f6f-95f7-e98c06b59f07}] - (CryptoPrevent) - (*.wav.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9713dfb-2459-43c3-9334-bc414fd640e6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b97e8c2c-a005-4420-a428-d575567f20ea}] - (CryptoPrevent) - (*.ppt.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9860aa1-0454-45b2-8caa-09c26873a932}] - (CryptoPrevent) - (*.wmv.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b991f96c-4183-47e6-9da0-e321d9f3d9cb}] - (CryptoPrevent) - (*.gif.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b993e77d-f636-46fe-95ab-c15300f5229b}] - (CryptoPrevent) - (C:\Users\Default User\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9a39d7a-e1d0-429f-8463-264b6775c1f6}] - (CryptoPrevent) - (*.divx.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9a846d4-bad9-423a-a410-1b4d639e9001}] - (CryptoPrevent) - (%userprofile%\AppData\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9ae4ed7-f9be-420f-a968-f166cb7c5fd2}] - (CryptoPrevent) - (*.pub.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9b07824-80cc-4020-8423-c43c1a934270}] - (CryptoPrevent) - (C:\Windows\Temp\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9b10d3b-cf13-499d-aa60-5d82aabafd9d}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9b3b674-d68a-4cdc-887f-8cae611a1882}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9ce1f4d-18f2-4303-9ff0-bf02dda25358}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9d33d48-d62c-4e73-88ad-e4ae13abf9d1}] - (CryptoPrevent) - (*.wav.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9d91a64-6056-45ec-b3b5-4fbc8d5dd492}] - (CryptoPrevent) - (*.pdf.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9e957a3-f8cb-468f-8764-b0dcd3b0ba1c}] - (CryptoPrevent) - (*.pptx.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9f81489-10fb-4f68-a1df-f3eddd9304a5}] - (CryptoPrevent) - (*.rar.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{b9fb5956-7f43-42eb-bb3d-14e65e4da7e8}] - (CryptoPrevent) - (%userprofile%\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba049d83-2407-4aba-8048-03b72af028bf}] - (CryptoPrevent) - (*.doc.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba0d02d2-0f54-47ab-8c2b-df233f6693f3}] - (CryptoPrevent) - (*.doc.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba233eea-49a4-4bed-b113-11d645cc3892}] - (CryptoPrevent) - (*.mp3.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba26e6fa-3726-4273-b9ef-38c189b8aeb7}] - (CryptoPrevent) - (*.xlsx.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba26e814-4360-4401-aced-38d577e38e4f}] - (CryptoPrevent) - (%userprofile%\AppData\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba379186-1ff3-4e67-be02-cc830b293c5d}] - (CryptoPrevent) - (%appdata%\*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba3b1a06-2fed-422a-a6e2-b7c05d1c6be1}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba410be4-181e-49be-bdff-a7fc818d66be}] - (CryptoPrevent) - (%userprofile%\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba464e80-967d-4654-bc5d-5cc4e2364d1f}] - (CryptoPrevent) - (*.zip.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba5d7ba8-986a-428e-8a73-54d977157270}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba624a48-e813-4f25-829f-de5cbb933b05}] - (CryptoPrevent) - (*.rtf.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba6327d1-2f4a-4499-8de6-0da60f598562}] - (CryptoPrevent) - (*.mp4.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba6ff0af-9041-49e1-b769-f5358a8dc1a2}] - (CryptoPrevent) - (%appdata%\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba70b597-57f6-43ce-878e-623c6ed0ae23}] - (CryptoPrevent) - (C:\Users\Public\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba7a50af-d79f-46aa-934c-b57f843904ed}] - (CryptoPrevent) - (*.txt.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba91ab00-d04f-4094-bd06-d91a1282c6b1}] - (CryptoPrevent) - (*.zip.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ba995a6f-5a2a-49b7-aee7-c3f632f33903}] - (CryptoPrevent) - (*.xlsx.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{baad156b-8695-449a-990c-c56454baebea}] - (CryptoPrevent) - (*.7z.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bab4a8d2-ef97-46d3-a7ba-308da8e145aa}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{baeed9e0-ce52-4a2e-9129-0408f57a7395}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bb3b82d0-0a90-4516-85c8-1ae8a03d01a3}] - (CryptoPrevent) - (C:\Users\All Users\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bb9db60a-fe3a-41c9-85e8-e8f8a9eb09a4}] - (CryptoPrevent) - (C:\Users\Default\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbaa38f7-0cf1-4d72-90ae-972ef4e4fd4e}] - (CryptoPrevent) - (C:\Users\Public\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbad2ea9-86f1-4c25-9874-94e97213af42}] - (CryptoPrevent) - (%userprofile%\AppData\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbdcd066-42f5-4fb8-99e9-b381d03d8b9a}] - (CryptoPrevent) - (*.rar.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbe000a3-4d01-4769-8f7b-227e1f4ec3e0}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbeba523-f5bf-47fe-a85f-8ed04f1be09e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbf11bb4-a7f7-4249-9dae-d6c316ea0fdf}] - (CryptoPrevent) - (*.zip.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bbf196e8-aaf5-4508-8b5a-f031e5425937}] - (CryptoPrevent) - (C:\Windows\Temp\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc049d9d-d824-4f3d-ba4c-15334b3621dc}] - (CryptoPrevent) - (*.jpeg.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc164753-6109-45d1-b44b-061c0cbf0e06}] - (CryptoPrevent) - (%programdata%\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc2af369-099e-42e2-a0b4-f334be9dd164}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc2e1993-3499-4838-ae93-bb7ebaa8998d}] - (CryptoPrevent) - (C:\Users\All Users\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc463d0b-4079-4bd4-8da7-6fee4d75b280}] - (CryptoPrevent) - (%temp%\uTorrent.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc5ecbc4-66f1-4e4b-9502-97e939c0e9d6}] - (CryptoPrevent) - (*.mp3.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc601e10-f52b-4f95-b10f-af2363380813}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bc851d7d-26e8-4bf1-b36d-aa30bbde147e}] - (CryptoPrevent) - (*.jpeg.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bca41fc5-f3bb-4140-bb7a-5f8b77961e17}] - (CryptoPrevent) - (%appdata%\*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bca9a21d-003e-4ae3-96c9-de7b330ee750}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bcce120c-be4f-469b-bff8-9ae7e3bb7983}] - (CryptoPrevent) - (%userprofile%\AppData\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bcdc6c24-38dd-4e16-b4fd-a7169ceb2830}] - (CryptoPrevent) - (*.png.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bce03270-c1be-4f76-92e5-c1867420cb7d}] - (CryptoPrevent) - (%appdata%\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd028df7-bd38-41f9-9b7b-32d43aeb0591}] - (CryptoPrevent) - (C:\Users\Default\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd0e7c10-a9b8-43e5-b3ac-f8137b371119}] - (CryptoPrevent) - (*.bmp.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd36e716-74e8-4da9-af3c-04362a33e271}] - (CryptoPrevent) - (*.xlsx.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd3a88d5-18f2-4d86-bf0c-47ef2ac4ea79}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd4b1280-9c26-40e3-ae24-93003aa0946c}] - (CryptoPrevent) - (*.divx.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd530231-53ba-41b0-9174-685f0c1e2d64}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd5321e1-ec93-4a18-9a2b-b9cba6aff35c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd594b63-f575-4ad0-a1e0-2175f5aff800}] - (CryptoPrevent) - (C:\Users\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd5ad936-0771-4848-be1e-4c20361972b5}] - (CryptoPrevent) - (*.mp3.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd6faca9-ad71-428f-9a0f-49d0c8bcee6d}] - (CryptoPrevent) - (%appdata%\*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd7ddc49-198c-4802-b0b9-388fe2785c41}] - (CryptoPrevent) - (*.txt.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd8dd58d-d32e-422c-aab1-eb5a1fc2be5b}] - (CryptoPrevent) - (*.zip.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bd979742-998a-4aa7-a8fa-85afd8c4acf4}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bdad1f4f-dab1-4a28-a4a9-5a3bf2367ed6}] - (CryptoPrevent) - (*.wav.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bdbce701-a089-4182-84bb-a2e4fa498764}] - (CryptoPrevent) - (C:\Users\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bdc80191-96c0-43b2-ae82-35885b5836ea}] - (CryptoPrevent) - (*.pub.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bde12e25-c3c5-44c8-be00-59a71490f593}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{be104638-d2d3-4f93-acf9-1cad2c5cf9cf}] - (CryptoPrevent) - (C:\Users\All Users\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{be2bc6a4-551e-4af3-a635-8e85e8031f38}] - (CryptoPrevent) - (*.jpeg.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{be4c0676-c76e-4106-b6e7-71b7f05554f0}] - (CryptoPrevent) - (*.divx.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{be8b4fab-fdac-42e7-8a83-0217dfcecb34}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{be8c8e8a-7cce-4287-a257-80c6b30f364c}] - (CryptoPrevent) - (*.rtf.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{be966294-72cf-4e91-b13e-eb0324332f04}] - (CryptoPrevent) - (*.divx.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{beb3e89f-6ef5-4076-a979-b23e68f546fd}] - (CryptoPrevent) - (*.rtf.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bec90ff4-1df5-426b-bcf5-5c499b0a5d71}] - (CryptoPrevent) - (*.xlsx.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{beecee04-80ba-4d1d-9a5f-f8a16b24f95a}] - (CryptoPrevent) - (*.7z.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bef27c2c-37b6-48d5-8955-7537ae6334e4}] - (CryptoPrevent) - (*.jpg.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf0adf16-8972-4c4f-9041-1c05958deb8f}] - (CryptoPrevent) - (C:\Users\Default\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf1d3f6a-752c-42b4-85f5-fa24b18c3e21}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf1f99f1-cae7-49a2-a0f6-437737cf91a2}] - (CryptoPrevent) - (*.txt.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf46147b-44e1-45ff-9afc-faa0a0064d58}] - (CryptoPrevent) - (C:\Users\Public\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf75ca08-21ac-4470-b8bc-34d1d75178c5}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf7af0e4-78a9-4c4a-9798-9c265e74f74b}] - (CryptoPrevent) - (*.mp4.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bf7f47c7-fdac-47dc-848b-e5436c2fd4b0}] - (CryptoPrevent) - (*.pptx.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfae2d68-5dec-4f44-8e45-9489235949be}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfb02ca8-9f97-4e7f-aa5b-76127d615e0e}] - (CryptoPrevent) - (*.wav.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfb8537b-468f-44aa-ad96-7ea5eb06648b}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfbce808-59d4-44f3-910d-8e29c8151c58}] - (CryptoPrevent) - (%userprofile%\AppData\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfc83f14-791d-48cc-b69a-0f02f2db4ae0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfd721ea-bd54-419e-93e1-62b6ac57df9f}] - (CryptoPrevent) - (%appdata%\*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfe3cfc0-b12d-4c55-8658-03b697c0edd8}] - (CryptoPrevent) - (*.jpg.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{bfe7f555-22b9-4c56-be90-b921a8902729}] - (CryptoPrevent) - (%userprofile%\AppData\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c00e9298-32fa-409f-8406-73a3e6e5af2b}] - (CryptoPrevent) - (*.wma.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c020e8b7-4e50-445c-ab92-4a43a7c07359}] - (CryptoPrevent) - (*.bmp.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0291f19-0bca-4f70-95de-6c716c600f58}] - (CryptoPrevent) - (*.wma.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c06354fa-922e-464d-b3bd-fdca3ac1c42a}] - (CryptoPrevent) - (C:\Users\Default User\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0672e00-7501-4ed3-85a0-d9a995231b6e}] - (CryptoPrevent) - (C:\Users\Default User\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0838043-fef1-4afd-9cb8-622b87f63635}] - (CryptoPrevent) - (*.7z.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c084171c-863d-4203-8685-9fda7c552d98}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0993860-a861-4090-8c8d-61b9ebdc5364}] - (CryptoPrevent) - (*.txt.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0a9c9b3-3a51-4a0b-9654-13ff61a1e96f}] - (CryptoPrevent) - (*.rtf.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0abc79b-da7c-44f5-8c73-25956a2b9822}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0ae40e5-1881-4f16-9617-aff719f3df75}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0af424e-f0d5-4980-9503-32484be3fc10}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0bf5d16-8718-4dfe-9d48-c94e1d45b177}] - (CryptoPrevent) - (*.pub.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0d58cc0-5fa3-407a-96ac-8e52ef5bf949}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0e7749f-9952-4c4e-aef7-6e799527cb02}] - (CryptoPrevent) - (*.jpg.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0f58c81-e410-413a-8aa8-db0465e5acd3}] - (CryptoPrevent) - (*\u202e*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0f67817-4cfb-4240-a38f-54119417c794}] - (CryptoPrevent) - (*.xls.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0f86a8e-ef56-438f-b54f-a46a3bc0c7dc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c0fc62b5-3b36-4d83-83fd-cd4ce74f62a0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c1008e9b-409a-47fe-a984-b432a46dfd7d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c141a64c-6794-4845-ba82-161ff12988cf}] - (CryptoPrevent) - (%userprofile%\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c1905511-2537-4200-8079-0ba72b96b52e}] - (CryptoPrevent) - (C:\Users\Default User\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c19a704c-c053-4f70-9f4b-2c74be684c55}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c1a8a732-fe5b-48a6-a7aa-7cf852e70356}] - (CryptoPrevent) - (%programdata%\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c1ae4ca9-9085-4dfd-95b1-5a9370d50e2d}] - (CryptoPrevent) - (*.wav.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c1e233d9-d778-4047-a37a-5f82d3af2194}] - (CryptoPrevent) - (*.divx.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c1e90463-ba6f-4af0-b79c-61d35a6c3957}] - (CryptoPrevent) - (*.wav.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c210984c-9eb8-4f91-b108-59dee669ecc1}] - (CryptoPrevent) - (C:\Users\Default User\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c212fb2b-f8fa-41df-a2d3-0123f366ee08}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c22fc540-8dc0-439d-853c-2f838964f7ac}] - (CryptoPrevent) - (*.mp3.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2357c90-e442-4d60-b770-06c7006c66c4}] - (CryptoPrevent) - (*\u202e*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c239d2ca-d0b0-4f6d-b91e-fac54573e5db}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2422a3e-7bec-48e0-b2d6-2d3a32b9faab}] - (CryptoPrevent) - (*.pptx.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c26db1b0-1247-4df8-a4f3-22293eb54844}] - (CryptoPrevent) - (C:\Windows\Temp\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2789232-0f17-48e2-b56b-d360cc525f86}] - (CryptoPrevent) - (%appdata%\*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c27cc535-65df-4b29-93bc-bfc741d2ddd9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c282d721-4a61-4b12-b9af-611e817d642f}] - (CryptoPrevent) - (%appdata%\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2886d18-c5bd-4a60-8830-5f7d0e35436c}] - (CryptoPrevent) - (*.doc.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2971cc4-1b54-44e8-a62d-824d8b6e8960}] - (CryptoPrevent) - (*.zip.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2b96811-0b9e-48fc-9b20-4f8905eccce0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c2ef9ad4-191f-4e24-b3af-fdc3abdd8534}] - (CryptoPrevent) - (*.wmv.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c30046a7-47c0-4317-8671-801b6dfd4c2a}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c305dee3-c73d-4255-a4d9-2ef33f403486}] - (CryptoPrevent) - (*.bmp.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3537d06-ae38-46d7-b199-9dc88cf04916}] - (CryptoPrevent) - (*.pptx.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c35dbedf-881f-41bd-ae40-1dbe1ae27922}] - (CryptoPrevent) - (*.rtf.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3624c03-82f2-49bb-a646-e925198ec590}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c38580c8-42af-43af-a130-df88dfd05dcb}] - (CryptoPrevent) - (*.txt.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3991a38-1a28-4725-aa89-f87eca378682}] - (CryptoPrevent) - (*.pptx.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c39f1ac1-0fa9-4ac4-bf73-e4c0687f95bc}] - (CryptoPrevent) - (C:\Users\Default\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3a6a08f-c130-478a-a511-b11f2bac6e4e}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3a8a8cc-9246-4010-9012-1170372cb1f1}] - (CryptoPrevent) - (C:\Users\Default User\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3bcb9d4-c1ae-4fab-bf68-764e79b3436a}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3c36634-35dc-4164-97f0-0c2ab9423504}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3c3e903-5be2-4d13-b0a8-2f4bcd561e3b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3d5a64e-a30e-457b-a789-1c6762dd1089}] - (CryptoPrevent) - (*.rtf.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3e1b37e-abf7-4e4f-8207-077316df4b5b}] - (CryptoPrevent) - (%userprofile%\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c3e1e334-8927-4df1-9d00-4180dcee671c}] - (CryptoPrevent) - (*.wma.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c43454b8-9520-49ed-8fa9-d9b742a85bb8}] - (CryptoPrevent) - (*.xlsx.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c4346179-d178-4e1c-b6e6-ce3d882e3922}] - (CryptoPrevent) - (*.txt.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c45a4a49-4b5a-453b-871b-a7c675576828}] - (CryptoPrevent) - (*.doc.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c4b52ae0-0ccf-4264-be1f-4d912aafd401}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c4b65205-b93a-41f4-baba-335721ba0ab5}] - (CryptoPrevent) - (C:\Users\Default User\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c4bbdfc9-a866-4495-a313-95a783b7eb3c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c505e00b-d045-48fc-b961-6d022bf65958}] - (CryptoPrevent) - (*.doc.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c531b843-ffdf-4005-b1ec-5ea39d86df30}] - (CryptoPrevent) - (%programdata%\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c535db2b-a16a-4cde-8e43-adadbb295448}] - (CryptoPrevent) - (*.pdf.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c552fd13-5ffb-4773-91af-3ae65b9c1a7b}] - (CryptoPrevent) - (*.gif.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5636705-3ae4-48ef-b1fb-2e42556f7fce}] - (CryptoPrevent) - (*.mp4.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c58d9b63-2c19-4c5b-be3b-ffd86046ae0b}] - (CryptoPrevent) - (%programdata%\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5a1c098-d020-4a38-a530-8ed7f1b05f8a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5a7280e-11bf-44ce-8433-b9e5c39eddf4}] - (CryptoPrevent) - (*.rtf.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5b1f75d-d28d-4ff7-8272-6fe0d03663df}] - (CryptoPrevent) - (*.wav.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5bd0dc5-90a9-4869-ab7f-ed230f078a42}] - (CryptoPrevent) - (*.mp3.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5c6217a-d321-4955-a306-409afad2b38b}] - (CryptoPrevent) - (*.bmp.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5cf6591-6444-4c98-907e-e51bde148221}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5daa2d1-68e0-4ea9-bb43-b50e30a8dbee}] - (CryptoPrevent) - (*.pptx.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5f728b1-4688-4fb1-b429-40401a9e8be5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5f9a00e-bb22-43df-aaa4-e7d754eefadd}] - (CryptoPrevent) - (*\u202e*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c5fd4a5a-d87d-415d-92be-7dc4be3c6925}] - (CryptoPrevent) - (*.wav.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c604e1eb-fa8b-40c9-bde6-ede3691ebf3e}] - (CryptoPrevent) - (*.gif.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c622ce6a-8239-4825-a4f8-916d5e3232af}] - (CryptoPrevent) - (*.xls.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c63fe7de-87ab-4f7f-942b-32cb18b83f37}] - (CryptoPrevent) - (*.docx.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c65c0a0d-8a2d-4d86-8dab-1edf34cd2029}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c6806c18-0c7b-4d30-a8e5-57cfa152f143}] - (CryptoPrevent) - (%appdata%\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c683947f-e36e-46d1-9518-4f6ee09da91b}] - (CryptoPrevent) - (*.rtf.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c6868b9a-c74a-4f60-99ec-d8d0671ffd50}] - (CryptoPrevent) - (*.wma.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c68951c1-92f5-4cd3-b71e-e690ed782594}] - (CryptoPrevent) - (C:\Users\Default\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c6a4a1fb-aed8-4043-ba6f-11cf4334636c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c6bd7a16-ff5a-4862-8845-0d18a8882ac0}] - (CryptoPrevent) - (C:\Users\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c6dfdf05-417a-40e0-9a48-8e81101a197f}] - (CryptoPrevent) - (*.rtf.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c6edfef9-91e3-4c69-9a6b-5b0a040fc5e5}] - (CryptoPrevent) - (%appdata%\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c70933d0-ad9b-4c9f-a908-a447a2a26083}] - (CryptoPrevent) - (C:\Windows\Temp\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c73588ff-e626-4732-b993-aefadc8f4e8e}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c73c4727-31bf-4c84-bfdb-4f2be465c675}] - (CryptoPrevent) - (%appdata%\*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c75b5300-47d8-460d-8d0f-a601661217ee}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c76bd274-6c99-4c54-9a53-1a0faa2edc00}] - (CryptoPrevent) - (C:\Users\Public\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c777ff66-6c5b-40a9-a2f5-3ce0c2e56189}] - (CryptoPrevent) - (*.mp3.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c796a77a-99a9-4c66-bc17-d28ff1d9e99e}] - (CryptoPrevent) - (C:\Users\Public\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7a375be-aa39-46bb-8769-e83efb9a1efb}] - (CryptoPrevent) - (%userprofile%\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7a60a5d-5dd4-44d6-9e7d-08ed7ee19da6}] - (CryptoPrevent) - (*.png.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7abeee5-9869-46bb-830a-e248b6d13ed3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7b6df32-2c8a-43ef-8389-9bed09d09f4b}] - (CryptoPrevent) - (*.rar.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7bfa553-d1c8-4a19-8624-d280691295ab}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7d37ef8-efab-4019-aa7f-21d0baad0a87}] - (CryptoPrevent) - (*.docx.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c7e256d2-be05-4408-96ef-7b79a8f9bbee}] - (CryptoPrevent) - (*.jpeg.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c804e849-1d45-4089-a383-ceee51340ac6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c811108c-7a6d-43dd-9c6d-9aa86cf6572b}] - (CryptoPrevent) - (*.rtf.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c830b1b6-c0a8-4ca9-abcd-35e8931cb1c0}] - (CryptoPrevent) - (%programdata%\rkcl\rkcl.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c84a1e10-dad1-4368-bac6-7fb2a497c1e5}] - (CryptoPrevent) - (C:\Users\Default User\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8649263-7feb-4e0b-a9b6-3aaa59600561}] - (CryptoPrevent) - (%programdata%\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c86ed049-9aea-4d95-9ac4-35a21970ea0d}] - (CryptoPrevent) - (C:\Users\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8889044-2a8d-4eb2-843e-cf5dd8af9f10}] - (CryptoPrevent) - (*.avi.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8b03b47-197a-41d1-af22-4167d8b477ee}] - (CryptoPrevent) - (%programdata%\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8b3dd1c-cdc0-492c-9863-6bb4b2709e81}] - (CryptoPrevent) - (*.docx.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8b6c542-5a8e-4930-aaae-d315f580ad00}] - (CryptoPrevent) - (%userprofile%\AppData\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8bcd57b-70ba-4db1-95ca-b8d0c4a28fe1}] - (CryptoPrevent) - (*.pub.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8be1b4e-2bb2-4238-b378-ad13bdb9ce15}] - (CryptoPrevent) - (*.divx.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8c28547-07aa-4274-9a79-40d71e3930c4}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8c48384-b02c-4014-b5f3-f79f184969f3}] - (CryptoPrevent) - (*.bmp.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8c88036-fcf3-4c25-82ea-c3cc8ecded9c}] - (CryptoPrevent) - (*.rar.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8cb6045-71e8-4e53-b206-44cb029eb3e0}] - (CryptoPrevent) - (*.divx.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8ce8693-2f2a-4ecd-8c49-ce8818e966eb}] - (CryptoPrevent) - (%userprofile%\AppData\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8d1e510-24c8-445c-ac09-5b28f3124e80}] - (CryptoPrevent) - (%userprofile%\AppData\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8dd3ec8-93c2-40d5-bc02-f4782f76d96a}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8e18003-a764-4801-9dfd-eaaac3f72342}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8e3d8f4-6f34-4fea-a449-5331b01d6439}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8f0cc1f-668d-49f6-a5be-fa47d31d4466}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c8fc9220-2fc6-4fda-89db-2dd77567f053}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c9499610-be17-4255-bc33-def4c45b0e84}] - (CryptoPrevent) - (*.rar.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c954ba88-a9fe-471a-9248-62cc214fb756}] - (CryptoPrevent) - (C:\Users\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c967ce6a-2bc2-4008-9720-21180c100c86}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c96bfdad-e6c1-41ca-ac98-1897809d0008}] - (CryptoPrevent) - (*.wav.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c9883e42-372c-4622-8947-6e015030e16f}] - (CryptoPrevent) - (*.pub.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c991d5ba-8be4-4721-8ab2-fe2b43957933}] - (CryptoPrevent) - (C:\Windows\Temp\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c995789a-a1d7-4f90-9d37-b4adbf8e4131}] - (CryptoPrevent) - (*.doc.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c9a18802-f111-49d8-9821-5e2c163515b0}] - (CryptoPrevent) - (*.rtf.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c9ba2e7e-2d19-4f6e-bd47-e19d1a1455c2}] - (CryptoPrevent) - (*.mp4.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c9d21916-264d-47d7-ba56-8ef21b48bf21}] - (CryptoPrevent) - (*.docx.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{c9de7964-e195-423b-87a7-96103b7bd5d6}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca008480-53f2-460d-8125-ec197d8ed42e}] - (CryptoPrevent) - (*.jpg.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca202a3e-4c91-41ce-9daa-f3fcb7f1f77b}] - (CryptoPrevent) - (C:\Users\Public\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca2dd6e2-d819-43cd-8d48-0d97c4d37dc2}] - (CryptoPrevent) - (C:\Users\Default User\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca3246c3-fc4b-4d13-b530-2e2eae4da4db}] - (CryptoPrevent) - (*.pptx.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca33e386-de3d-4c12-9ebe-09ed85213a30}] - (CryptoPrevent) - (%userprofile%\AppData\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca3945a7-4212-4575-bde0-18b6846b1bde}] - (CryptoPrevent) - (C:\Users\Default\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca44c278-c39e-4b2b-83fa-ac791cab5e6e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca625295-3163-4bbe-9f0e-eada3893d1f6}] - (CryptoPrevent) - (*.gif.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ca850109-2343-40c2-a94c-11f2d9b1cfa4}] - (CryptoPrevent) - (PDFBewerbungsmappe.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{caa33785-8a61-494a-ae37-e78e8cb21bfb}] - (CryptoPrevent) - (C:\Users\Default User\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cabba6d7-7a86-4a2a-9dd3-bedcbf2ac7ab}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cadf6f42-ee26-4742-b876-73a8e509dfa5}] - (CryptoPrevent) - (%userprofile%\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb18818e-0b77-439d-958b-7c43d11c2fad}] - (CryptoPrevent) - (%localappdata%\MS\app_roaming.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb2ecbb7-8493-48d0-85c0-f60e99c9cf8e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb389e77-e76b-4a6c-9d62-d8baaa2d3905}] - (CryptoPrevent) - (*.doc.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb4a2771-4b94-427b-b566-c0145f84f02a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb4ea6e6-4f9f-4f10-9b42-bc1cd2c95822}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb550d71-8346-462b-b029-ca5645d9ab65}] - (CryptoPrevent) - (*.divx.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb6bbb26-8e86-4f45-9f36-987be65b65d1}] - (CryptoPrevent) - (*.xlsx.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb978a33-d330-41b4-ad5d-4a0f7584b2e3}] - (CryptoPrevent) - (*.pptx.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb980f0b-7c09-40c2-9f8a-c2cbde18fc6f}] - (CryptoPrevent) - (C:\Users\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb99bd13-8a06-4345-be04-257552fd2540}] - (CryptoPrevent) - (*.ppt.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cb9d2f90-a73e-4f0e-b8c5-59755f0251b3}] - (CryptoPrevent) - (*.avi.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cba8f99d-44bd-4991-8f40-25cc760b04c5}] - (CryptoPrevent) - (*.7z.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cbc0fce5-fa0b-4970-a59c-cd3025046e23}] - (CryptoPrevent) - (C:\Users\Default User\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc054323-7b97-4994-95ea-531104a7bd07}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc32040b-4c17-453c-bf68-963f26862057}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc36f59f-7e6b-40d0-a67d-e025d4ca1b94}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc63a740-7c57-4d70-bbb4-0fc5c8a1ef37}] - (CryptoPrevent) - (*.mp3.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc6a0263-2fb7-41e1-8777-1b2fa90b21b5}] - (CryptoPrevent) - (%userprofile%\AppData\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc6fec74-7057-4794-9536-3e55ddf21979}] - (CryptoPrevent) - (C:\Users\Public\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc737bde-2693-427d-a092-3052f944e0c0}] - (CryptoPrevent) - (C:\Windows\Temp\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cc8a1825-f0fe-436b-ae61-16c9a6b75360}] - (CryptoPrevent) - (*.7z.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ccbbf93a-52bf-4805-889f-a547d15f0c90}] - (CryptoPrevent) - (C:\Users\Public\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cccd21a4-92d4-4269-903a-6f878c8aadaf}] - (CryptoPrevent) - (*.txt.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ccd035ea-5bb2-4391-a907-d8fe1750224b}] - (CryptoPrevent) - (*.avi.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cce8d4ce-73fc-48e0-9bf6-7c7b4dd5624f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ccf568b7-7d9d-4092-b5e3-5bff37992a7d}] - (CryptoPrevent) - (*.jpg.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ccfc30b6-49ed-4d30-9be0-0056722395ab}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd1ab62f-2c5c-4362-ab99-61859bff62ca}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd2d84d7-fdda-4e18-a4e5-ce24f02cfadf}] - (CryptoPrevent) - (C:\Users\Default User\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd32a0ad-1c4b-488c-aa2d-27e7faa84d64}] - (CryptoPrevent) - (*.png.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd36f6e4-c09d-494e-9183-16568ed9abb9}] - (CryptoPrevent) - (C:\Windows\Temp\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd4d74c9-cc4f-43dd-a7fe-93b51544a654}] - (CryptoPrevent) - (*\u202e*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd536bfb-c96a-4902-a72a-1d790f5d53b4}] - (CryptoPrevent) - (*.png.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd674deb-894f-4717-9a13-b98114f4f4d5}] - (CryptoPrevent) - (%programdata%\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd69f117-a2e1-4f9d-823a-71658da041ac}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd6bff72-8e6e-453f-b903-b647409264b8}] - (CryptoPrevent) - (*.bmp.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd77516e-d030-4d2c-b5ea-c26dc39f1c70}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd881976-9020-42ea-a9da-0f52f78bdc15}] - (CryptoPrevent) - (*.rar.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cd8c823e-a467-4fa3-aa83-4d761ca5e9cd}] - (CryptoPrevent) - (*.gif.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdb4a811-f437-4003-90c1-92349c9178cb}] - (CryptoPrevent) - (*.gif.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdc50cf4-b44e-45a8-9b5a-effa065f0b60}] - (CryptoPrevent) - (*.pub.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdc6d20a-2fc6-494a-bac1-da60f3c240b4}] - (CryptoPrevent) - (*.7z.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdcb85ff-f217-472a-a47e-d2b8192ba0b9}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdcea40d-bd93-4a85-8868-16a934071ee9}] - (CryptoPrevent) - (*.txt.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdd719f5-d1cc-4d82-b5e7-1d6101b6fb51}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdf4c4d7-4c08-4e08-9cf2-ec05c3f2f16c}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cdfed7e1-cfb5-4d9d-b273-ee85c057b65d}] - (CryptoPrevent) - (*.mp4.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce0223ea-e969-4672-a128-7e45ad6b311b}] - (CryptoPrevent) - (*.doc.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce230afc-6975-4119-9de0-ef68435559b2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce258008-d004-421f-92be-132b35a989dd}] - (CryptoPrevent) - (C:\Users\Public\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce25805d-09b3-49b8-9fde-ee0cc13714c1}] - (CryptoPrevent) - (%appdata%\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce28dcc8-0eb5-4cb5-a462-9bd4d4bd1b37}] - (CryptoPrevent) - (C:\Users\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce3577f8-1f94-41c2-a9e9-d4b2480a1698}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce556ce7-3ee1-4050-9ee4-6359ed133e26}] - (CryptoPrevent) - (*.gif.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ce799cf8-bd85-43b1-99d4-8a638d97b5ad}] - (CryptoPrevent) - (*.doc.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cea37531-9102-4378-9438-824446695b79}] - (CryptoPrevent) - (*.mp4.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cea9d895-7a15-4b47-b7ca-d077bb68e43a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ceb0ccee-9aea-4f8e-ac3e-bc22719f6d3b}] - (CryptoPrevent) - (C:\Users\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ceb3332d-2c71-4ef3-b900-38615615344d}] - (CryptoPrevent) - (*.ppt.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cebec5b5-62b4-4ad0-82bd-77e97bacf95e}] - (CryptoPrevent) - (*.xlsx.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cec3b7f8-78db-4ffb-858d-2b6aa22f33f9}] - (CryptoPrevent) - (C:\Users\Default User\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cec98c42-0252-4427-830d-b6e9c01f68a5}] - (CryptoPrevent) - (%userprofile%\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cee9b1c8-fa97-4119-9cf8-0e5a006f5fe9}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf010a16-9ccd-4356-bc26-87966ad58db8}] - (CryptoPrevent) - (*.rtf.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf02fe5d-4d48-4fad-a090-d6da00388d17}] - (CryptoPrevent) - (*.wav.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf214557-2829-488d-a111-c690d118c1ad}] - (CryptoPrevent) - (C:\Users\Default User\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf4498ff-57bc-453c-9728-eff9b22fd3b9}] - (CryptoPrevent) - (%programdata%\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf4ba45a-0200-4f2d-a428-3a39dd4d8d33}] - (CryptoPrevent) - (C:\Users\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf60c423-9d86-4b05-8204-eb07de39e702}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cf875b6b-79c5-4169-8e70-c3a5cb2ea9f5}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cfd7d383-2478-4d0b-9a88-189a9ab2600e}] - (CryptoPrevent) - (C:\Users\Public\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{cffc4d33-5cda-4356-985a-f02ca127e0e6}] - (CryptoPrevent) - (C:\Windows\Temp\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d007fb8d-64ee-4ba2-a7b6-2b7d3d56cfa9}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d01f0621-5fb1-4a51-a30d-0008e3eeb8f9}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d02aa5d7-7a12-4ff5-a1b8-3a6b1b15beca}] - (CryptoPrevent) - (C:\Users\Public\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d02fd6bf-9898-48fd-9c0f-93803db80c72}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0342c9d-9d56-4105-af60-b75e16097c65}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d036e959-b045-4e2c-9cda-00c6bbe9b642}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d063843d-7fec-4b7b-805e-1dabbfa8e40b}] - (CryptoPrevent) - (*.mp4.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d072c67a-40f3-4c21-bdc9-2ca6a9a966e5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0777f91-8fe1-41af-aa12-98c03ae61f23}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0b08046-5128-4d97-9d3c-393e8b4ed9c1}] - (CryptoPrevent) - (*.mp4.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0b6f235-41f3-4a02-88dc-2e1003dd6d83}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0c6a988-cd7d-4d26-ab69-e0186f526f6d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0dd738f-1fd0-47f8-ad27-99a4f8d7bf41}] - (CryptoPrevent) - (C:\Users\Default User\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0e75557-f50c-42a1-9820-45f070484e07}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0e7e972-9d2d-4a72-86fc-fc3ee49caf4e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d0ec51cf-fc85-4ffc-959e-b32e4103a16d}] - (CryptoPrevent) - (*.pub.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d107fcdc-d173-4ab2-90ed-b1f52b31e256}] - (CryptoPrevent) - (%programdata%\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d109cdc5-8f1c-418b-82aa-2ba120fe68d2}] - (CryptoPrevent) - (*.txt.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1109422-7c39-4c9d-a392-16c63476223d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d12bcd10-9950-4cc7-96e6-5a447a5d61e3}] - (CryptoPrevent) - (*.bmp.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1319358-19fa-41fb-8d69-af4630368925}] - (CryptoPrevent) - (*.pdf.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d13844bc-8482-4d5d-ba29-a83f1ac862fa}] - (CryptoPrevent) - (*.7z.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d149c651-d586-4946-9942-511de808eced}] - (CryptoPrevent) - (C:\Users\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d14bf1c4-302a-415e-9e8f-a68233e89da3}] - (CryptoPrevent) - (*.mp4.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1652763-d676-4166-af37-8b4e1fcf61b7}] - (CryptoPrevent) - (*.jpg.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d16b8a6a-1b4e-4c17-970a-bb5a67c0a643}] - (CryptoPrevent) - (*.ppt.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d176efa4-0a04-4055-9e27-566d4529a7f4}] - (CryptoPrevent) - (*.txt.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d179f155-5a95-4d0d-835a-8412ecc36a92}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d17fdb3a-7974-466f-8295-647f2d24f987}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1965980-99c8-4066-a66c-eed684155dea}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1b24afa-3600-4a5c-9c83-2eb204cb25b0}] - (CryptoPrevent) - (%temp%\arra.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1bb6f82-0e51-4aeb-9aea-c5fbeac4beff}] - (CryptoPrevent) - (*.pdf.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1c18ecd-8f00-47a1-ae90-67fc834fac9e}] - (CryptoPrevent) - (*.wmv.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1d9d713-54b1-48b9-91b7-3d3d84869299}] - (CryptoPrevent) - (*.pptx.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d1ea1d08-f86c-4a95-9e3a-e537ce2de48e}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d20bb2e1-7cf7-4ba1-bd59-249c1164a2d0}] - (CryptoPrevent) - (C:\Windows\Temp\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d21e1c1d-c2fd-496f-be5b-28d5086487f0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d25f5960-f1e3-4e2b-9642-ec64601526b7}] - (CryptoPrevent) - (*.rtf.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d281be5e-a8ca-4cef-ac73-b5dbee9241bd}] - (CryptoPrevent) - (*.zip.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d284c192-5cb6-4c27-bc7c-42a0b4412b1a}] - (CryptoPrevent) - (*.pdf.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2a2cce9-f5b9-4758-8638-d34f5c7d875d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2aad085-2a57-4be8-bdc3-7397cad1ef21}] - (CryptoPrevent) - (*.rar.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2abb994-5e12-44a1-99bb-983aea89da5f}] - (CryptoPrevent) - (*.xlsx.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2bc376f-e0e7-47a7-9a8c-ed35eb7e93a3}] - (CryptoPrevent) - (*.xls.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2c86f4e-ed63-4951-9155-37be2d66bba5}] - (CryptoPrevent) - (%userprofile%\AppData\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2ea1771-d155-4a46-86da-628d3553e734}] - (CryptoPrevent) - (*.doc.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2ecf874-6ffd-4de0-8711-5e1efbaf33aa}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2f0dfb7-35c6-4ee1-abc0-a0b8d6e29215}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2f25aa9-a679-46ba-8061-583fabf4eeb9}] - (CryptoPrevent) - (*.jpeg.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d2f6eda4-7f75-4916-94db-db10fbeb51e0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d3098145-7fb3-4771-b89f-44027a31979a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d32474a7-407d-4f39-b792-e7a76e57dff9}] - (CryptoPrevent) - (%userprofile%\AppData\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d32744cd-a83f-414e-8215-65c73659cfd6}] - (CryptoPrevent) - (*.doc.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d32d7dcc-e2d8-460b-a7ac-755abfafc3da}] - (CryptoPrevent) - (*.avi.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d34236e4-c1ad-4b6e-b2de-f56ae6a5172c}] - (CryptoPrevent) - (C:\Users\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d355f540-4fe9-4910-82b9-836850141473}] - (CryptoPrevent) - (*.txt.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d359ba5e-c9e4-4b63-99f7-d3ed30b3e883}] - (CryptoPrevent) - (C:\Users\All Users\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d35c1389-8475-482f-b529-00a1d8fc64fb}] - (CryptoPrevent) - (C:\Users\All Users\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d374fd96-23f9-42df-929c-9cf2d55f5a0d}] - (CryptoPrevent) - (*.jpeg.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d3768f66-b9dd-4d58-a20e-a63d7acd0325}] - (CryptoPrevent) - (*.divx.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d3890bd2-5485-4b1b-8b2f-88580f6a83f4}] - (CryptoPrevent) - (*.pptx.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d39381c6-6df0-4302-af8c-55009ede9167}] - (CryptoPrevent) - (%userprofile%\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d3c8ce53-a95b-4f6d-b9c2-80b3decd54eb}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d3ec47e9-25ee-45cf-9047-fc113541e2c4}] - (CryptoPrevent) - (*.wav.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d3f77201-3c0b-4e20-b18a-0275f76f396e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4012b70-6de4-492e-9f6e-8b013c2bb363}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4052f74-0840-4b36-9048-70a3606efa08}] - (CryptoPrevent) - (*.txt.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d405b391-dc6f-48a0-91d6-167cbac79f63}] - (CryptoPrevent) - (*.7z.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d41e9988-c22f-4383-bbe4-3890e7f1eebf}] - (CryptoPrevent) - (C:\Users\Default\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4309cd5-cc5d-4327-b46f-4d4b35b1db74}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d433860a-6914-4317-a7fe-07dde9dadd9e}] - (CryptoPrevent) - (*.ppt.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d448d947-dc50-40b7-a847-56176801da5c}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4559e8d-49eb-4262-9756-64db8d2f48b6}] - (CryptoPrevent) - (C:\Users\All Users\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d46ae477-6915-46d0-bfc9-20789105b6a3}] - (CryptoPrevent) - (*.gif.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d46cc6b4-5f4f-424e-9264-1c7ed6a5f5c9}] - (CryptoPrevent) - (C:\Users\Default User\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d484671b-8ab0-4d8b-bed8-8e45327eaeee}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d48b5a93-b465-4924-9ab0-3b124a953a4f}] - (CryptoPrevent) - (*.rtf.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4b05af3-0952-4fed-862e-50432c6d789e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4b8d5c3-9a63-411b-a1d0-2b3f16304faf}] - (CryptoPrevent) - (C:\Users\Default\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4cbf77d-074f-410a-92be-2512e01859ae}] - (CryptoPrevent) - (%userprofile%\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4db90d8-4acf-441d-9233-e0d7726deac4}] - (CryptoPrevent) - (*.rtf.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4de0df0-9cd1-418a-9652-926da3748011}] - (CryptoPrevent) - (C:\Users\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4ee90ca-77fd-4ebb-acf2-0b2da80a86cf}] - (CryptoPrevent) - (bcdedit.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4efe10c-f762-4d35-811f-2d24dc5581b7}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d4faef24-bcf7-4e5c-8944-4b7d84ea0201}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5119040-e800-45e4-9da3-4d129e53251c}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d52af346-ad7c-454b-bf57-6d1f26c9beb0}] - (CryptoPrevent) - (C:\Users\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d538dc64-f430-4433-b75a-96cfaccc3b2f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d553b943-e629-4bfb-a4e7-c45b5fd21f25}] - (CryptoPrevent) - (*.rar.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d56c6980-4585-45e0-ab2e-b28e834f3266}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d57b5d40-b758-4881-9aad-cb6d341aa653}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d59370b6-1e80-4574-800c-9cf64a8617e0}] - (CryptoPrevent) - (*.pub.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5a2dbb9-94bd-4b16-b6e5-c0fb843335d5}] - (CryptoPrevent) - (%appdata%\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5a4bf2a-3f8a-4e0c-8878-37cef74a0ea9}] - (CryptoPrevent) - (C:\Windows\Temp\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5ca66ca-d63c-4552-972e-a8a7a68bbbc7}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5cccad4-c966-440b-926e-9f459250427e}] - (CryptoPrevent) - (*.7z.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5e0467a-620e-4018-a1d2-4504c350a2cb}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d5fbfbc2-a185-4d9c-9548-7f581a9b144e}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d60cb0b9-67b7-4253-b565-1ed718aca3cc}] - (CryptoPrevent) - (*.jpeg.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d61f8d57-4f3e-465c-921d-37da92733eb9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d62eb227-6657-4d84-abc8-cf9b9e9fb159}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d630cacf-76ea-49a9-912a-399dfc6bdaaf}] - (CryptoPrevent) - (*.pdf.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d63c6524-5ccd-43a9-8184-934610c0ccd0}] - (CryptoPrevent) - (*.7z.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d688b81b-57ea-406d-ae4e-228dc862915e}] - (CryptoPrevent) - (*.rar.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d689c321-0bf2-4a6c-8b00-8586e80f069f}] - (CryptoPrevent) - (*.pub.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6b3eed6-43e5-41cc-8b5c-eee0e27e4eb2}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6d125a0-ab56-40dc-b67b-1f37c1a9986b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6d64203-482f-41ac-999e-a4184c714148}] - (CryptoPrevent) - (*.jpg.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6d81dba-aade-4da3-a7cb-73b088b68682}] - (CryptoPrevent) - (*.divx.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6e05a8d-d732-4e7d-89fe-a458eae03c5e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6f3af5a-6dc6-45ea-a664-8b035d6767d8}] - (CryptoPrevent) - (C:\Users\Default User\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d6f99670-fc44-4bfb-958d-88b84ed4126a}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7107031-a92a-461c-85a0-80b6c4fad2bc}] - (CryptoPrevent) - (C:\Users\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d713c214-6c81-469e-86cb-6ea13ca2e2fd}] - (CryptoPrevent) - (*.zip.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7178c3b-509f-4833-9adc-5e1d37286ebc}] - (CryptoPrevent) - (*.divx.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d71e65ee-d4b0-4bcb-a7af-74b36ae881da}] - (CryptoPrevent) - (*.doc.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7260cb9-cbaa-4ea9-adf7-eb1ec05370a7}] - (CryptoPrevent) - (C:\Windows\Temp\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d736e2e6-7587-4121-92aa-dc32594571c0}] - (CryptoPrevent) - (C:\Users\All Users\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d73c355e-e5d4-4cfe-90cc-2c5c8c182372}] - (CryptoPrevent) - (*.wav.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d745bb30-df52-43e1-b23c-0aaae36e0681}] - (CryptoPrevent) - (*.bmp.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7514127-bd8d-429c-8c2d-5183ec555d70}] - (CryptoPrevent) - (C:\Users\Default User\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d772b626-8d5c-4fa4-b570-a25ebc93b18f}] - (CryptoPrevent) - (*.pub.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d780a6bf-2f3e-46d8-8e41-9e5e593bc4a0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7b005ad-ddd4-4aba-895d-05fb89656297}] - (CryptoPrevent) - (*.gif.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7c1cf80-8033-4ee4-a81e-b2c1b04bfea4}] - (CryptoPrevent) - (%appdata%\*\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7cceb96-211c-4e89-8255-c62d0576cd8d}] - (CryptoPrevent) - (%programdata%\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7dc75c6-7ce1-4cae-924e-d647eddc893b}] - (CryptoPrevent) - (*.xlsx.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d7f3ac84-15c4-425a-886a-48597da7e907}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d80e9e25-c3ed-497c-9e16-add51de8720c}] - (CryptoPrevent) - (%userprofile%\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d816fa4f-2c03-486e-bd5c-1f3bb3f26d93}] - (CryptoPrevent) - (*.doc.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d85654e8-9e62-4f72-9e75-7a0d52cf404f}] - (CryptoPrevent) - (*.wma.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d86ac3e8-d280-420c-ad1d-12c8c4764e7f}] - (CryptoPrevent) - (%appdata%\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d88ec758-7150-450e-ac5d-80db1e6e5657}] - (CryptoPrevent) - (*.mp4.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d891baf2-59c7-4ba9-87a7-896bb0931a9d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8934510-bbbd-4a89-bdce-ed82623c730e}] - (CryptoPrevent) - (*.gif.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8943c4e-8d7c-4dc5-b7bb-1605a4fadacd}] - (CryptoPrevent) - (*.wma.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8997382-df15-4868-9243-5e3e7a0df413}] - (CryptoPrevent) - (*.mp3.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8ad849e-52d2-46c1-ad61-6b2cc6b7b6dd}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8dd665d-5469-4aa4-9ea9-7b97b4fb9d0d}] - (CryptoPrevent) - (*.xls.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8dd80df-dcf6-4bec-aad8-1b3bc5afc361}] - (CryptoPrevent) - (*.bmp.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d8ff4550-76dd-4736-8fc8-c1b2158ebac1}] - (CryptoPrevent) - (*.7z.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9010125-2c10-4093-9fcf-ff482333d54f}] - (CryptoPrevent) - (*.rar.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9077175-2a3d-4df9-9857-6be3cf342be1}] - (CryptoPrevent) - (*\u202e*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d925517f-8d8d-45ea-9f4f-4af5d395c983}] - (CryptoPrevent) - (*.zip.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d92ad2ea-a81e-4626-98b3-e7d44325a454}] - (CryptoPrevent) - (%appdata%\*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d931f8ae-81a5-4223-bed5-cd4d9d68333d}] - (CryptoPrevent) - (*.jpeg.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d943e3a1-e18f-4d7c-a61d-9d5f4069d849}] - (CryptoPrevent) - (*.wav.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9571060-c0a2-4599-97b4-2d07680549cb}] - (CryptoPrevent) - (*.pptx.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d95ecc2a-6823-4cfd-ae56-656bf919094c}] - (CryptoPrevent) - (%appdata%\delback.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d96353cb-ea44-4ea9-89ac-a0110ecc420e}] - (CryptoPrevent) - (*.bmp.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d97e5330-f2e6-4c31-a28c-c248e5020f35}] - (CryptoPrevent) - (*.mp4.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d986e724-d85a-4731-ac24-ab0998713828}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9a6c688-e588-4cfd-a29d-6761a05bd9f1}] - (CryptoPrevent) - (*.wma.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9b684d4-6d28-4aa1-84c5-68c67893bad4}] - (CryptoPrevent) - (C:\Users\Public\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9c3b67d-ced8-4869-85b9-08f7a585a13e}] - (CryptoPrevent) - (C:\Users\Public\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9c5b2c6-8dfb-40bb-b65b-2cbf34880cfb}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{d9da9b7e-86f4-4a01-8461-b52a632159b4}] - (CryptoPrevent) - (*.7z.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da003701-82ed-4bf7-8724-a47da67a1538}] - (CryptoPrevent) - (*\u202e*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da446e95-773d-4435-ad41-c29900bbc2a9}] - (CryptoPrevent) - (*.xlsx.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da4bbc23-4ae0-4949-99d0-24421682f42a}] - (CryptoPrevent) - (C:\Users\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da4c0fd9-fe94-40b1-ae04-26206b7812dd}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da5e252b-2095-4c02-bf52-6a057d60b145}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da66511c-d675-4335-b8d4-4814748e606a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da66d505-e658-4286-8ffd-b0e0a0460f7d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da70339c-9b75-41f0-8d23-d0b957dd5ad4}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da7cb384-e72c-41fb-9731-fae7fd8f81cc}] - (CryptoPrevent) - (C:\Users\Public\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da9330ba-608b-4e4f-a841-df4b2a154a30}] - (CryptoPrevent) - (*.rar.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{da9826da-8923-4658-9ec9-ce9dac39efc5}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{daa63844-d84c-4c48-a2fe-2edf90f5b6ff}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dad1c990-dcaf-411d-8705-79662eccccd0}] - (CryptoPrevent) - (*.pdf.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{daef2138-b6ad-45df-8de3-0fc6ae964d6e}] - (CryptoPrevent) - (*.xls.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{daf1c185-3b70-43a3-8685-ffe55ded9711}] - (CryptoPrevent) - (*.rtf.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{daf28bb8-3bf0-4881-90d6-15da91302af9}] - (CryptoPrevent) - (%programdata%\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{daffdad4-6482-4a1b-8aa8-00a72abfbe8d}] - (CryptoPrevent) - (*.png.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db1f99f3-9f9e-4b51-a2fd-e307f2670fd4}] - (CryptoPrevent) - (%programdata%\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db4b8531-a695-44bb-be35-0de44412f2b2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db5b602c-bc4e-4947-a926-1de0cbb48c46}] - (CryptoPrevent) - (%userprofile%\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db6e801b-bcda-43e7-a301-7afff8b60b69}] - (CryptoPrevent) - (C:\Users\Default User\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db700055-efbb-4268-93b8-3c6f93c39bbf}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db738102-6089-4f85-9f0a-be26bad93774}] - (CryptoPrevent) - (*.zip.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db77638e-1cce-40b9-ad7e-d9c43e1f442c}] - (CryptoPrevent) - (*.pptx.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db7e3753-2e3f-4537-989f-6fe91057c139}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db8911c2-570e-4856-a7ee-a08eedf33207}] - (CryptoPrevent) - (*\u202e*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{db99b48e-596a-498e-8d7c-49148045126e}] - (CryptoPrevent) - (C:\Users\Default User\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbbe0fea-f2c8-4ff8-a9cf-bf54ee4bc773}] - (CryptoPrevent) - (%appdata%\*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbc5fe1f-7403-417b-b3c4-de9a3b05d3dc}] - (CryptoPrevent) - (*.bmp.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbe4be14-9627-47bc-8c13-f0b7b4a8075e}] - (CryptoPrevent) - (*.wma.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbe72cf0-37ac-48df-96c2-9dbd9a5ea9ac}] - (CryptoPrevent) - (*.pub.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbec3597-92d1-492e-a262-48cf4514cb39}] - (CryptoPrevent) - (C:\Users\Default User\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbeee7c0-700f-438a-b165-12cf88d573a3}] - (CryptoPrevent) - (*.ppt.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dbfebc6b-4012-4948-908a-e322a145c237}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc01a1f2-2c36-4468-9a7b-636342e926bc}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc1a86cb-6730-447d-a452-f559b6da54b1}] - (CryptoPrevent) - (C:\Users\Default\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc1b8b64-9327-47d6-88fd-0b16ba948cad}] - (CryptoPrevent) - (*.bmp.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc34ccd6-c134-4975-b791-98419ac062a0}] - (CryptoPrevent) - (*.pptx.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc56a8c8-d498-417e-a0de-04ad3b64f870}] - (CryptoPrevent) - (%userprofile%\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc62b03b-9f5d-4d15-bd37-a31047992457}] - (CryptoPrevent) - (*.rtf.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc64a40c-2332-4d46-9acf-8713a37fe33d}] - (CryptoPrevent) - (*\u202e*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc670a15-556a-4660-b270-cd62d2616457}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc709600-90b3-499b-947d-45aac93ed2e8}] - (CryptoPrevent) - (C:\Users\All Users\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dc99ef1a-c254-4d94-98c3-8465dd9b8d9b}] - (CryptoPrevent) - (*.avi.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcb11f4c-750d-48a7-8521-94bbe1133da7}] - (CryptoPrevent) - (*.xls.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcb3069e-e602-41b1-871a-d2a9e87e9df1}] - (CryptoPrevent) - (C:\Users\Public\*.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcc7e827-4344-4b64-9285-26d21ed83824}] - (CryptoPrevent) - (C:\Users\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dccb635d-88e3-4037-8614-80cae78bf2df}] - (CryptoPrevent) - (*.xlsx.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcce3789-60ad-4779-ab3a-9eb90568a9f0}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcdb5c54-0bb2-4563-9ae7-a6f50b3cc26b}] - (CryptoPrevent) - (%userprofile%\AppData\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dce4783e-25a1-4e53-9130-b1aade5c6138}] - (CryptoPrevent) - (*.mp4.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcf175e0-f290-4cbb-b4b3-a445175855fa}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcf1ece4-f6c5-4e4c-a300-d31f781176cd}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcf2690d-e2da-41a5-9fb3-69ebb0d79942}] - (CryptoPrevent) - (*.txt.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dcf3c253-7c47-4888-9e14-bbae14698848}] - (CryptoPrevent) - (*.wmv.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd046ffe-f690-4784-bb81-104b78caa311}] - (CryptoPrevent) - (*.ppt.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd12a7fa-2395-469b-a5a0-fba77d03debb}] - (CryptoPrevent) - (*.jpg.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd1372d9-e0c3-49e3-9182-7528ce9bb231}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd39c582-8285-4674-ba31-42e39033a3d1}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd74ef01-3dbd-4d27-ab40-5978b432ebe3}] - (CryptoPrevent) - (*.docx.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd8c3ade-e479-44b0-ae8a-fa7769957ac5}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dd8f6f6d-d282-4509-9906-b46b962338d2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ddb1a3d0-ab76-469c-ae88-8c0944130344}] - (CryptoPrevent) - (*.gif.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ddb3edcd-5483-466d-b681-29a79dca8c2c}] - (CryptoPrevent) - (*.pdf.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ddc8eaf5-689c-4a28-8bce-e419fd650f6e}] - (CryptoPrevent) - (C:\Windows\Temp\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ddf175b8-b72c-4aca-a17b-7832e68faad3}] - (CryptoPrevent) - (*.mp4.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ddfde3a3-2ded-41dc-b590-8c2abf5fdbe9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{de98b7ef-38a8-4e60-901d-5b25e965366c}] - (CryptoPrevent) - (%userprofile%\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{de9a1666-632c-4566-b8d2-52d7b0f55f6e}] - (CryptoPrevent) - (C:\Users\Public\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dea1b78e-12ce-4eb5-8b4d-37a4d6863f74}] - (CryptoPrevent) - (C:\Users\Public\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dede656d-8163-4530-bba4-50c3d652a625}] - (CryptoPrevent) - (*.gif.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{deebb861-d660-41a8-8e5e-6a4037ae4dd2}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{deec68a1-9146-4df4-b447-a7119a5713ef}] - (CryptoPrevent) - (*.bmp.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df11bc50-de4c-4aa5-9698-2f6da4a78624}] - (CryptoPrevent) - (C:\Users\Default\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df1787c5-a294-4f16-acb1-93b833511c1c}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df1a161a-0984-456f-ad60-6c4ca1697692}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df1ea936-b8e0-4408-9b4a-614845ce8b59}] - (CryptoPrevent) - (C:\Users\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df29af21-4eb2-4f37-b7ce-fbaf49b9be10}] - (CryptoPrevent) - (*.doc.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df397f69-4fa8-4566-9ff0-d6053cf88c14}] - (CryptoPrevent) - (%appdata%\cryptohost.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df39d56f-d0b9-403f-83f5-1e3f34e41228}] - (CryptoPrevent) - (*.wav.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df49f131-b47a-4b5d-9d60-0e8d2d045613}] - (CryptoPrevent) - (%programdata%\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df573a0b-01c9-4f53-b656-cdc8d58d9555}] - (CryptoPrevent) - (*.mp3.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df7b63dd-a55c-4cc4-88de-6512376a449b}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df8ff9f2-d9a9-40cd-ac81-5bdc5f0ef58b}] - (CryptoPrevent) - (*.doc.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{df9baad9-5d9b-4a31-a9bf-c68ce41fa087}] - (CryptoPrevent) - (%userprofile%\AppData\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dfa15ea9-fa8e-4ef4-959a-1d9335bc8b0f}] - (CryptoPrevent) - (*.mp3.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dfa9e571-f414-4f2c-a185-c2dddd7352ab}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dfd3f8e7-fc4d-4a08-861a-c9869157cefe}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dfebf2b8-f8ec-41f6-bf9b-a1a0fe2ba07e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dff62368-91c2-40ca-b8a9-5acfce9a9f88}] - (CryptoPrevent) - (*.mp4.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{dff9d496-769d-4635-be68-d96b66d779e8}] - (CryptoPrevent) - (%programdata%\*.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e00bef20-4abc-4154-9a13-039530b81c1a}] - (CryptoPrevent) - (*.xlsx.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e040c305-c32a-4cbf-bddd-28ad20fcd5f1}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0458e55-9bc9-4f48-9213-eee444219c0b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e048a342-9735-4572-bb6f-5d578398a75e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e04bb9df-bd13-458c-a2f6-5aa1bb8d0335}] - (CryptoPrevent) - (C:\Windows\Temp\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e05cf182-eb75-4b87-93d3-a193631a311a}] - (CryptoPrevent) - (*.jpeg.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e06d2ff1-2682-4e43-a202-e0a841b719b3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e083fda6-f966-42e1-a715-ddb6e38c909d}] - (CryptoPrevent) - (*.doc.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0a09927-e138-4778-9a8f-64ccfbb778bf}] - (CryptoPrevent) - (C:\Windows\Temp\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0a44870-8c15-462e-ad79-05993893d17d}] - (CryptoPrevent) - (*.xls.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0a5a30f-70fd-43b7-9391-5fe0f35cf6cc}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0ba29f2-4454-4f7d-b656-a0b2e18e3c5d}] - (CryptoPrevent) - (C:\Users\Public\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0db8232-f42f-474b-9a3d-373d1146baa4}] - (CryptoPrevent) - (*.mp3.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e0f947dd-9625-487f-9c0f-fbcf9b19f958}] - (CryptoPrevent) - (*.avi.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e1055fee-11d4-42be-8025-bf658eb0c021}] - (CryptoPrevent) - (*.jpg.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e116d2fc-48fc-4238-b059-2e85affe2a1b}] - (CryptoPrevent) - (*.png.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e125370a-46a6-4b9a-b3fa-42cc6f0d85a4}] - (CryptoPrevent) - (*.divx.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e12e5b82-7616-4538-998f-06a595c4a30a}] - (CryptoPrevent) - (*.pub.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e16ed72a-6688-4aa3-a2b7-3649c08425ce}] - (CryptoPrevent) - (*.gif.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e1741e80-9fc2-4fed-88ca-aac8263b563d}] - (CryptoPrevent) - (*.xlsx.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e1781021-b04f-4842-a450-62a5da24e3a6}] - (CryptoPrevent) - (*.7z.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e17ffde8-52ad-4f5c-855f-d3508a2d6526}] - (CryptoPrevent) - (*.rar.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e194cd9f-80e7-4be8-80e9-214a3004890f}] - (CryptoPrevent) - (*.doc.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e1b6a1ca-d83b-4a29-a5ad-2df1a4efb5ed}] - (CryptoPrevent) - (*.ppt.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e1c82173-98bf-4adb-9182-2851df994afb}] - (CryptoPrevent) - (C:\Users\Public\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e202b192-c021-4693-b91f-56d611d279a4}] - (CryptoPrevent) - (*.txt.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e22e6fe1-48c6-4d45-b040-4401f8407a1f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2319d78-9dcf-4651-b31f-40eff9a12534}] - (CryptoPrevent) - (C:\Users\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e248259b-26f7-4c66-ad4e-7c6e00c78b32}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2573686-c076-4279-b65b-1961632306dd}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e285da0b-48f7-4ad8-a8fe-66ba7fde815b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e28e3ea1-7b57-42b0-87e5-918ddce5dd5c}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e29a63ea-b843-44f8-a19a-2010a5671d2f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e29b7cb4-8ed5-4295-9ca6-60ad81c61774}] - (CryptoPrevent) - (%appdata%\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2b10951-00c1-4bdf-b9df-63ba8c04e50c}] - (CryptoPrevent) - (C:\Users\Default User\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2b10ae9-a320-48cd-b15c-a6d6523e8a17}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2d50eb8-7f51-457a-811a-934590a437fa}] - (CryptoPrevent) - (*.pub.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2e33c02-0f93-452e-9308-415ee9526c82}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e2faed6f-bd56-4736-beac-01cdbd079783}] - (CryptoPrevent) - (*\u202e*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e30fa38c-66b0-4511-b3e6-3159917859e5}] - (CryptoPrevent) - (*.pdf.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e31982d6-4db1-4f1a-b2d8-2a6fb452a87b}] - (CryptoPrevent) - (*.zip.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e325fc6a-8f46-4e97-8fdc-fc18728982cf}] - (CryptoPrevent) - (*.gif.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e327e0c6-acc1-440b-904b-726ad6145752}] - (CryptoPrevent) - (*\u202e*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3323a18-b80a-4446-819f-8b93d5db9400}] - (CryptoPrevent) - (*\u202e*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3562bf0-2bc7-44f9-9dd6-34e50efddf11}] - (CryptoPrevent) - (%userprofile%\AppData\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e357b179-aa6d-4d65-9610-da221a57c205}] - (CryptoPrevent) - (C:\Users\Public\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e36b49db-8091-4828-83fd-01199a1fa1b9}] - (CryptoPrevent) - (*.wma.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e37693d0-5cba-41c5-9243-74c546610416}] - (CryptoPrevent) - (*.xlsx.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e37b1ae6-f575-4a03-a2d1-77f402e96d78}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e37ddb83-0653-46e7-b4bf-671145baeab6}] - (CryptoPrevent) - (C:\Users\Default\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e380ce89-50d3-4a80-835d-da8d1641acbe}] - (CryptoPrevent) - (*.wma.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e38859cd-fa5c-477d-80ef-e61d1141bcd9}] - (CryptoPrevent) - (*.gif.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e39d722f-8b7d-4bbf-b52a-4141a61a365d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3a00cb4-d637-4280-9695-8ea89d04d2f1}] - (CryptoPrevent) - (*.rtf.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3abce40-4f11-4410-a772-e6f4e7ab57af}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3b19982-fddc-4755-863d-728088edfa2d}] - (CryptoPrevent) - (*.mp3.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3b62933-45d1-4adc-81e0-a67eb6a0bc7e}] - (CryptoPrevent) - (%appdata%\*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3bfb994-28fc-479d-8dd5-d9d9a56af75e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3d43064-3d72-4562-a961-878b38c6f9e4}] - (CryptoPrevent) - (%userprofile%\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3e251da-ade2-4d23-a359-796d12e2043e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3ebcdf3-2bba-4c61-9420-53716dc815a1}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3f88f97-54c9-49e1-bd4c-77d026df6437}] - (CryptoPrevent) - (C:\Users\Default\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e3fd396e-21fd-4e86-aab1-cfea83dd0933}] - (CryptoPrevent) - (C:\Users\Public\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e418fad5-676e-48c1-9b9f-f00fe7b097d5}] - (CryptoPrevent) - (C:\Users\All Users\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e42f6209-ee64-4b7b-9254-0b3f26b52159}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e436507b-8826-4dd5-9ab1-4e69e7161933}] - (CryptoPrevent) - (C:\Users\All Users\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e43c68a0-5268-4247-99c3-ba76a4b88f99}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e43f1e28-ed4e-4134-a3a9-e26b8ee311b6}] - (CryptoPrevent) - (C:\Users\Default User\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4619814-9818-4898-95df-fac7044f6130}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e48253f2-b8b9-4724-995a-14bfe15e9da1}] - (CryptoPrevent) - (C:\Users\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e485070e-a348-4320-9d6a-07fac50a9df6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4882b9a-3a2c-4807-a6ef-056ed32b56c1}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e494c35f-5365-4d74-9709-13df10dc4b01}] - (CryptoPrevent) - (*.mp3.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4ad9de1-ab37-4d37-a3fd-866745c96911}] - (CryptoPrevent) - (*.png.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4b01921-28bb-4623-9e0c-fe123db40067}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4b31ec1-92fd-49c4-86be-da6c40ff36aa}] - (CryptoPrevent) - (C:\Windows\Temp\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4c07737-29e4-49cd-a886-6b4253a3aeb7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4e22b0f-8430-4357-b719-337f1daf1e5d}] - (CryptoPrevent) - (*.rtf.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4f6d457-b657-4d02-88a1-4bd5f5441854}] - (CryptoPrevent) - (*.xlsx.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e4faacb8-411f-45fe-9425-ae41182bc818}] - (CryptoPrevent) - (%userprofile%\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5048a9c-ad25-4880-bace-e55301f8206e}] - (CryptoPrevent) - (*.xlsx.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e507c0b9-2ef5-426e-9e88-639a06060e26}] - (CryptoPrevent) - (*.pptx.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e513a476-15d9-4476-bafe-908fd03f5a67}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5180608-88a6-4bbb-b4bb-99c11c841625}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e528a228-f78d-4b53-935a-1f17b8be76ab}] - (CryptoPrevent) - (%userprofile%\AppData\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e541956d-b0b5-4487-8a34-b344d016632d}] - (CryptoPrevent) - (*.bmp.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5673d69-ece6-4bb4-a3b1-007830584301}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e56e283f-f996-41f5-a5f2-ec09f3064379}] - (CryptoPrevent) - (*.txt.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e56e663a-d158-4515-a925-2aaef70355c0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e56eeee0-fcc1-4fa4-b1e4-67127eae8753}] - (CryptoPrevent) - (*.mp4.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e57bdae4-2ea1-46ae-abc4-d1314eef404d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e589e4f1-c173-497a-aa26-5658bfae7057}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e58acde6-fa86-4132-bb46-adf342f80dc3}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e58db466-182a-418c-9da1-4ca3f80dff72}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5ab92dd-f91f-490f-8abc-d588b813efc0}] - (CryptoPrevent) - (*.txt.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5b8ade9-a9cc-4b9e-85b7-76cac6949a96}] - (CryptoPrevent) - (*.jpeg.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5bc3f11-2306-4138-99dc-84106027de06}] - (CryptoPrevent) - (*.xls.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5ce536b-1ea1-4e2f-828f-d11d450cb7d8}] - (CryptoPrevent) - (%userprofile%\AppData\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5d1f3c5-bf98-4718-b8ea-d259dd5afaa7}] - (CryptoPrevent) - (*.divx.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5d4a549-1b35-4a23-af05-a3934e605f26}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5d5af84-54d6-436b-89b0-26f8ebb1cfe0}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5dc3265-c4a3-4e60-9048-1048629cb0ef}] - (CryptoPrevent) - (*.bmp.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5efb7ea-68fe-45c9-893f-fe3f80ce5bda}] - (CryptoPrevent) - (*.rtf.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5f85c5e-5be5-499a-a816-2fc394cfd348}] - (CryptoPrevent) - (lsassvrtdbks.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e5fe2044-b8a9-49d2-89d9-cbf09519e132}] - (CryptoPrevent) - (C:\Users\Public\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e600471a-7c5f-44bb-afc9-2f132037d186}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6006447-e898-4bcc-affa-225e2ac6e689}] - (CryptoPrevent) - (%appdata%\*\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e61675a9-1b71-4c6d-ac86-97983cc870c9}] - (CryptoPrevent) - (*.wav.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e61c0283-8736-41b5-83c6-d27aadb1ab79}] - (CryptoPrevent) - (*.gif.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e632d11f-0630-458a-962b-6fe00c3a4a77}] - (CryptoPrevent) - (%programdata%\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6381203-7940-4e9c-b584-51f9e1e73f40}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e64b3ccb-19d8-41a9-bdfc-ca14fa39d1d4}] - (CryptoPrevent) - (*.xls.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e65186d8-94f1-4098-9ab4-c747dcc0b95d}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e65a6134-afd9-4560-8259-4ad51bd5dcae}] - (CryptoPrevent) - (*.gif.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e67ae046-d4b3-4850-af21-6baad330513e}] - (CryptoPrevent) - (*.jpeg.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e69631c9-b2f1-4c5c-b142-721bceca3992}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e69e225a-420d-4050-bfb3-1d6bb2066aca}] - (CryptoPrevent) - (*.docx.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6aabdc6-5362-4043-8b71-04b9b30a6350}] - (CryptoPrevent) - (*.png.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6b48e09-11fa-4380-85fe-ee91a741f10a}] - (CryptoPrevent) - (*.wav.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6b6360f-749d-4893-a25c-2153ef04546b}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6b96b83-62f9-474a-9908-a8ed36a627f6}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6bdd626-95a3-49af-9b43-402d3f08d646}] - (CryptoPrevent) - (*.divx.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6c53f51-fe1b-492c-a0e3-edeab4f25a9f}] - (CryptoPrevent) - (*.zip.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6cd409c-1245-44e0-ab7c-08d0b363826d}] - (CryptoPrevent) - (*.pub.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6dcbcdf-7fae-4336-b9d0-c950e869dd58}] - (CryptoPrevent) - (*.rar.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e6fd3c7c-a2d7-4fde-9578-9c8d65eef998}] - (CryptoPrevent) - (*.wav.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e730d202-5cda-4d0c-af0f-14849ee76879}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e73dba9a-947c-49e7-b3a1-18564dccf819}] - (CryptoPrevent) - (*.rtf.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e755c867-a2a4-4dba-b02a-ceb958a7d10f}] - (CryptoPrevent) - (%appdata%\*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7671efd-823e-4532-b4db-0e70ddbbc4cc}] - (CryptoPrevent) - (*.ppt.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e76b7121-7502-421e-8c4e-f03b9f3eea28}] - (CryptoPrevent) - (*.wav.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e76d0857-abc0-4bf0-a95a-372dd05d5737}] - (CryptoPrevent) - (%appdata%\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e77216e2-751a-4d99-aed2-b261fbc2eb38}] - (CryptoPrevent) - (*.gif.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7759965-8267-468a-8362-64045fa770ac}] - (CryptoPrevent) - (*.jpeg.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7897abd-6d9d-40ce-a907-8ffd07a277ce}] - (CryptoPrevent) - (%appdata%\*.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e796efd6-2d7f-40d2-9f34-e114da42c33e}] - (CryptoPrevent) - (C:\Users\Public\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7a98cb3-17e3-4728-ba07-a2d266f0527b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7ce8b3d-9742-40b7-a370-e1fc95b89002}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7dc3f41-8f15-498f-9cd1-0d4dc778ea37}] - (CryptoPrevent) - (*.pub.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7e7ea71-60e3-439e-afbe-ec6032721fee}] - (CryptoPrevent) - (*.doc.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7e91144-a905-411b-8415-57c2285edebe}] - (CryptoPrevent) - (*.wav.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e7ea5f45-26fd-44b8-a555-d00701383c60}] - (CryptoPrevent) - (C:\Users\Public\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e801b937-8323-4e15-8807-fbffc8ccfb85}] - (CryptoPrevent) - (*.ppt.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8035a0f-4d9e-412f-ac87-5e1a321e9326}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e80b9911-4788-4ab3-a6cc-39356e58dc7e}] - (CryptoPrevent) - (*.wmv.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e80c997f-83e5-4fb7-9c5b-62fe3b0ae70e}] - (CryptoPrevent) - (C:\Users\All Users\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e80d98c7-3340-4357-8ba8-32a945c1dfe6}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e836280c-8582-41ca-a100-8a09eecc4b49}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e83abc81-6bb4-4865-a1a5-c5bc81e9bfc8}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8411a72-6545-48a8-97d8-9b9e73b67160}] - (CryptoPrevent) - (*.docx.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e85ec61a-3fdf-4273-a535-72cd02d24478}] - (CryptoPrevent) - (*.mp3.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8654925-afcb-4d32-b316-f9b2d950b9a4}] - (CryptoPrevent) - (*.png.ps2*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8709332-b11b-42b8-97f8-25fbd12773b0}] - (CryptoPrevent) - (*.pdf.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8900630-9e67-4c19-90e0-eeb43c664a10}] - (CryptoPrevent) - (*.png.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e89a584a-3937-4f45-96d9-5a8531da3cc9}] - (CryptoPrevent) - (%appdata%\*\*.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e89f97c4-dbb4-4fea-836d-74d100ad18f7}] - (CryptoPrevent) - (C:\Users\Public\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8b78269-3193-429b-90bd-893d47cc4996}] - (CryptoPrevent) - (C:\Users\Default User\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8c78451-662a-4aa0-ab02-e1bc3a1395ed}] - (CryptoPrevent) - (C:\Users\Default\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8f2b5d8-984f-41e3-8866-cacba1124d14}] - (CryptoPrevent) - (*.rar.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8f5962e-a303-46a9-b7dd-29f6d4d72abb}] - (CryptoPrevent) - (*.divx.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e8f85500-9618-41ab-b423-45de1925eb6b}] - (CryptoPrevent) - (%appdata%\*\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e917a676-a9eb-4b09-ae6a-c25d4d140560}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e933b9d5-ea05-49df-90a8-bf1dfad1fa3b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e934a9e6-bf66-4a8f-9e70-4b9e7a95290f}] - (CryptoPrevent) - (*.wav.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e93a89c5-95e1-4de6-a138-11787e5d3f75}] - (CryptoPrevent) - (*.zip.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e95b0703-3a23-4e69-98fb-ad3456e8d9f6}] - (CryptoPrevent) - (*.jpeg.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e96de528-71ff-4be9-bc76-c7517108f04e}] - (CryptoPrevent) - (*.ppt.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e97d26dc-921f-4350-be17-97addc2678d8}] - (CryptoPrevent) - (*.txt.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e97e9e68-48f2-4fa7-b448-a5fadbc29796}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e98548d5-8901-432e-a7bd-7cabf3b3681d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e99a4cb1-e9d0-4f42-89fe-1949a3d6c8e0}] - (CryptoPrevent) - (*.wma.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e9b3c9e9-1c7f-451d-97f7-54f81a2fbd08}] - (CryptoPrevent) - (%programdata%\*.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e9ced77e-ec00-411e-a243-3a3817c039c3}] - (CryptoPrevent) - (C:\Users\Public\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e9d63743-9e84-43af-a0fc-b8f829eb786c}] - (CryptoPrevent) - (*.mp3.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{e9ec867a-55bc-4f70-8e47-27ef27bf237c}] - (CryptoPrevent) - (*.ppt.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea018785-9fe1-4577-9517-b7bd7f3e182b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea0b9395-8d77-44fb-b94c-b32bc265bfaf}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea284158-d39e-43ff-8570-1e50e1dd3fb2}] - (CryptoPrevent) - (*.docx.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea47a124-de37-4597-8d1e-e8aca96f94d5}] - (CryptoPrevent) - (*.pub.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea50f9af-2df9-418e-b806-5b936af7b609}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea5b4611-cfca-4646-8de1-ec79cd7c1034}] - (CryptoPrevent) - (C:\Windows\Temp\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea77df15-21f3-45e9-ad70-6592d7638ff9}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea7c7f65-8b76-4a22-a4c8-e28871d25ee0}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea8098e2-ad6d-4995-be54-e42bb5ff5263}] - (CryptoPrevent) - (*.wma.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea8a1df1-fe04-4e36-a782-0a9ee5d40e63}] - (CryptoPrevent) - (*.ppt.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea9228a9-2e66-489c-be05-02f98053a759}] - (CryptoPrevent) - (*.pub.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ea98aba0-1270-49a7-8107-25fa22be2a0e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eaa08fd6-0e76-4ad1-ae74-52dcc7129021}] - (CryptoPrevent) - (C:\Windows\Temp\*.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eab65eef-f154-4747-a1b5-64a1c5362e61}] - (CryptoPrevent) - (*.rtf.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eac84fe8-cfcd-463f-9f71-cd9a46adf5cc}] - (CryptoPrevent) - (*.divx.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eace2f82-ac3e-4414-bfa0-4f70ccb83fec}] - (CryptoPrevent) - (*.wav.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb109ba9-0294-4743-91b5-6b50a5174bed}] - (CryptoPrevent) - (*.xls.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb1218d6-39a0-4f4c-9488-010bc0834ccb}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb2b46dc-d96b-455e-aebe-2056e649b28c}] - (CryptoPrevent) - (*.docx.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb407c03-173e-4398-a8aa-9ff12b3383ae}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb415ba6-de6b-46f1-ac53-09ad0d5b358c}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb422a0b-578c-4ec5-928a-203bac1d38f5}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb68267e-c9bd-4f3b-9cdc-2711dd333570}] - (CryptoPrevent) - (C:\Users\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb6b9498-09b5-4eb9-b004-b2c320e38136}] - (CryptoPrevent) - (*.gif.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb780c43-c1cc-4e23-8bf7-7620d8bf9647}] - (CryptoPrevent) - (%programdata%\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb866d7e-83b1-45b5-acf4-ed55401a0116}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb8e583d-2154-40c0-9dcf-0fbb44f1cc69}] - (CryptoPrevent) - (*.7z.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb930cbe-13db-44f7-8c34-140ff0300e0b}] - (CryptoPrevent) - (*.rtf.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eb9c35ec-3e12-476f-83e6-1793c934a631}] - (CryptoPrevent) - (%userprofile%\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ebb0ec5c-2839-42fc-b3c2-861f7da0b127}] - (CryptoPrevent) - (*.doc.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ebbe61d4-2a2a-47e9-9130-4f077fff0bb0}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ebd6835f-94eb-4651-8a2a-6fa50436a3f9}] - (CryptoPrevent) - (C:\Users\Public\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec1acd8f-c8e3-4383-aaa3-e4b28306b1e0}] - (CryptoPrevent) - (*.docx.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec3a553a-d08c-48a8-a89b-6339a70bd8ac}] - (CryptoPrevent) - (*.ppt.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec3ea897-3257-4c87-b91d-60398d566e71}] - (CryptoPrevent) - (C:\Users\Default\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec4b13d4-01f2-439d-b4d8-0e464f8703e7}] - (CryptoPrevent) - (*.bmp.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec7641fc-4a7e-44a3-a5e9-7e8b6c303548}] - (CryptoPrevent) - (*.jpg.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec7ffbd1-96f5-4585-8937-78b8d40a040f}] - (CryptoPrevent) - (*.jpg.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec88e79f-f750-4e60-9336-d63edebe8de9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec8a9fc9-c4db-4654-8176-1308d3795341}] - (CryptoPrevent) - (*.pdf.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ec9ee55d-5728-4194-8d0a-bf0772979aab}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eca16392-ff6e-4b17-97ce-eacd96f7539f}] - (CryptoPrevent) - (*.7z.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eca6b100-e9d8-4cd0-bf2d-a5cdcb32bea9}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecaa44f5-6103-4626-803b-c1c190e02666}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecae503a-0e35-463c-8fd3-3b7dd300499f}] - (CryptoPrevent) - (*.jpeg.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecbc481f-59ce-449c-80a3-301c09f4170a}] - (CryptoPrevent) - (*.wma.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecbfc6a6-af00-4f34-88aa-9d28a940049c}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecc83f18-3804-46f9-a82b-194e2b30c766}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecd05480-d761-42de-85c9-6a6d16fcf4b7}] - (CryptoPrevent) - (*.pdf.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ecf029f7-dfec-447c-8b46-7ca5f3c1acbe}] - (CryptoPrevent) - (%appdata%\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed01a8d3-b4f8-489e-979d-863074b76071}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed0d20af-8991-4607-817e-32e3e70411d8}] - (CryptoPrevent) - (*.zip.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed219ed0-0089-4a07-a7d3-672070ecc27a}] - (CryptoPrevent) - (*\u202e*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed24f3fb-bb75-412b-bc19-188237f18b09}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed379724-ef6d-42d9-87ae-b799b2ce348a}] - (CryptoPrevent) - (*.xls.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed483cef-4e50-4dc0-a400-01bea3a4453d}] - (CryptoPrevent) - (*.avi.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ed5f23e9-3b49-4111-84fc-801f48841034}] - (CryptoPrevent) - (*.wav.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{edc075be-a809-4979-aff2-2ef34ec905c2}] - (CryptoPrevent) - (*.txt.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{edc0cf9a-baad-4f7a-bf4b-9d06f892a1f1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{edc26b99-0054-49ab-9ab8-fdc1affc57d1}] - (CryptoPrevent) - (*.png.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{edd62242-ed17-4f94-9d80-b51ab2222d97}] - (CryptoPrevent) - (*.pptx.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{edd8fd43-6119-4fbd-a5f7-4924e10c0182}] - (CryptoPrevent) - (*.wmv.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{edecf148-9530-42ef-9ac9-d09ec17d595d}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee00746c-eddb-4ea5-9d54-e9ce7771b581}] - (CryptoPrevent) - (*.jpeg.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee0def94-d92b-4466-bb31-2f266f99a6c6}] - (CryptoPrevent) - (*.txt.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee1968a3-f479-4ab8-9ee5-af4cebdfbbeb}] - (CryptoPrevent) - (*.doc.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee1c1483-ea82-482b-85fb-070f81c9b289}] - (CryptoPrevent) - (C:\Windows\Temp\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee4cb696-4f7f-450a-bfdd-f830c00e7ce7}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee516d3f-cabb-4b1b-ae5a-25dab960f301}] - (CryptoPrevent) - (%userprofile%\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee64eb9b-0100-4e54-8fd8-33b45504f590}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee82b100-14f4-4f6b-8b23-536735ed3685}] - (CryptoPrevent) - (*.bmp.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee91e1fe-13e8-46d6-bc6c-1f41d774c4bc}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ee996ef9-50d4-432f-8268-e8f1375a6fa8}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eeade637-f148-46db-83e5-adc8ea1a34df}] - (CryptoPrevent) - (*.txt.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eeb04ab0-15de-4bed-a3b8-f23174f0ac7e}] - (CryptoPrevent) - (*.wav.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eeb7a867-ae13-4dfb-b66e-7c740d361aa1}] - (CryptoPrevent) - (*.wav.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eeb99603-8cdc-4889-95b8-33a911627d80}] - (CryptoPrevent) - (*.zip.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eec0072b-4f7a-4160-beca-3ade6f72db29}] - (CryptoPrevent) - (%appdata%\*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eeccd5db-133a-4692-87c6-64c2b5371037}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{eeeb3558-f4ea-419c-9d58-fbbe822c3892}] - (CryptoPrevent) - (*.jpeg.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ef4682fd-93f6-4eaf-a518-a795f4e1224a}] - (CryptoPrevent) - (C:\Users\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ef512fb5-e639-4569-902f-7ec6af61496f}] - (CryptoPrevent) - (*\u202e*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ef68b2e6-f6f2-4e62-a6b0-041348e6de92}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ef7ed832-5dbe-4a7d-9458-eaa38572ae1b}] - (CryptoPrevent) - (C:\Users\All Users\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ef9071a2-3503-4729-9043-d1b12798b169}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{efb63fd8-6e1c-4c94-94d6-cdfed6101d26}] - (CryptoPrevent) - (*.wma.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{efba9af2-f02e-4ec3-ac29-34b9c66d15e2}] - (CryptoPrevent) - (*.rar.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{efc49e27-5999-4064-b956-d0264ec876d6}] - (CryptoPrevent) - (*.jpeg.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{efda0fea-fb85-4157-9e6d-60140d682a91}] - (CryptoPrevent) - (*.wma.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f015a824-1a27-4e66-a00d-fed62dd80d7e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f016eedf-a57c-48f7-bb2e-f2b669772984}] - (CryptoPrevent) - (*.png.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0174287-0453-475e-bbe6-10a67992184f}] - (CryptoPrevent) - (*.mp3.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f032748f-4733-489b-9a60-498022dc5ce3}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0661659-b9ef-416d-9833-4ead676a3a46}] - (CryptoPrevent) - (%appdata%\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f071b961-8fe0-4f4e-90bb-5c775cb4e680}] - (CryptoPrevent) - (*.doc.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f07d3bf3-5e14-4836-bd92-e98438d6247d}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.inf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f07e032c-5b26-46bf-8114-284842f71317}] - (CryptoPrevent) - (*.xlsx.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f09904b7-5a0d-4554-8c52-e38cb1440be4}] - (CryptoPrevent) - (*.mp3.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0a4d33b-f250-42e5-951d-b80dc7f50a35}] - (CryptoPrevent) - (*.jpg.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0a7556a-2f6f-4732-a125-3e45f0df1b67}] - (CryptoPrevent) - (*.pptx.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0afd777-9297-4fe6-bcf8-96cd3a5f36c7}] - (CryptoPrevent) - (*.mp4.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0bdc36c-1155-4293-8cae-e1ef2d962225}] - (CryptoPrevent) - (%appdata%\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0c49fdf-985b-4f87-bb70-eb8087db0271}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0e2957e-e2df-41e5-926e-badb77aabcef}] - (CryptoPrevent) - (*.jpeg.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f0f77be4-f481-4905-8801-05b5c3fe283d}] - (CryptoPrevent) - (*.jpg.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1004693-ab44-4301-b945-541736d46713}] - (CryptoPrevent) - (C:\Users\Public\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1483944-a598-4a97-a137-7ca7ab38ab0d}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1508d39-5da5-4676-ba7d-3c2209bebb5a}] - (CryptoPrevent) - (%appdata%\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f15c9ae6-2d1f-49f5-9e1c-3de484273f77}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f15ebbea-319d-41a3-a32b-94bf3745dbe7}] - (CryptoPrevent) - (*.gif.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f161caf4-9262-481a-9e08-c618d68ffd46}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1694fd7-4395-4e4b-8b2b-fa0ebe0c2e4e}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1708a85-a8be-4186-845d-6558ddaf1cf5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f17f85ba-3b76-4a9f-91d7-9bbbbe3097ef}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f186e8c0-672b-4620-b240-84a790ecf601}] - (CryptoPrevent) - (*.docx.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f18e08ec-d375-49f1-89b7-2dbf5bff9506}] - (CryptoPrevent) - (*.bmp.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f19acbdb-a126-41d3-a4d3-a9eb5ab18bfe}] - (CryptoPrevent) - (*.rtf.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1a49fdd-f28c-4c4d-bc2e-63878d6da727}] - (CryptoPrevent) - (*.avi.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1a4f7d6-18fc-4b8f-9432-ce4fa32340fd}] - (CryptoPrevent) - (*.avi.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1ab4e31-6fb2-406e-9a9c-171fab426260}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1cd02c4-b422-4189-94c2-43647e685c07}] - (CryptoPrevent) - (C:\Users\Default User\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1d68f36-5129-47c0-b046-dfcf1d137625}] - (CryptoPrevent) - (C:\Users\All Users\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1e04705-3c93-47d6-a3ad-d793504e109f}] - (CryptoPrevent) - (*.pptx.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1f0786b-da69-4b02-aec2-033ab1cc0fae}] - (CryptoPrevent) - (*\u202e*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1f793c3-58de-4ed0-89a2-f2376d122067}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f1fe87de-5f13-4701-9e08-94287f18610a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f20106ad-6a90-4b52-912f-e8efb9c11502}] - (CryptoPrevent) - (*.rar.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2278b44-6d06-4e7d-91cf-46b4b18c6db3}] - (CryptoPrevent) - (C:\Users\Public\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f235949d-c4ec-4718-bac0-9c81e7f06744}] - (CryptoPrevent) - (*.jpeg.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f240be09-d735-41ee-8a2e-c78ed844a5a5}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f24eae39-248f-4131-8133-1f8f22878171}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f24f57d6-c3fc-474d-a55c-5cd1d1f6eab3}] - (CryptoPrevent) - (*.mp3.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f263e30d-6e90-43e3-8e38-cb6586b0d4ef}] - (CryptoPrevent) - (C:\Users\Public\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f26cf222-cb4c-425c-af13-6b223ce63da3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f27b457e-bebe-415b-9725-ccbaeede4403}] - (CryptoPrevent) - (C:\Windows\Temp\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f288d79e-59c1-449e-8d99-c06317d74c82}] - (CryptoPrevent) - (C:\Users\Default\*.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2a84a83-4024-4599-81ba-ef2b3ad7b210}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2b6c9c1-2f72-424d-90c0-4d6c78990e4e}] - (CryptoPrevent) - (*.doc.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2bb8d33-edc3-4df7-9b37-f7c85423a7da}] - (CryptoPrevent) - (%appdata%\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2bf4607-6e2c-426b-90f4-6956b5b79d61}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2c0484a-d7c4-438b-af87-a57a00d91a4a}] - (CryptoPrevent) - (*.doc.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2c8a77c-e03a-42e8-bca9-283d1d702003}] - (CryptoPrevent) - (*.pptx.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2c9869f-728a-4690-b314-6b94226f21a0}] - (CryptoPrevent) - (%userprofile%\*.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f2ce265c-5cc5-4527-a62c-9357e52c6c3f}] - (CryptoPrevent) - (*.bmp.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f311783f-190f-4aaf-b2ad-3a3baeaa8c53}] - (CryptoPrevent) - (%programdata%\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f321592d-dba3-42e9-8376-ff6a4853ebe7}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f321c1c3-325f-49a3-93dc-abdef0fc9c59}] - (CryptoPrevent) - (%appdata%\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3365637-c129-4771-b072-366e9a89372e}] - (CryptoPrevent) - (C:\Users\Public\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f33e2086-cfba-48a5-91fa-fa143c8b4275}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3535180-409b-4abf-8641-3296eb139880}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3562606-1b25-4095-a935-c34e2b3da7d9}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.application)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f356e033-3741-407d-9414-5fedcdc2aa96}] - (CryptoPrevent) - (*.jpeg.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f368d714-4bdf-41b0-b09c-1c0b76491528}] - (CryptoPrevent) - (C:\Users\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f36fc22c-1800-46b4-8284-459975b01d77}] - (CryptoPrevent) - (%appdata%\*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f37b7b5f-42c8-46ca-87fa-0e184433f346}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f37e30bd-eec3-42b2-8e4f-d3fb38403415}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f38c8b58-891f-41fe-8813-08a0cb33c449}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3bcc4d5-339b-4291-a1c1-55a74b883ec9}] - (CryptoPrevent) - (*.gif.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3ea4edc-3433-49db-9f52-eb2606d88620}] - (CryptoPrevent) - (C:\Users\Default\*.phps)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3f54b2b-8ab8-4e5b-bcd6-c73299b3e516}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f3fe059f-ac99-4c3e-91e8-90d6bb0f9f59}] - (CryptoPrevent) - (%appdata%\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4000972-9e72-45fa-9e29-1de176237e52}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4042087-4f85-4cb4-8e9e-a9fa9e960ba9}] - (CryptoPrevent) - (*.pub.url)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4139cca-56cd-49b7-9405-a0c261035b3f}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4176325-c892-4a82-b211-56a5834ad1d3}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f41b9aeb-e49c-452e-b302-7e487c201d13}] - (CryptoPrevent) - (*.jpg.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f41ef151-77c2-4501-8895-7891c4b0b6cc}] - (CryptoPrevent) - (*.docx.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4452a4e-3900-4e5b-a5b4-dd8abf697b93}] - (CryptoPrevent) - (*.jpg.pls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f457be20-3a85-40d8-9f67-5cb755f76021}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4690a9d-6c6d-4c56-8ff8-725c79f99ac8}] - (CryptoPrevent) - (%appdata%\*\*.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4710673-cd4f-4d95-9951-3da0bdeabf0d}] - (CryptoPrevent) - (*.mp3.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f493ed15-d1c6-4e0f-9fcb-21270e4760ff}] - (CryptoPrevent) - (%systemdrive%\mount.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f49bc838-70bc-4795-ad5d-974b0db00cf9}] - (CryptoPrevent) - (*.7z.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4c182e1-76d7-440e-b17e-13295bc5fed6}] - (CryptoPrevent) - (*.xlsx.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4cda90d-59b1-459c-9930-a0b54a0dae65}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4dcaabe-de4f-4d37-860f-cca05149646a}] - (CryptoPrevent) - (*.mp4.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f4f0db87-83bd-4d82-8e4f-6816ae9d5624}] - (CryptoPrevent) - (%programdata%\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f511b4ba-4fb2-465c-bec8-ce24fea4fa83}] - (CryptoPrevent) - (*.ppt.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f51df4d4-507d-4cb8-b91d-f7d58d33682c}] - (CryptoPrevent) - (C:\Users\Default\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f524506e-66ae-4228-b76f-1da3dc154617}] - (CryptoPrevent) - (*.pptx.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f52a8c87-695d-4b20-9949-b7bbe11ef5c5}] - (CryptoPrevent) - (%appdata%\*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5338e57-3773-4b15-8bf9-5f7b974e5c07}] - (CryptoPrevent) - (C:\Users\All Users\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f53e32eb-ddc9-4252-95ac-4e394cdfa584}] - (CryptoPrevent) - (%userprofile%\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f542ae47-93d0-4ebb-bf32-0a3da0fd2660}] - (CryptoPrevent) - (C:\Users\Default User\*.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5744312-db81-468d-8fc5-68fd66c933b2}] - (CryptoPrevent) - (*.xlsx.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5793649-16c9-48ad-9fc2-253187e56778}] - (CryptoPrevent) - (%temp%\wrmXNhWbacF.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5833a91-3933-4eed-a8de-a179f850fecc}] - (CryptoPrevent) - (*.png.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5aa85ea-9c20-47c3-a19b-517a7c70b2b1}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5bf768f-b364-4ea6-853a-f17a1e8fed20}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5d2e7fc-cb9a-40eb-a4cf-47cce61889aa}] - (CryptoPrevent) - (*.txt.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5e7266c-08cf-44b7-ae88-6c0c74cfd3a8}] - (CryptoPrevent) - (*.bmp.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5f71d6c-be57-4d17-bf6b-52422f6049ad}] - (CryptoPrevent) - (*.divx.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5f80e65-c42a-4ec6-9caa-f3a7d3d230f1}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5f9f6c2-571d-499e-b030-f64fe83a1ce4}] - (CryptoPrevent) - (*.pdf.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5fad0e0-54bc-4196-9abe-00bd3ba12d51}] - (CryptoPrevent) - (*.xls.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5fb3746-bb6d-422b-b7be-d1a165cdcd86}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f5fb7ac8-022d-418a-a886-cb16422c0096}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f60345f7-ec7b-4bff-a876-9e5940dd25ad}] - (CryptoPrevent) - (*.rtf.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f65aa0a1-f75a-4027-80f2-131e4d54a4a8}] - (CryptoPrevent) - (*.7z.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f671a0f3-f662-4ed6-8806-0a03ca30befb}] - (CryptoPrevent) - (*.ppt.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6901f6d-0a01-4bc7-8329-96afc172d289}] - (CryptoPrevent) - (*.bmp.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f694797a-dcc2-434e-b1db-15c743fca0ab}] - (CryptoPrevent) - (*.pub.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f696ca3b-f0d1-4a48-95f6-75109e2637aa}] - (CryptoPrevent) - (*.7z.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6bda4ac-b238-4cc1-98e6-743094b416de}] - (CryptoPrevent) - (*\u202e*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6c8766d-144d-4fd3-a880-74545a5d8cf7}] - (CryptoPrevent) - (*.divx.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6d456c6-7d97-4d0b-b84d-3ef3fb079fa7}] - (CryptoPrevent) - (%appdata%\*\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6d7cfe9-f722-4683-a111-9bfa5dbff1b4}] - (CryptoPrevent) - (*.xlsx.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6e14f90-92e9-4bbd-b2b9-43087cf76e29}] - (CryptoPrevent) - (*.ppt.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6f5f41b-4d50-4741-b5a3-9aa735e4ec72}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f6fdfb46-2ab7-4eeb-b191-fb60cebf04f2}] - (CryptoPrevent) - (C:\Users\Default User\*.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f735dc96-c3b6-4682-9360-6ce7043f3839}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f762fc8b-d628-42af-a5ff-e805004de9e0}] - (CryptoPrevent) - (%programdata%\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f767c847-4e99-449a-8d26-47d8d939c3e3}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f7854499-a4c0-4d60-abd5-6247254db813}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.xcs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f7a54b06-acd5-4580-aa05-2fe2a3e5bef2}] - (CryptoPrevent) - (*.wmv.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f7ac8beb-62d5-4f7e-8541-4ddd4b228f01}] - (CryptoPrevent) - (%appdata%\*\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f7fdb4a3-bcfb-4621-a477-54f1338e963a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f82586d4-e6b9-4eee-ab66-d0975b39ff69}] - (CryptoPrevent) - (C:\Users\Default User\*.scr)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f85a6096-556b-4eec-ba88-cf1477462f0a}] - (CryptoPrevent) - (*.pub.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f86bab25-999c-44f5-9b0a-dbc962a280e2}] - (CryptoPrevent) - (*.avi.ade)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f86c83d8-5c2d-407b-be15-a601e5d249b5}] - (CryptoPrevent) - (*.txt.mdb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f86d98b8-bfe4-472f-bdf5-116283bfe801}] - (CryptoPrevent) - (*.doc.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f875a9ba-250d-4362-9f97-259c36825331}] - (CryptoPrevent) - (*.ppt.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8984c02-d1a3-4de6-85e6-cea5a2542192}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8abd6a6-fb78-4c28-99f2-98b70c09f68d}] - (CryptoPrevent) - (%userprofile%\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8b6ef60-973b-4e13-9c81-a5061ab7d681}] - (CryptoPrevent) - (*.divx.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8b9ef5b-ef52-4af6-aa6c-95caa16ff86d}] - (CryptoPrevent) - (*.pub.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8bc41ce-ce94-4329-969a-2066bdf30025}] - (CryptoPrevent) - (*.png.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8c04bdd-6acd-46ae-ac0d-def7a66ed630}] - (CryptoPrevent) - (*.txt.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8c7e749-8c15-42f6-9c17-9bd76ba11998}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8cd7e62-0de3-4ed5-a5b6-1cb50af226e7}] - (CryptoPrevent) - (*.zip.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8d05c1c-ab94-4b6f-b795-d8387cf319a1}] - (CryptoPrevent) - (*.wav.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f8d56ea6-76ad-4c0f-a948-5b50b2c05475}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f910e3ef-d0fd-4458-bb36-435782d3fb90}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f919c40c-5655-4d20-8c4a-11b8473a5acc}] - (CryptoPrevent) - (*.rtf.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f928adce-66b3-4266-9240-17d25795d7dc}] - (CryptoPrevent) - (*.pdf.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f929c7ed-bed5-47a7-a6f9-b641044eeea4}] - (CryptoPrevent) - (%appdata%\*.reg)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f94c0ce0-610d-4ee9-aae8-0047299334c0}] - (CryptoPrevent) - (*.wmv.cpl)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f951c5c7-e545-480a-8fda-232f12bfb426}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f9b7224e-a646-4887-9ede-b47956a5b03e}] - (CryptoPrevent) - (*.png.wwb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f9c79a67-4132-41e0-91a0-8df613636b05}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f9f470e6-4044-4e60-a71e-1f04a04d0220}] - (CryptoPrevent) - (*.docx.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{f9fa7f62-420d-4ac8-9262-b0b525abe84b}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\*\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa0dc7e8-6283-44d1-9bf6-9ec45ea03a3c}] - (CryptoPrevent) - (*.png.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa1885c8-273e-45f5-9376-ac4d61b643ed}] - (CryptoPrevent) - (*.zip.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa1aa0f4-f379-4aa8-b132-acd25b939611}] - (CryptoPrevent) - (*.7z.vbscript)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa29d880-648f-471e-b39e-abe836a7139e}] - (CryptoPrevent) - (*.wma.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa452b98-7de2-4e0e-ab73-892c041ce47c}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa4f75cc-6974-4ccf-b416-2778c0f35788}] - (CryptoPrevent) - (C:\Windows\Temp\*.shs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa52ecb9-c703-4c85-a1d8-98299baba88f}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.cmd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa5ba9bc-fcc5-47b3-9667-5fd28a8dc742}] - (CryptoPrevent) - (*.docx.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa662aad-3ca2-4670-9de6-0b3e65e32778}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*\*.isp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa7590e6-336c-4408-aee1-b3b0e36e246b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\wz*\*.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fa766ac9-5827-4417-a783-accec95705a3}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{faa0272a-108f-46cc-a9cf-9ab0c1b77536}] - (CryptoPrevent) - (*.xlsx.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{faa640a1-6807-4d0e-85c1-957917dd396e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fac3d9a8-b36f-4f8d-a193-30dba67b76c7}] - (CryptoPrevent) - (*.mp4.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fac942b7-3b69-459b-b566-863538b0ea17}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bin)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{faceb617-b657-4861-9d33-30787bf3d2f8}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fae29ba3-74a1-402b-9951-0989d23b3f1c}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.pif)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fae87883-be23-4d9e-a067-3ee595448b6d}] - (CryptoPrevent) - (*.avi.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{faef1f0c-d006-4f8a-92c6-e8149691afd0}] - (CryptoPrevent) - (C:\Users\*.msh*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb098f13-3c52-4b7c-b924-1b276e1823ed}] - (CryptoPrevent) - (*.pptx.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb0af494-af1f-440a-a266-b82e05efd0d1}] - (CryptoPrevent) - (*.avi.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb15bc09-5b78-49a0-9cb1-0aca9386fbbd}] - (CryptoPrevent) - (*.xls.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb1d71ba-30ea-4931-a9bb-10a35646e079}] - (CryptoPrevent) - (*.mp4.rbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb1e187b-d7b0-4f04-992f-a0386b0f2bca}] - (CryptoPrevent) - (C:\Users\Default\*.mst)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb42e30c-7a63-4081-a5bd-66fa73b2113f}] - (CryptoPrevent) - (%userprofile%\AppData\*.scsb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb4c0378-c284-4f4f-8d16-b1b9cc5c6615}] - (CryptoPrevent) - (C:\Windows\Temp\*.92bs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb4e938e-4d16-4445-a071-4b1307cefd48}] - (CryptoPrevent) - (*.xlsx.gadget)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb75a2fb-a174-4696-a183-46250ab6c369}] - (CryptoPrevent) - (*.mp3.vb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fb8cd4e8-c749-4ca6-8fd7-df4a2f5ffc67}] - (CryptoPrevent) - (*.jpg.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fba229e7-ec4d-4399-8c82-e6f3f2f59408}] - (CryptoPrevent) - (%userprofile%\*.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fbba58a7-fc75-4dce-86ac-ee4e79e97cb8}] - (CryptoPrevent) - (*.pdf.jse)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fbc721ae-49c4-42d9-8cdb-50de8348e088}] - (CryptoPrevent) - (*.jpg.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fbd58472-191d-4658-8833-f7a5b42266c8}] - (CryptoPrevent) - (*.mp3.js)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc205704-d6fd-466e-8647-1af6d788ebf6}] - (CryptoPrevent) - (C:\Users\All Users\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc2773d9-e0b7-4f8f-af13-b28e0c1e078b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.frm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc29e616-0270-44cb-b0a8-b201946bfe26}] - (CryptoPrevent) - (%programdata%\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc42c6b0-c9a0-49f5-90c4-b087ec689a3b}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.adp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc53a9ab-20bf-4428-93de-e959788e68ee}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc57a8b5-f625-4db3-a4fe-b18363a47d36}] - (CryptoPrevent) - (C:\Users\All Users\*.com)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc5b2d65-2b79-4eab-91b8-c42ae9ca2e16}] - (CryptoPrevent) - (*.gif.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc617a1b-bfa6-4f5e-b954-6375ca7389b0}] - (CryptoPrevent) - (*.7z.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc688c46-0515-4077-9fd7-e3a19868af31}] - (CryptoPrevent) - (C:\Users\All Users\*.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc7e9b13-d1a1-4ec9-922d-53e15a7f5f28}] - (CryptoPrevent) - (C:\Users\Public\*.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fc932656-d432-4e76-b58f-c97bfa27c47b}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*.shb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fca9319f-afba-4194-b8f5-d0c5c0e56a8e}] - (CryptoPrevent) - (*.xlsx.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fcb22473-f0eb-4704-ab26-635ee90e22c8}] - (CryptoPrevent) - (*.mp3.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fcb8b0cf-a61a-4f7e-8dad-53450f9d29fa}] - (CryptoPrevent) - (*.ppt.psc*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fced4740-076b-427e-8137-0bc491d543a7}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd01ac69-04d9-43d4-a5f8-e1ff7487a0f9}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd03d6ff-12a9-4e92-9f84-c4348485331d}] - (CryptoPrevent) - (*.ppt.bas)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd13eaed-96fe-4665-9abc-78c8fbbc87d1}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd1e2543-955c-4339-af3f-4b272db71957}] - (CryptoPrevent) - (*.docx.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd2253fe-c387-498b-9299-86b60f11029f}] - (CryptoPrevent) - (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd248dd5-dd38-4149-97f5-e4a7e6906a7c}] - (CryptoPrevent) - (C:\Users\Public\*.pys)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd2939dc-51ed-4edf-bceb-904e6deeb113}] - (CryptoPrevent) - (surprise.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd2b543b-8ba5-4bcc-a614-ef314b9b43b1}] - (CryptoPrevent) - (%appdata%\*\*.job)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd3140db-1331-4ba5-8f22-8ab44dacf678}] - (CryptoPrevent) - (C:\Windows\Temp\*.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd57f8df-ef51-4eb9-8084-af623cb570cb}] - (CryptoPrevent) - (*.png.scf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd5c8a8b-0e41-4b82-8e44-b9ede98d9145}] - (CryptoPrevent) - (*.mp4.hlp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd5dfb5b-5d62-480a-90db-186a1f947fcf}] - (CryptoPrevent) - (*.jpg.ns)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd60a1b5-2729-4b03-b6fc-1282f2cf9942}] - (CryptoPrevent) - (*.xlsx.msi)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd79588e-3f78-4aad-b1ac-1a10f184fcb5}] - (CryptoPrevent) - (*.gif.xml)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd8a75e8-53ed-4616-8a02-d2ff03db4356}] - (CryptoPrevent) - (*.wav.48s)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fd8ff9c1-ad50-4da2-b47f-bb58b28298d7}] - (CryptoPrevent) - (C:\Users\widen-finalis\*.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fda1e33a-8443-436d-9160-c34b03bd3293}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fda930c0-a367-44d2-9f0c-292e53154fc0}] - (CryptoPrevent) - (*.wma.pcd)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fdc0f67d-1da4-49f8-af5e-cd5a203e1a10}] - (CryptoPrevent) - (*.mp4.crt)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fdc891ce-2777-461b-bce1-089bf0b1b29e}] - (CryptoPrevent) - (*.wav.msc)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fdc99022-1537-4fb7-82bb-6d705b248420}] - (CryptoPrevent) - (*:\$Recycle.Bin\*.chm)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fdd891d3-e60a-4c72-9b74-4a988755c53e}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.zip\*.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fddc673d-8a7a-4ecf-86fc-630a21692fbf}] - (CryptoPrevent) - (*.ppt.ocx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fdee94a7-f319-41c7-9c18-a19b5596292f}] - (CryptoPrevent) - (C:\Windows\Temp\*.jar)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fdf5c539-91d9-4480-9dde-2fe235591e87}] - (CryptoPrevent) - (*.wmv.isu)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe067ec0-0aab-4b94-a117-20d6cb36bc1a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\*.nsf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe0cd890-cc53-4b7d-90b7-c84b12719134}] - (CryptoPrevent) - (*.avi.rgs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe110468-25cc-465a-a293-0991e72769d8}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\rar*\*.lua)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe1160fc-0153-42d6-a90b-f1e2384bd772}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.ws*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe16ced6-0a26-41d3-9156-7920b6c2f006}] - (CryptoPrevent) - (*.ppt.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe62e0da-d93d-4666-bdd1-1e3400585c1c}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe676f7d-e902-4748-b876-69eb16c3ea11}] - (CryptoPrevent) - (*.wmv.sct)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe795d4e-562a-450d-82a0-5b07903f0853}] - (CryptoPrevent) - (*.7z.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fe911205-8c97-451f-837e-04c6bad9b884}] - (CryptoPrevent) - (%programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.vbs)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{feaebdca-f6ad-480e-b6a5-d4f070d8e6cc}] - (CryptoPrevent) - (*.7z.paf)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{feafdf85-723c-4370-a864-a9b61a6d6dff}] - (CryptoPrevent) - (%appdata%\random\random.exe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{feb133c4-74c7-4c0c-bd63-292cd31727fb}] - (CryptoPrevent) - (*.jpg.rex)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fed15f55-8ead-4947-b186-361598e6ec3c}] - (CryptoPrevent) - (*.png.klx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fed3392f-3201-4a7d-881b-c99697f31df3}] - (CryptoPrevent) - (*.docx.ins)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fee5bf60-4c39-414e-9e8f-6d98c70ca456}] - (CryptoPrevent) - (*.divx.tcls)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fee8af5d-e564-4aad-b465-daa01cd13dbb}] - (CryptoPrevent) - (*.bmp.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fefcd889-dbb3-4531-8a05-5ea9f01d310d}] - (CryptoPrevent) - (*.txt.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{fefd3011-7c99-4eb7-aacb-986774620e0a}] - (CryptoPrevent) - (C:\Users\Acronis Agent User\*.cfxb)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff04ee05-a74f-4e43-a71f-e9e228bf2ac1}] - (CryptoPrevent) - (*.wma.u3p)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff0a6405-a808-49eb-af1f-477d1f0a8fbc}] - (CryptoPrevent) - (C:\Users\Public\*.msp)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff1be50b-44b4-42de-95b7-3a0db3a3059d}] - (CryptoPrevent) - (C:\Windows\Temp\*.inx)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff4eca76-7252-480d-b823-a0a1c5f1c17a}] - (CryptoPrevent) - (%userprofile%\AppData\Local\Temp\7z*\*.lnk)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff7378bf-9fe7-4c96-afe0-54cd2ed948d0}] - (CryptoPrevent) - (*.7z.mde)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff7d54ff-7741-4b88-8c82-5ff58bdcff01}] - (CryptoPrevent) - (%userprofile%\AppData\Local\*\*.rx*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff84d280-6576-47f2-a480-73abf5535072}] - (CryptoPrevent) - (*.bmp.mod)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff88e006-1676-4d66-b1ff-9f9122d1a596}] - (CryptoPrevent) - (C:\Users\Default User\*.ps1*)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ff90ac38-a3c7-4e5a-b7b9-a82e5a02ba9e}] - (CryptoPrevent) - (*\u202e*.vbe)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ffa23dff-adbc-49c0-ac99-da2f32e07fd8}] - (CryptoPrevent) - (%userprofile%\AppData\LocalLow\*.bat)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ffb8620e-2654-4d65-9df4-4e4590751fdd}] - (CryptoPrevent) - (*.wmv.hta)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{ffd2d3dd-81a5-4c8c-a16e-4baa84edcbb6}] - (CryptoPrevent) - (%userprofile%\*.frm)

---------- | Explorer.exe component call (Microsoft Files Whitelisted)

(.COMODO.-.COMODO Internet Security.) - (10.0.1.6209) -- C:\Windows\system32\guard32.dll
(.COMODO.-.COMODO Secure Shopping.) - (1.1.20635.97) -- C:\Windows\system32\cssguard32.dll
(.TODO: <Company name>.-.TODO: <File description>.) - (1.0.0.1) -- C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll
(.Dropbox, Inc..-.Dropbox Shell Extension.) - (1.0.16.0) -- C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll
(.Bad Ass Apps.-.Theme Resource Changer.) - (1.0.0.1) -- C:\SkinPack\ThemeResourceChanger.dll
(.Hide My IP.-..) - (3.0.0.20) -- C:\Windows\system32\HMIPCore.dll
(.Remo Software.-.Remo File Eraser.) - (2.0.0.49) -- C:\Program Files\Remo File Eraser 2.0\rsh32.dll
(.Intel Corporation.-.igfxres Module.) - (8.15.10.2021) -- C:\Windows\system32\igfxrFRA.lrc
(..-..) - (0.0.0.0) -- C:\Program Files\Copy Handler\chext.dll
(..-..) - (0.0.0.0) -- C:\Program Files\Copy Handler\libchcore32u.dll
(.SQLite.-.SQLite.) - (3.11.1.0) -- C:\Program Files\Copy Handler\sqlite3_32.dll
(.Paramount Software UK Ltd.-.Reflect Shell Extension Context Menu.) - (6.1.865.0) -- C:\Program Files\Macrium\Reflect\RContextMenu.dll
(.Mozy, Inc..-.Extensions de shell MozyHome.) - (2.24.1.358) -- C:\Program Files\MozyHome\mozyshell.dll

---------- | Svchost.exe component call (Microsoft Files Whitelisted)

(.COMODO.-.COMODO Internet Security.) - (10.0.1.6209) -- C:\Windows\system32\guard32.dll
(.COMODO.-.COMODO Secure Shopping.) - (1.1.20635.97) -- C:\Windows\system32\cssguard32.dll
(.Hide My IP.-..) - (3.0.0.20) -- C:\Windows\system32\HMIPCore.dll
(.Realtek Semiconductor Corp..-.Realtek(r) LFX/GFX DSP component.) - (11.0.6000.161) -- C:\Windows\system32\RtkAPO.dll

---------- | ZeroAccess Check

[HKLM\Software\Classes\CLSID\{1108BE51-F58A-4CDA-BB99-7A0227D11D5E}\InProcServer32] : %systemroot%\system32\wbem\fastprox.dll
[HKLM\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] : %SystemRoot%\system32\shell32.dll
[HKLM\Software\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] : %systemroot%\system32\wbem\fastprox.dll
[HKLM\Software\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] : %systemroot%\system32\wbem\wbemess.dll
[HKLM\Software\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] : %SystemRoot%\system32\shell32.dll

---------- | Startings up

Sidebar - (%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [HKU\S-1-5-19\SOFTWARE\...\Run]) - User: AUTORITE NT\SERVICE LOCAL
Sidebar - (%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [HKU\S-1-5-20\SOFTWARE\...\Run]) - User: AUTORITE NT\SERVICE RÉSEAU
Advanced SystemCare 10 - ("C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe" /Auto [HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\...\Run]) - User: youcam8wait\widen-finalis
DriverMax_RESTART - ( [HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\...\Run]) - User: youcam8wait\widen-finalis
vdcss - ("C:\Program Files\COMODO\COMODO Secure Shopping\vdcss.exe" -tray [HKLM\SOFTWARE\...\Run]) - User: Public
IseUI - (C:\Program Files\COMODO\Internet Security Essentials\vkise.exe [HKLM\SOFTWARE\...\Run]) - User: Public
COMODO Internet Security - (C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [HKLM\SOFTWARE\...\Run]) - User: Public

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Command Processor]
"CompletionChar"=9   
"DefaultColor"=0   
"EnableExtensions"=1   
"PathCompletionChar"=9   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 10"="C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe" /Auto   
"DriverMax_RESTART"=   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"a"="F:\cyberlink youcam 8 essentials\sosvirus app for stop all power2go 11 process for facilite iobit unlocker work\processclose_1.0.0.3(5).exe"\1   
"MRUList"=bgfedca   
"b"=wordpad\1   
"c"=C:\Users\widen-finalis\Desktop\rkill.exe\1   
"d"=C:\Users\widen-finalis\Downloads\JRT.exe\1   
"e"="F:\Giveaways 6 avril\SharewareOnSale_Giveaway_Hide_My_IP_hub.exe"\1   
"f"=EXPLORER\1   
"g"=explorer.exe\1   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"DebugOptions"=2048   
"Documents"=   
"DosPrint"=no   
"Load"=   
"NetMessage"=no   
"NullPort"=None   
"Programs"=com exe bat pif cmd   
"Device"=Foxit Reader PDF Printer,winspool,Ne02:   
"UserSelectedDefault"=1   

[HKLM\Software\Microsoft\Command Processor]
"CompletionChar"=64   
"DefaultColor"=0   
"EnableExtensions"=1   
"PathCompletionChar"=64   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
"vdcss"="C:\Program Files\COMODO\COMODO Secure Shopping\vdcss.exe" -tray   
"IseUI"=C:\Program Files\COMODO\Internet Security Essentials\vkise.exe   [06/04/2017 14:36:56]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe   [28/12/2016 01:11:10]

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{F791A188-699D-4FD4-955A-EB59E89B1907}"=Theme Resource Changer   

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"IconServiceLib"=IconCodecService.dll   
"DdeSendTimeout"=0   
"DesktopHeapLogging"=1   
"GDIProcessHandleQuota"=10000   
"ShutdownWarningDialogTimeout"=4294967295   
"USERNestedWindowLimit"=50   
"USERPostMessageLimit"=10000   
"USERProcessHandleQuota"=10000   
""=mnmsrvc   
"DeviceNotSelectedTimeout"=15   
"Spooler"=yes   
"TransmissionRetryTimeout"=90   
"AppInit_DLLs"=   
"LoadAppInit_DLLs"=1   

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"WebCheck"={E6FB5E20-DE35-11CF-9C87-00AA005127ED}   


---------- | Win.ini : 



---------- | System.ini : 



---------- | Config.sys : 

FILES=40


---------- | Tasks List

Adobe Acrobat Update Task
Adobe Flash Player PPAPI Notifier
Adobe Flash Player Updater
Application Starter - 8882161c434ab0fd43dca37f474f4351
ASC10_SkipUac_widen-finalis
AupAvUpdate
BDAntiCryptoWallTask
CCleanerSkipUAC
DriverMax Notification
DriverMaxAgent
DriverMaxWelcome
DropboxUpdateTaskMachineCore
DropboxUpdateTaskMachineUA
FreeDownloadManagerNetworkMonitor
GoogleUpdateTaskMachineCore
GoogleUpdateTaskMachineUA
Health-Check
Health-Check-deep
NeoSetup Updater
PandaUSBVaccine
ReasonSecurityScheduledScan
ReasonSecurityStart
SoftwareInformerService
UninstallMonitor

---------- | Startings up registry ¦ Folder


---------- | Other keys


[HKLM\System\CurrentControlSet\Control\SecurityProviders]
"SecurityProviders"=credssp.dll   

[HKLM\System\CurrentControlSet\Control\Terminal Server]
"RCDependentServices"=CertPropSvc
SessionEnv   
"NotificationTimeOut"=0   
"SnapshotMonitors"=1   
"ProductVersion"=5.1   
"AllowRemoteRPC"=0   
"DelayConMgrTimeout"=0   
"fDenyTSConnections"=1   
"StartRCM"=0   
"TSAdvertise"=0   
"DeleteTempDirsOnExit"=1   
"fSingleSessionPerUser"=1   
"PerSessionTempDir"=0   
"TSUserEnabled"=0   
"InstanceID"=0380740c-4548-430a-95e4-556bf2c   
"fCredentialLessLogonSupported"=1   
"fCredentialLessLogonSupportedTSS"=1   
"fCredentialLessLogonSupportedKMRDP"=1   

[HKLM\System\CurrentControlSet\Control\Session Manager]
"CriticalSectionTimeout"=2592000   
"GlobalFlag"=0   
"HeapDeCommitFreeBlockThreshold"=0   
"HeapDeCommitTotalFreeThreshold"=0   
"HeapSegmentCommit"=0   
"HeapSegmentReserve"=0   
"ProcessorControl"=2   
"ResourceTimeoutCount"=648000   
"BootExecute"=autocheck autochk *   
"ExcludeFromKnownDlls"=   
"ObjectDirectories"=\Windows
\RPC Control   
"ProtectionMode"=1   
"NumberOfInitialSessions"=2   
"SetupExecute"=   
"PendingFileRenameOperations"=\??\C:\Users\WIDEN-~1\AppData\Local\Temp\nsv6C72.tmp\mb3-setup-consumer-3.0.6.1469-1096\

\??\C:\Users\WIDEN-~1\AppData\Local\Temp\nsv6C72.tmp\quickdiag_3_02.04.17.1\quickdiag_3_02.04.17.1.exe

\??\C:\Users\WIDEN-~1\AppData\Local\Temp\nsv6C72.tmp\quickdiag_3_02.04.17.1\

\??\C:\Users\WIDEN-~1\AppData\Local\Temp\nsv6C72.tmp\
   

[HKLM\System\CurrentControlSet\Control]
"PreshutdownOrder"=AcrSch2Svc
wuauserv
gpsvc
trustedinstaller   
"WaitToKillServiceTimeout"=200   
"CurrentUser"=USERNAME   
"BootDriverFlags"=0   
"ServiceControlManagerExtension"=%systemroot%\system32\scext.dll   
"SystemStartOptions"= NOEXECUTE=OPTIN   
"SystemBootDevice"=multi(0)disk(0)rdisk(0)partition(3)   
"FirmwareBootDevice"=multi(0)disk(0)rdisk(0)partition(2)   

[HKLM\System\CurrentControlSet\Control\lsa]
"auditbaseobjects"=0   
"auditbasedirectories"=0   
"crashonauditfail"=0   
"fullprivilegeauditing"=0x00   
"Bounds"=0x0030000000200000   
"LimitBlankPasswordUse"=1   
"NoLmHash"=1   
"Notification Packages"=scecli   
"Security Packages"=kerberos
msv1_0
schannel
wdigest
tspkg
pku2u   
"Authentication Packages"=msv1_0   
"LsaPid"=912   
"SecureBoot"=1   
"ProductType"=11   
"disabledomaincreds"=0   
"everyoneincludesanonymous"=0   
"forceguest"=0   
"restrictanonymous"=0   
"restrictanonymoussam"=1   


---------- | .LNK with Arguments

c:\program files\acer accessory store\acer boutique accessoire.lnk - Encrypted: False - Target: C:\Program Files\Acer Accessory Store\StartUrl.exe - Args: (hxxp://store.acer-euro.com/fr?utm_source=Icon&utm_medium=Icon&utm_campaign=Acer%2BInternal) - Hidden: False - Status: OK

---------- | AppCertDlls


---------- | Dnsapi.dll

C:\Windows\System32\dnsapi.dll -> OK : \drivers\etc\hosts

---------- | Policies | Registry

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Control Panel\Desktop]
"ScreenSaveActive"=1   
"ActiveWndTrackTimeout"=0   
"BlockSendInputResets"=0   
"CaretWidth"=1   
"ClickLockTime"=1200   
"CoolSwitchColumns"=7   
"CoolSwitchRows"=3   
"CursorBlinkRate"=530   
"DockMoving"=1   
"DragFromMaximize"=1   
"DragFullWindows"=1   
"DragHeight"=4   
"DragWidth"=4   
"FocusBorderHeight"=1   
"FocusBorderWidth"=1   
"FontSmoothing"=2   
"FontSmoothingGamma"=0   
"FontSmoothingOrientation"=1   
"FontSmoothingType"=2   
"ForegroundFlashCount"=7   
"ForegroundLockTimeout"=200000   
"LeftOverlapChars"=3   
"MenuShowDelay"=400   
"PaintDesktopVersion"=0   
"Pattern"=0   
"RightOverlapChars"=3   
"SnapSizing"=1   
"TileWallpaper"=0   
"WallpaperOriginX"=0   
"WallpaperOriginY"=0   
"WallpaperStyle"=10   
"WheelScrollChars"=3   
"WheelScrollLines"=3   
"WindowArrangementActive"=1   
"UserPreferencesMask"=0x9E3E078012000000   
"ScreenSaveTimeOut"=600   
"Wallpaper"=%windir%\web\wallpaper\windows\img0.jpg   
"ScreenSaverIsSecure"=0   
"WaitToKillAppTimeout"=200   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer]
"ExplorerStartupTraceRecorded"=1   
"ShellState"=0x240000003028000000000000000000000000000001000000120000000000000022000000   
"CleanShutdown"=0   
"Browse For Folder Width"=347   
"Browse For Folder Height"=288   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Start_SearchFiles"=2   
"ServerAdminUI"=0   
"Hidden"=2   
"ShowCompColor"=1   
"HideFileExt"=0   
"DontPrettyPath"=0   
"ShowInfoTip"=1   
"HideIcons"=0   
"MapNetDrvBtn"=0   
"WebView"=1   
"Filter"=0   
"SuperHidden"=0   
"SeparateProcess"=0   
"AutoCheckSelect"=0   
"IconsOnly"=0   
"ShowTypeOverlay"=1   
"ListviewAlphaSelect"=1   
"ListviewShadow"=1   
"TaskbarAnimations"=1   
"StartMenuInit"=4   
"TaskbarSizeMove"=0   
"ShowSuperHidden"=0   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5   
"ConsentPromptBehaviorUser"=3   
"EnableInstallerDetection"=1   
"EnableLUA"=1   
"EnableSecureUIAPaths"=1   
"EnableUIADesktopToggle"=0   
"EnableVirtualization"=1   
"PromptOnSecureDesktop"=1   
"ValidateAdminCodeSignatures"=0   
"dontdisplaylastusername"=0   
"legalnoticecaption"=   
"legalnoticetext"=   
"scforceoption"=0   
"shutdownwithoutlogon"=1   
"undockwithoutlogon"=1   
"FilterAdministratorToken"=0   
"EnableLinkedConnections"=1   
"EnableSecureUIAPath"=1   
"SoftwareSASGeneration"=1   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
"{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}"=1   
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=1   
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=1   
"{871C5380-42A0-1069-A2EA-08002B30309D}"=1   
"{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}"=1   
"{59031a47-3f72-44a7-89c5-5595fe6b30ee}"=1   
"{031E4825-7B94-4dc3-B131-E946B44C8DD5}"=1   
"{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}"=1   
"{9343812e-1c37-4a49-a12e-4b2d810d956b}"=1   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu]
"{871C5380-42A0-1069-A2EA-08002B30309D}.default"=0   
"{9343812e-1c37-4a49-a12e-4b2d810d956b}"=1   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"RegPath"=Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced   
"Text"=@shell32.dll,-30500   
"Type"=radio   
"CheckedValue"=1   
"ValueName"=Hidden   
"DefaultValue"=2   
"HKeyRoot"=2147483649   
"HelpID"=shell.hlp#51105   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer]
"ListViewPopupControl"={8be9f5ea-e746-4e47-ad57-3fb191ca1eed}   
"BrowserCFCreator"={57f8510b-a5e2-41da-a8f0-8a5ae85dfffd}   
"GlobalFolderSettings"={EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}   
"LVPopupSearchControl"={fccf70c8-f4d7-4d8b-8c17-cd6715e37fff}   
"FileOpenDialog"={DC1C5A9C-E88A-4dde-A5A1-60F82A20AEF7}   
"IconUnderline"=2   
"GlobalAssocChangedCounter"=108   

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarSizeMove"=0   

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations]
"Application"=http://go.microsoft.com/fwlink/?LinkId=57426&Ext=%s   


---------- | Winlogon 

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ExcludeProfileDirs"=AppData\Local;AppData\LocalLow;$Recycle.Bin   
"BuildNumber"=7601   
"FirstLogon"=0   
"AutoRestartShell"=1   
"ParseAutoexec"=1   

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ReportBootOk"=1   
"Shell"=explorer.exe   
"PreCreateKnownFolders"={A520A1A4-1780-4FF6-BD18-167343C5AF16}   
"Userinit"=C:\Windows\system32\userinit.exe,   
"VMApplet"=SystemPropertiesPerformance.exe /pagefile   
"AutoRestartShell"=1   
"Background"=0 0 0   
"CachedLogonsCount"=10   
"DebugServerCommand"=no   
"ForceUnlockLogon"=0   
"LegalNoticeCaption"=   
"LegalNoticeText"=   
"PasswordExpiryWarning"=5   
"PowerdownAfterShutdown"=0   
"ShutdownWithoutLogon"=0   
"WinStationsDisabled"=0   
"DisableCAD"=1   
"scremoveoption"=0   
"ShutdownFlags"=39   
"AutoAdminLogon"=0   
"DefaultUserName"=widen-finalis   
"allocatecdroms"=0   


---------- | Associations

[HKLM\Software\Classes\.exe]
""=exefile   
"Content Type"=application/x-msdownload   

[HKLM\Software\Classes\exefile\Shell\Open\Command]
""="%1" %*   
"IsolatedCommand"="%1" %*   

[HKLM\Software\Classes\.com]
""=comfile   

[HKLM\Software\Classes\comfile\Shell\Open\Command]
""="%1" %*   

[HKLM\Software\Classes\.reg]
""=regfile   

[HKLM\Software\Classes\regfile\Shell\Open\Command]
""=regedit.exe "%1"   

[HKLM\Software\Classes\.scr]
""=CryptoPreventSCR   

[HKLM\Software\Classes\scrfile\Shell\Open\Command]
""="%1" /S   

[HKLM\Software\Classes\.bat]
""=batfile   

[HKLM\Software\Classes\batfile\Shell\Open\Command]
""="%1" %*   

[HKLM\Software\Classes\.cmd]
""=cmdfile   

[HKLM\Software\Classes\cmdfile\Shell\Open\Command]
""="%1" %*   

[HKLM\Software\Classes\.pif]
""=CryptoPreventPIF   

[HKLM\Software\Classes\piffile\Shell\Open\Command]
""="%1" %*   

[HKLM\Software\Classes\.inf]
""=inffile   

[HKLM\Software\Classes\inffile\Shell\Open\Command]
""=%SystemRoot%\system32\NOTEPAD.EXE %1   

[HKLM\Software\Classes\.url]
""=InternetShortcut   

[HKLM\Software\Classes\.lnk]
""=lnkfile   

[HKLM\Software\Classes\.hta]
"PerceivedType"=text   
""=htafile   
"Content Type"=application/hta   

[HKLM\Software\Classes\htafile\Shell\Open\Command]
""=C:\Windows\System32\mshta.exe "%1" %*   

[HKLM\Software\Classes\InternetShortcut]
"NeverShowExt"=   
"InfoTip"=prop:System.Link.TargetUrl;System.Rating;System.Link.Description;System.Link.Comment   
"EditFlags"=2   
"FullDetails"=prop:System.Link.TargetUrl;System.Rating;System.Link.Description;System.Link.Comment   
"IsShortcut"=   
"FriendlyTypeName"=@C:\Windows\System32\ieframe.dll,-10046   
"PreviewDetails"=prop:System.Link.TargetUrl;System.Rating;System.History.VisitCount;System.History.DateChanged;System.Link.DateVisited;System.Link.Description;System.Link.Comment   

[HKLM\Software\Classes\Application.Manifest]
""=Application Manifest   
"EditFlags"=65536   
"BrowserFlags"=4096   
"FriendlyTypeName"=@dfshim.dll,-200   

[HKLM\Software\Classes\Application.Reference]
"NeverShowExt"=   
""=Application Reference   
"IsShortcut"=   
"EditFlags"=131072   
"FriendlyTypeName"=@dfshim.dll,-201   

[HKLM\Software\Classes\Folder]
"ContentViewModeLayoutPatternForBrowse"=delta   
"ContentViewModeForBrowse"=prop:~System.ItemNameDisplay;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;~System.LayoutPattern.PlaceHolder;System.DateModified   
"ContentViewModeLayoutPatternForSearch"=alpha   
"ContentViewModeForSearch"=prop:~System.ItemNameDisplay;System.DateModified;~System.ItemFolderPathDisplay   
""=Folder   
"EditFlags"=0xD2030000   
"FullDetails"=prop:System.PropGroup.Description;System.ItemNameDisplay;System.ItemTypeText;System.Size   
"NoRecentDocs"=   
"ThumbnailCutoff"=0   
"TileInfo"=prop:System.Title;System.ItemTypeText   

[HKLM\Software\Clients\StartMenuInternet\Dragon\Shell\open\Command]
""="C:\Program Files\Comodo\Dragon\dragon.exe"   
[HKLM\Software\Clients\StartMenuInternet\Dragon\InstallInfo]
"ReinstallCommand"="C:\Program Files\Comodo\Dragon\dragon.exe" --make-default-browser

[HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\Shell\open\Command]
""="C:\Program Files\Mozilla Firefox\firefox.exe"   
[HKLM\Software\Clients\StartMenuInternet\FIREFOX.EXE\InstallInfo]
"ReinstallCommand"="C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal

[HKLM\Software\Clients\StartMenuInternet\Google Chrome\Shell\open\Command]
""="C:\Program Files\Google\Chrome\Application\chrome.exe"   
[HKLM\Software\Clients\StartMenuInternet\Google Chrome\InstallInfo]
"ReinstallCommand"="C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser

[HKLM\Software\Clients\StartMenuInternet\IEXPLORE.EXE\Shell\open\Command]
""=C:\Program Files\Internet Explorer\iexplore.exe   [18/12/2016 04:39:45]
[HKLM\Software\Clients\StartMenuInternet\IEXPLORE.EXE\InstallInfo]
"ReinstallCommand"="C:\Windows\System32\ie4uinit.exe" -reinstall


---------- | AppcompatFlags

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]
"C:\Users\widen-finalis\Downloads\resizer-free\resizer-free.exe"=1
"F:\cyberlink youcam 8 essentials\youcam 8 utilities\portableappz.blogspot.fr & portableapps.com platform\PortableApps\VivaldiPortable\VivaldiPortable.exe"=1
"F:\100% sécurisé finalis - padam-sirtaki of lfs ultra, barrow 2 & widen\PortableApps\FirefoxPortable\FirefoxPortable.exe"=1
"F:\100% sécurisé finalis - padam-sirtaki of lfs ultra, barrow 2 & widen\revo uninstaller pro portable\program files (x64)\RevoUninstallerPro_Portable\RevoUPPort.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora_setup_full1084.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\KCinst.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-resource-pack.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\army.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\location filesync for 1 task of youcam 8 file-folder sync\everysync_trial.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-fashion-effect-pack.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-holiday-pack.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-80s-effect-pack.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-romantic-effect-pack.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\supercopier-windows-x86-1.2.1.0-setup.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\teracopy.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-summer-effect-pack.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\ultracopier-windows-x86_64-1.2.1.0-setup.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-spring-effect-pack.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\Unlocker1.9.2.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\chsetup-1.40.exe"=1
"F:\cyberlink youcam 8 essentials\efm du musée de l'homme & du musée de l'ordre de la libération\video editor wonderdar cher lloyd oath de youcam 8 essendar for efm du musée de l'homme 2 & du MOL\filmora-halloween-effect-pack.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\unlocker-setup.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\wood.exe"=1
"F:\cyberlink youcam 8 essentials\data copy tools for youcam 8\xpsolive.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\VideoDownloaderUltimate_winapp_installer_0.exe"=1
"C:\ProgramData\VideoDownloaderUltimateWinApp\tools\installhelper.exe"=1
"C:\ProgramData\VideoDownloaderUltimateWinApp\uninstall.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\SteganosPrivacySuite18.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\VideoDownloaderUltimate_winapp_installer.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\WebsiteX5Start13.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\PCmoverExpress.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\OODefragProfessional20ENU.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\Nero_TuneItUp_2.4.6.177_SN_FULL.exe"=1
"F:\CADEAUX FINALIS LFS ULTRA 100% 14 12 2016 ET 1ER ANNIV WIDEN ET AJUSTAGES LFS ULTRA FINALIS\musicrecorder-stub-xx-18001.exe"=1
"F:\Ad-Aware Personal Security\Adaware_Installer.exe"=1
"F:\logarythms - souvenirs 2005 & 2011 - lfs ultra & 100% sécurisé\sosvirus SIMPLE\Drive D\UsbFix_Standard\UsbFix_Standard.exe"=1
"F:\anti-faux positif pre_scan - exe installers\DAEMONToolsUltra500-0540.exe"=1
"\\Livebox\CARBIDE\PortableApps\FirefoxPortable\FirefoxPortable.exe"=1
"SIGN.MEDIA=924A210 Cadeaux rec final lfs ultra et 100% sécurisé 20-12\ashampoo_burning_studio_2017_25270.exe"=1
"F:\Cadeaux rec final lfs ultra et 100% sécurisé 20-12\ashampoo_burning_studio_2017_25270.exe"=1
"C:\Users\widen-finalis\Downloads\Macrium\v6.3.1665_reflect_setup_free_x86.exe"=1
"D:\barrow 3, widen 2 & 100% sécurisé finalis\cyberlink youcam 8 essentials\youcam 8 utilities\revo uninstaller pro portable\program files (x64)\RevoUninstallerPro_Portable\RevoUPPort.exe"=1
"D:\barrow 3, widen 2 & 100% sécurisé finalis\PortableApps\IObitUninstallerPortable\IObitUninstallerPortable.exe"=1
"C:\Users\WIDEN-~1\AppData\Local\Temp\vdu_uninstall_181bd9.exe"=1
"C:\Users\widen-finalis\Downloads\mb3-setup-35891.35891-3.0.6.1469.exe"=1
"F:\barrow 3, widen 2 & 100% sécurisé finalis\lfs ultra & 100% sécurisé finalis part 20 ultimate ultra finale\cadeau rec lfsu100%sf alias 1er gotd après lfsu100%sf\Scardalia112-db39ma\Setup.exe"=1
"C:\Users\widen-finalis\Downloads\reason-core-security-setup.exe"=1
"F:\barrow 3, widen 2 & 100% sécurisé finalis\cyberlink youcam 8 essentials\youcam 8 utilities\portableappz.blogspot.fr & portableapps.com platform\PortableApps\FirefoxPortable\FirefoxPortable.exe"=1
"SIGN.MEDIA=124CF8D 2ème giveaway 6 avril (en retard)\BatchPictureProtector66-k2hr0l\BatchWatermark_pt1.exe"=1
"SIGN.MEDIA=51C17C3 Usb vaccin bundle\Usb key vaccine by viruskeeper setup.exe"=1
"SIGN.MEDIA=2D3E2D8 Antiransomwares\MBARW_Setup.exe"=1
"SIGN.MEDIA=1E8C9C93 Zoolz-tweakbit-amazon\file-recovery-setup(2).exe"=1
"SIGN.MEDIA=1E8C9C93 Zoolz-tweakbit-amazon\pc-booster-setup(2).exe"=1
"SIGN.MEDIA=2D3E2D8 Antiransomwares\BDAntiRansomwareSetup.exe"=1
"SIGN.MEDIA=CF3D8 Usb vaccin bundle\USBVaccine\USBVaccineSetup.exe"=1
"SIGN.MEDIA=B7F191F Cadeaux lfsu100%sfpb 5avril\wips_golden21.exe"=1
"F:\Giveaways du 3ème au 10 avril\Giveaway Club - GiveawayClub_Kotobee_Author\GiveawayClub_Kotobee_Author\kotobeeauthor-1.3.1-win32.exe"=1
"F:\Giveaways du 3ème au 10 avril\DriverMaxPro923-db82ao\setup.exe"=1
"F:\barrow 4 & lfs ultra & 100% sécurisé finalis part B\cadeaux récompense & 1ers giveaway lfsu100%S Finalis\zone seaf-aide forum-treesize\TreeSize-x64-Demo.exe"=1
"F:\barrow 4 & lfs ultra & 100% sécurisé finalis part B\cadeaux récompense & 1ers giveaway lfsu100%S Finalis\zone seaf-aide forum-treesize\TreeSizeFreeSetup.exe"=1
"F:\barrow 4 & lfs ultra & 100% sécurisé finalis part B\cadeaux récompense & 1ers giveaway lfsu100%S Finalis\Pack neosetup\Neosetup appli version - l'art du moine de ne plus\NeoSetup_Updater.exe"=1
"C:\Users\WIDEN-~1\AppData\Local\Temp\is-VT7DE.tmp\CountInstallation.exe"=1
"SIGN.MEDIA=FA495DA setup_neatmp3.exe"=1
"SIGN.MEDIA=FA495DA OOSafeErase10ProfessionalEnu.exe"=1
"SIGN.MEDIA=FA495DA hd-video-converter.exe"=1
"SIGN.MEDIA=FA495DA dvd-ripper-s.exe"=1
"SIGN.MEDIA=2658222 winx-dvd-ripper-pt-offer\winx-dvd-ripper-pt-offer\winx-dvd-ripper-pt-offer.exe"=1
"G:\StartCodySafe.exe"=1
"G:\watermark-software.exe"=1
"SIGN.MEDIA=39D519 Download\FreeraserSetup.exe"=1
"SIGN.MEDIA=4F941B Download\NeoSetup.exe"=1
"F:\Download\acdsee-video-studio-1-0-0-54-win-x64-en.exe"=1
"SIGN.MEDIA=448939A8 Download\setup(2).exe"=1
"SIGN.MEDIA=6ED56A BurnAwarePremium101-db29sw\Setup.exe"=1
"X:\anti faux-positif pre_scan - exe installers\apps & installs mise en bouche veille powerdvd 17_sib.exe"=1


---------- | IFEO


---------- | Mountpoints2


---------- | Windows

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\win.ini\Windows]
"MouseSpeed"=#USR:Control Panel\Mouse   
"MouseThreshold1"=#USR:Control Panel\Mouse   
"MouseThreshold2"=#USR:Control Panel\Mouse   
"SwapMouseButtons"=#USR:Control Panel\Mouse   
"Beep"=#USR:Control Panel\Sound   
"DoubleClickSpeed"=#USR:Control Panel\Mouse   
"CoolSwitch"=USR:Control Panel\Desktop   
"DoubleClickHeight"=#USR:Control Panel\Mouse   
"DoubleClickWidth"=#USR:Control Panel\Mouse   
"DragFullWindows"=USR:Control Panel\Desktop   
"InitialKeyboardIndicators"=USR:Control Panel\Keyboard   
"LowPowerActive"=#USR:Control Panel\Desktop   
"LowPowerTimeOut"=#USR:Control Panel\Desktop   
"PowerOffActive"=#USR:Control Panel\Desktop   
"PowerOffTimeOut"=#USR:Control Panel\Desktop   
"ScreenSaveActive"=#USR:Control Panel\Desktop   
"ScreenSaveTimeOut"=#USR:Control Panel\Desktop   
"SnapToDefaultButton"=#USR:Control Panel\Mouse   
""=USR:Software\Microsoft\Windows NT\CurrentVersion\Windows   
"Spooler"=#SYS:Microsoft\Windows NT\CurrentVersion\Windows   
"TRANSMISSIONRETRYTIMEOUT"=#SYS:MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS   
"DEFAULTSEPARATEVDM"=\\REGISTRY\\MACHINE\\SYSTEM\\CURRENTCONTROLSET\\CONTROL\\WOW   
"APPINIT_DLLS"=SYS:MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS   
"DEVICENOTSELECTEDTIMEOUT"=#SYS:MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS   
"SWAPDISK"=SYS:MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS   

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf]
""=@SYS:DoesNotExist   

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\Boot]
""=SYS:Microsoft\Windows NT\CurrentVersion\WOW\boot   
"ScreenSaverActive"=USR:Control Panel\Desktop   
"ScreenSaverIsSecure"=USR:Control Panel\Desktop   
"SCRNSAVE.EXE"=USR:Control Panel\Desktop   
"Shell"=SYS:Microsoft\Windows NT\CurrentVersion\Winlogon   

[HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems]
"windows"=%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

---------- | Security center

[HKLM\SOFTWARE\Microsoft\Security Center]
"cval"=1

[HKLM\SOFTWARE\Microsoft\Security Center\svc]
"VistaSp1"=128920209537502489
"AntiVirusOverride"=0
"AntiSpywareOverride"=0
"FirewallOverride"=0

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=1
"DisableRoutinelyTakingAction"=0
"ProductStatus"=0
"InstallTime"=0x876E8EAE8054D201





---------- | Safeboot

[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AFD]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppInfo]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppMgmt]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Base]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BFE]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot Bus Extender]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot file system]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\bowser]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Browser]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CryptSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DcomLaunch]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dfsc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Dhcp]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DnsCache]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Dot3Svc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Eaphost]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EFS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventLog]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\File system]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Filter]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HelpSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HideMyIpSRV]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IKEEXT]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ipnat.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\KeyIso]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanServer]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanWorkstation]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LmHosts]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Messenger]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MPSDrv]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MPSSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mrxsmb]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mrxsmb10]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mrxsmb20]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NativeWifiP]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS Wrapper]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ndiscap]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ndisuio]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOSGroup]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBT]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetDDEGroup]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Netlogon]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetMan]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\netprofm]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Network]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetworkProvider]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NlaSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Nsi]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nsiproxy.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NTDS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PCI Configuration]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PlugPlay]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP Filter]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP_TDI]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PolicyAgent]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Power]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Primary disk]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ProfSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdbss]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpencdd.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdsessmgr]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\RpcEptMapper]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\RpcSs]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sacsvr]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SCardSvr]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SCSI Class]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sermouse.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SharedAccess]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Streams Drivers]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SWPRV]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\System Bus Extender]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TabletInputService]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TBS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Tcpip]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TDI]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TrustedInstaller]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\VaultSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\VDS]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vga.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vgasave.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vmms]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\volmgr.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\volmgrx.sys]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinDefend]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinMgmt]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wlansvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WudfPf]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WudfRd]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WudfSvc]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WudfUsbccidDriver]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

---------- | Winsock (Whitelist)

[HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000025] : My Privacy Tools - LSP
[HKLM\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000025] : My Privacy Tools - LSP
[HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000025] : My Privacy Tools - LSP

---------- | Hosts

# Hosts file cleared by RogueKiller (Adlice Software)
# http://www.adlice.com
127.0.0.1	localhost

---------- | Ping

Envoi d'une requ?te 'ping' sur google.com [172.217.22.142] avec 32 octets de donn?es?:
R?ponse de 172.217.22.142?: octets=32 temps=61 ms TTL=54
R?ponse de 172.217.22.142?: octets=32 temps=40 ms TTL=54
R?ponse de 172.217.22.142?: octets=32 temps=38 ms TTL=54
R?ponse de 172.217.22.142?: octets=32 temps=48 ms TTL=54

Statistiques Ping pour 172.217.22.142:
    Paquets?: envoy?s = 4, re?us = 4, perdus = 0 (perte 0%),
Dur?e approximative des boucles en millisecondes :
    Minimum = 38ms, Maximum = 61ms, Moyenne = 46ms

---------- | @

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Internet Explorer\Main]
"Disable Script Debugger"=yes
"AlwaysShowMenus"=0
"StatusBarWeb"=0
"Start Page"=http://www.google.fr/
"Default_Page_URL"=http://acer.msn.com
"Anchor Underline"=yes
"Cache_Update_Frequency"=Once_Per_Session
"Display Inline Images"=yes
"Do404Search"=0x01000000
"Local Page"=C:\Windows\system32\blank.htm
"Save_Session_History_On_Exit"=no
"Show_FullURL"=no
"Show_StatusBar"=yes
"Show_ToolBar"=yes
"Show_URLinStatusBar"=yes
"Show_URLToolBar"=yes
"Use_DlgBox_Colors"=yes
"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896
"XMLHTTP"=1
"NoUpdateCheck"=1
"UseClearType"=no
"Enable Browser Extensions"=yes
"Play_Background_Sounds"=yes
"Play_Animations"=yes
"DisableFirstRunCustomize"=1
"CompatibilityFlags"=0
"FullScreen"=no
"Window_Placement"=0x2C0000000200000003000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0000000000000000200300002C020000
"NotifyDownloadComplete"=yes
"DisableScriptDebuggerIE"=yes
"OperationalData"=5
"ImageStoreRandomFolder"=mrqzngt
"DownloadWindowPlacement"=0x2C0000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF900000000000000010030000E0010000
"Use FormSuggest"=yes

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Internet settings]
"IE5_UA_Backup_Flag"=5.0
"User Agent"=Mozilla/4.0 (compatible; MSIE 8.0; Win32)
"EmailName"=User@
"PrivDiscUiShown"=1
"EnableHttp1_1"=1
"WarnOnIntranet"=1
"MimeExclusionListForCache"=multipart/mixed multipart/x-mixed-replace multipart/x-byteranges 
"AutoConfigProxy"=wininet.dll
"UseSchannelDirectly"=0x01000000
"EnableNegotiate"=1
"WarnOnPost"=0x01000000
"UrlEncoding"=0
"SecureProtocols"=2688
"PrivacyAdvanced"=0
"ZonesSecurityUpgrade"=0xA77C8F729F5BD201
"DisableCachingOfSSLPages"=0
"WarnonZoneCrossing"=0
"CertificateRevocation"=1
"MigrateProxy"=1
"ProxyEnable"=0
"GlobalUserOffline"=0

[HKLM\Software\Microsoft\Internet Explorer\Main]
"AutoHide"=yes
"Security Risk Page"=about:SecurityRisk
"Extensions Off Page"=about:NoAdd-ons
"Default_Search_URL"=http://www.google.fr/
"Default_Page_URL"=http://www.google.fr/
"Anchor_Visitation_Horizon"=0x01000000
"Cache_Percent_of_Disk"=0x0A000000
"Placeholder_Width"=0x1A000000
"Placeholder_Height"=0x1A000000
"Default_Secondary_Page_URL"=
"Use_Async_DNS"=yes
"Start Page"=http://www.google.fr/
"Local Page"=C:\Windows\System32\blank.htm
"Search Page"=http://www.google.fr/?q={searchTerms}
"Delete_Temp_Files_On_Exit"=yes
"Enable_Disk_Cache"=yes
"TabProcGrowth"=Medium
"Print_Background"=0
"AlwaysShowMenus"=0
"StatusBarWeb"=1
"Check_Associations"=yes
"ApplicationTileImmersiveActivation"=1
"AssociationActivationMode"=0
"x86AppPath"=C:\Program Files\Internet Explorer\IEXPLORE.EXE

[HKLM\Software\Microsoft\Internet Explorer\AboutURLs]
"blank"=res://mshtml.dll/blank.htm
"NoAdd-onsInfo"=res://ieframe.dll/noaddoninfo.htm
"InPrivate"=res://ieframe.dll/inprivate_win7.htm
"NavigationFailure"=res://ieframe.dll/navcancl.htm
"NoAdd-ons"=res://ieframe.dll/noaddon.htm
"Home"=270
"PostNotCached"=res://ieframe.dll/repost.htm
"DesktopItemNavigationFailure"=res://ieframe.dll/navcancl.htm
"NavigationCanceled"=res://ieframe.dll/navcancl.htm
"SecurityRisk"=res://ieframe.dll/securityatrisk.htm

[HKLM\Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
""=http://

[HKLM\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"mosaic"=http://
"www"=http://
"home"=http://
"ftp"=ftp://

[HKLM\Software\Microsoft\Windows\CurrentVersion\Internet settings]
"EnablePunycode"=1
"CodeBaseSearchPath"=CODEBASE
"WarnOnIntranet"=1
"MinorVersion"=0
"ActiveXCache"=C:\Windows\Downloaded Program Files
"ProxyEnable"=0
"GlobalUserOffline"=0


---------- | reparsepoint


---------- | Detection of offsets


---------- | Notify 

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] : igfxdev.dll

---------- | Execution FileExts


[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bin]
"Application"=VCDMount.exe
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ccd]
"Application"=VCDMount.exe
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dvd]
"Application"=VCDMount.exe
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.img]
"Application"=VCDMount.exe
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iso]
"Application"=VCDMount.exe
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.udf]
"Application"=VCDMount.exe






---------- | SIOI | SEH | URLSH

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\       EaseUSEverySyncedOverlay] - {52103F52-9856-43F7-B5C4-A026FD84288C} --  C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll   [14/12/2016 19:55:57]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\       EaseUSEverySyncFailedOverlay] - {A6D755FC-42D6-46BF-8A5D-1F810C3FCEA6} --  C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll   [14/12/2016 19:55:57]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\       EaseUSEverySyncingOverlay] - {0F45C9C8-E236-4CEC-A858-BFEB47D8CD3C} --  C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll   [14/12/2016 19:55:57]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt01] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt02] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt03] - {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt04] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt05] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt06] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt07] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt08] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt09] - {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\   DropboxExt10] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} --  C:\Program Files\Dropbox\Client\DropboxExt.16.0.dll   [08/04/2017 07:36:10]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\egisPSDP] - {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} --  C:\Program Files\EgisTec MyWinLocker\x86\psdprotect.dll   [27/05/2010 04:40:28]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} --  %SystemRoot%\system32\EhStorShell.dll   
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\mozy] - {b32a6748-f273-4546-b60a-3c5adc239de5} --  C:\Program Files\MozyHome\mozyshell.dll   [27/11/2013 18:00:34]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\mozy2] - {747E722C-CB46-4a9d-BDFE-192AAD5099B1} --  C:\Program Files\MozyHome\mozyshell.dll   [27/11/2013 18:00:34]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\mozy3] - {EE6F5A00-7898-40f7-AB77-51FF9D6DEB20} --  C:\Program Files\MozyHome\mozyshell.dll   [27/11/2013 18:00:34]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235} --  %SystemRoot%\system32\ntshrui.dll   


---------- | Toolbar

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"Locked"=0   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBar7Layout"=0x13000000000000000000000020000000100001002F00000001000000800600005E010000060000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000FE16C5F812BF4A4CA70A6BCB164875A40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000   
"ITBar7Height"=0   

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={96BBC430-9900-4299-9F5D-7951AB36EFDF}   
"DownloadRetries"=0   
"DefaultPackCorrection"=1   
"KnownProvidersUpgradeTime"=0x1AB6121BA35BD201   
"Version"=4   
"UpgradeTime"=0x1347E745A35BD201   

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}   


---------- | Extensions


---------- | SearchScopes

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{96BBC430-9900-4299-9F5D-7951AB36EFDF}] - (Google) - http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} : 

---------- | Browser Helper Objects

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13D67BB7-DB5F-48AA-884D-7A5D94168509}] -> () :   
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DD257A3-5028-41AE-A1E7-A12F76A08893}] -> (IeUrlFilter Class) : C:\Program Files\COMODO\COMODO Secure Shopping\cssbho32.dll  [01/04/2017 06:53:52]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] -> (Programme d'aide de l'Assistant de connexion Windows Live) : C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll  [22/01/2009 16:41:30]

---------- | Chrome

C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\aapocclcgogkmnckokdopfmhonfmgoek =  : Google & co - Google & co - https://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\aohghmighlieiainnegkcijnfilokake =  : Google & co - Google & co - https://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\apdfllckaahabafndbhieahigkjlhalf =  : Google & co - https://drive.google.com/?usp=chrome_app - Google & co - [http://docs.google.com/http://drive.google.com/https://docs.google.com/https://drive.google.com/] - https://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo =  : Google & co - http://www.youtube.com - http://www.youtube.com - Google & co - http://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\felcaaldnbdncclmgdcncolpebgiejap =  : Google & co - Google & co - https://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi =  :     __MSG_extDesc__ -     __MSG_extName__ - https://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\nmmhkkegccagdldgiimedpiccmgmieda =  : Google & co - Google & co - 203784468217.apps.googleusercontent.com - https://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\pjkljhegncpnkpknbcohdijeoejaedia =  : Google & co - https://mail.google.com/mail/ca - Google & co - [*://mail.google.com/mail/ca] - http://clients2.google.com/service/update2/crx
C:\Users\widen-finalis\AppData\Local\Google\Chrome\User Data\Default\extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm =  :     Provider for discovery and services for mirroring of Chrome Media Router -     Chrome Media Router - 919648714761-55j965o0km033psv3i9qls5mo3qtdrb0.apps.googleusercontent.com - https://clients2.google.com/service/update2/crx


---------- | Opera


---------- | Firefox


[HKLM\Software\mozilla\Firefox\Extensions]
"{00F0643E-B367-4779-B45D-7046EBA37A88}"=C:\Program Files\Steganos Privacy Suite 18\spmplugin3
[HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - () : C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf] - () : C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp] - () : C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf] - () : C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
[HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3] - (Google Update) : C:\Program Files\Google\Update\1.3.33.3\npGoogleUpdate3.dll
[HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9] - (Google Update) : C:\Program Files\Google\Update\1.3.33.3\npGoogleUpdate3.dll
[HKLM\Software\MozillaPlugins\Adobe Reader] - (Handles PDFs in-place in Firefox) : C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\widen-finalis\AppData\Roaming\Mozilla\Firefox\Profiles\o54mxi5b.default\Prefs.js

user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.startup.homepage_override.buildID", "20170323105023");
user_pref("browser.startup.homepage_override.mstone", "52.0.2");
user_pref("extensions.blocklist.pingCountTotal", 4);
user_pref("extensions.blocklist.pingCountVersion", 4);
user_pref("extensions.bootstrappedAddons", "{\"aushelper@mozilla.org\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\aushelper@mozilla.org.xpi\",\"multiprocessCompatible\":true,\"runInSafeMode\":true,\"dependencies\":[],\"hasEmbeddedWebExtension\":false},\"deployment-checker@mozilla.org\":{\"version\":\"1.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\deployment-checker@mozilla.org.xpi\",\"multiprocessCompatible\":true,\"runInSafeMode\":true,\"dependencies\":[],\"hasEmbeddedWebExtension\":false},\"firefox@getpocket.com\":{\"version\":\"1.0.5\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\firefox@getpocket.com.xpi\",\"multiprocessCompatible\":true,\"runInSafeMode\":true,\"dependencies\":[],\"hasEmbeddedWebExtension\":false},\"webcompat@mozilla.org\":{\"version\":\"1.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\webcompat@mozilla.org.xpi\",\"multiprocessCompatible\":true,\"runInSafeMode\":true,\"dependencies\":[],\"hasEmbeddedWebExtension\":false},\"disable-prefetch@mozilla.org\":{\"version\":\"1.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\widen-finalis\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\o54mxi5b.default\\\\features\\\\{dec51e4e-c83f-4894-9532-818b6e8cdf8c}\\\\disable-prefetch@mozilla.org.xpi\",\"multiprocessCompatible\":true,\"runInSafeMode\":true,\"dependencies\":[],\"hasEmbeddedWebExtension\":false},\"e10srollout@mozilla.org\":{\"version\":\"1.12\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\widen-finalis\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\o54mxi5b.default\\\\features\\\\{dec51e4e-c83f-4894-9532-818b6e8cdf8c}\\\\e10srollout@mozilla.org.xpi\",\"multiprocessCompatible\":true,\"runInSafeMode\":true,\"dependencies\":[],\"hasEmbeddedWebExtension\":false}}");
user_pref("extensions.databaseSchema", 19);
user_pref("extensions.e10s.rollout.blocklist", "{dc572301-7619-498c-a57d-39143191b318};firefox@mega.co.nzsupport@lastpass.com;");
user_pref("extensions.e10s.rollout.hasAddon", false);
user_pref("extensions.e10s.rollout.policy", "50allmpc");
user_pref("extensions.e10sBlockedByAddons", false);
user_pref("extensions.enabledAddons", "%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:52.0.2");
user_pref("extensions.getAddons.cache.lastUpdate", 1491816547);
user_pref("extensions.getAddons.databaseSchema", 5);
user_pref("extensions.hotfix.lastVersion", "20170302.01");
user_pref("extensions.lastAppVersion", "52.0.2");
user_pref("extensions.lastPlatformVersion", "52.0.2");
user_pref("extensions.pendingOperations", false);
user_pref("extensions.systemAddonSet", "{\"schema\":1,\"directory\":\"{dec51e4e-c83f-4894-9532-818b6e8cdf8c}\",\"addons\":{\"disable-prefetch@mozilla.org\":{\"version\":\"1.0\"},\"e10srollout@mozilla.org\":{\"version\":\"1.12\"}}}");
user_pref("extensions.xpiState", "{\"app-system-defaults\":{\"aushelper@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\aushelper@mozilla.org.xpi\",\"e\":true,\"v\":\"2.0\",\"st\":1490296975000},\"deployment-checker@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\deployment-checker@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1490296975000},\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\e10srollout@mozilla.org.xpi\",\"e\":true,\"v\":\"1.9\",\"st\":1490296975000},\"firefox@getpocket.com\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\firefox@getpocket.com.xpi\",\"e\":true,\"v\":\"1.0.5\",\"st\":1490296976000},\"webcompat@mozilla.org\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\features\\\\webcompat@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1490296975000}},\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi\",\"e\":true,\"v\":\"52.0.2\",\"st\":1490296975000}},\"app-system-addons\":{\"disable-prefetch@mozilla.org\":{\"d\":\"C:\\\\Users\\\\widen-finalis\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\o54mxi5b.default\\\\features\\\\{dec51e4e-c83f-4894-9532-818b6e8cdf8c}\\\\disable-prefetch@mozilla.org.xpi\",\"e\":true,\"v\":\"1.0\",\"st\":1491635163144},\"e10srollout@mozilla.org\":{\"d\":\"C:\\\\Users\\\\widen-finalis\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\o54mxi5b.default\\\\features\\\\{dec51e4e-c83f-4894-9532-818b6e8cdf8c}\\\\e10srollout@mozilla.org.xpi\",\"e\":true,\"v\":\"1.12\",\"st\":1491635163470}}}");

C:\Users\widen-finalis\AppData\Roaming\Mozilla\Firefox\Profiles\o54mxi5b.default

[Profile0] - Name=default -> Profiles/o54mxi5b.default

---------- | DNS

[HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters]
"DhcpNameServer"=192.168.1.1 192.168.1.1
[HKLM\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{CFB4C46D-1B8B-4FB1-A605-36FA4CB6F2AA}]
"DhcpNameServer"=192.168.1.1 192.168.1.1
[HKLM\SYSTEM\ControlSet002\services\Tcpip\Parameters\Interfaces\{CFB4C46D-1B8B-4FB1-A605-36FA4CB6F2AA}]
"DhcpNameServer"=192.168.1.1 192.168.1.1
[HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{CFB4C46D-1B8B-4FB1-A605-36FA4CB6F2AA}]
"DhcpNameServer"=192.168.1.1 192.168.1.1

---------- | Applications

[HKLM\SOFTWARE\Classes\Applications\iexplore.exe] : "C:\Program Files\Internet Explorer\iexplore.exe" %1
[HKLM\SOFTWARE\Classes\Applications\MovieMaker.exe] : "C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe" "%1"
[HKLM\SOFTWARE\Classes\Applications\notepad.exe] : %SystemRoot%\system32\NOTEPAD.EXE %1
[HKLM\SOFTWARE\Classes\Applications\photoviewer.dll] : %SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1
[HKLM\SOFTWARE\Classes\Applications\uer.exe] : "C:\Users\widen-finalis\AppData\Local\CompuClever\Ultra eBook Reader\uer.exe" "%1"
[HKLM\SOFTWARE\Classes\Applications\ufo.exe] : "C:\Users\widen-finalis\AppData\Local\CompuClever\Ultra File Opener\ufo.exe" "%1"
[HKLM\SOFTWARE\Classes\Applications\VCDMount.exe] : "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDMount.exe" "%1"
[HKLM\SOFTWARE\Classes\Applications\WLXPhotoViewer.dll] : C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe /LaunchPhotoViewer /v "%1"
[HKLM\SOFTWARE\Classes\Applications\wmplayer.exe] : "%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"
[HKLM\SOFTWARE\Classes\Applications\wordpad.exe] : "%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE" "%1"
[HKLM\SOFTWARE\Classes\Applications\xnview.exe] : "C:\Program Files\XnView\xnview.exe" "%1"

---------- | SvcHost (Whitelist)

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost]
"regsvc"=RemoteRegistry
"DcomLaunch"=Power
PlugPlay
DcomLaunch
"secsvcs"=WinDefend
"bthsvcs"=bthserv


---------- | SvcHost - Netsvcs (Whitelist)

Term -  : 

---------- | Software

[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\7-Zip]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\ACD Systems]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Acer]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Adobe]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\AppDataLow]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Ashampoo]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\ASProtect]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\BDUSBImmunizer]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Bitdefender]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\BugSplat]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Canneverbe Limited]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\ChemTable Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Chromium]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Clients]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Code Sector]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Comodo]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\ComodoGroup]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\CompuClever]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Disc Soft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Dritek]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Dropbox]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\DropboxUpdate]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\DVDVideoSoft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\EaseUS]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\EFD Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Elaborate Bytes]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Elantech]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Foxit Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\FreeDownloadManager.ORG]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\g3n-h@ckm@n]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\giveawayoftheday.com]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Google]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\GRETECH]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\HideMyIP]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\IM Providers]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Informer Technologies, Inc.]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Innovative Solutions]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Insyde Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Intel]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\IvoSoft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Jam Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\KillSoft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Laplink]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Local AppWizard-Generated Applications]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Locky]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\macrium]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Malwarebytes]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Mozilla]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\mozy]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\NeatMP3]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Netscape]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\nkN2QX8XUF]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\O&O]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Obsidium]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\OEM]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Panda Security]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Paramount Software (UK) Ltd.]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\PCWinSoft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Piriform]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Policies]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\PowerISO]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\PowerISO1]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\QFX Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\QtProject]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\RapidSolution]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Realtek]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Reason]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Remo Software]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Scadarlia]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\SharewareOnSale]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Skype]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\softorbits]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Sonix]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Spearit]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Steganos]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\sysinternals]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\TweakBit]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\undefined]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\UsbFix]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\UsbFix Standard]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Vivaldi]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\WinRAR]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\WinRAR SFX]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\WixSharp]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Wondershare]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\ZHP]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\AppDataLow\Software\Microsoft]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\CurrentVersion]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\DWM]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\Shell]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\ShellNoRoam]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\TabletPC]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows\Windows Error Reporting]
[HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Windows NT\CurrentVersion]
[HKLM\Software\7-Zip]
[HKLM\Software\ACD Systems]
[HKLM\Software\Acer]
[HKLM\Software\Acer Incorporated]
[HKLM\Software\ACLEngine]
[HKLM\Software\Acronis]
[HKLM\Software\Adobe]
[HKLM\Software\America Online]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Ashampoo]
[HKLM\Software\Atheros Communications Inc.]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Auslogics]
[HKLM\Software\AVC3]
[HKLM\Software\Bitdefender]
[HKLM\Software\Canneverbe Limited]
[HKLM\Software\Caphyon]
[HKLM\Software\Chicony Electronics Co.,Ltd.]
[HKLM\Software\Chromium]
[HKLM\Software\Clients]
[HKLM\Software\Code Sector]
[HKLM\Software\CodeGear]
[HKLM\Software\COMODO]
[HKLM\Software\ComodoGroup]
[HKLM\Software\DigitalWave]
[HKLM\Software\Disc Soft]
[HKLM\Software\DoesNotExist]
[HKLM\Software\Dritek]
[HKLM\Software\Dropbox]
[HKLM\Software\DropboxUpdate]
[HKLM\Software\DTS]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\EaseUS]
[HKLM\Software\EgisTec]
[HKLM\Software\EgisTec IPS]
[HKLM\Software\EgisTec Shredder]
[HKLM\Software\Elaborate Bytes]
[HKLM\Software\Foolish IT]
[HKLM\Software\Foxit Software]
[HKLM\Software\g3n-h@ckm@n]
[HKLM\Software\Genie9]
[HKLM\Software\Google]
[HKLM\Software\GRETECH]
[HKLM\Software\GridinSoft]
[HKLM\Software\HD Sentinel]
[HKLM\Software\HideMyIpSRV]
[HKLM\Software\Ignis]
[HKLM\Software\IM Providers]
[HKLM\Software\Innovative Solutions]
[HKLM\Software\Insyde Software]
[HKLM\Software\Intel]
[HKLM\Software\IObit]
[HKLM\Software\jam software]
[HKLM\Software\KillSoft]
[HKLM\Software\Laplink]
[HKLM\Software\Lavasoft]
[HKLM\Software\Licenses]
[HKLM\Software\macrium]
[HKLM\Software\Macromedia]
[HKLM\Software\MalwarebytesARW]
[HKLM\Software\McAfee]
[HKLM\Software\McAfeeInstaller]
[HKLM\Software\Microsoft]
[HKLM\Software\Mozilla]
[HKLM\Software\mozilla.org]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\MozillaPlugins-BackupByVivaldiPortable]
[HKLM\Software\mozy]
[HKLM\Software\Nero]
[HKLM\Software\Notepad++]
[HKLM\Software\Oberon Media]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\OemSetup]
[HKLM\Software\OOBEOffer]
[HKLM\Software\Panda Security]
[HKLM\Software\Panda Software]
[HKLM\Software\PCWinSoft]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\PowerISO]
[HKLM\Software\QFX Software]
[HKLM\Software\RapidSolution]
[HKLM\Software\Realtek]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Reason]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Remo Software]
[HKLM\Software\Simply Super Software]
[HKLM\Software\Skype]
[HKLM\Software\SonicFocus]
[HKLM\Software\SONIX]
[HKLM\Software\SOSVirus]
[HKLM\Software\Spearit]
[HKLM\Software\SRS Labs]
[HKLM\Software\Steganos]
[HKLM\Software\sysinternals]
[HKLM\Software\TeamViewer]
[HKLM\Software\TweakBit]
[HKLM\Software\Ultra eBook Reader]
[HKLM\Software\Ultra File Opener]
[HKLM\Software\UNREAL]
[HKLM\Software\Volatile]
[HKLM\Software\WafCX]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinRAR]
[HKLM\Software\Wondershare]
[HKLM\Software\Wow6432Node]
[HKLM\Software\XnView]
[HKLM\Software\Microsoft\Windows\CurrentVersion]
[HKLM\Software\Microsoft\Windows\HTML Help]
[HKLM\Software\Microsoft\Windows\ITStorage]
[HKLM\Software\Microsoft\Windows\ScheduledDiagnostics]
[HKLM\Software\Microsoft\Windows\ScriptedDiagnosticsProvider]
[HKLM\Software\Microsoft\Windows\Tablet PC]
[HKLM\Software\Microsoft\Windows\TabletPC]
[HKLM\Software\Microsoft\Windows\Windows Error Reporting]
[HKLM\Software\Microsoft\Windows\Windows Search]
[HKLM\Software\Microsoft\Windows NT\CurrentVersion]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\AxInstSVGroup]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\defragsvc]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\LocalService]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\LocalServiceAndNoImpersonation]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\LocalServiceNetworkRestricted]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\LocalServiceNoNetwork]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\LocalSystemNetworkRestricted]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\netsvcs]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\NetworkService]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\NetworkServiceRemoteDesktopHyperVAgent]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\NetworkServiceRemoteDesktopPublishing]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\SDRSVC]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\swprv]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\termsvcs]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\utcsvc]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\wcssvc]
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\wercplsupport]

---------- | Drives


A:

[14/02/2010 00:18:58] - |A| - (.Codyssey.com - StartCodySafe - Starter for CodySafe portable environment.) - [182756] - (0.2.0.3) - A:\StartCodySafe.exe

D:

[25/09/2014 23:56:44] - |R| - (.Copyright (C) 2014 - DTVaultPrivacy MFC Application.) - [1173840] - (3.0.0.6) - D:\DTVP30_Launcher.exe
[19/10/2013 01:18:27] - |R| - (. - .) - [71] - (0.0.0.0) - D:\autorun.inf

E:

[05/02/2017 21:47:15] - |A| - (. - .) - [552] - (0.0.0.0) - E:\COMODO TrustConnect (VPN).lnk
[02/03/2016 17:57:54] - |A| - (.©  2005-2015 ClevX, LLC - Removable Media Antivirus.) - [4555968] - (3.17.0.10) - E:\DriveD.exe
[05/02/2017 21:47:13] - |A| - (.© BleepingComputer.com. All rights reserved. - Terminates malware processes so that you can run your normal security programs..) - [2030536] - (2.8.4.0) - E:\rkill.exe
[15/02/2017 05:05:46] - |A| - (. - .) - [77103600] - (12.0.0.58851) - E:\pcmover_fr_10.exe
[24/03/2017 08:52:43] - |H| - (. - .) - [16] - (0.0.0.0) - E:\AUTORUN.INF

F:


G:

[08/04/2017 20:14:59] - |A| - (.O&O Software GmbH - O&O SafeErase Setup.) - [17733904] - (10.0.100.0) - G:\OOSafeErase10Professional64Enu.exe
[08/04/2017 20:15:08] - |A| - (.O&O Software GmbH - O&O SafeErase Setup.) - [15436048] - (10.0.100.0) - G:\OOSafeErase10ProfessionalEnu.exe
[08/04/2017 20:15:22] - |A| - (.                                                                                                     - NeatMP3 Pro Setup                                           .) - [20920216] - (0.0.0.0) - G:\setup_neatmp3.exe
[08/04/2017 20:15:42] - |A| - (. - Watermark Software Setup.) - [35902656] - (1.0.0.0) - G:\watermark-software.exe
[14/02/2010 00:18:58] - |A| - (.Codyssey.com - StartCodySafe - Starter for CodySafe portable environment.) - [182756] - (0.2.0.3) - G:\StartCodySafe.exe
[10/04/2017 15:29:37] - |A| - (. - .) - [5587702] - (0.0.0.0) - G:\IconPack CombineQuadret.exe
[10/04/2017 17:50:50] - |A| - (. - .) - [346573979] - (1.0.0.0) - G:\apps & installs file d'attente powerdvd 17_sib.exe
[23/03/2017 22:37:48] - |H| - (. - .) - [16] - (0.0.0.0) - G:\AUTORUN.INF

H:

[10/04/2017 14:26:59] - |A| - (.Lavasoft Limited. All Rights Reserved. - AdAware Browser Installer.) - [1244456] - (45.2.1.14) - H:\AAInstaller.exe
[10/04/2017 14:27:00] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\ad-aware_Free-Antivirus-12.0.exe
[10/04/2017 14:27:00] - |A| - (.Copyright (C) ACD Systems International Inc. All rights reserved. - Installs ACDSee Video Studio and other programs/plug-ins as are appropriate.) - [20329488] - (1.0.0.54) - H:\acdsee-video-studio-1-0-0-54-win-x64-en.exe
[10/04/2017 14:27:00] - |A| - (.(c) Software Assistant - Ad-Aware.) - [1127976] - (3.0.0.159) - H:\Ad-Aware_Setup.exe
[10/04/2017 14:27:00] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\Ad-Aware-Pro-Security_11.2.exe
[10/04/2017 14:27:00] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\Ad-Aware-Total-Security_11.12.exe
[10/04/2017 14:27:00] - |A| - (.c Lavasoft Limited. All Rights Reserved. - Web Companion Installer.) - [340560] - (2.3.1411.2698) - H:\Ad-Aware-Web-Companion_2.3.1411.2698.exe
[10/04/2017 14:27:00] - |A| - (. - .) - [2586880] - (11.15.1046.10613) - H:\Adaware_Installer.exe
[10/04/2017 14:27:00] - |A| - (. - .) - [2558896] - (12.0.649.11190) - H:\Adaware_Installer(2).exe
[10/04/2017 14:27:10] - |A| - (.Copyright© 2005-2017                                                                                 - Advanced SystemCare 10                                      .) - [39666592] - (10.3.0.739) - H:\advanced-systemcare-free_10-3-0-739_fr_403234.exe
[10/04/2017 14:27:29] - |A| - (.                                                                                                     - Ashampoo Music Studio 2016 Setup                            .) - [47388000] - (6.1.0.0) - H:\ashampoo_music_studio_2016_23020.exe
[10/04/2017 14:27:38] - |A| - (.Copyright © 2008-2017 Auslogics Labs Pty Ltd - BoostSpeed Setup.) - [519680] - (9.1.2.0) - H:\boost_speed_stub_installer.exe
[10/04/2017 14:27:39] - |A| - (.2005-2017 COMODO. All rights reserved. - COMODO Internet Security.) - [5363680] - (10.0.1.6209) - H:\cfw_installer_6106_53.exe
[10/04/2017 14:27:43] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink_CDS081121-05.exe
[10/04/2017 14:27:43] - |A| - (.Copyright (C) CyberLink Corporation. All rights reserved - CyberLink Downloader.) - [1167128] - (3.0.0.1006) - H:\CyberLink_PhotoDirector_Downloader.exe
[10/04/2017 14:27:43] - |A| - (.Copyright (C) CyberLink Corporation. All rights reserved - CyberLink Downloader.) - [1167128] - (3.0.0.1006) - H:\CyberLink_Power2Go_Downloader.exe
[10/04/2017 14:27:43] - |A| - (.Copyright (C) CyberLink Corporation. All rights reserved - CyberLink Downloader.) - [1167128] - (3.0.0.1006) - H:\CyberLink_Power2Go_Downloader(2).exe
[10/04/2017 14:27:43] - |A| - (.Copyright (C) CyberLink Corporation. All rights reserved - CyberLink Downloader.) - [1167128] - (3.0.0.1006) - H:\CyberLink_Power2Go_Downloader(3).exe
[10/04/2017 14:27:43] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink_PowerDVD_Downloader.exe
[10/04/2017 14:27:45] - |A| - (.Copyright (C) CyberLink Corporation. All rights reserved - CyberLink Downloader.) - [1089304] - (2.9.1.8012) - H:\CyberLink-ActionDirector_2.0.exe
[10/04/2017 14:27:45] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink-AudioDirector_7.0.6822.0.exe
[10/04/2017 14:27:49] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink-AudioDirector_7.0.6822.0(2).exe
[10/04/2017 14:27:49] - |A| - (.Copyright (C) CyberLink Corporation. All rights reserved - CyberLink Downloader.) - [1089304] - (2.9.1.8012) - H:\CyberLink-ColorDirector_5.0.5623.0.exe
[10/04/2017 14:27:49] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\Cyberlink-Director-Suite_5.0.exe
[10/04/2017 14:27:49] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink-PhotoDirector_8.0.2031.0.exe
[10/04/2017 14:27:49] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\cyberlink-power2go_Essential-11.0.exe
[10/04/2017 14:27:49] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink-PowerDirector_15.exe
[10/04/2017 14:27:50] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\CyberLink-PowerProducer_6.0.exe
[10/04/2017 14:27:50] - |A| - (.Fast                                                                                                 - Berohu Setup                                                .) - [1320096] - (0.0.0.0) - H:\cyberlink-youcam_7.0-Essential.exe
[10/04/2017 14:27:50] - |A| - (.                                                                                                     - Free Studio Setup                                           .) - [1449736] - (1.0.7.0) - H:\FreeStudio_6.6.35.323_d.exe
[10/04/2017 14:28:02] - |A| - (.Copyright Lavasoft. All rights reserved.                                                                                                                                                                                                                                                                     - Lavasoft Digital Lock                                                                                                                                                                                                                                                                                       .) - [8230616] - (7.7.2.2) - H:\LavasoftDigitalLock_30days.exe
[10/04/2017 14:28:05] - |A| - (.Copyright Lavasoft. All rights reserved.                                                                                                                                                                                                                                                                     - Lavasoft File Shredder                                                                                                                                                                                                                                                                                      .) - [9543104] - (7.7.2.2) - H:\LavasoftFileShredder_30days.exe
[10/04/2017 14:28:10] - |A| - (.Copyright Lavasoft. All rights reserved.                                                                                                                                                                                                                                                                     - Lavasoft Privacy Toolbox                                                                                                                                                                                                                                                                                    .) - [10947384] - (7.7.2.2) - H:\LavasoftPrivacyToolbox_30days.exe
[10/04/2017 14:28:41] - |A| - (.© 2016 Malwarebytes. All Rights Reserved.                                                           - Malwarebytes                                                .) - [59272008] - (3.0.6.1469) - H:\mb3-setup-consumer-3.0.6.1469-1096.exe
[10/04/2017 14:28:42] - |A| - (.(c) 2015 Nero AG and its affiliates - NeroInstaller.) - [3074808] - (1.10.0.4) - H:\nero-2017_1-10-0-4_fr_45172.exe
[10/04/2017 14:28:42] - |A| - (.Copyright © 2009-2013, PeerBlock, LLC                                                                - PeerBlock 1.2 (r693) Setup                                  .) - [2374320] - (1.2.0.693) - H:\peerblock-1-2-en-win.exe
[13/03/2017 09:33:11] - |A| - (.Copyright © Justin Chalfant - Patch My PC.) - [605984] - (3.0.5.0) - H:\PatchMyPC.exe
[13/03/2017 09:36:00] - |A| - (.Copyright © Hinaman Technologies, LLC 2007 - WinTar.) - [81408] - (1.0.0.2) - H:\WinTar_1_0_2.exe
[10/04/2017 14:28:45] - |A| - (.(c) Software Assistant - PowerDVD.) - [1130112] - (3.0.0.159) - H:\PowerDVD_Setup.exe
[13/03/2017 09:38:05] - |A| - (.Copyright © Hinaman Technologies, LLC 2007 - WinTar.) - [81408] - (1.0.0.2) - H:\WinTar_1_0_2(1).exe
[10/04/2017 14:28:53] - |A| - (.Adlice Software                                                                                      - RogueKiller Installer                                       .) - [35207600] - (12.10.4.0) - H:\setup.exe
[10/04/2017 14:29:00] - |A| - (.Adlice Software                                                                                      - UCheck Installer                                            .) - [20872600] - (2.0.0.0) - H:\setup(2).exe
[10/04/2017 14:29:02] - |A| - (. - .) - [2240336] - (0.0.0.0) - H:\SharewareOnSale_Giveaway_Ad-Aware_Web_Companion_PRO_hub.exe
[10/04/2017 14:29:02] - |A| - (. - .) - [2251448] - (0.0.0.0) - H:\SharewareOnSale_Giveaway_CyberLink_ActionDirector_Ultra_2_hub.exe
[10/04/2017 14:29:04] - |A| - (. - .) - [2237496] - (0.0.0.0) - H:\SharewareOnSale_Giveaway_Fort_Pro_hub.exe
[10/04/2017 14:29:05] - |A| - (. - .) - [2237496] - (0.0.0.0) - H:\SharewareOnSale_Giveaway_Fort_Pro_hub(2).exe
[10/04/2017 14:29:05] - |A| - (.Installer File                                                                                       - Pisuca Setup                                                .) - [1251376] - (0.0.0.0) - H:\SkinPacks.exe
[10/04/2017 14:29:07] - |A| - (.Copyright © 2013. ReviverSoft. All Rights Reserved. - Start Menu Reviver.) - [6733112] - (3.0.0.18) - H:\StartMenuReviverSetup.exe
[10/04/2017 14:29:08] - |A| - (. - .) - [1933904] - (0.0.0.0) - H:\tenorshare-data-wipe-trial.exe
[10/04/2017 14:29:08] - |A| - (. - .) - [1933904] - (0.0.0.0) - H:\tenorshare-data-wipe-trial(2).exe
[10/04/2017 14:29:08] - |A| - (. - .) - [1933904] - (0.0.0.0) - H:\tenorshare-data-wipe-trial(3).exe
[10/04/2017 14:29:10] - |A| - (. - .) - [2793440] - (0.0.0.0) - H:\tenorshare-free-any-data-recovery.exe
[10/04/2017 14:29:10] - |A| - (. - .) - [2289507] - (0.0.0.0) - H:\tenorshare-partition-manager-full.exe
[10/04/2017 14:29:47] - |A| - (. - .) - [20782664] - (2.0.0.0) - H:\UCheck.exe
[10/04/2017 14:31:01] - |A| - (. - .) - [27087432] - (2.0.0.0) - H:\UCheck64.exe
[10/04/2017 14:32:09] - |A| - (.Nicolas Coolman - ZHPCleane.) - [2760192] - (2017.4.10.62) - H:\ZHPCleaner.exe
[05/11/2016 06:27:07] - |SH| - (. - .) - [0] - (0.0.0.0) - H:\autorun.inf

W:


X:

[30/09/2016 07:06:18] - |A| - (. - .) - [410] - (0.0.0.0) - X:\ampa.ini

Y:

[08/02/2017 02:00:00] - |A| - (.© 2016 Sophos Limited - SophosClean.) - [10640704] - (3.7.14.264) - Y:\SophosClean.exe
[26/01/2017 02:00:00] - |A| - (. - .) - [1836] - (0.0.0.0) - Y:\a2settings.ini

Z:


---------- | C:

[14/07/2009 04:36:15] - |SHD| - [258] - C:\$Recycle.Bin
[MD5.D9EBEC6668A6092FCBD1713C347AA5E0] - [14/07/2009 04:04:04] - |A| - (. - .) - [24] - (0.0.0.0) - C:\autoexec.bat
[12/12/2016 23:00:34] - |RD| - [2136042861] - C:\Backup
[05/12/2016 11:13:31] - |AD| - [86054683] - C:\book
[17/09/2010 09:22:05] - |SHD| - [185285658] - C:\Boot
[MD5.D6AE2D5521DD93AEBC90D411D099FA36] - [17/09/2010 09:22:06] - |RASH| - (. - .) - [383562] - (0.0.0.0) - C:\bootmgr
[MD5.117A26124A6997CB68A7984E2EA6ECCE] - [17/09/2010 09:22:07] - |RASH| - (. - .) - [8192] - (0.0.0.0) - C:\BOOTSECT.BAK
[MD5.FA3BEA08D21F96468B4CBBDDE74F538F] - [09/04/2017 13:20:15] - |N| - (. - .) - [3224] - (0.0.0.0) - C:\bootsqm.dat
[08/04/2017 09:22:43] - |SD| - [4036822] - C:\CodySafe
[MD5.ED4FC5980BD8B1AD869FF725C7776338] - [14/07/2009 04:04:04] - |A| - (. - .) - [10] - (0.0.0.0) - C:\config.sys
[MD5.ACA1FD5675E1A522C015D968A136C74B] - [07/04/2017 16:16:21] - |A| - (. - .) - [815] - (0.0.0.0) - C:\DelFix.txt
[08/04/2017 09:22:43] - |RD| - [674] - C:\Documents
[14/07/2009 06:53:55] - |SHD| - [0] - C:\Documents and Settings
[10/12/2016 18:43:28] - |D| - [1478656] - C:\ESD
[22/12/2016 05:14:29] - |D| - [0] - C:\EverySync
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [05/12/2016 11:07:11] - |ASH| - (. - .) - [796729344] - (0.0.0.0) - C:\hiberfil.sys
[08/04/2017 09:33:17] - |D| - [45154399] - C:\IconPack
[17/09/2010 08:58:43] - |D| - [0] - C:\Intel
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [11/12/2016 00:24:47] - |RASH| - (. - .) - [0] - (0.0.0.0) - C:\IO.SYS
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [11/12/2016 00:24:47] - |RASH| - (. - .) - [0] - (0.0.0.0) - C:\MSDOS.SYS
[17/09/2010 09:16:45] - |D| - [2596616670] - C:\OEM
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [12/12/2016 14:59:09] - |ASH| - (. - .) - [2273189888] - (0.0.0.0) - C:\pagefile.sys
[14/07/2009 04:37:05] - |D| - [0] - C:\PerfLogs
[08/04/2017 09:22:43] - |RD| - [9172639] - C:\PortableApps
[14/07/2009 04:37:05] - |RD| - [9158969514] - C:\Program Files
[14/07/2009 04:37:05] - |HD| - [4708711373] - C:\ProgramData
[10/04/2017 17:07:28] - |D| - [262067] - C:\QuickDiag
[MD5.16C244A896933207DB9DDD008BEDD14E] - [10/04/2017 17:08:38] - |A| - (. - .) - [823429] - (0.0.0.0) - C:\QuickDiag.txt
[12/12/2016 16:02:56] - |SHD| - [260722604] - C:\Recovery
[MD5.4E0E6588697C22A5D2E6C9F2F699EE4D] - [06/12/2016 09:15:11] - |A| - (. - .) - [301898] - (0.0.0.0) - C:\Reflect_Install.log
[MD5.70A86849D2637DC3D597351A2F62834A] - [17/09/2010 09:10:23] - |A| - (. - .) - [2089] - (0.0.0.0) - C:\RHDSetup.log
[05/12/2016 19:53:59] - |D| - [0] - C:\SauvegardePersonnelle
[08/04/2017 09:29:58] - |D| - [87427546] - C:\SkinPack
[MD5.7FEA5C981C720D6A89CE65D95AE13E38] - [14/02/2010 00:18:58] - |A| - (.Codyssey.com - StartCodySafe - Starter for CodySafe portable environment.) - [182756] - (0.2.0.3) - C:\StartCodySafe.exe
[05/12/2016 11:07:11] - |SHD| - [0] - C:\System Volume Information
[14/07/2009 04:37:05] - |RD| - [7523056055] - C:\Users
[06/04/2017 18:26:56] - |HD| - [0] - C:\VTRoot
[08/04/2017 09:31:40] - |HD| - [24770560] - C:\W7P_Backups
[12/07/2007 03:48:01] - |D| - [14686471333] - C:\Windows

---------- | C:\Windows

[MD5.065919847CF1C1C0A1C5F63C488EB54B] - [17/09/2010 09:26:45] - |A| - (. - .) - [33] - (0.0.0.0) - C:\Windows\0
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [17/09/2010 08:57:00] - |A| - (. - .) - [0] - (0.0.0.0) - C:\Windows\Acer.tag
[04/02/2017 18:41:27] - |D| - [0] - C:\Windows\Acronis
[14/07/2009 06:52:30] - |D| - [802] - C:\Windows\addins
[14/07/2009 04:37:05] - |D| - [62884] - C:\Windows\AppCompat
[14/07/2009 04:37:05] - |D| - [9913976] - C:\Windows\AppPatch
[14/07/2009 04:37:05] - |RSD| - [707941414] - C:\Windows\assembly
[MD5.DBD14D0DB0382DFE96D7B5007DDD5ABE] - [14/12/2016 19:44:40] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Utilitaire de service de fichier de démarrage.) - [65024] - (6.1.7601.17514) - C:\Windows\bfsvc.exe
[14/07/2009 04:37:06] - |D| - [18304606] - C:\Windows\Boot
[MD5.B2D8816946A324EC51B2FE0A91B8A2DA] - [14/07/2009 06:57:37] - |AS| - (. - .) - [67584] - (0.0.0.0) - C:\Windows\bootstat.dat
[14/07/2009 04:37:06] - |D| - [3233280] - C:\Windows\Branding
[MD5.6FBB766EB79F9EED3684194EEAF838DF] - [12/12/2016 23:50:28] - |A| - (. - .) - [11453] - (0.0.0.0) - C:\Windows\ChangeLang_Done.tag
[MD5.3A12D0855904754EB55D5A05BD301683] - [17/09/2010 03:45:55] - |A| - (. - .) - [10] - (0.0.0.0) - C:\Windows\CSUP.TXT
[14/07/2009 04:37:06] - |D| - [2238046] - C:\Windows\Cursors
[14/07/2009 06:34:21] - |D| - [0] - C:\Windows\debug
[06/10/2009 04:29:32] - |AD| - [254527] - C:\Windows\DeployWinRE2
[MD5.337F31202C81C9DC45F52600F41EF046] - [12/12/2016 15:21:00] - |A| - (. - .) - [14947] - (0.0.0.0) - C:\Windows\devices.txt
[14/07/2009 06:52:30] - |D| - [3042330] - C:\Windows\diagnostics
[14/07/2009 06:56:48] - |D| - [0] - C:\Windows\DigitalLocker
[MD5.3B3E3D81B9F4FAB89AC0B2769ABE17D3] - [14/12/2016 07:08:12] - |A| - (. - .) - [64] - (0.0.0.0) - C:\Windows\dm.dmap
[17/09/2010 09:17:21] - |D| - [12505585] - C:\Windows\Downloaded Installations
[14/07/2009 06:52:30] - |D| - [65] - C:\Windows\Downloaded Program Files
[MD5.7D2662728628F9B262FBBA5F4DF122A2] - [07/04/2017 15:19:26] - |A| - (. - .) - [81986] - (0.0.0.0) - C:\Windows\DPINST.LOG
[MD5.E7CCB395344AF1C555C45E55C149A773] - [17/09/2010 09:18:36] - |A| - (.Copyright (C) 2004 - EMCRI DLL.) - [361808] - (1.0.0.3) - C:\Windows\EMCRI_E.dll
[07/04/2017 16:16:24] - |D| - [55741406] - C:\Windows\ERUNT
[MD5.40D777B7A95E00593EB1568C68514493] - [14/12/2016 19:48:55] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Explorateur Windows.) - [2616320] - (6.1.7601.17514) - C:\Windows\explorer.exe
[MD5.F38B53088F3200BC9B8037DBA400F0AA] - [12/12/2016 15:19:41] - |A| - (. - .) - [113264] - (0.0.0.0) - C:\Windows\FixUVC.exe
[14/07/2009 04:37:06] - |RSD| - [355102643] - C:\Windows\Fonts
[12/12/2016 23:44:18] - |D| - [142336] - C:\Windows\fr-FR
[MD5.F9202335BBA03A02F084FE588564BBF5] - [14/07/2009 01:12:58] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Utilitaire de service de chiffrement de lecteur BitLocker.) - [13824] - (6.1.7600.16385) - C:\Windows\fveupdate.exe
[14/07/2009 04:37:06] - |D| - [83144388] - C:\Windows\Globalization
[14/07/2009 04:37:06] - |D| - [38934178] - C:\Windows\Help
[MD5.2FF3A32F01DF61836FED59D441D8B9DF] - [14/07/2009 02:12:58] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Aide et support Microsoft.) - [497152] - (6.1.7600.16385) - C:\Windows\HelpPane.exe
[MD5.9B90B0C78671A4881D06C91941F6F379] - [14/07/2009 02:12:22] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Exécutable de l’aide HTML Microsoft®.) - [15360] - (6.1.7600.16385) - C:\Windows\hh.exe
[14/07/2009 04:37:06] - |D| - [143547244] - C:\Windows\IME
[14/07/2009 04:37:06] - |D| - [131928162] - C:\Windows\inf
[17/09/2010 09:17:22] - |SHD| - [1305290450] - C:\Windows\Installer
[14/07/2009 04:37:06] - |D| - [48371] - C:\Windows\L2Schemas
[10/04/2017 18:14:45] - |D| - [1470712] - C:\Windows\LastGood
[14/07/2009 04:37:06] - |D| - [0] - C:\Windows\LiveKernelReports
[MD5.EF3024328398C07DE0BDF35B67ABEC68] - [17/09/2010 08:57:27] - |A| - (. - .) - [172] - (0.0.0.0) - C:\Windows\LMv4.UNI
[14/07/2009 04:37:06] - |D| - [0] - C:\Windows\Logs
[14/07/2009 04:37:06] - |RSD| - [13327133] - C:\Windows\Media
[MD5.23AF90D2355D8C83AA4567EF1763B467] - [14/07/2009 01:55:01] - |A| - (. - .) - [43131] - (0.0.0.0) - C:\Windows\mib.bin
[14/07/2009 04:37:07] - |D| - [358885863] - C:\Windows\Microsoft.NET
[14/12/2016 11:04:34] - |D| - [1496] - C:\Windows\Migration
[MD5.A8BF8A76DA1BDCAEFB65F2F987BCA8C5] - [23/04/2009 06:44:23] - |A| - (. - .) - [2572] - (0.0.0.0) - C:\Windows\MOD01OPK04000H0001.enc
[MD5.1162C16DCAF8288ADF7CB74DE472A107] - [17/09/2010 03:46:01] - |A| - (. - .) - [1996] - (0.0.0.0) - C:\Windows\MOD01SET00000000MU.enc
[MD5.E551DAEAF6F19A8FCFA8E0D689870CD3] - [17/09/2010 09:21:10] - |A| - (. - .) - [2008] - (0.0.0.0) - C:\Windows\MOD01SET5K000G0002.enc
[MD5.448CA8C1E3F648FFEF53645B511C5F74] - [06/10/2009 22:46:28] - |A| - (. - .) - [2476] - (0.0.0.0) - C:\Windows\MOD01SET74FR0H0003.enc
[MD5.013985963D7C6010B033A70E452292BA] - [17/09/2010 09:21:10] - |A| - (. - .) - [2048] - (0.0.0.0) - C:\Windows\MOD01SET75000H0005.enc
[MD5.24D9E3329D9625546EDD7EEB46B33E9A] - [17/09/2010 09:21:10] - |A| - (. - .) - [2168] - (0.0.0.0) - C:\Windows\MOD01SET78000G0018.enc
[14/07/2009 04:37:07] - |D| - [0] - C:\Windows\ModemLogs
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [27/11/2013 18:00:38] - |A| - (. - .) - [0] - (0.0.0.0) - C:\Windows\mozy.blk
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [27/11/2013 18:00:38] - |A| - (. - .) - [0] - (0.0.0.0) - C:\Windows\mozy.flt
[MD5.B9FB94A8DA62711C6955825DEFB25C5A] - [14/07/2009 04:04:57] - |A| - (. - .) - [1405] - (0.0.0.0) - C:\Windows\msdfmap.ini
[12/12/2016 23:35:29] - |D| - [10136198] - C:\Windows\NAPP_Dism_Log
[MD5.D0B21C17A8FD3C4D452016AB5E640A58] - [06/10/2009 04:29:32] - |A| - (. - .) - [741] - (0.0.0.0) - C:\Windows\NewDeployWinRE.cmd
[MD5.D378BFFB70923139D6A4F546864AA61C] - [14/07/2009 01:41:04] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Bloc-notes.) - [179712] - (6.1.7600.16385) - C:\Windows\notepad.exe
[MD5.A5EA3AA8C2560F63BEB7D1E6485AE349] - [05/02/2017 12:14:42] - |A| - (. - .) - [247078] - (0.0.0.0) - C:\Windows\ntbtlog.txt
[17/09/2010 09:31:33] - |D| - [229807] - C:\Windows\oem
[17/09/2010 09:36:37] - |D| - [499712] - C:\Windows\OEMTemp
[14/07/2009 06:52:30] - |D| - [65] - C:\Windows\Offline Web Pages
[17/09/2010 09:13:51] - |D| - [0] - C:\Windows\Options
[12/07/2007 03:49:28] - |D| - [1381781] - C:\Windows\Panther
[MD5.ACA81BF682ED2907FCEDF4A359BB8E1B] - [17/09/2010 09:37:39] - |A| - (. - .) - [70] - (0.0.0.0) - C:\Windows\patch.loag
[12/12/2016 15:32:00] - |D| - [0] - C:\Windows\PCHEALTH
[14/07/2009 06:52:30] - |D| - [62073347] - C:\Windows\Performance
[MD5.84085E1A909CD14B485019946C8C1C09] - [04/02/2017 17:37:55] - |A| - (. - .) - [13040] - (0.0.0.0) - C:\Windows\PFRO.log
[MD5.D94E3AAACFA67F587BAAC5A97B911157] - [07/04/2017 15:18:30] - |A| - (. - .) - [378] - (0.0.0.0) - C:\Windows\PidList.ini
[MD5.C4929C7C4BE57AF744E315B239F61F07] - [12/12/2016 15:19:42] - |A| - (. - .) - [302] - (0.0.0.0) - C:\Windows\PidList_C.ini
[14/07/2009 04:37:07] - |D| - [1132015] - C:\Windows\PLA
[MD5.EADCEB89DD46DA2A5560CA2AF016A6A6] - [12/12/2016 15:19:42] - |A| - (.Copyright (C) 2007 - DefaultSettingEXE MFC Application.) - [206208] - (1.1.0.1) - C:\Windows\PLFSetI.exe
[MD5.DEA325B8099A1F8D62A0B15471BF849B] - [07/04/2017 15:18:30] - |A| - (.Copyright (C) 2010 - DefaultSettingEXE.) - [99712] - (1.0.5.0) - C:\Windows\PLFSetL.exe
[14/07/2009 04:37:07] - |D| - [2859777] - C:\Windows\PolicyDefinitions
[17/09/2010 08:23:21] - |D| - [34504495] - C:\Windows\Prefetch
[MD5.8A4883F5E7AC37444F23279239553878] - [14/07/2009 01:17:08] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Éditeur du Registre.) - [398336] - (6.1.7600.16385) - C:\Windows\regedit.exe
[14/07/2009 04:37:07] - |D| - [21544] - C:\Windows\Registration
[14/07/2009 04:37:07] - |D| - [3533837] - C:\Windows\Resources
[MD5.C8717886B101DFEF52EBC243C1706801] - [17/09/2010 09:10:23] - |A| - (.Copyright (C) 2010 Realtek Semiconductor Corp. - RtlExUpd DLL for setup utility function.) - [1251944] - (1.0.2.4) - C:\Windows\RtlExUpd.dll
[14/07/2009 04:37:07] - |D| - [0] - C:\Windows\SchCache
[14/07/2009 04:37:07] - |D| - [58021] - C:\Windows\schemas
[14/07/2009 04:37:07] - |D| - [5294054] - C:\Windows\security
[14/07/2009 06:34:13] - |D| - [47442873] - C:\Windows\ServiceProfiles
[14/07/2009 04:37:07] - |D| - [66240790] - C:\Windows\servicing
[14/07/2009 06:34:16] - |D| - [457] - C:\Windows\Setup
[MD5.27B0B37B503D8295D8A6C682BA9A9339] - [04/02/2017 16:09:43] - |A| - (. - .) - [7414] - (0.0.0.0) - C:\Windows\setupact.log
[MD5.D41D8CD98F00B204E9800998ECF8427E] - [04/02/2017 16:09:43] - |A| - (. - .) - [0] - (0.0.0.0) - C:\Windows\setuperr.log
[MD5.0D0D3F885589CDEA678C3B17ABB70DC7] - [24/10/2014 10:12:04] - |A| - (.Copyright (C) 1998-2014 - ArchiCrypt Live Engine.) - [117848] - (19.1.1.0) - C:\Windows\SleeN1964.sys
[MD5.681A54D355E577A934AB532CD997FBF8] - [07/04/2017 15:18:34] - |A| - (.Copyright (C) 2007 - DisplaySettingMonitor MFC Application.) - [30080] - (1.0.4.0) - C:\Windows\snuvcdsm.exe
[12/12/2016 15:02:19] - |D| - [550235323] - C:\Windows\SoftwareDistribution
[14/07/2009 04:37:07] - |D| - [70586312] - C:\Windows\Speech
[MD5.9060C3C745E7B2D8E1A81DD061021546] - [14/07/2009 06:48:09] - |A| - (. - .) - [48201] - (0.0.0.0) - C:\Windows\Starter.xml
[MD5.93C96478B0D5B27B979E0E3AB0802C77] - [07/07/2016 09:08:40] - |A| - (. - .) - [75184] - (0.0.0.0) - C:\Windows\suite.vssMgr.exe
[14/07/2009 04:37:07] - |D| - [700380] - C:\Windows\system
[MD5.286A9EDB379DC3423A528B0864A0F111] - [14/07/2009 04:04:23] - |A| - (. - .) - [219] - (0.0.0.0) - C:\Windows\system.ini
[12/07/2007 03:51:11] - |D| - [2854509005] - C:\Windows\System32
[14/07/2009 04:37:09] - |D| - [15] - C:\Windows\TAPI
[14/07/2009 04:37:09] - |D| - [18280] - C:\Windows\Tasks
[14/07/2009 04:37:09] - |D| - [15228783] - C:\Windows\Temp
[14/07/2009 04:37:09] - |D| - [0] - C:\Windows\tracing
[MD5.0BEA3F79A36B1F67B2CE0F595524C77C] - [10/06/2009 23:41:17] - |A| - (. - Twain Source Manager (Image Acquisition Interface).) - [94784] - (1.7.0.0) - C:\Windows\twain.dll
[14/07/2009 06:52:30] - |D| - [6144] - C:\Windows\twain_32
[MD5.163A95975E1D8819E653AA3E961371CA] - [14/12/2016 19:45:00] - |A| - (. - Gestionnaire de sources Twain_32 (Image Acquisition Interface).) - [51200] - (1.7.1.3) - C:\Windows\twain_32.dll
[MD5.F36A271706EDD23C94956AFB56981184] - [14/07/2009 00:47:26] - |A| - (. - Twain_32.dll Client's 16-Bit Thunking Server.) - [49680] - (1.7.0.0) - C:\Windows\twunk_16.exe
[MD5.0BD6E68F3EA0DD62CD86283D86895381] - [14/07/2009 02:14:40] - |A| - (. - Twain.dll Client's 32-Bit Thunking Server.) - [31232] - (1.7.1.0) - C:\Windows\twunk_32.exe
[MD5.B38882E54F783A2C37946C27091DC8B4] - [17/09/2010 09:18:30] - |A| - (.(C) 2000-2009 Dritek System Inc. - Uninstall Application.) - [349776] - (2.1.2.2017) - C:\Windows\UNINSTLMv4.EXE
[14/07/2009 04:37:09] - |D| - [12420] - C:\Windows\Vss
[MD5.93C96478B0D5B27B979E0E3AB0802C77] - [07/07/2016 09:08:40] - |A| - (. - .) - [75184] - (0.0.0.0) - C:\Windows\vssMgr.exe
[MD5.181EDC89CCAC371B289EF62D606B919A] - [10/04/2017 18:21:35] - |A| - (. - .) - [2026] - (0.0.0.0) - C:\Windows\W7Patcher_x86_Uninstall.log
[14/07/2009 04:37:09] - |D| - [1430137] - C:\Windows\Web
[MD5.493B0475FC8D452615E19751C4699CCA] - [14/07/2009 04:04:23] - |A| - (. - .) - [429] - (0.0.0.0) - C:\Windows\win.ini
[MD5.5A5CFF37F1BD0F86B9BDAAD7A9445882] - [14/07/2009 06:41:57] - |RAH| - (. - .) - [749] - (0.0.0.0) - C:\Windows\WindowsShell.Manifest
[MD5.C110E92CCD4C36A998037DF48D6D970D] - [04/02/2017 17:40:46] - |A| - (. - .) - [1132653] - (0.0.0.0) - C:\Windows\WindowsUpdate.log
[MD5.8E6F7D51A5CB299C25621C6C1AB57E84] - [13/07/2009 22:29:46] - |A| - (.Copyright © Microsoft Corp. 1991-1992 - Windows Help Engine application file.) - [256192] - (3.10.0.425) - C:\Windows\winhelp.exe
[MD5.1D420D66250BCAAAED05724FB34008CF] - [14/07/2009 02:12:29] - |A| - (.© Microsoft Corporation. Tous droits réservés. - Relais Windows Winhlp32.) - [9728] - (6.1.7600.16385) - C:\Windows\winhlp32.exe
[14/07/2009 04:37:09] - |D| - [7705399565] - C:\Windows\winsxs
[MD5.360A166B4DD11DFD897F73F5410FDEE2] - [17/04/2010 02:28:46] - |A| - (.© 2008 Microsoft Corporation. Tous droits réservés. - Écran de veille photos Windows Live.) - [307056] - (14.0.8117.416) - C:\Windows\WLXPGSS.SCR
[MD5.DC17DD0189B0C36D863B4DD0A036C10F] - [10/06/2009 23:34:23] - |A| - (. - .) - [316640] - (0.0.0.0) - C:\Windows\WMSysPr9.prx
[MD5.6E8EACC0B339365D79A2C06896865D3D] - [14/07/2009 01:41:00] - |A| - (.© Microsoft Corporation. All rights reserved. - Windows Write.) - [9216] - (6.1.7600.16385) - C:\Windows\write.exe
[MD5.F9F4905664C5B42B49E78EFA12D1A6B6] - [12/12/2016 15:33:59] - |A| - (. - .) - [20] - (0.0.0.0) - C:\Windows\xö“
[MD5.B317B33694BAC49D492DD3F23E374899] - [13/07/2009 23:30:30] - |A| - (. - .) - [707] - (0.0.0.0) - C:\Windows\_default.pif

---------- | Systemroot\System

[14/07/2009 01:00:47] - |A| - [69584] - C:\Windows\System\avicap.dll     (Copyright © Microsoft Corp. 1992-1994) - (AVI Capture DLL)
[14/07/2009 01:00:47] - |A| - [109456] - C:\Windows\System\avifile.dll     (Copyright © Microsoft Corp. 1991-2000) - (Microsoft AVI File support library)
[13/07/2009 23:41:42] - |A| - [32816] - C:\Windows\System\COMMDLG.DLL     (Copyright © Microsoft Corp. 1981-1996) - (Common Dialogs libraries)
[13/07/2009 23:41:23] - |A| - [2000] - C:\Windows\System\keyboard.drv     (Copyright © Microsoft Corp. 1981-1996) - (WOW Keyboard Driver Module)
[13/07/2009 22:29:46] - |A| - [9936] - C:\Windows\System\lzexpand.dll     (Copyright © Microsoft Corp. 1989-1992) - (Windows file expansion library)
[14/07/2009 01:00:47] - |A| - [73376] - C:\Windows\System\mciavi.drv     (Copyright © Microsoft Corp. 1992-1994) - (MCI driver for AVI)
[14/07/2009 01:00:47] - |A| - [25264] - C:\Windows\System\mciseq.drv     (Copyright © Microsoft Corp. 1991) - (MCI driver for MIDI sequencer)
[14/07/2009 01:00:47] - |A| - [28160] - C:\Windows\System\mciwave.drv     (Copyright © Microsoft Corp. 1991) - (MCI driver for waveform audio)
[13/07/2009 23:41:32] - |A| - [68992] - C:\Windows\System\MMSYSTEM.DLL     (Copyright © Microsoft Corp. 1981-1996) - (System APIs for Multimedia)
[13/07/2009 23:41:32] - |A| - [1152] - C:\Windows\System\mmtask.tsk     (Copyright © Microsoft Corp. 1981-1996) - (Multimedia background task support module)
[13/07/2009 23:41:27] - |A| - [2032] - C:\Windows\System\mouse.drv     (Copyright © Microsoft Corp. 1981-1996) - (WOW MOUSE Driver Module)
[10/06/2009 23:21:50] - |A| - [126912] - C:\Windows\System\msvideo.dll     (Copyright © Microsoft Corp. 1992-1994) - (Microsoft Video for Windows DLL)
[13/07/2009 22:29:46] - |A| - [82944] - C:\Windows\System\olecli.dll     (Copyright © Microsoft Corp. 1991-1993) - (Object Linking and Embedding Client Library)
[13/07/2009 23:41:50] - |A| - [24064] - C:\Windows\System\OLESVR.DLL     (Copyright © Microsoft Corp. 1991-1996) - (Object Linking and Embedding Server Library)
[13/07/2009 23:41:22] - |A| - [5120] - C:\Windows\System\SHELL.DLL     (Copyright © Microsoft Corp. 1981-1996) - (Windows Shell library)
[13/07/2009 23:41:23] - |A| - [1744] - C:\Windows\System\sound.drv     (Copyright © Microsoft Corp. 1981-1996) - (WOW SOUND Driver Module)
[14/07/2009 00:00:27] - |A| - [5532] - C:\Windows\System\stdole.tlb     (Copyright © Microsoft Corp. 1993-1995) - (OLE 2.1 16/32 Interoperability Type Library)
[13/07/2009 23:41:21] - |A| - [3360] - C:\Windows\System\system.drv     (Copyright © Microsoft Corp. 1981-1996) - (Windows System Driver core component)
[13/07/2009 23:41:39] - |A| - [4048] - C:\Windows\System\TIMER.DRV     (Copyright © Microsoft Corp. 1981-1996) - (Timer driver for PC compatibles)
[13/07/2009 22:29:46] - |A| - [9008] - C:\Windows\System\ver.dll     (Copyright © Microsoft Corp. 1991) - (Version Checking and File Installation Libraries)
[13/07/2009 23:41:26] - |A| - [2176] - C:\Windows\System\vga.drv     (Copyright © Microsoft Corp. 1981-1996) - (WOW Display Driver Module)
[13/07/2009 23:41:45] - |A| - [12704] - C:\Windows\System\WFWNET.DRV     (Copyright © Microsoft Corp. 1981-1996) - (Windows for Workgroups network driver)

---------- | Systemroot\Installer (Microsoft Files Whitelisted)

[01/04/2017 07:55:22] - C:\Windows\Installer\13257c2.msi : (COMODO Secure Shopping - COMODO)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[21/07/2010 04:28:52] - C:\Windows\Installer\13ccf3.msi : (MSI Database - Insyde)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[21/12/2016 15:22:38] - C:\Windows\Installer\20566370.msi : (Paramount Software (UK) Ltd - Paramount Software (UK) Ltd.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[07/04/2017 21:57:36] - C:\Windows\Installer\236064b.msi : (Skype - Skype Technologies S.A.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[17/03/2015 10:42:22] - C:\Windows\Installer\2416289.msi : ( - Adobe Systems Incorporated)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[07/04/2017 22:29:27] - C:\Windows\Installer\2416293.msi : (MozyHome - Mozy, Inc.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[07/04/2017 23:09:27] - C:\Windows\Installer\27bce3b.msi : (Google Update Helper - Google Inc.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[07/04/2017 23:21:48] - C:\Windows\Installer\27bce4f.msi : (Google Update Helper - Google Inc.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[08/11/2016 19:50:16] - C:\Windows\Installer\34edd9.msi : (Acronis Backup Agent - Acronis)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[17/09/2010 09:17:21] - C:\Windows\Installer\3c5f1.msi : (eSobi - esobi Inc.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]
[08/04/2017 07:48:39] - C:\Windows\Installer\4550057.msi : (Silent Install Builder - APREL Tehnologija d.o.o.)          [Offsets ok ! : D0CF11E0A1B11AE10000000000000000]