Gorstaks Restrictions

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers]
"authenticodeenabled"=dword:00010000
"DefaultLevel"=dword:00010000
"ExecutableTypes"=hex(7):5a,00,4f,00,4f,00,00,00,5a,00,4c,00,4f,00,00,00,5a,00,\
  46,00,53,00,45,00,4e,00,44,00,54,00,4f,00,54,00,41,00,52,00,47,00,45,00,54,\
  00,00,00,5a,00,00,00,58,00,5a,00,00,00,58,00,53,00,4c,00,00,00,58,00,50,00,\
  53,00,00,00,58,00,50,00,49,00,00,00,58,00,4e,00,4b,00,00,00,58,00,4d,00,4c,\
  00,00,00,58,00,4c,00,57,00,00,00,58,00,4c,00,54,00,58,00,00,00,58,00,4c,00,\
  54,00,4d,00,00,00,58,00,4c,00,54,00,00,00,58,00,4c,00,53,00,58,00,00,00,58,\
  00,4c,00,53,00,4d,00,00,00,58,00,4c,00,53,00,42,00,00,00,58,00,4c,00,53,00,\
  00,00,58,00,4c,00,4d,00,00,00,58,00,4c,00,4c,00,00,00,58,00,4c,00,44,00,00,\
  00,58,00,4c,00,43,00,00,00,58,00,4c,00,42,00,00,00,58,00,4c,00,41,00,4d,00,\
  00,00,58,00,4c,00,41,00,00,00,58,00,49,00,50,00,00,00,58,00,42,00,41,00,50,\
  00,00,00,58,00,41,00,52,00,00,00,57,00,57,00,4c,00,00,00,57,00,53,00,48,00,\
  00,00,57,00,53,00,46,00,00,00,57,00,53,00,43,00,00,00,57,00,53,00,00,00,57,\
  00,4c,00,4c,00,00,00,57,00,49,00,5a,00,00,00,57,00,45,00,42,00,53,00,49,00,\
  54,00,45,00,00,00,57,00,45,00,42,00,50,00,4e,00,50,00,00,00,57,00,45,00,42,\
  00,4c,00,4f,00,43,00,00,00,57,00,42,00,4b,00,00,00,57,00,41,00,53,00,00,00,\
  56,00,58,00,44,00,00,00,56,00,53,00,57,00,00,00,56,00,53,00,54,00,00,00,56,\
  00,53,00,53,00,00,00,56,00,53,00,4d,00,41,00,43,00,52,00,4f,00,53,00,00,00,\
  56,00,48,00,44,00,58,00,00,00,56,00,48,00,44,00,00,00,56,00,42,00,53,00,00,\
  00,56,00,42,00,50,00,00,00,56,00,42,00,45,00,00,00,56,00,42,00,00,00,55,00,\
  52,00,4c,00,00,00,54,00,5a,00,00,00,54,00,58,00,5a,00,00,00,54,00,53,00,50,\
  00,00,00,54,00,50,00,5a,00,00,00,54,00,4f,00,4f,00,4c,00,00,00,54,00,4d,00,\
  50,00,00,00,54,00,4c,00,42,00,00,00,54,00,48,00,45,00,4d,00,45,00,00,00,54,\
  00,47,00,5a,00,00,00,54,00,45,00,52,00,4d,00,49,00,4e,00,41,00,4c,00,00,00,\
  54,00,45,00,52,00,4d,00,00,00,54,00,42,00,5a,00,00,00,54,00,41,00,5a,00,00,\
  00,54,00,41,00,52,00,00,00,53,00,59,00,53,00,00,00,53,00,57,00,46,00,00,00,\
  53,00,54,00,4d,00,00,00,53,00,50,00,4c,00,00,00,53,00,4c,00,4b,00,00,00,53,\
  00,4c,00,44,00,58,00,00,00,53,00,4c,00,44,00,4d,00,00,00,53,00,49,00,54,00,\
  00,00,53,00,48,00,53,00,00,00,53,00,48,00,42,00,00,00,53,00,45,00,54,00,54,\
  00,49,00,4e,00,47,00,43,00,4f,00,4e,00,54,00,45,00,4e,00,54,00,2d,00,4d,00,\
  53,00,00,00,53,00,45,00,41,00,52,00,43,00,48,00,2d,00,4d,00,53,00,00,00,53,\
  00,45,00,41,00,52,00,43,00,48,00,43,00,4f,00,4e,00,4e,00,45,00,43,00,54,00,\
  4f,00,52,00,2d,00,4d,00,53,00,00,00,53,00,45,00,41,00,00,00,53,00,43,00,54,\
  00,00,00,53,00,43,00,52,00,00,00,53,00,43,00,46,00,00,00,52,00,54,00,46,00,\
  00,00,52,00,51,00,59,00,00,00,52,00,50,00,59,00,00,00,52,00,45,00,56,00,00,\
  00,52,00,45,00,47,00,00,00,52,00,42,00,00,00,52,00,41,00,52,00,00,00,52,00,\
  30,00,39,00,00,00,52,00,30,00,38,00,00,00,52,00,30,00,37,00,00,00,52,00,30,\
  00,36,00,00,00,52,00,30,00,35,00,00,00,52,00,30,00,34,00,00,00,52,00,30,00,\
  33,00,00,00,52,00,30,00,32,00,00,00,52,00,30,00,31,00,00,00,52,00,30,00,30,\
  00,00,00,50,00,59,00,5a,00,57,00,00,00,50,00,59,00,5a,00,00,00,50,00,59,00,\
  58,00,00,00,50,00,59,00,57,00,5a,00,00,00,50,00,59,00,57,00,00,00,50,00,59,\
  00,54,00,00,00,50,00,59,00,50,00,00,00,50,00,59,00,4f,00,00,00,50,00,59,00,\
  49,00,00,00,50,00,59,00,44,00,45,00,00,00,50,00,59,00,44,00,00,00,50,00,59,\
  00,43,00,00,00,50,00,59,00,33,00,00,00,50,00,59,00,00,00,50,00,58,00,44,00,\
  00,00,50,00,53,00,54,00,52,00,45,00,47,00,00,00,50,00,53,00,54,00,00,00,50,\
  00,53,00,44,00,4d,00,31,00,00,00,50,00,53,00,44,00,31,00,00,00,50,00,53,00,\
  43,00,32,00,00,00,50,00,53,00,43,00,31,00,00,00,50,00,53,00,32,00,58,00,4d,\
  00,4c,00,00,00,50,00,53,00,32,00,00,00,50,00,53,00,31,00,58,00,4d,00,4c,00,\
  00,00,50,00,53,00,31,00,00,00,50,00,52,00,4e,00,00,00,50,00,52,00,49,00,4e,\
  00,54,00,45,00,52,00,45,00,58,00,50,00,4f,00,52,00,54,00,00,00,50,00,52,00,\
  47,00,00,00,50,00,52,00,46,00,00,00,50,00,50,00,54,00,58,00,00,00,50,00,50,\
  00,54,00,4d,00,00,00,50,00,50,00,54,00,00,00,50,00,50,00,53,00,58,00,00,00,\
  50,00,50,00,53,00,4d,00,00,00,50,00,50,00,53,00,00,00,50,00,50,00,41,00,4d,\
  00,00,00,50,00,50,00,41,00,00,00,50,00,4f,00,54,00,58,00,00,00,50,00,4f,00,\
  54,00,4d,00,00,00,50,00,4f,00,54,00,00,00,50,00,4c,00,47,00,00,00,50,00,4c,\
  00,00,00,50,00,4b,00,47,00,00,00,50,00,49,00,46,00,00,00,50,00,49,00,00,00,\
  50,00,45,00,52,00,4c,00,00,00,50,00,43,00,44,00,00,00,50,00,41,00,00,00,4f,\
  00,53,00,44,00,00,00,4f,00,51,00,59,00,00,00,4f,00,50,00,53,00,00,00,4f,00,\
  4e,00,45,00,00,00,4f,00,44,00,53,00,00,00,4f,00,43,00,58,00,00,00,4e,00,54,\
  00,46,00,53,00,00,00,4e,00,53,00,48,00,00,00,4e,00,4c,00,53,00,00,00,4d,00,\
  59,00,44,00,4f,00,43,00,53,00,00,00,4d,00,55,00,49,00,00,00,4d,00,53,00,55,\
  00,00,00,4d,00,53,00,54,00,00,00,4d,00,53,00,50,00,00,00,4d,00,53,00,48,00,\
  58,00,4d,00,4c,00,00,00,4d,00,53,00,48,00,32,00,58,00,4d,00,4c,00,00,00,4d,\
  00,53,00,48,00,32,00,00,00,4d,00,53,00,48,00,31,00,58,00,4d,00,4c,00,00,00,\
  4d,00,53,00,48,00,31,00,00,00,4d,00,53,00,48,00,00,00,4d,00,53,00,43,00,00,\
  00,4d,00,4f,00,46,00,00,00,4d,00,4d,00,43,00,00,00,4d,00,48,00,54,00,4d,00,\
  4c,00,00,00,4d,00,48,00,54,00,00,00,4d,00,44,00,5a,00,00,00,4d,00,44,00,57,\
  00,00,00,4d,00,44,00,54,00,00,00,4d,00,44,00,4e,00,00,00,4d,00,44,00,46,00,\
  00,00,4d,00,44,00,45,00,00,00,4d,00,44,00,42,00,00,00,4d,00,44,00,41,00,00,\
  00,4d,00,43,00,4c,00,00,00,4d,00,43,00,46,00,00,00,4d,00,41,00,59,00,00,00,\
  4d,00,41,00,57,00,00,00,4d,00,41,00,56,00,00,00,4d,00,41,00,55,00,00,00,4d,\
  00,41,00,54,00,00,00,4d,00,41,00,53,00,00,00,4d,00,41,00,52,00,00,00,4d,00,\
  41,00,51,00,00,00,4d,00,41,00,50,00,49,00,4d,00,41,00,49,00,4c,00,00,00,4d,\
  00,41,00,4e,00,49,00,46,00,45,00,53,00,54,00,00,00,4d,00,41,00,4d,00,00,00,\
  4d,00,41,00,47,00,00,00,4d,00,41,00,46,00,00,00,4d,00,41,00,44,00,00,00,4c,\
  00,5a,00,48,00,00,00,4c,00,4f,00,43,00,41,00,4c,00,00,00,4c,00,49,00,42,00,\
  52,00,41,00,52,00,59,00,2d,00,4d,00,53,00,00,00,4c,00,48,00,41,00,00,00,4c,\
  00,44,00,42,00,00,00,4c,00,41,00,43,00,43,00,44,00,42,00,00,00,4b,00,53,00,\
  48,00,00,00,4a,00,53,00,45,00,00,00,4a,00,53,00,00,00,4a,00,4f,00,42,00,00,\
  00,4a,00,4e,00,4c,00,50,00,00,00,4a,00,41,00,52,00,00,00,49,00,54,00,53,00,\
  00,00,49,00,53,00,50,00,00,00,49,00,53,00,4f,00,00,00,49,00,51,00,59,00,00,\
  00,49,00,4e,00,53,00,00,00,49,00,4e,00,49,00,00,00,49,00,4e,00,46,00,00,00,\
  49,00,4d,00,47,00,00,00,49,00,4d,00,45,00,00,00,49,00,45,00,00,00,48,00,57,\
  00,50,00,00,00,48,00,54,00,54,00,00,00,48,00,54,00,4d,00,00,00,48,00,54,00,\
  43,00,00,00,48,00,54,00,41,00,00,00,48,00,51,00,58,00,00,00,48,00,50,00,4a,\
  00,00,00,48,00,4c,00,50,00,00,00,48,00,45,00,58,00,00,00,47,00,5a,00,00,00,\
  47,00,52,00,50,00,00,00,47,00,4c,00,4b,00,00,00,47,00,41,00,44,00,47,00,45,\
  00,54,00,00,00,46,00,58,00,50,00,00,00,46,00,4f,00,4e,00,00,00,46,00,41,00,\
  54,00,00,00,45,00,58,00,45,00,00,00,45,00,4c,00,46,00,00,00,45,00,43,00,46,\
  00,00,00,44,00,52,00,56,00,00,00,44,00,51,00,59,00,00,00,44,00,4f,00,54,00,\
  58,00,00,00,44,00,4f,00,54,00,4d,00,00,00,44,00,4f,00,54,00,00,00,44,00,4f,\
  00,43,00,4d,00,00,00,44,00,4f,00,43,00,42,00,00,00,44,00,4f,00,43,00,00,00,\
  44,00,4d,00,47,00,00,00,44,00,4c,00,4c,00,00,00,44,00,49,00,52,00,00,00,44,\
  00,49,00,46,00,00,00,44,00,49,00,41,00,47,00,43,00,41,00,42,00,00,00,44,00,\
  45,00,53,00,4b,00,54,00,4f,00,50,00,00,00,44,00,45,00,53,00,4b,00,4c,00,49,\
  00,4e,00,4b,00,00,00,44,00,45,00,52,00,00,00,44,00,43,00,52,00,00,00,44,00,\
  42,00,00,00,43,00,53,00,56,00,00,00,43,00,53,00,48,00,00,00,43,00,52,00,58,\
  00,00,00,43,00,52,00,54,00,00,00,43,00,52,00,41,00,5a,00,59,00,00,00,43,00,\
  50,00,58,00,00,00,43,00,50,00,4c,00,00,00,43,00,4f,00,4d,00,4d,00,41,00,4e,\
  00,44,00,00,00,43,00,4f,00,4d,00,00,00,43,00,4e,00,56,00,00,00,43,00,4e,00,\
  54,00,00,00,43,00,4c,00,42,00,00,00,43,00,4c,00,41,00,53,00,53,00,00,00,43,\
  00,4c,00,41,00,00,00,43,00,48,00,4d,00,00,00,43,00,48,00,49,00,00,00,43,00,\
  46,00,47,00,00,00,43,00,45,00,52,00,00,00,43,00,44,00,42,00,00,00,43,00,41,\
  00,42,00,00,00,42,00,5a,00,49,00,50,00,32,00,00,00,42,00,5a,00,49,00,50,00,\
  00,00,42,00,5a,00,32,00,00,00,42,00,5a,00,00,00,42,00,41,00,54,00,00,00,42,\
  00,41,00,53,00,00,00,41,00,58,00,00,00,41,00,53,00,58,00,00,00,41,00,53,00,\
  50,00,58,00,00,00,41,00,53,00,50,00,00,00,41,00,53,00,41,00,00,00,41,00,52,\
  00,4a,00,00,00,41,00,52,00,43,00,00,00,41,00,50,00,50,00,52,00,45,00,46,00,\
  2d,00,4d,00,53,00,00,00,41,00,50,00,50,00,4c,00,49,00,43,00,41,00,54,00,49,\
  00,4f,00,4e,00,00,00,41,00,50,00,50,00,00,00,41,00,49,00,52,00,00,00,41,00,\
  44,00,50,00,00,00,41,00,44,00,4e,00,00,00,41,00,44,00,45,00,00,00,41,00,44,\
  00,00,00,41,00,43,00,4d,00,00,00,41,00,43,00,43,00,44,00,55,00,00,00,41,00,\
  43,00,43,00,44,00,54,00,00,00,41,00,43,00,43,00,44,00,52,00,00,00,41,00,43,\
  00,43,00,44,00,45,00,00,00,41,00,43,00,43,00,44,00,41,00,00,00,00,00
"Levels"=dword:00071000
"LogFileName"="C:\\Windows\\system32\\LogFiles\\SAFER.LOG"
"PolicyScope"=dword:00000001
"TransparentEnabled"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0\Hashes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0\Paths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\0\Paths\{00000000-0000-0000-0000-000000000001}]
"Description"=""
"SaferFlags"=dword:00000000
"ItemData"="-Embedding"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\0\Paths\{00000000-0000-0000-0000-000000000002}]
"Description"=""
"SaferFlags"=dword:00000000
"ItemData"="filecoauth.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\0\Paths\{00000000-0000-0000-0000-000000000003}]
"Description"=""
"SaferFlags"=dword:00000000
"ItemData"="microsoft.sharepoint.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\0\Paths\{00000000-0000-0000-0000-000000000004}]
"ItemData"="{"
"Description"=""
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\0\Paths\{00000000-0000-0000-0000-000000000005}]
"ItemData"="["
"Description"=""
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\CodeIdentifiers\0\Paths\{00000000-0000-0000-0000-000000000006}]
"ItemData"="bridge"
"Description"=""
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00B92F9B-EE8C-41D5-9AA1-B33D35DB49FB}]
"Description"="Alle lokalen Pfade"
"ItemData"="?:\\"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00B97DA0-641E-474E-BDCC-3F2294507AC3}]
"Description"="Alle Netzwerkpfade"
"ItemData"="\\\\"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00B9A46A-64A1-4BE5-A896-6E0B4B1C502C}]
"Description"="System Volume Information"
"ItemData"="?:\\System Volume Information"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00B9D2EC-FB61-4161-1341-3DBEF03AF18E}]
"Description"="Papierkorb (Windows XP/2003 [R2])"
"ItemData"="?:\\RECYCLE?"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{00B9DFE4-ED08-4328-B355-4BC63D6267B2}]
"Description"="Papierkorb (Windows Vista/7/8/10/11)"
"ItemData"="?:\\$RECYCLE.BIN"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{06FFDEFE-4EC8-4CCB-BA70-86C7054B2AC6}]
"Description"="%ProgramData%"
"ItemData"="C:\\ProgramData"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{10011479-708B-41F7-A992-CF1FD376BBB7}]
"Description"="%SystemRoot%\\SysNative\\RunAs.Exe"
"ItemData"="C:\\WINDOWS\\SysNative\\RunAs.Exe"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1001AAF1-749F-49F4-8010-297BD6CA33A0}]
"Description"="%SystemRoot%\\System32\\RunAs.Exe"
"ItemData"="C:\\WINDOWS\\System32\\RunAs.Exe"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{1001DEEE-128A-4A4D-A684-2C7035340E4B}]
"Description"="%SystemRoot%\\SysWoW64\\RunAs.Exe"
"ItemData"="C:\\WINDOWS\\SysWoW64\\RunAs.Exe"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{2742F840-C2D8-4EB3-A486-0A9D0879F29F}]
"Description"="Macromedia Flash"
"ItemData"="C:\\WINDOWS\\System32\\Macromed\\Flash"
"LastModified"=hex(b):10,c3,8a,19,c6,e3,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A69B6C-8792-426D-89AB-CE11B1DB3017}]
"Description"="%SystemRoot%\\CSC"
"ItemData"="C:\\WINDOWS\\CSC"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A80AF5-D291-4464-8D15-A877F332A666}]
"Description"="%SystemRoot%\\Debug\\WIA"
"ItemData"="C:\\WINDOWS\\Debug\\WIA"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A84AEC-7487-494A-891A-09EB13942A77}]
"Description"="%SystemRoot%\\Debug\\WIA:*"
"ItemData"="C:\\WINDOWS\\Debug\\WIA:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A879D0-94C6-4145-9039-19A1DD94E2F5}]
"Description"="%SystemRoot%\\Logs"
"ItemData"="C:\\WINDOWS\\Logs"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A8C62E-75B6-4447-B54F-B351757BF34E}]
"Description"="%SystemRoot%\\Media"
"ItemData"="C:\\WINDOWS\\Media"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A8F941-D7CB-4042-8C04-AAA87ADB8FC2}]
"Description"="%SystemRoot%\\Registration\\CRMLog"
"ItemData"="C:\\WINDOWS\\Registration\\CRMLog"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A90615-4ABE-4937-879C-47C19F107CC8}]
"Description"="%SystemRoot%\\Registration\\CRMLog:*"
"ItemData"="C:\\WINDOWS\\Registration\\CRMLog:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A918B9-7529-44E7-9C6D-5098F8B1D90F}]
"Description"="%SystemRoot%\\ServiceProfiles"
"ItemData"="C:\\WINDOWS\\ServiceProfiles"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A919D4-AF0E-44F1-A205-414D8F39E12B}]
"Description"="%SystemRoot%\\System32\\AppMgmt"
"ItemData"="C:\\WINDOWS\\System32\\AppMgmt"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A920B3-02C4-4F7A-BA23-D282A57394D6}]
"Description"="%SystemRoot%\\System32\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}"
"ItemData"="C:\\WINDOWS\\system32\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A92CBF-44F7-4E1E-A29D-FA166125C8B8}]
"Description"="%SystemRoot%\\System32\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}:*"
"ItemData"="C:\\WINDOWS\\system32\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A945C6-411A-4C85-9C98-1A196616BCC9}]
"Description"="%SystemRoot%\\System32\\COM\\Dmp"
"ItemData"="C:\\WINDOWS\\System32\\COM\\Dmp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A958A9-54CF-4336-8123-D7FB74D5CD06}]
"Description"="%SystemRoot%\\System32\\COM\\Dmp:*"
"ItemData"="C:\\WINDOWS\\System32\\COM\\Dmp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7A98E1D-1577-134F-9B9C-75278D6318EB}]
"Description"="%SystemRoot%\\System32\\Config"
"ItemData"="C:\\WINDOWS\\System32\\Config"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AA3C3E-3E5D-48D1-9E46-E3DDDBFE0B5B}]
"Description"="%SystemRoot%\\System32\\Drivers\\Etc"
"ItemData"="C:\\WINDOWS\\System32\\Drivers\\Etc"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AA71AB-90A6-4621-82B1-FF348DAD6D85}]
"Description"="%SystemRoot%\\System32\\FxsTmp"
"ItemData"="C:\\WINDOWS\\System32\\FxsTmp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AAB6D7-0010-4BA1-9AD1-A440202167D3}]
"Description"="%SystemRoot%\\System32\\FxsTmp:*"
"ItemData"="C:\\WINDOWS\\System32\\FxsTmp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AAC585-C34F-4BFD-8941-AAF1B1AD77E5}]
"Description"="%SystemRoot%\\System32\\LogFiles\\WMI"
"ItemData"="C:\\WINDOWS\\System32\\LogFiles\\WMI"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AAE749-8B75-4BE5-84C3-C728EC2A57DF}]
"Description"="%SystemRoot%\\System32\\Microsoft\\Crypto\\RSA\\MachineKeys"
"ItemData"="C:\\WINDOWS\\System32\\Microsoft\\Crypto\\RSA\\MachineKeys"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AAFAC1-17A0-4834-A55C-7B9FCEBEB4FB}]
"Description"="%SystemRoot%\\System32\\Microsoft\\Crypto\\RSA\\MachineKeys:*"
"ItemData"="C:\\WINDOWS\\System32\\Microsoft\\Crypto\\RSA\\MachineKeys:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AB3254-7E0F-4213-8F86-749F5EDAEDA4}]
"Description"="%SystemRoot%\\System32\\Spool\\Drivers\\Color"
"ItemData"="C:\\WINDOWS\\System32\\Spool\\Drivers\\Color"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AB32D0-7400-45F8-9646-7C954FC2B8FB}]
"Description"="%SystemRoot%\\System32\\Spool\\Drivers\\Color:*"
"ItemData"="C:\\WINDOWS\\System32\\Spool\\Drivers\\Color:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AB3EA3-E425-40B2-B4F5-8163DE60B306}]
"Description"="%SystemRoot%\\System32\\Spool\\Printers"
"ItemData"="C:\\WINDOWS\\System32\\Spool\\Printers"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AB4C34-83EF-4AAD-A1B9-12F7AA18487B}]
"Description"="%SystemRoot%\\System32\\Spool\\Printers:*"
"ItemData"="C:\\WINDOWS\\System32\\Spool\\Printers:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AB5787-EB67-4727-8DE8-CEC6106EA3F6}]
"Description"="%SystemRoot%\\System32\\Spool\\Servers"
"ItemData"="C:\\WINDOWS\\System32\\Spool\\Servers"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ABA2A7-2D33-42A9-AC8B-A5FEDE1DF6FA}]
"Description"="%SystemRoot%\\System32\\Spool\\Servers:*"
"ItemData"="C:\\WINDOWS\\System32\\Spool\\Servers:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ABAF83-F923-4DD8-ADF2-98D4D48842BE}]
"Description"="%SystemRoot%\\System32\\Tasks"
"ItemData"="C:\\WINDOWS\\System32\\Tasks"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ABB2D1-A6AF-4D87-AE2C-838C6524EDA4}]
"Description"="%SystemRoot%\\System32\\Tasks:*"
"ItemData"="C:\\WINDOWS\\System32\\Tasks:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ABC579-730B-463E-A23D-30778998D7A3}]
"Description"="%SystemRoot%\\System32\\Tasks_Migrated"
"ItemData"="C:\\WINDOWS\\System32\\Tasks_Migrated"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ABD4BC-FD03-4473-9468-D6707BD6CA20}]
"Description"="%SystemRoot%\\System32\\Tasks_Migrated:*"
"ItemData"="C:\\WINDOWS\\System32\\Tasks_Migrated:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AC0754-8034-4F7B-B12B-C68A5002E657}]
"Description"="%SystemRoot%\\SysNative\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}"
"ItemData"="C:\\WINDOWS\\SysNative\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AC11AA-68C6-4994-B232-4B1930D3E799}]
"Description"="%SystemRoot%\\SysNative\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}:*"
"ItemData"="C:\\WINDOWS\\SysNative\\CatRoot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AC1CC0-9FF7-4D8D-876C-948707693763}]
"Description"="%SystemRoot%\\SysNative\\COM\\Dmp"
"ItemData"="C:\\WINDOWS\\SysNative\\COM\\Dmp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AC2154-25AA-4993-9290-6609A76C03F1}]
"Description"="%SystemRoot%\\SysNative\\COM\\Dmp:*"
"ItemData"="C:\\WINDOWS\\SysNative\\COM\\Dmp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AC48BA-7F96-4EEC-9946-7E7417BBDC67}]
"Description"="%SystemRoot%\\SysNative\\Config"
"ItemData"="C:\\WINDOWS\\SysNative\\Config"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACA63F-AC8E-4EFF-9F6A-15BBE60F1402}]
"Description"="%SystemRoot%\\SysNative\\FxsTmp"
"ItemData"="C:\\WINDOWS\\SysNative\\FxsTmp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACA930-BC79-4A8F-B118-C540259C08EC}]
"Description"="%SystemRoot%\\SysNative\\FxsTmp:*"
"ItemData"="C:\\WINDOWS\\SysNative\\FxsTmp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACAC25-9EAB-44E5-DE51-6FA35DBCB0D3}]
"Description"="%SystemRoot%\\SysNative\\LogFiles\\WMI"
"ItemData"="C:\\WINDOWS\\SysNative\\LogFiles\\WMI"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACAFD8-4F1E-4647-AFB4-ADBD728FBD40}]
"Description"="%SystemRoot%\\SysNative\\Microsoft\\Crypto\\RSA\\MachineKeys"
"ItemData"="C:\\WINDOWS\\SysNative\\Microsoft\\Crypto\\RSA\\MachineKeys"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACB0A2-8718-4D8E-BA26-1C31795EAF9B}]
"Description"="%SystemRoot%\\SysNative\\Microsoft\\Crypto\\RSA\\MachineKeys:*"
"ItemData"="C:\\WINDOWS\\SysNative\\Microsoft\\Crypto\\RSA\\MachineKeys:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACB4E9-42DB-48D9-B0ED-FD7352942E0D}]
"Description"="%SystemRoot%\\SysNative\\Spool\\Drivers\\Color"
"ItemData"="C:\\WINDOWS\\SysNative\\Spool\\Drivers\\Color"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACB7C1-0CF7-4F05-806F-2A30D4C8ABFD}]
"Description"="%SystemRoot%\\SysNative\\Spool\\Drivers\\Color:*"
"ItemData"="C:\\WINDOWS\\SysNative\\Spool\\Drivers\\Color:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACBB4C-267E-4158-99E3-096F6BC91C94}]
"Description"="%SystemRoot%\\SysNative\\Spool\\Printers"
"ItemData"="C:\\WINDOWS\\SysNative\\Spool\\Printers"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACBEE8-F68F-4D58-8F36-CA5DC15D0969}]
"Description"="%SystemRoot%\\SysNative\\Spool\\Printers:*"
"ItemData"="C:\\WINDOWS\\SysNative\\Spool\\Printers:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACCCFF-CF45-4D7C-B94B-5FB48C5A1F0D}]
"Description"="%SystemRoot%\\SysNative\\Spool\\Servers"
"ItemData"="C:\\WINDOWS\\SysNative\\Spool\\Servers"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACD77E-C11D-4277-AF6B-600B5C6ADEB7}]
"Description"="%SystemRoot%\\SysNative\\Spool\\Servers:*"
"ItemData"="C:\\WINDOWS\\SysNative\\Spool\\Servers:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACE1FA-9898-48CF-AD02-79364398B3AC}]
"Description"="%SystemRoot%\\SysNative\\Tasks"
"ItemData"="C:\\WINDOWS\\SysNative\\Tasks"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACE652-E740-4011-B274-F0B6D16E8240}]
"Description"="%SystemRoot%\\SysNative\\Tasks:*"
"ItemData"="C:\\WINDOWS\\SysNative\\Tasks:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACEAA8-1CEE-4D0B-B025-6F6627586F40}]
"Description"="%SystemRoot%\\SysNative\\Tasks_Migrated"
"ItemData"="C:\\WINDOWS\\SysNative\\Tasks_Migrated"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACEECC-73A2-458A-8760-45EEFC65BFCF}]
"Description"="%SystemRoot%\\SysNative\\Tasks_Migrated:*"
"ItemData"="C:\\WINDOWS\\SysNative\\Tasks_Migrated:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ACF3C4-F983-4B2F-9715-E2A254DBD4C5}]
"Description"="%SystemRoot%\\SysWoW64\\COM\\Dmp"
"ItemData"="C:\\WINDOWS\\SysWoW64\\COM\\Dmp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AD2E28-11F1-4DFC-9A4B-8C5DCCE49AD4}]
"Description"="%SystemRoot%\\Tasks"
"ItemData"="C:\\WINDOWS\\Tasks"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AD2E44-65DA-4361-817E-90D80F1CF631}]
"Description"="%SystemRoot%\\Tasks:*"
"ItemData"="C:\\WINDOWS\\Tasks:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AD3132-2585-42E3-84A9-EB500E0CD407}]
"Description"="%SystemRoot%\\SysWoW64\\COM\\Dmp:*"
"ItemData"="C:\\WINDOWS\\SysWoW64\\COM\\Dmp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AD33EF-639B-44A5-A636-7EA11EBDC769}]
"Description"="%SystemRoot%\\SysWoW64\\Config"
"ItemData"="C:\\WINDOWS\\SysWoW64\\Config"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AD3418-5BF7-4C2B-AEAF-711D6F9914E0}]
"Description"="%SystemRoot%\\SysWoW64\\FxsTmp"
"ItemData"="C:\\WINDOWS\\SysWoW64\\FxsTmp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ADA7B0-96EE-46A2-8BE4-ED0A088DAE7C}]
"Description"="%SystemRoot%\\SysWoW64\\FxsTmp:*"
"ItemData"="C:\\WINDOWS\\SysWoW64\\FxsTmp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ADAAE2-ECB6-4F67-9866-EBF3C16FC497}]
"Description"="%SystemRoot%\\SysWoW64\\Tasks"
"ItemData"="C:\\WINDOWS\\SysWoW64\\Tasks"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ADC554-00AF-4BDE-A192-FF2914E2653F}]
"Description"="%SystemRoot%\\Temp"
"ItemData"="C:\\WINDOWS\\Temp"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ADD2B8-A529-491E-BB39-4F7694557B88}]
"Description"="%SystemRoot%\\Temp:*"
"ItemData"="C:\\WINDOWS\\Temp:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7ADD848-DED7-472F-8D27-0C4080D18F17}]
"Description"="%SystemRoot%\\SysWoW64\\Tasks:*"
"ItemData"="C:\\WINDOWS\\SysWoW64\\Tasks:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AE1B00-211E-4076-A064-C0BD8EAFA742}]
"Description"="%SystemRoot%\\Temporary Internet Files"
"ItemData"="C:\\WINDOWS\\Temporary Internet Files"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AE8F25-7D29-4ABE-A5F3-4E7F99FA5B74}]
"Description"="%SystemRoot%\\Tracing"
"ItemData"="C:\\WINDOWS\\Tracing"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AE9BE3-3292-47C3-AC36-65E40B2818DA}]
"Description"="%SystemRoot%\\Tracing:*"
"ItemData"="C:\\WINDOWS\\Tracing:*"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{C7AF2ED3-7F52-49AA-9970-712A1D8FB8F5}]
"Description"="%SystemRoot%\\Web"
"ItemData"="C:\\WINDOWS\\Web"
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\URLZones]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\URLZones\{643ADE30-2030-45AA-B54D-6C407941D825}]
"ItemData"=dword:00000000
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\URLZones\{643ADE31-2030-45AA-B54D-6C407941D825}]
"ItemData"=dword:00000001
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\URLZones\{643ADE32-2030-45AA-B54D-6C407941D825}]
"ItemData"=dword:00000002
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\URLZones\{643ADE33-2030-45AA-B54D-6C407941D825}]
"ItemData"=dword:00000003
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\URLZones\{643ADE34-2030-45AA-B54D-6C407941D825}]
"ItemData"=dword:00000004
"LastModified"=hex(b):c0,14,54,6e,8d,f9,c5,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Hashes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\Paths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\131072\URLZones]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Hashes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{191CD7FA-F240-4A17-8986-94D480A6C8CA}]
"Description"="%SystemRoot%"
"ItemData"="C:\\WINDOWS"
"LastModified"=hex(b):f0,8f,aa,44,f3,f8,c6,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{C77CC673-3BA3-427D-C9DE-76D54F6DC97E}]
"Description"="%ProgramFiles(x86)%"
"ItemData"="C:\\Program Files (x86)"
"LastModified"=hex(b):f0,8f,aa,44,f3,f8,c6,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{C77F1D47-1FE1-4E7A-869C-57659099E912}]
"Description"="%CommonProgramFiles(x86)%"
"ItemData"="C:\\Program Files (x86)\\Common Files"
"LastModified"=hex(b):f0,8f,aa,44,f3,f8,c6,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{D2C34AB2-529A-46B2-B293-FC853FCE72EA}]
"Description"="%ProgramFiles%"
"ItemData"="C:\\Program Files"
"LastModified"=hex(b):f0,8f,aa,44,f3,f8,c6,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{D2C37D40-EA2D-11DC-8F61-0004760DFF53}]
"Description"="%CommonProgramFiles%"
"ItemData"="C:\\Program Files\\Common Files"
"LastModified"=hex(b):f0,8f,aa,44,f3,f8,c6,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{D2CA0FDC-56AF-465F-9C2A-AE5B25D4AA90}]
"Description"="%ProgramData%\\Microsoft\\Windows Defender\\Platform (KB4052623)"
"ItemData"="C:\\ProgramData\\Microsoft\\Windows Defender\\Platform"
"LastModified"=hex(b):e0,53,86,62,06,be,d6,01
"SaferFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\URLZones]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Hashes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\Paths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\4096\URLZones]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Hashes]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\Paths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\65536\URLZones]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Srp\GP]
"RuleCount"=dword:00000000